Miroslav Lichvar 6f5df7e4a4 nts: warn if server started without ntsdumpdir ...

If an NTS server is configured without ntsdumpdir, keys will not be
saved and reloaded after restart, which will cause existing cookies
to be invalidated and can cause a short-term denial of service if
the server has so many clients that it cannot handle them all
making an NTS-KE session within one polling interval.

Log a warning message if a server key+certificate is specified without
ntsdumpdir.

2022-10-24 16:39:29 +02:00

28 KiB

Raw Blame History

View Raw