Dear team In mod_ssl is there any option to enforce SSL renegotiation after certain amount of data has been transfered on SSL connection . If we are using cipher suite which has AES-GCM as encryption algorithm , then its required that when the counter overlaps or overflows then SSL renegotiation should happen . In AES-GCM the final counter is [4 bytes salt which is negotiated between client and serevr ] + [8 bytes of random bytes which are generated for the first time using RAND_bytes (nonce_explicit). It is incremented for each TLS packet] + [32 bit counter ]
After 2^64 packets nonce_explicit will overlap or overflow (its practically not possible but theoritically possible ). Openssl is not handling this case . Can mod_ssl handle this case ? Thanks and regards Akshar