mirrors/FreeRDP
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

new [tls/server]: disable client side renegotiation

Browse Source
This commit is contained in:
Bernhard Miklautz 2022-12-15 10:30:59 +01:00 committed by Martin Fleisz
parent 3f63365652
commit e530999156
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
libfreerdp/crypto/tls.c
View File

@ -1006,6 +1006,17 @@ BOOL tls_accept(rdpTls* tls, BIO* underlying, rdpSettings* settings)
*/
options |= SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS;
/**
* SSL_OP_NO_RENEGOTIATION
*
* Disable SSL client site renegotiation.
*/
#if (OPENSSL_VERSION_NUMBER >= 0x10100000L && OPENSSL_VERSION_NUMBER < 0x30000000L) || \
defined(LIBRESSL_VERSION_NUMBER)
options |= SSL_OP_NO_RENEGOTIATION;
#endif
if (!tls_prepare(tls, underlying, SSLv23_server_method(), options, FALSE))
return FALSE;