[openssl-dev] [openssl.org #3865] [Patch] Add DISALLOW_RENEGOTIATION option

[Short, Todd via RT]

Hi Daniel:

I don't disagree. These patches were made by Akamai employees over the years, and we are finally able to contribute to them. They are of varying quality when it comes to documentation (usually based on the original author of the patch).

--
-Todd Short
// tshort at akamai.com
// Sent from my iPhone
// "One if by land, two if by sea, three if by the Internet."


> On May 27, 2015, at 5:43 PM, Daniel Kahn Gillmor <dkg at fifthhorseman.net> wrote:
> 
>> On Tue 2015-05-26 14:56:10 -0400, Short, Todd via RT wrote:
>> This is a change that Akamai has made to its implementation of OpenSSL.
>> 
>> Version: master branch
>> Description: Add DISALLOW_RENEGOTIATION option
>> 
>> Add support to disallow renegotiation in openssl
>> The bit definition may need to change when pulled.
> 
> Thanks for these patches, Todd!
> 
> It would be great if patches which add new configuration options also
> were to update the documentation.  It looks like this changeset would
> want to also provide patches for:
> 
> doc/ssl/SSL_CTX_set_options.pod
> doc/apps/s_server.pod
> 
>      --dkg