)]}'
{"id":"openvpn~1771","triplet_id":"openvpn~master~Icec4696ff263ab39ebab06e8d478395a5ddfaab9","project":"openvpn","branch":"master","topic":"oob-server-probe","attention_set":{"1000003":{"account":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"last_update":"2026-07-06 06:50:55.000000000","reason":"Reviewer was added"}},"removed_from_attention_set":{},"hashtags":[],"change_id":"Icec4696ff263ab39ebab06e8d478395a5ddfaab9","subject":"oob: fall back quickly when a handshake shortcut is ignored","status":"NEW","created":"2026-07-06 06:50:47.000000000","updated":"2026-07-16 08:09:01.000000000","submit_type":"CHERRY_PICK","submittable":false,"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"81e851f00568e31308287e991506320811e77c26","_number":1771,"virtual_id_number":1771,"owner":{"_account_id":1000008,"name":"stipa","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"actions":{},"labels":{"Code-Review":{"all":[{"value":0,"permitted_voting_range":{"min":-2,"max":2},"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"}],"values":{"-2":"This shall not be submitted","-1":"I would prefer this is not submitted as is"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me, approved"},"description":"","default_value":0}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"}],"CC":[{"_account_id":1000026,"name":"openvpn-devel","email":"openvpn-devel@lists.sourceforge.net","username":"openvpn-devel"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-07-06 06:50:55.000000000","updated_by":{"_account_id":1000008,"name":"stipa","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"reviewer":{"_account_id":1000026,"name":"openvpn-devel","email":"openvpn-devel@lists.sourceforge.net","username":"openvpn-devel"},"state":"CC"},{"updated":"2026-07-06 06:50:55.000000000","updated_by":{"_account_id":1000008,"name":"stipa","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"reviewer":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"state":"REVIEWER"}],"messages":[{"id":"8ad021d73ec21bb157986acd087f23374378f792","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000008,"name":"stipa","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"date":"2026-07-06 06:50:47.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"a4c01e1999165517171249527c1305504ab99ccc","tag":"autogenerated:gerrit:setTopic","author":{"_account_id":1000008,"name":"stipa","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"date":"2026-07-06 07:11:41.000000000","message":"Topic set to oob-server-probe","accounts_in_message":[],"_revision_number":1},{"id":"f281cfda93a245564ef34221dd187dc29936e473","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000008,"name":"stipa","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"date":"2026-07-06 08:22:28.000000000","message":"Uploaded patch set 2: Patch Set 1 was rebased.","accounts_in_message":[],"_revision_number":2},{"id":"098fcf6c963b655799dddb0763badcd04566214f","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000008,"name":"stipa","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"date":"2026-07-09 13:47:21.000000000","message":"Uploaded patch set 3: Patch Set 2 was rebased.","accounts_in_message":[],"_revision_number":3},{"id":"70b4da3cb72f1cbfef7df8b2beaddca5f05ff856","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000008,"name":"stipa","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"date":"2026-07-14 08:14:41.000000000","message":"Uploaded patch set 4: New patch set was added with same tree, parent tree, and commit message as Patch Set 3.","accounts_in_message":[],"_revision_number":4},{"id":"82205d9426055cf18b7172c4f000c2317e4ba1ec","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000008,"name":"stipa","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"date":"2026-07-14 12:32:24.000000000","message":"Uploaded patch set 5: Patch Set 4 was rebased.","accounts_in_message":[],"_revision_number":5},{"id":"066a87f73a85c6a296ad31a7bfebad3e47544b04","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000008,"name":"stipa","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"date":"2026-07-16 07:54:14.000000000","message":"Uploaded patch set 6: Patch Set 5 was rebased.","accounts_in_message":[],"_revision_number":6},{"id":"81e851f00568e31308287e991506320811e77c26","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000008,"name":"stipa","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"date":"2026-07-16 08:09:01.000000000","message":"Uploaded patch set 7: Patch Set 6 was