]> granicus.if.org Git - curl/commit
openssl: disable TLS renegotiation with BoringSSL
authorDaniel Stenberg <daniel@haxx.se>
Tue, 20 Nov 2018 22:48:30 +0000 (23:48 +0100)
committerDaniel Stenberg <daniel@haxx.se>
Wed, 21 Nov 2018 07:30:18 +0000 (08:30 +0100)
commit59311bd3df5da6342312b5dc9b6c91fc2be77d4f
treeece79747847f892dd6ab0d35842e3a6c9606445f
parent6765e6d9e6a32bb4fc666d744cb57e2d55d4e13b
openssl: disable TLS renegotiation with BoringSSL

Since we're close to feature freeze, this change disables this feature
with an #ifdef. Define ALLOW_RENEG at build-time to enable.

This could be converted to a bit for CURLOPT_SSL_OPTIONS to let
applications opt-in this.

Concern-raised-by: David Benjamin
Fixes #3283
Closes #3293
lib/vtls/openssl.c