Allow renegotiation if SSL_OP_LEGACY_SERVER_CONNECT is set as well as
authorDr. Stephen Henson <steve@openssl.org>
Wed, 17 Feb 2010 18:38:10 +0000 (18:38 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Wed, 17 Feb 2010 18:38:10 +0000 (18:38 +0000)
commit989238802aa096c083dd78d0add49ef67dc073da
tree2aea6e3370833f4090ce0e05ff686dbdac62474b
parent9051fc538f93393d9e5540c9f981858178f5a1c1
Allow renegotiation if SSL_OP_LEGACY_SERVER_CONNECT is set as well as
initial connection to unpatched servers. There are no additional security
concerns in doing this as clients don't see renegotiation during an
attack anyway.
CHANGES
doc/ssl/SSL_CTX_set_options.pod
ssl/t1_lib.c