Noted. Renegotiation has been disable.
Is there anyway to clean the CTX while let SSL object itself serving the tunnel ? Or I can only depend on the CTX ref after the SSL is delete? Regards, Hyer Low > > On Mar 6, 2020 at 7:00 PM, <Matt Caswell (mailto:m...@openssl.org)> wrote: > > > > One other thing does occur: if you allow renegotiation then you might need > access to the cert-store after the initial handshake has completed. Matt On > 06/03/2020 10:57, Hyer Low wrote: > All configs can have different cert > being setup as well, hence each CTX cert > store might also different and > not to be share. > > Thanks. I'll try and see any possible side effect. > > > > > -- > Sent from: > http://openssl.6102.n7.nabble.com/OpenSSL-User-f3.html > > >