PfSense keeps disconnecting: TLS: tls_process: killed expiring key

[MnM 0]

Hi,

 

I have configured PFSense and it works as I need it to.

However, every hour the VPN session disconnects and then it reconnects again:

 

TLS: tls_process: killed expiring key

 

How can I make this stop and actually hold the session for more than one hour?

 

Thanks

[Staff 10018]

Hi,

 

I have configured PFSense and it works as I need it to.

However, every hour the VPN session disconnects and then it reconnects again:

 

TLS: tls_process: killed expiring key

 

How can I make this stop and actually hold the session for more than one hour?

 

Thanks

 

 

Hello!

 

It's not a disconnection, it's a TLS re-keying through DHE. See also Perfect Forward Secrecy: https://en.wikipedia.org/wiki/Forward_secrec

 

The re-keying occurs with overlapping windows: until the re-keying has not completed, the old key pair is used to encrypt the Data Channel, so no interruption of the throughput occurs and there's no time pressure.

 

You can't disable this feature, otherwise you would suffer a disconnection every hour. You can lower the key expiration time, although we believe that one hour already provides a fair security.

 

Kind regards