From c77870d50d1f1e2bb65199ae3dc8845cf4f3d5ed Mon Sep 17 00:00:00 2001
From: "C. McEnroe" <june@causal.agency>
Date: Tue, 28 Jul 2020 00:16:32 -0400
Subject: tls_server: Remove SSL_OP_NO_CLIENT_RENEGOTIATION
This is a LibreSSL-specific option.
---
tls_server.c | 2 --
1 file changed, 2 deletions(-)
diff --git a/tls_server.c b/tls_server.c
index ca7c4c6..98a8389 100644
--- a/tls_server.c
+++ b/tls_server.c
@@ -220,8 +220,6 @@ tls_configure_server_ssl(struct tls *ctx, SSL_CTX **ssl_ctx,
goto err;
}
- SSL_CTX_set_options(*ssl_ctx, SSL_OP_NO_CLIENT_RENEGOTIATION);
-
if (SSL_CTX_set_tlsext_servername_callback(*ssl_ctx,
tls_servername_cb) != 1) {
tls_set_error(ctx, "failed to set servername callback");
--
cgit 1.4.1