moonchen opened a new pull request, #13306:
URL: https://github.com/apache/trafficserver/pull/13306
Add autest coverage for several TLS behaviors:
- TLS renegotiation: rejected by default, and answered promptly when
`proxy.config.ssl.allow_client_renegotiation` is enabled.
- The `proxy.config.ssl.max_record_size` clamp, verified by measuring the
application-data record sizes on the wire, not just the response body.
- A failed outbound TLS origin connection, surfaced to the client as a 5xx.
- A TLS origin that resets the connection mid-request-body, which must fail
the
transaction promptly instead of waiting for the inactivity timeout.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
