1 Answer. It occurs after either side has expired the session and continues sending data. It means either that the session has simply expired due to timeout, or that a peer wants to change the cipher suite, or wants to request a peer certificate and hasn't already done so.

What is renegotiation in SSL?

A number of Internet connections require SSL renegotiation, a Secure Sockets Layer/Transport Layer Security process that allows the changing of the details of a handshake after a connection is made with the server.

What is a SSL vulnerability?

Heartbleed bug is a vulnerability in the OpenSSL, a popular open source cryptographic library that helps in the implementation of SSL and TLS protocols. This bug allows attackers to steal private keys attached to SSL certificates, usernames, passwords and other sensitive data without leaving a trace.