Er, *why* are you dropping the connection when renegotiation is tried?
 The appropriate response, per RFC, if you don't want to renegotiate
is to send a warning "no_renegotiation" alert.

-Kyle H

On Mon, Nov 16, 2009 at 10:40 PM, joshi chandra
<[email protected]> wrote:
>
> Hi ,
>
> I have lot patch from cvs of Openssl which will disable all the
> renegotiation and also will drop the connection if renegotiation is tried .
>
> This is the patch from the cvs
>  http://cvs.openssl.org/chngview?cn=18791
>  http://cvs.openssl.org/chngview?cn=18794
>  http://cvs.openssl.org/chngview?cn=18795
>
> As i am using this patch in older version of openssl (9.8h and 9.8k ). will
> this patch disable the renegotiation and also drop the connection if
> renegotiation is done .
>
> Thanks in Advance
>
> Joshi
>
>
> Lutz Jaenicke wrote:
>>
>> Boyle Owen wrote:
>>> PPS: Although I have subscribed to this list, I am not getting the mails
>>> (I have to keep checking the archives). Is there anyone who can check
>>> out my account?
>>>
>>
>> Hmm. If memory serves me right there was a "subscribe" message sent to
>> the list instead of the mailing list manager (which I then moderated
>> away)...
>> Please try again, we do have some handy form on the web page.
>>
>> Best regards,
>>     Lutz
>> ______________________________________________________________________
>> OpenSSL Project                                 http://www.openssl.org
>> Development Mailing List                       [email protected]
>> Automated List Manager                           [email protected]
>>
>>
>
> --
> View this message in context: 
> http://old.nabble.com/Test-of-disabled-renegotiation-in-0.9.8l-tp26301719p26385119.html
> Sent from the OpenSSL - Dev mailing list archive at Nabble.com.
>
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> Development Mailing List                       [email protected]
> Automated List Manager                           [email protected]
>
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to