[FELIX-4972] [Jetty] Make SSL renegotiation configurable

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: http.jetty-3.0.2
• Fix Version/s: http.jetty-3.1.0
• Component/s: HTTP Service
• Labels: patch security
• Flags: Patch
• Assignee: Carsten Ziegeler
• Reporter: Thomas Franconville
• Created: 23/Jul/15 12:23
• Updated: 10/Aug/15 06:41
• Resolved: 24/Jul/15 08:57

Description

More information:
http://www.ietf.org/mail-archive/web/tls/current/msg07553.html

By default, felix jetty allows client renegotiation.

Test: http://blog.ivanristic.com/2009/12/testing-for-ssl-renegotiation.html