From f927f38f1e6cc5e4b9981ebc83135e86737b5432 Mon Sep 17 00:00:00 2001
From: Himanshu Gupta <higupt@microsoft.com>
Date: Mon, 31 Aug 2020 19:35:35 +0000
Subject: [PATCH] wolfssl: add SECURE_RENEGOTIATION support

Closes #6411
---
 lib/vtls/wolfssl.c | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/lib/vtls/wolfssl.c b/lib/vtls/wolfssl.c
index 3ac1a8a77..affbba33a 100644
--- a/lib/vtls/wolfssl.c
+++ b/lib/vtls/wolfssl.c
@@ -505,6 +505,13 @@ wolfssl_connect_step1(struct connectdata *conn,
   }
 #endif /* OPENSSL_EXTRA */
 
+#ifdef HAVE_SECURE_RENEGOTIATION
+  if(wolfSSL_UseSecureRenegotiation(backend->handle) != SSL_SUCCESS) {
+    failf(data, "SSL: failed setting secure renegotiation");
+    return CURLE_SSL_CONNECT_ERROR;
+  }
+#endif /* HAVE_SECURE_RENEGOTIATION */
+
   /* Check if there's a cached ID we can/should use here! */
   if(SSL_SET_OPTION(primary.sessionid)) {
     void *ssl_sessionid = NULL;