From 25e21cd0c2a8e7b6afee116fbcbc1adaf337adaf Mon Sep 17 00:00:00 2001
From: Linus Nordberg <linus@nordberg.se>
Date: Mon, 26 Aug 2013 17:02:07 +0200
Subject: Time out on TLS clients not closing the connection properly.

Patch by Fabian Mauchle.
---
 ChangeLog | 2 ++
 tls.c     | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/ChangeLog b/ChangeLog
index 323ef30..01766a8 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -12,6 +12,8 @@
 	crash when using dynamic discovery. Patch by Fabian Mauchle.
 	- Closing and freeing TLS clients properly. Patch by Fabian
 	Mauchle.
+	- Timing out on TLS clients not closing the connection properly.
+	Patch by Fabian Mauchle.
 
 2012-10-25 1.6.2
 	Bug fixes (security):
diff --git a/tls.c b/tls.c
index 3b2b0ac..d376e73 100644
--- a/tls.c
+++ b/tls.c
@@ -351,7 +351,7 @@ void tlsserverrd(struct client *client) {
     }
 
     for (;;) {
-	buf = radtlsget(client->ssl, 0);
+	buf = radtlsget(client->ssl, IDLE_TIMEOUT * 3);
 	if (!buf) {
 	    debug(DBG_ERR, "tlsserverrd: connection from %s lost", addr2string(client->addr));
 	    break;
-- 
cgit v1.1