Well, I'm sorry for the problems, but if anyone can suggest something
which fixes this and also does an equivalent job at fixing problems seen
against other servers, I'm all ears. I was sucked into this whole thing
as a result of dealing with a request for performance improvements which
required upgrading to OpenSSL 1.0.1 (although there were plenty of
people clamouring for TLS 1.2 support as well), and am now heartily
wishing I'd never touched it as I'm stuck backporting an increasingly
wobbly stack of upstream patches! This really needs upstream work to
sort out ...
Well, I'm sorry for the problems, but if anyone can suggest something
which fixes this and also does an equivalent job at fixing problems seen
against other servers, I'm all ears. I was sucked into this whole thing
as a result of dealing with a request for performance improvements which
required upgrading to OpenSSL 1.0.1 (although there were plenty of
people clamouring for TLS 1.2 support as well), and am now heartily
wishing I'd never touched it as I'm stuck backporting an increasingly
wobbly stack of upstream patches! This really needs upstream work to
sort out ...