aericpp commented on issue #968: https开启双向认证后，SSL Renegotiation功能失效 URL: https://github.com/apache/incubator-brpc/issues/968#issuecomment-554266126 > 由于之前一些SSL版本过低，renegotiation会引发安全问题，所以代码这里把这个关了 > https://github.com/apache/incubator-brpc/blob/6efb0cff5f30f32437c660cef01c93549cf62679/src/brpc/details/ssl_helper.cpp#L140 > > 你看下你的log中，是否有上面日志里的这句话 > Close xxx due to insecure renegotiation detected (CVE-2009-3555) 另外，这个关闭功能是针对openssl低版本吗？版本号条件有么？
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
