- Sending of handshake_failures during renegotiation added
 - Handle two legacy modes differently: SSL_LEGACY_BREAK_HANDSHAKE and SSL_LEGACY_NO_RENEGOTIATION

diff --git a/programs/ssl/ssl_client2.c b/programs/ssl/ssl_client2.c
index df5274a..0c962f2 100644
--- a/programs/ssl/ssl_client2.c
+++ b/programs/ssl/ssl_client2.c
@@ -51,7 +51,7 @@
 #define DFL_KEY_FILE            ""
 #define DFL_FORCE_CIPHER        0
 #define DFL_RENEGOTIATION       SSL_RENEGOTIATION_ENABLED
-#define DFL_ALLOW_LEGACY        SSL_NO_LEGACY_RENEGOTIATION
+#define DFL_ALLOW_LEGACY        SSL_LEGACY_NO_RENEGOTIATION
 
 #define GET_REQUEST "GET %s HTTP/1.0\r\n\r\n"