Disable all renegotiation in TLSv1.2 and earlier. Do not send HelloRequest messages, and ignore renegotiation requests via ClientHello.
ssl/OP_NO_RENEGOTIATION
OP_NO_RENEGOTIATION