Ben Pfaff [Thu, 27 Mar 2008 21:30:21 +0000 (14:30 -0700)]
Add 1024-bit Diffie-Hellman parameters to vconn-ssl.
1024-bit Diffie-Hellman is somewhat weak, but I haven't been able to
figure out how to make OpenSSL use longer Diffie-Hellman keys than that.
If this isn't available, OpenSSL doesn't let connections proceed.
This change should be reverted when we figure out how to make OpenSSL
use longer Diffie-Hellman keys.
Ben Pfaff [Thu, 27 Mar 2008 21:28:01 +0000 (14:28 -0700)]
Make vlog preserve errno.
This means that adding logging to code disturbs the program's state
as little as possible. This is a precautionary measure, not in response
to any particular bug.
Ben Pfaff [Thu, 13 Mar 2008 00:12:58 +0000 (17:12 -0700)]
Fix backoff.
Until now, if the secure channel connected to a controller, then it would
not back off at all from re-connecting. Therefore, if something causes
the secure channel to disconnect quickly after connecting to a controller,
then we could get storms of attempted connections.
This commit causes the secure channel to back off exponentially from
connection attempts regardless of the reason for disconnection, preventing
such storms.
Ben Pfaff [Thu, 6 Mar 2008 17:45:28 +0000 (09:45 -0800)]
Don't treat $(CC) as a list of compiler candidates if provided by user.
Otherwise, if a multi-word $(CC) is provided by the user, such as
"gcc -m32", then we test each word as a compiler. "-m32" then gives
you an error from the shell about "-3" not being a valid option.