From 81d87a2a28df15bcb35295f98a0b06170895536f Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Fri, 12 Feb 2010 21:59:57 +0000 Subject: update references to new RI RFC --- doc/ssl/SSL_CTX_set_options.pod | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'doc') diff --git a/doc/ssl/SSL_CTX_set_options.pod b/doc/ssl/SSL_CTX_set_options.pod index a878a6af6d..3e61a36e17 100644 --- a/doc/ssl/SSL_CTX_set_options.pod +++ b/doc/ssl/SSL_CTX_set_options.pod @@ -234,8 +234,8 @@ these options. =head1 SECURE RENEGOTIATION OpenSSL 0.9.8m and later always attempts to use secure renegotiation as -described in draft-ietf-tls-renegotiation (FIXME: replace by RFC). This -counters the prefix attack described in CVE-2009-3555 and elsewhere. +described in RFC5746. This counters the prefix attack described in +CVE-2009-3555 and elsewhere. The deprecated and highly broken SSLv2 protocol does not support secure renegotiation at all: its use is B discouraged. -- cgit v1.2.3