diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2010-02-17 18:38:31 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2010-02-17 18:38:31 +0000 |
| commit | c2c49969e236058090c081e591272ea325ca49b6 (patch) | |
| tree | 09c3265bba655b803bb116a30ad64f23e35a3c2c /CHANGES | |
| parent | 47e0a1c335295d7548ecd1860954ee4f988d9804 (diff) | |
Allow renegotiation if SSL_OP_LEGACY_SERVER_CONNECT is set as well as
initial connection to unpatched servers. There are no additional security
concerns in doing this as clients don't see renegotiation during an
attack anyway.
Diffstat (limited to 'CHANGES')
| -rw-r--r-- | CHANGES | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -926,7 +926,7 @@ [Steve Henson] *) Add option SSL_OP_LEGACY_SERVER_CONNECT which will allow clients to - connect (but not renegotiate) with servers which do not support RI. + connect and renegotiate with servers which do not support RI. Until RI is more widely deployed this option is enabled by default. [Steve Henson] |