Add option to disable tls client renegotiation altogether

virtkick · Nov 24, 2015 · 8ff4718 · 8ff4718
1 parent e30cfac
commit 8ff4718
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/HttpMasterWorker.js b/src/HttpMasterWorker.js
@@ -328,6 +328,11 @@ function handleConfig(config, configHandled) {
 
   var errors = {};
 
+  if (config.disableTlsClientRenegotiation) {
+    tls.CLIENT_RENEG_LIMIT = 0;
+    tls.CLIENT_RENEG_WINDOW = 0;
+  }
+
   async.parallel(Object.keys(config.ports || {}).map(function(portEntry) {
     return function(asyncCallback) {
       var m;