[openssl-dev] Renegotiation ticket 3712

Salz, Rich rsalz at akamai.com
Mon Apr 3 16:10:57 UTC 2017


> The issue is fairly time sensitive and leads to non-deterministic outcome.
> 
> Hence I was expecting the issue to be addressed with openssl version 1.1.0
> due to major overhaul of state machine and internals.

Perhaps a more accurate way to say it is "I was hoping ..." :)

 If this is important to you -- and Matt has said that it's not important to (some of) the OpenSSL team -- then you will have to fix it yourself.  If you do, I hope you will make a PR to feed it back to the open source community.


More information about the openssl-dev mailing list