Turns out that renegotiation is broken in OpenSSL 1.1.0, so we allow clients to send their certificates (but not require them) from the very first connection on, so that they don't have to renegotiate. Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> |
||
---|---|---|
.. | ||
files | ||
tasks | ||
templates |