Issue 8611 - Option to block SSL renegotation after X attempts
Summary: Option to block SSL renegotation after X attempts
Status: UNCONFIRMED
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: slapd (show other issues)
Version: 2.4.44
Hardware: All All
: --- enhancement
Target Milestone: 2.7.0
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-03-06 17:51 UTC by Quanah Gibson-Mount
Modified: 2021-07-13 16:18 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this issue.
Description Quanah Gibson-Mount 2017-03-06 17:51:35 UTC 
Full_Name: Quanah Gibson-Mount
Version: 2.4.44
OS: N/A
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (47.208.148.26)


Using SSL renegotiation is a common form of DoS attack against services.  It
should be possible to configure the max # of times a client can request the
server renegotiate the SSL layer before being dropped.  Alternatively, an option
to completely disable SSL renegotiation in the slapd configuration may also be
desirable.
Comment 1 Quanah Gibson-Mount 2017-03-17 16:42:12 UTC 
moved from Incoming to Software Enhancements