Disabling client initiated renegotiation

Hi all,

My company relies on Apache for a number of customer facing sites. What's a
reliable way to disable client initiated renegotiation (both secure and
insecure renegotiation)?. I know one specific openssl library (l) disables
this, but then later ones enable "secure" renegotiation, which we need to
disable.

Ideally, I'd like a solution through an configuration parameter so that
future versions/upgrades do not re-enable renegotiation.

Thanks for your help.

Regards,
Chris.