RE: Disabling Client Initiated renegotiation in 0.9.8

2013-10-27 Thread Dave Thompson
..@openssl.org> owner-openssl-us...@openssl.org [ <mailto:owner-openssl-us...@openssl.org> mailto:owner-openssl-us...@openssl.org] On Behalf Of Simner, John Sent: Tuesday, October 22, 2013 10:10 To: <mailto:openssl-users@openssl.org> openssl-users@openssl.org Subject: Disabling

Disabling Client Initiated renegotiation in 0.9.8

2013-10-22 Thread Simner, John
Hi, Following my previous question, is it possible on OpenSSL 0.9.8 to have secure renegotiation but turn off client initiated renegotiation. If so, how? If not, is it available in later versions of OpenSSL? The customer has scanned the phone and the scanner has reported a security problem with