Commit e90cb49
tls: enable renegotiation when using BoringSSL
PR-URL: #34832
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Shelley Vohr <codebytere@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Rich Trott <rtrott@gmail.com>1 parent cc72584 commit e90cb49
1 file changed
Lines changed: 6 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -131,6 +131,12 @@ void TLSWrap::InitSSL() { | |||
| 131 | 131 | // - https://wiki.openssl.org/index.php/TLS1.3#Non-application_data_records | |
| 132 | 132 | SSL_set_mode(ssl_.get(), SSL_MODE_AUTO_RETRY); | |
| 133 | 133 | ||
| 134 | + #ifdef OPENSSL_IS_BORINGSSL | ||
| 135 | + // OpenSSL allows renegotiation by default, but BoringSSL disables it. | ||
| 136 | + // Configure BoringSSL to match OpenSSL's behavior. | ||
| 137 | + SSL_set_renegotiate_mode(ssl_.get(), ssl_renegotiate_freely); | ||
| 138 | + #endif | ||
| 139 | + | ||
| 134 | 140 | SSL_set_app_data(ssl_.get(), this); | |
| 135 | 141 | // Using InfoCallback isn't how we are supposed to check handshake progress: | |
| 136 | 142 | // https://github.com/openssl/openssl/issues/7199#issuecomment-420915993 | |
0 commit comments