rebased.","accounts_in_message":[],"_revision_number":7}],"current_revision_number":7,"current_revision":"e1edddfeb55fe1375b860a96356c9ee7d49c61c0","revisions":{"369bfc7631690d4d13c9bd9c501677fa966183d0":{"kind":"REWORK","_number":1,"created":"2026-07-06 06:50:47.000000000","uploader":{"_account_id":1000008,"name":"stipa","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"ref":"refs/changes/71/1771/1","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/71/1771/1","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/1 \u0026\u0026 git checkout -b change-1771 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/71/1771/1","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/1 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"fbd8bd63102fd7461907218a0a0224e40e3475ab","subject":"oob: client handshake shortcut via a server probe"}],"author":{"name":"Lev Stipakov","email":"lev@openvpn.net","date":"2026-07-03 09:58:51.000000000","tz":180},"committer":{"name":"Lev Stipakov","email":"lev@openvpn.net","date":"2026-07-03 12:24:46.000000000","tz":180},"subject":"oob: fall back quickly when a handshake shortcut is ignored","message":"oob: fall back quickly when a handshake shortcut is ignored\n\nIf the server does not accept the shortcut third packet (e.g. a middlebox\ndrops the larger P_CONTROL_WKC_V1, or a version/bug mismatch), the client\npreviously stalled for the full handshake_window (~60s) before recovering.\n\nGive the shortcut session a short first-response deadline\n(min(handshake_window, 5s)); once the server answers, tls_pre_decrypt()\nrestores the full window so a slow-but-working handshake is not cut off. If no\nresponse arrives, the session times out quickly and the normal handshake\nrecovery kicks in, so a rejected shortcut costs a few seconds instead of ~60.\n\nChange-Id: Icec4696ff263ab39ebab06e8d478395a5ddfaab9\nSigned-off-by: Lev Stipakov \u003clev@openvpn.net\u003e\n"},"branch":"refs/heads/master"},"e04f62c5472f749d4351e715f6357e18390a6902":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2026-07-06 08:22:28.000000000","uploader":{"_account_id":1000008,"name":"stipa","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"ref":"refs/changes/71/1771/2","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/71/1771/2","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/2 \u0026\u0026 git checkout -b change-1771 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/71/1771/2","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/2 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"58f36111634204ed3d7c30357daacc1eae388e36","subject":"oob: client handshake shortcut via a server probe"}],"author":{"name":"Lev Stipakov","email":"lev@openvpn.net","date":"2026-07-03 09:58:51.000000000","tz":180},"committer":{"name":"Lev Stipakov","email":"lev@openvpn.net","date":"2026-07-06 08:20:50.000000000","tz":180},"subject":"oob: fall back quickly when a handshake shortcut is ignored","message":"oob: fall back quickly when a handshake shortcut is ignored\n\nIf the server does not accept the shortcut third packet (e.g. a middlebox\ndrops the larger P_CONTROL_WKC_V1, or a version/bug mismatch), the client\npreviously stalled for the full handshake_window (~60s) before recovering.\n\nGive the shortcut session a short first-response deadline\n(min(handshake_window, 5s)); once the server answers, tls_pre_decrypt()\nrestores the full window so a slow-but-working handshake is not cut off. If no\nresponse arrives, the session times out quickly and the normal handshake\nrecovery kicks in, so a rejected shortcut costs a few seconds instead of ~60.\n\nChange-Id: Icec4696ff263ab39ebab06e8d478395a5ddfaab9\nSigned-off-by: Lev Stipakov \u003clev@openvpn.net\u003e\n"},"branch":"refs/heads/master"},"65d178ba4debd2725749be9889abfe32fbd3cbe7":{"kind":"TRIVIAL_REBASE","_number":3,"created":"2026-07-09 13:47:21.000000000","uploader":{"_account_id":1000008,"name":"stipa","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"ref":"refs/changes/71/1771/3","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/71/1771/3","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/3 \u0026\u0026 git checkout -b change-1771 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/71/1771/3","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/3 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"fbc9dbbe6d7ecb8f527c604cce1529f4f8c21fc4","subject":"oob: client handshake shortcut via a server probe"}],"author":{"name":"Lev Stipakov","email":"lev@openvpn.net","date":"2026-07-03 09:58:51.000000000","tz":180},"committer":{"name":"Lev Stipakov","email":"lev@openvpn.net","date":"2026-07-09 13:39:44.000000000","tz":180},"subject":"oob: fall back quickly when a handshake shortcut is ignored","message":"oob: fall back quickly when a handshake shortcut is ignored\n\nIf the server does not accept the shortcut third packet (e.g. a middlebox\ndrops the larger P_CONTROL_WKC_V1, or a version/bug mismatch), the client\npreviously stalled for the full handshake_window (~60s) before recovering.