Browse Source

Disable renegotiation in TlsTransport with OpenSSL

Paul-Louis Ageneau 2 years ago
parent
commit
55e19896cc
1 changed files with 1 additions and 1 deletions
  1. 1 1
      src/impl/tlstransport.cpp

+ 1 - 1
src/impl/tlstransport.cpp

@@ -322,7 +322,7 @@ TlsTransport::TlsTransport(shared_ptr<TcpTransport> lower, optional<string> host
 			}
 		}
 
-		SSL_CTX_set_options(mCtx, SSL_OP_NO_SSLv3);
+		SSL_CTX_set_options(mCtx, SSL_OP_NO_SSLv3 | SSL_OP_NO_RENEGOTIATION);
 		SSL_CTX_set_min_proto_version(mCtx, TLS1_VERSION);
 		SSL_CTX_set_read_ahead(mCtx, 1);
 		SSL_CTX_set_quiet_shutdown(mCtx, 1);