Emeric Brun e1f38dbb44 MEDIUM: ssl: protect against client-initiated renegociation ... CVE-2009-3555 suggests that client-initiated renegociation should be prevented in the middle of data. The workaround here consists in having the SSL layer notify our callback about a handshake occurring, which in turn causes the connection to be marked in the error state if it was already considered established (which means if a previous handshake was completed). The result is that the connection with the client is immediately aborted and any pending data are dropped.		2012-09-03 22:03:17 +02:00
..
common	CLEANUP: includes: fix includes for a number of users of fd.h	2012-09-03 20:49:14 +02:00
import	[MAJOR] replace ultree with ebtree in wait-queues	2008-06-24 08:17:16 +02:00
proto	MEDIUM: ssl: protect against client-initiated renegociation	2012-09-03 22:03:17 +02:00
types	MEDIUM: config: add support for the 'ssl' option on 'server' lines	2012-09-03 22:02:21 +02:00