Can TLS Renegotiation be disabled from the Client (Doc ID 2673817.1)

Last updated on APRIL 13, 2023

Applies to:

Goal

Is there a way to turn off TLS renegotiation in a client application?  Users do not have control of the server side code, only the client side code.  The client does implement the RFC 5746 Phase 2 fix but there is a desire to explicitly prevent renegotiation in order to be sure that it is not used.  Therefore, is it possible, from the client side, to explicitly disable renegotiation with the server?

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.