gnutls_anti_replay_set_window(3)
π gnutls_anti_replay_set_window β the manual page, but make it cute π
okay bestie, welcome to the gnutls corner of the internet π this one lives in the gnutls manual, section 3, and it's literally called gnutls_anti_replay_set_window. it's an API function, and it's giving β¨tuning knobsβ¨. let's go π¦
πΈ NAME πΈ
gnutls_anti_replay_set_window β API function π
β¨ SYNOPSIS β¨
#include <gnutls/gnutls.h>
void gnutls_anti_replay_set_window(gnutls_anti_replay_t anti_replay,
unsigned int window);
π«Ά ARGUMENTS π«Ά
gnutls_anti_replay_t anti_replayβ bestie, this is agnutls_anti_replay_ttype. that's the whole vibe of it πunsigned int windowβ this is the time window for recording the ClientHello, measured in milliseconds β±οΈ not seconds, not vibes, milliseconds fr fr
π DESCRIPTION π
So here's the tea β this function sets the time window used for ClientHello recording.
The way it works: to protect against replay attacks, the server records ClientHello messages that land within this time period counting from the last update. And it considers a ClientHello a replay when it arrives outside of that period π¨ Meanwhile, if a ClientHello does arrive within the period, the server goes and checks the database and detects duplicates. no cap π
If you want the actual algorithm deets, go read RFC 8446, section 8.2 π it's all in there, iykyk.
β SINCE β
3.6.5 β she's been around a minute, an icon π
π REPORTING BUGS π
Found a bug? not me gatekeeping the address, go tell them:
- Report bugs to <bugs@gnutls.org>.
- Home page: https://www.gnutls.org
π COPYRIGHT π
Copyright Β© 2001-2023 Free Software Foundation, Inc., and others.
Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved.
π SEE ALSO π
The full documentation for gnutls is maintained as a Texinfo manual π If the /usr/share/doc/gnutls/ directory does not contain the HTML form, visit:
https://www.gnutls.org/manual/
lowkey the most important part: that window is in milliseconds. don't come crying to me when your replay protection is off by a factor of 1000 π
and that's the whole page bestie, you ate π β¨ this was gnutls 3.8.13 era, brought to you by the gnutls manual β mwah, go slay your ClientHello recording π¦πΈπ
π¦ where this page comes from
- alpine 3.22: gnutls-doc 3.8.13-r0 Β· LGPL-2.1-or-later
- alpine 3.23: gnutls-doc 3.8.13-r0 Β· LGPL-2.1-or-later
- alpine 3.24: gnutls-doc 3.8.13-r0 Β· LGPL-2.1-or-later
- arch rolling: gnutls 3.8.13-3 Β· GPL-3.0-or-later AND LGPL-2.1-or-later
- fedora 43: gnutls-devel 3.8.13-1.fc43 Β· GPL-3.0-or-later AND LGPL-2.1-or-later
- fedora 43: gnutls-devel 3.8.13-1.fc43 Β· GPL-3.0-or-later AND LGPL-2.1-or-later
- fedora 44: gnutls-devel 3.8.13-1.fc44 Β· GPL-3.0-or-later AND LGPL-2.1-or-later
- fedora 44: gnutls-devel 3.8.13-1.fc44 Β· GPL-3.0-or-later AND LGPL-2.1-or-later
- ubuntu stonking: gnutls-doc 3.8.13-1ubuntu1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms