Description

Triggers a TLS handshake renegotiation on the HTTPS connection that carries the current request. When request_client_cert is non-zero the server asks the client to present a certificate during the renegotiation, enabling the typical "do a mutual-TLS step partway through the conversation" pattern used by some SSO and PKI workflows.

Returns 1 if the renegotiation completed successfully (and the client certificate — when requested — was presented and accepted) and 0 otherwise. Raises an error when called outside an HTTPS request context.

Modern TLS deployments often disable client-initiated renegotiation for security reasons; this BIF performs server-initiated renegotiation which remains permitted under TLS 1.2. Under TLS 1.3 it falls back to the post-handshake authentication mechanism when available.