| commit | 10243938db38044a2977eedf806c79412fd8c9a4 | [log] [tgz] |
|---|---|---|
| author | Thomas Prückl <plt@hainzl.at> | Wed Apr 27 13:04:54 2022 +0200 |
| committer | Willy Tarreau <w@1wt.eu> | Wed Apr 27 16:53:43 2022 +0200 |
| tree | 3eabcd07042df139deb4e0fdbb92921c0acadab7 | |
| parent | 243e68b552b1d27dd8f86c35394551c124652ed2 [diff] |
MINOR: ssl: add a new global option "tune.ssl.hard-maxrecord" Low footprint client machines may not have enough memory to download a complete 16KB TLS record at once. With the new option the maximum record size can be defined on the server side. Note: Before limiting the the record size on the server side, a client should consider using the TLS Maximum Fragment Length Negotiation Extension defined in RFC6066. This patch fixes GitHub issue #1679.