As SSLv2 does not specify any renegotiation at all does it really make sense to reject it in the ssl23_get_client_hello() if legacy renegotiation is not enabled in the ssl options?
openssl s_server when contacted with openssl s_client -sslv2 returns: 140392456742728:error:14076152:SSL routines:SSL23_GET_CLIENT_HELLO:unsafe legacy renegotiation disabled:s23_srvr.c:509: -- Tomas Mraz No matter how far down the wrong road you've gone, turn back. Turkish proverb ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org