Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

What is the purpose of SSL/TLS renegotiation?

Tags:

ssl

What is the purpose of SSL/TLS renegotiation and under exactly what circumstances does a renegotiation occur?

Please note I am not asking about the vulnerabilities associated with a renegotiation, there are many sources that are talking about this.

like image 528
user3290431 Avatar asked Jan 08 '15 03:01

user3290431


1 Answers

It occurs after either side has expired the session and continues sending data. It means either that the session has simply expired due to timeout, or that a peer wants to change the cipher suite, or wants to request a peer certificate and hasn't already done so.

like image 161
user207421 Avatar answered Nov 15 '22 03:11

user207421