Commit fa1ae0ab authored by Cristian Rodríguez's avatar Cristian Rodríguez Committed by Daniel Stenberg
Browse files

OpenSSL: Disable SSL/TLS compression 

It either causes increased memory usage or exposes users
to the "CRIME attack" (CVE-2012-4929)
parent 38ed72cd

lib/ssluse.c

+4 −0
Original line number Diff line number Diff line
@@ -1501,6 +1501,10 @@ ossl_connect_step1(struct connectdata *conn, 
  ctx_options |= SSL_OP_NO_TICKET;

#endif



#ifdef SSL_OP_NO_COMPRESSION

  ctx_options |= SSL_OP_NO_COMPRESSION;

#endif



#ifdef SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG

  /* mitigate CVE-2010-4180 */

  ctx_options &= ~SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG;