site setup: Correct logic for DEFAULT_KEY_RENEGOTIATE_GAP
Previously, key_renegotiate_time would be set to
key_lifetime - DEFAULT_KEY_RENEGOTIATE_GAP
unless that was negative, in which case it would be set to
key_lifetime / 2
This is illogical as it is not monotonic in key_lifetime.
Instead we now set it to the larger of those two values.
(This bug has had no effect as the buggy calculation was ignored due
to another bug, which will be fixed in a later patch.)
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
~mdw / secnet / commit