pkgsrc-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Apache and TLS renegocitation



On Tue, June 21, 2011 02:06, Emmanuel Dreyfus wrote:
> Hello everybody
>
> It seems difficult to re-enable TLS renegociation with Apache. As I
> understand, I need:
[...]
> Anyone has hints on how to re-enable that?

You also need:
3)  a client that also implements RFC 5746.

By default Apache won't enable renegotiation unless it detects RFC 5746 on
the other end. To enable it for all clients (patched and unpatched),
there's this flag:

  http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslinsecurerenegotiation

Which client/s are you connecting with to test with?




Home | Main Index | Thread Index | Old Index