Merge pull request #131 from ngrok/bob/renegotiate

Adds TLS Renegotiation to the backend
ngrok · Oct 20, 2023 · c266df4 · c266df4
2 parents f7291f3 + c315579
commit c266df4
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,7 @@
+## 1.5.1
+
+- Adds TLS Renegotiation to the backend `tls.Config`.
+
 ## 1.5.0
 
 - Added new forwarding API. See `[Session].ListenAndForward` and `[Session].ListenAndServeHTTP`. 

diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-1.5.0
+1.5.1
diff --git a/forward.go b/forward.go
@@ -130,7 +130,10 @@ func openBackend(ctx context.Context, logger log15.Logger, tun Tunnel, tunnelCon
 	// Create TLS config if necessary
 	var tlsConfig *tls.Config
 	if usesTLS(url.Scheme) {
-		tlsConfig = &tls.Config{ServerName: url.Hostname()}
+		tlsConfig = &tls.Config{
+			ServerName:    url.Hostname(),
+			Renegotiation: tls.RenegotiateOnceAsClient,
+		}
 	}
 
 	dialer := &net.Dialer{}