--- old/src/share/classes/sun/security/ssl/Handshaker.java Wed May 29 08:35:55 2013 +++ new/src/share/classes/sun/security/ssl/Handshaker.java Wed May 29 08:35:53 2013 @@ -186,6 +186,15 @@ static final boolean allowLegacyHelloMessages = Debug.getBooleanProperty( "sun.security.ssl.allowLegacyHelloMessages", true); + // To prevent the TLS renegotiation issues, by setting system property + // "jsse.rejectClientInitializedRenego" to true, applications in server + // side can disable all client initiated SSL renegotiations regardless + // of the support of TLS protocols. + // + // By default, allow client initiated renegotiations. + static final boolean rejectClientInitializedRenego = + Debug.getBooleanProperty("jsse.rejectClientInitializedRenego", false); + // need to dispose the object when it is invalidated boolean invalidated;