Re: [axtls-general] Questions on axTLS version 1.2.9

[Gerald S. <gs...@st...>]

Cam,

I received word back from our developers and they have the timer set at 300 sec as shown below.  But we are not seeing any timeout on browser.  How do we get this to timeout?  I have tried leaving the web page open for several days,  rebooting the device that contains the web server, switching the device that contains the web server to another one, continually updating the web page from the browser for over 5 minutes, and it never times out/logs me out.


  x x                                                   [*] Static Build                                                                   x x
  x x                                                   (80) HTTP port                                                                     x x
  x x                                                   (443) HTTPS port                                                                   x x
  x x                                                   (5) SSL session cache size                                                         x x
  x x                                                   (/) Web root location                                                     x x
  x x                                                   (300) Timeout                                                                      x x
  x x                                                       CGI  --->                                                                      x x
  x x                                                   [ ] Enable Directory Listing                                                       x x
  x x                                                   [*] Enable authorization                                                           x x
  x x                                                   [ ] Enable IPv6                                                                    x x
  x x                                                   [ ] Enable different user                                                          x x
  x x                                                   [ ] Verbose Mode                                                                   x x
  x x                                                   [ ] Run as a daemon

Is there something I am missing or not understanding?

Thanks,
Gerald

From: Cameron Rich [mailto:cam...@gm...]
Sent: Friday, April 08, 2011 5:44 PM
To: Gerald Smith
Cc: axt...@li...
Subject: Re: Questions on axTLS version 1.2.9

There is one and it's set to 5 minutes by default.

However it sits on the other side of a blocking select() statement. So the timeout relies on regular http traffic to force the socket to be closed.

This is obviously not 100% desirable, but the web server takes 0% CPU when idle which is great for embedded devices. The other option is to regularly drop out of the select() and make the check but at the cost of CPU cycles.

So it was a conscious decision but perhaps one that should be reviewed at some stage now that embedded devices these days are becoming so much more powerful.

Cam

Gerald Smith wrote:
Mr. Rich,

We are using this web server but have noticed that there does not seem to be an inactivity timer to log the user out after so much time without any activity.  Is there an inactivity timer that we are not aware of?  If not, are there plans to support one on a future release?

Thanks,
Gerald