commit b0643d152d9f47f45e344195c43c9eb9a013940d
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Tue Oct 14 18:30:36 2014 +0200
committer Paul Bakker <p.j.bakker@polarssl.org> Tue Oct 21 16:32:55 2014 +0200
tree 19f438745d90fff797cdb2898c6ef512f0ec7238
parent 9b35f18f6686554ec19d74575018881fabfef2ec

Add ssl_set_dtls_badmac_limit()

include/polarssl/config.h

diff --git a/include/polarssl/config.h b/include/polarssl/config.h
index 2fc1915..abc2668 100644
--- a/include/polarssl/config.h
+++ b/include/polarssl/config.h
@@ -929,7 +929,7 @@
  * Enable support for the anti-replay mechanism in DTLS.
  *
  * Requires: POLARSSL_SSL_TLS_C
- *           POLARSSL_POLARSSL_PROTO_DTLS
+ *           POLARSSL_SSL_PROTO_DTLS
  *
  * \warning Disabling this is often a security risk!
  * See ssl_set_dtls_anti_replay() for details.
@@ -951,13 +951,24 @@
  * \warning Disabling this can ba a security risk! (see above)
  *
  * Requires: POLARSSL_SSL_SRV_C
- *           POLARSSL_POLARSSL_PROTO_DTLS
+ *           POLARSSL_SSL_PROTO_DTLS
  *
  * Comment this to disable support for HelloVerifyRequest.
  */
 #define POLARSSL_SSL_DTLS_HELLO_VERIFY
 
 /**
+ * \def POLARSSL_SSL_DTLS_BADMAC_LIMIT
+ *
+ * Enable support for a limit of records with bad MAC.
+ *
+ * See ssl_set_dtls_badmac_limit().
+ *
+ * Requires: POLARSSL_SSL_PROTO_DTLS
+ */
+#define POLARSSL_SSL_DTLS_BADMAC_LIMIT
+
+/**
  * \def POLARSSL_SSL_SESSION_TICKETS
  *
  * Enable support for RFC 5077 session tickets in SSL.