\n\nGive the shortcut session a short first-response deadline\n(min(handshake_window, 5s)); once the server answers, tls_pre_decrypt()\nrestores the full window so a slow-but-working handshake is not cut off. If no\nresponse arrives, the session times out quickly and the normal handshake\nrecovery kicks in, so a rejected shortcut costs a few seconds instead of ~60.\n\nChange-Id: Icec4696ff263ab39ebab06e8d478395a5ddfaab9\nSigned-off-by: Lev Stipakov \u003clev@openvpn.net\u003e\n"},"branch":"refs/heads/master"},"142034e8a64131d32a180b8576ccb18aa1bbde44":{"kind":"NO_CHANGE","_number":4,"created":"2026-07-14 08:14:41.000000000","uploader":{"_account_id":1000008,"name":"stipa","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"ref":"refs/changes/71/1771/4","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/71/1771/4","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/4 \u0026\u0026 git checkout -b change-1771 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/71/1771/4","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/4 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"4c0a450da919e565a12bba0149c3c8f2492d0dfd","subject":"oob: client handshake shortcut via a server probe"}],"author":{"name":"Lev Stipakov","email":"lev@openvpn.net","date":"2026-07-03 09:58:51.000000000","tz":180},"committer":{"name":"Lev Stipakov","email":"lev@openvpn.net","date":"2026-07-14 08:13:53.000000000","tz":180},"subject":"oob: fall back quickly when a handshake shortcut is ignored","message":"oob: fall back quickly when a handshake shortcut is ignored\n\nIf the server does not accept the shortcut third packet (e.g. a middlebox\ndrops the larger P_CONTROL_WKC_V1, or a version/bug mismatch), the client\npreviously stalled for the full handshake_window (~60s) before recovering.\n\nGive the shortcut session a short first-response deadline\n(min(handshake_window, 5s)); once the server answers, tls_pre_decrypt()\nrestores the full window so a slow-but-working handshake is not cut off. If no\nresponse arrives, the session times out quickly and the normal handshake\nrecovery kicks in, so a rejected shortcut costs a few seconds instead of ~60.\n\nChange-Id: Icec4696ff263ab39ebab06e8d478395a5ddfaab9\nSigned-off-by: Lev Stipakov \u003clev@openvpn.net\u003e\n"},"branch":"refs/heads/master"},"ce0cee706d136eafcc96e264d6f51938148c17cf":{"kind":"TRIVIAL_REBASE","_number":5,"created":"2026-07-14 12:32:24.000000000","uploader":{"_account_id":1000008,"name":"stipa","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"ref":"refs/changes/71/1771/5","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/71/1771/5","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/5 \u0026\u0026 git checkout -b change-1771 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/71/1771/5","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/5 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"69348b80747574cdc64b3b8323957f50c22bdbc8","subject":"oob: client handshake shortcut via a server probe"}],"author":{"name":"Lev Stipakov","email":"lev@openvpn.net","date":"2026-07-03 09:58:51.000000000","tz":180},"committer":{"name":"Lev Stipakov","email":"lev@openvpn.net","date":"2026-07-14 12:22:23.000000000","tz":180},"subject":"oob: fall back quickly when a handshake shortcut is ignored","message":"oob: fall back quickly when a handshake shortcut is ignored\n\nIf the server does not accept the shortcut third packet (e.g. a middlebox\ndrops the larger P_CONTROL_WKC_V1, or a version/bug mismatch), the client\npreviously stalled for the full handshake_window (~60s) before recovering.\n\nGive the shortcut session a short first-response deadline\n(min(handshake_window, 5s)); once the server answers, tls_pre_decrypt()\nrestores the full window so a slow-but-working handshake is not cut off. If no\nresponse arrives, the session times out quickly and the normal handshake\nrecovery kicks in, so a rejected shortcut costs a few seconds instead of ~60.