Prohibit client renegotiation

diff --git a/src/org/cacert/gigi/Launcher.java b/src/org/cacert/gigi/Launcher.java
index 9debdd13ccf4839be0d1667448709695eb4c11d1..d94dbe6eb2e4bf2966ee6abe14d1fdcc681cf07c 100644 (file)
--- a/src/org/cacert/gigi/Launcher.java
+++ b/src/org/cacert/gigi/Launcher.java
@@ -110,6 +110,7 @@ public class Launcher {
                        }
 
                };
+               scf.setRenegotiationAllowed(false);
                scf.setWantClientAuth(true);
                KeyStore ks1 = KeyStore.getInstance("pkcs12");
                ks1.load(new FileInputStream("config/keystore.pkcs12"),