workaround for buggy OpenSSL that produces incorrectly fragmented DTLS

closes #413 Change-Id: Iead12e5c1b2387c15923a1cff7f7abcd9267b4bb
8 years ago · 3885da946b
parent 65c75c5177
commit 3885da946b
1 changed files with 6 additions and 0 deletions
--- a/daemon/dtls.c
+++ b/daemon/dtls.c
@ -560,6 +560,12 @@ int dtls_connection_init(struct packet_stream *ps, int active, struct dtls_cert
 	SSL_set_tmp_ecdh(d->ssl, ecdh);
 	EC_KEY_free(ecdh);

+#if defined(SSL_OP_NO_QUERY_MTU)
+	SSL_CTX_set_options(d->ssl_ctx, SSL_OP_NO_QUERY_MTU);
+	SSL_set_mtu(d->ssl, 1500);
+	DTLS_set_link_mtu(d->ssl, 1500);
+#endif
+
 	d->active = active ? -1 : 0;

 done: