[Openvpn-devel] [PATCH v3] Always disable TLS renegotiations

2021-04-01 Thread Arne Schwabe
Renegotiations have been troublesome in the past and also the recent OpenSSL security problem (CVE-2021-3449) is only exploitable if TLS renegotiation is enabled. mbed TLS disables it by default and says in the documentation: Warning: It is recommended to always disable renegotation unless you kn

[Openvpn-devel] [PATCH v3] Always disable TLS renegotiations

2021-04-01 Thread Arne Schwabe
Renegotiations have been troublesome in the past and also the recent OpenSSL security problem (CVE-2021-3449) is only exploitable if TLS renegotiation is enabled. mbed TLS disables it by default and says in the documentation: Warning: It is recommended to always disable renegotation unless you kn