© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
a60fb26
(Get the code!)
On https:/
see the section titled SSL3 & TLS Renegotiation Indication Extension
the default setting is
# [2|r|R]: SSL_RENEGOTIATE
Only allows renegotiation if the peer's hello bears the TLS renegotiation_info extension. This is the safe renegotiation.
Downstream distributions can opt to change the default to
[3|t|T]: SSL_RENEGOTIATE
Disallows unsafe renegotiation in server sockets only, but allows clients to continue to renegotiate with vulnerable servers. This value should only be used during the transition period when few servers have been upgraded.