Description: |
|
|---|
TWSD-801 Required Secure renegotiation option in SSL RealHost // AS-10207// SIDRA
Review Request #1291 — Created Jan. 7, 2026 and submitted
| Information | |
|---|---|
| peteryeh | |
| APV10 | |
| rel_apv_10_7_4 | |
| TWSD-801 | |
| Reviewers | |
| kevin.poh, mingji, weikai | |
Root cause:
APV SSL client not accept renegotiation for real host side.Solution: * Make ssl_client parse renegotiation extension of TLSv1.2 handshake packets from backend TLS Server (using OpenSSL s_server to init renegotiation) * Need to use AES_256_GCM_SHA384 as first cipher of rhost (legacy)
OpenSSL s_server as backend server with curl as front-end client.
