As a Security Server Administrator I want the SO_LINGER timeout properties to work as they're documented so that I can configure socket closing behaviour based on my needs #1362
Labels
help wanted
Extra attention is needed
The
SO_LINGER
time is documented here.The
SO_LINGER
time (in seconds) at the service providing security server end for connections between security servers. A value larger than0
means that upon closing a connection, the system will allowSO_LINGER
seconds for the transmission and acknowledgement of all data written to the peer, at which point the socket is closed gracefully. Upon reaching the linger timeout, the socket is closed forcefully, with aTCP RST
. Enabling the option with a timeout of zero does a forceful close immediately. Value of-1
disables the forceful close.Default configuration (
/etc/xroad/conf.d/proxy.ini
):It has been reported that TLS is ended with
RST, ACK
when theSO_LINGER
value is-1
. According to the documentation, aSO_LINGER
value of-1
should disable the forceful close.The JIRA ticket this issue was created from can be found here: https://nordic-institute.atlassian.net/browse/XRDDEV-49
Acceptance criteria:
The
SO_LINGER
related properties and socket closing behaviour is tested using different property values (-1
,0
,1
)The behaviour is fixed to match the documentation
The text was updated successfully, but these errors were encountered: