]> www.infradead.org Git - users/dwmw2/openconnect.git/commit
Remove first oNCP negotiation request (only second is necessary)
authorDaniel Lenski <dlenski@gmail.com>
Thu, 2 Aug 2018 19:10:45 +0000 (12:10 -0700)
committerDaniel Lenski <dlenski@gmail.com>
Thu, 2 Aug 2018 19:33:14 +0000 (12:33 -0700)
commit62c60badd1397cb0a1d455a2783d7c897a6baba5
treeec9fbe85f17a5d9110829b3d55f86c2acd35c108
parent46de5eee61127499d7401c8981dd5697307f4f12
Remove first oNCP negotiation request (only second is necessary)

The current oNCP (Juniper) protocol support issues two separate
oNCP negotiation requests.

1) POST /dana/js?prot=1&svc=1 HTTP/1.1
   <ignore response body>
   <teardown and restart TLS connection>

2) POST /dana/js?prot=1&svc=4 HTTP/1.1
   <continue using open TLS connection for oNCP tunnel>

The first of these two requests appears to be totally unnecessary, based on
testing with two different Juniper gateways, one of which returns
"NCP-Version: 2" and one which returns "NCP-Version: 3" in response to the
oNCP negotiation requests.

Removing the first request saves an additional TLS negotiation (2-3
roundtrips with TLS 1.0) and allows the connection to start faster.
oncp.c