diff options
| author | Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com> | 2012-09-15 01:13:52 +0900 |
|---|---|---|
| committer | Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com> | 2012-09-15 01:13:52 +0900 |
| commit | 393d0d9fbc64ec3345fddae12f2c295473dba78a (patch) | |
| tree | 191a097b5dcd12b53fefed679e218fe9b7552604 /src/LibsslTLSContext.cc | |
| parent | d0703a2f26822e8edac0e95a8a3093bea4ee3213 (diff) | |
Disable SSL/TLS compression with OpenSSL
Diffstat (limited to 'src/LibsslTLSContext.cc')
| -rw-r--r-- | src/LibsslTLSContext.cc | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/LibsslTLSContext.cc b/src/LibsslTLSContext.cc index c370d49c..8feaf075 100644 --- a/src/LibsslTLSContext.cc +++ b/src/LibsslTLSContext.cc @@ -56,7 +56,8 @@ TLSContext::TLSContext() ERR_error_string(ERR_get_error(), 0))); } /* Disable SSLv2 and enable all workarounds for buggy servers */ - SSL_CTX_set_options(sslCtx_, SSL_OP_ALL|SSL_OP_NO_SSLv2); + SSL_CTX_set_options(sslCtx_, SSL_OP_ALL|SSL_OP_NO_SSLv2| + SSL_OP_NO_COMPRESSION); SSL_CTX_set_mode(sslCtx_, SSL_MODE_AUTO_RETRY); #ifdef SSL_MODE_RELEASE_BUFFERS /* keep memory usage low */ |