Disabling client initiated renegotiation

[Chris Hill <chris.hillsec@xxxxxxxxx>]

Hi all,
 
My company relies on Apache for a number of customer facing sites. What's a reliable way to disable client initiated renegotiation (both secure and insecure renegotiation)?. I know one specific openssl library (l) disables this, but then later ones enable "secure" renegotiation, which we need to disable.
 
Ideally, I'd like a solution through an configuration parameter so that future versions/upgrades do not re-enable renegotiation.
 
Thanks for your help.
 
Regards,
Chris.