Mark,

On 6/30/22 03:35, ma...@apache.org wrote:
This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat-native.git


The following commit(s) were added to refs/heads/main by this push:
      new 28aa8ef2c Add renegotiation info
28aa8ef2c is described below

commit 28aa8ef2c9360dcdcb9f2386224146ebce0c36f2
Author: Mark Thomas <ma...@apache.org>
AuthorDate: Thu Jun 30 08:35:50 2022 +0100
 >      Add renegotiation info
>
> [snip]

+<section name="Unsafe legacy negotiation">
+  <p>
+  Support for unsafe legacy negotiation depends on OpenSSL. Only if Tomcat
+  Native is compiled with a build of OpenSSL that supports legacy renegotiation
+  will Tomcat Native support it.
+  </p>

Does this mean it's /possible/ (and configurable) to use Unsafe Legacy Negotiation, or does it mean that it's always-on for openssl builds where it's there, and always-off when it's not there?

-chris

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to