]> git.ipfire.org Git - thirdparty/squid.git/commit
Bug 4599 pt6: Restrict safe renegotiation disable to OpenSSL 1.0 and older
authorChristos Tsantilas <chtsanti@users.sourceforge.net>
Fri, 30 Dec 2016 14:07:05 +0000 (03:07 +1300)
committerAmos Jeffries <squid3@treenet.co.nz>
Fri, 30 Dec 2016 14:07:05 +0000 (03:07 +1300)
commitfdcc86587a3ec4438cc1b42cb320f566e45b66c8
tree27a392912a04d88639dfe8c71526d756880d2efd
parentac756c8c9ae584938bc121f16c4ce0b60a78b87b
Bug 4599 pt6: Restrict safe renegotiation disable to OpenSSL 1.0 and older

From OpenSSL 1.1.0 documentation:
 "OpenSSL always attempts to use secure renegotiation as described in RFC5746.
  This counters the prefix attack described in CVE-2009-3555 and elsewhere."
src/ssl/support.cc