Import OpenSSL 0.9.8l
[dragonfly.git] / crypto / openssl / ssl / s3_lib.c
index 8916a0b..5aa7bb2 100644 (file)
@@ -2592,6 +2592,9 @@ int ssl3_renegotiate(SSL *s)
        if (s->s3->flags & SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS)
                return(0);
 
+       if (!(s->s3->flags & SSL3_FLAGS_ALLOW_UNSAFE_LEGACY_RENEGOTIATION))
+               return(0);
+
        s->s3->renegotiate=1;
        return(1);
        }