[Libevent-users] the best practice of disabling openssl client renegotiation in libevent2?

To: libevent-users@xxxxxxxxxxxxx

Subject: [Libevent-users] the best practice of disabling openssl client renegotiation in libevent2?

From: Zhuang Yuyao <mlistz@xxxxxxxxx>

Date: Thu, 17 Aug 2017 15:03:10 +0800

Delivered-to: archiver@xxxxxxxx

Delivered-to: libevent-users-outgoing@xxxxxxxx

Delivered-to: libevent-users@xxxxxxxx

Delivery-date: Thu, 17 Aug 2017 03:03:17 -0400

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=iqnFCEG6jHc5Y5CyRpCvL1RfVi/Kc2VunV/xUg1+ZAM=; b=aAvEPigOk3imK/MbhaIgD4sGFVVivJC+aJ/kCD0+uGYt0E92cu78TG/xDLgo6ySgPp Mk/i3/Lw6Es/kQSN5hWx6Revs/ntmmZs9EOyW+MhYgAjqlqMhWpdhGAm4FBEBVF7RutS VmKwNCPQpG645+pq9uWxeJPNZ98j8ewG0/MNW2Cj7xBArTtMbYEQueFvse7Q0zJTCEFA WJrkEl+iNkv7g0UAnffSLCkZ2rj8AnSNLuapZ9+gjF42hYiEWiG96PQ3XHB/SQ72bYiG 3u4QCdJm/YqSIVY9Xzpmj4gLCyqaGclkm2VyGEjlCZ1+EIHfM+/54wdkRky/cKFdZAXK S4rQ==

Reply-to: libevent-users@xxxxxxxxxxxxx

Sender: owner-libevent-users@xxxxxxxxxxxxx

hi,

disabling ssl client renegotiation in libevent2 seems quite troublesome and inconvenient, the only examples I can find are these following patches:

https://github.com/tatsuhiro-t/spdylay/commit/1509c901b6d24affcfc0ec15243085bfc77c1d7b

https://github.com/tatsuhiro-t/spdylay/commit/0d2311153fb2b9059a7c8e36de9ab1031580d6f2

using filter/underlying bufferevent causes a lot modifications in source code such as special calculation of evbuffer length, extra code to handle raw input, which destroyed the elegance of codes.

so I'm wondering what is the best practice of disabling openssl client renegotiation in libevent2? presume the source code of libevent2 can be modified and the binary compatible is not an issue.

many thanks.

best regards,

Zhuang