diff --git a/server/reds.cpp b/server/reds.cpp index fe69508e..f61086cb 100644 --- a/server/reds.cpp +++ b/server/reds.cpp @@ -2753,6 +2753,10 @@ static int reds_init_ssl(RedsState *reds) * When some other SSL/TLS version becomes obsolete, add it to this * variable. */ long ssl_options = SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 | SSL_OP_NO_COMPRESSION | SSL_OP_NO_TLSv1; +#ifdef SSL_OP_NO_RENEGOTIATION + // With OpenSSL 1.1: Disable all renegotiation in TLSv1.2 and earlier + ssl_options |= SSL_OP_NO_RENEGOTIATION; +#endif /* Global system initialization*/ openssl_global_init();