Fixes #12378 - Change default value for SslContextFactory.renegotiati…

…onAllowed to false. Signed-off-by: Simone Bordet <[email protected]>
jetty · Oct 28, 2024 · fd11d25 · fd11d25
1 parent acf3325
commit fd11d25
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/jetty-core/jetty-util/src/main/java/org/eclipse/jetty/util/ssl/SslContextFactory.java b/jetty-core/jetty-util/src/main/java/org/eclipse/jetty/util/ssl/SslContextFactory.java
@@ -182,7 +182,7 @@ public abstract class SslContextFactory extends ContainerLifeCycle implements Du
     private SSLContext _setContext;
     private String _endpointIdentificationAlgorithm = "HTTPS";
     private boolean _trustAll;
-    private boolean _renegotiationAllowed = true;
+    private boolean _renegotiationAllowed;
     private int _renegotiationLimit = 5;
     private Factory _factory;
     private PKIXCertPathChecker _pkixCertPathChecker;
@@ -993,7 +993,7 @@ public void setTrustManagerFactoryAlgorithm(String algorithm)
     }
 
     /**
-     * @return whether TLS renegotiation is allowed (true by default)
+     * @return whether TLS renegotiation is allowed ({@code false} by default)
      */
     @ManagedAttribute("Whether renegotiation is allowed")
     public boolean isRenegotiationAllowed()