\n\nChange-Id: Icec4696ff263ab39ebab06e8d478395a5ddfaab9\nSigned-off-by: Lev Stipakov \u003clev@openvpn.net\u003e\n"},"branch":"refs/heads/master"},"8cd6d237a59f2f5c449a245822225604f3506b92":{"kind":"TRIVIAL_REBASE","_number":6,"created":"2026-07-16 07:54:14.000000000","uploader":{"_account_id":1000008,"name":"stipa","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"ref":"refs/changes/71/1771/6","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/71/1771/6","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/6 \u0026\u0026 git checkout -b change-1771 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/6 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/6 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/6 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/71/1771/6","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/6 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"8c83de24372c690a1dc968ab24133511d794258a","subject":"oob: client handshake shortcut via a server probe"}],"author":{"name":"Lev Stipakov","email":"lev@openvpn.net","date":"2026-07-03 09:58:51.000000000","tz":180},"committer":{"name":"Lev Stipakov","email":"lev@openvpn.net","date":"2026-07-16 07:42:37.000000000","tz":180},"subject":"oob: fall back quickly when a handshake shortcut is ignored","message":"oob: fall back quickly when a handshake shortcut is ignored\n\nIf the server does not accept the shortcut third packet (e.g. a middlebox\ndrops the larger P_CONTROL_WKC_V1, or a version/bug mismatch), the client\npreviously stalled for the full handshake_window (~60s) before recovering.\n\nGive the shortcut session a short first-response deadline\n(min(handshake_window, 5s)); once the server answers, tls_pre_decrypt()\nrestores the full window so a slow-but-working handshake is not cut off. If no\nresponse arrives, the session times out quickly and the normal handshake\nrecovery kicks in, so a rejected shortcut costs a few seconds instead of ~60.\n\nChange-Id: Icec4696ff263ab39ebab06e8d478395a5ddfaab9\nSigned-off-by: Lev Stipakov \u003clev@openvpn.net\u003e\n"},"branch":"refs/heads/master"},"e1edddfeb55fe1375b860a96356c9ee7d49c61c0":{"kind":"TRIVIAL_REBASE","_number":7,"created":"2026-07-16 08:09:01.000000000","uploader":{"_account_id":1000008,"name":"stipa","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"ref":"refs/changes/71/1771/7","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/71/1771/7","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/7 \u0026\u0026 git checkout -b change-1771 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/7 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/7 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/7 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/71/1771/7","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/71/1771/7 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"b513ee5fb0834a2586a3e6b52ca5c12f37acf54b","subject":"oob: client handshake shortcut via a server probe"}],"author":{"name":"Lev Stipakov","email":"lev@openvpn.net","date":"2026-07-03 09:58:51.000000000","tz":180},"committer":{"name":"Lev Stipakov","email":"lev@openvpn.net","date":"2026-07-16 08:08:36.000000000","tz":180},"subject":"oob: fall back quickly when a handshake shortcut is ignored","message":"oob: fall back quickly when a handshake shortcut is ignored\n\nIf the server does not accept the shortcut third packet (e.g. a middlebox\ndrops the larger P_CONTROL_WKC_V1, or a version/bug mismatch), the client\npreviously stalled for the full handshake_window (~60s) before recovering.\n\nGive the shortcut session a short first-response deadline\n(min(handshake_window, 5s)); once the server answers, tls_pre_decrypt()\nrestores the full window so a slow-but-working handshake is not cut off. If no\nresponse arrives, the session times out quickly and the normal handshake\nrecovery kicks in, so a rejected shortcut costs a few seconds instead of ~60.\n\nChange-Id: Icec4696ff263ab39ebab06e8d478395a5ddfaab9\nSigned-off-by: Lev Stipakov \u003clev@openvpn.net\u003e\n"},"branch":"refs/heads/master"}},"requirements":[{"status":"NOT_READY","fallback_text":"All required checks must pass","type":"checks_pass"}],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"NOT_READY","labels":[{"label":"Code-Review","status":"NEED"}]},{"rule_name":"checks~ChecksSubmitRule","status":"NOT_READY","requirements":[{"status":"NOT_READY","fallback_text":"All required checks must pass","type":"checks_pass"}]}],"submit_requirements":[{"name":"Code-Review","status":"UNSATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX -label:Code-Review\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Code-Review\u003dMAX","-label:Code-Review\u003dMIN"]}},{"name":"checks~ChecksSubmitRule","status":"UNSATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"rule:checks~ChecksSubmitRule","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["checks~ChecksSubmitRule"]}}]}