Forum Discussion

Pradeep_Kandala's avatar
Pradeep_Kandala
Icon for Nimbostratus rankNimbostratus
Sep 12, 2012

renogitation

 

Renegotiates a client-side or server-side SSL connection, depending on the context.-- What does it mean ??

 

Is it means if in http request its client side and if in http response its in server-side.

 

Sorry, if it looks like a dumb question.

 

Thanks in Advance

 

Pradeep

 

  • Pradeep,

     

     

    Renegotiation has nothing to do with HTTP. It occurs after initial SSL negotiation and during an active SSL session to essentially "swap" encryption keys. It is a fairly standard security mechanism in that the longer a key is used the more vulnerable it becomes to attack. Both clients and servers can initiate renegotiation, and we have settings within the client and server SSL profiles to control how renegotiation is handled.