Allow renegotiation if SSL_OP_LEGACY_SERVER_CONNECT is set as well as
authorDr. Stephen Henson <steve@openssl.org>
Wed, 17 Feb 2010 18:37:47 +0000 (18:37 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Wed, 17 Feb 2010 18:37:47 +0000 (18:37 +0000)
commit442ac8d25993b2fbdd801cae79a2e78612cfaf80
treeb19557b5ae3392b7f346eb2dbd2a9b142165c5c7
parent657b02d0cfa4a84765dc20b0e5eab20cb93988bb
Allow renegotiation if SSL_OP_LEGACY_SERVER_CONNECT is set as well as
initial connection to unpatched servers. There are no additional security
concerns in doing this as clients don't see renegotiation during an
attack anyway.
CHANGES
doc/ssl/SSL_CTX_set_options.pod
ssl/t1_lib.c