<HTML><HEAD><META content="text/html; charset=UTF-8" http-equiv="Content-Type"></HEAD><BODY>It's out. Release announcement is not made yet because of laziness, but will be out eventually. :-)<BR>
<BR>
sonicool wrote:<BR>
> Hi&nbsp;Trustin,I wanted to ask when this version 3.2.6 will be published? Because I have found release notes about it on the web, but still not .jar :).&nbsp;Thanks"Trustin Lee [via Netty Forums and Mailing Lists]"&lt;ml-node+s685743n6876607h98@n2.nabble.com&gt; pisze:<BR>
> Dayne,Thank you very much for the detailed explanation.&nbsp;I've just re-enabled TLS renegotiation in Netty.&nbsp;You will see this change in 3.2.6.Cheers--&nbsp;Trustin Lee<BR>
><BR>
> On Sunday, September 25, 2011 at 7:45 PM, DLucas wrote:<BR>
><BR>
> Hi Trustin,Oracle has released a fix to TLS renegotiation flaws as per RFC 5746: http://www.oracle.com/technetwork/java/javase/documentation/tlsreadme2-176330.htmlhttp://www.oracle.com/technetwork/java/javase/documentation/tlsreadme2-176330.html According to that document, safe renegotiation is on by default: "Use of theproper RFC 5746 messages is optional, however legacy (original SSL/TLSspecifications) renegotiations are disabled if the proper messages are notused. Initial legacy connections are still allowed, but legacyrenegotiations are disabled. This is the best mix of security andinteroperability, and is the default setting."If this is the case then enabling re-negotiation on a JVM that is Java6Update 22 or higher will not be a security issue anymore.Best regards,Dayne--View this message in context: http://netty-forums-and-mailing-lists.6857
43.n2.nabble.com/Turning-on-TLS-renegotiation-tp6778465p6828889.htmlSent from the Netty User Group mailing lis!<BR>
> t archive at Nabble.com._______________________________________________netty-users mailing list[hidden email]https://lists.jboss.org/mailman/listinfo/netty-users<BR>
><BR>
><BR>
><BR>
><BR>
><BR>
><BR>
><BR>
><BR>
> _______________________________________________<BR>
> netty-users mailing list<BR>
> [hidden email]<BR>
> https://lists.jboss.org/mailman/listinfo/netty-users<BR>
> what we call human nature in actuality is human habit<BR>
> http://gleamynode.net/<BR>
> <BR>
> If you reply to this email, your message will be added to the discussion below:<BR>
> http://netty-forums-and-mailing-lists.685743.n2.nabble.com/Turning-on-TLS-renegotiation-tp6778465p6876607.html<BR>
> <BR>
> <BR>
> <BR>
> To unsubscribe from Turning on TLS renegotiation, click here.<BR>
> <BR>
><BR>
><BR>
> ----------------------------------------------------------------------<BR>
> Nudzisz sie w pracy?<BR>
> Zagraj>>> http://linkint.pl/f2a65<BR>
><BR>
><BR>
> --<BR>
> View this message in context: http://netty-forums-and-mailing-lists.685743.n2.nabble.com/Turning-on-TLS-renegotiation-tp6778465p6904962.html<BR>
> Sent from the Netty User Group mailing list archive at Nabble.com.<BR>
><BR>
> _______________________________________________<BR>
> netty-users mailing list<BR>
> netty-users@lists.jboss.org<BR>
> https://lists.jboss.org/mailman/listinfo/netty-users</BODY></HTML>