Emilia Kasper dc5744cb78 RT3234: disable compression ...

CRIME protection: disable compression by default, even if OpenSSL is
compiled with zlib enabled. Applications can still enable compression by
calling SSL_CTX_clear_options(ctx, SSL_OP_NO_COMPRESSION), or by using
the SSL_CONF library to configure compression. SSL_CONF continues to
work as before:

SSL_CONF_cmd(ctx, "Options", "Compression") enables compression.

SSL_CONF_cmd(ctx, "Options", "-Compression") disables compression (now
no-op by default).

The command-line switch has changed from -no_comp to -comp.

Reviewed-by: Rich Salz <rsalz@openssl.org>

2016-02-03 18:08:16 +01:00

..

record

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

statem

constify PACKET

2016-02-01 16:21:57 +01:00

bio_ssl.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

build.info

unified build scheme: add build.info files

2016-02-01 12:46:58 +01:00

d1_lib.c

constify PACKET

2016-02-01 16:21:57 +01:00

d1_msg.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

d1_srtp.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

install-ssl.com

Updates following review comments

2015-05-16 09:20:52 +01:00

Makefile.in

Templatize util/domd

2016-01-29 16:56:07 -05:00

methods.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

packet_locl.h

constify PACKET

2016-02-01 16:21:57 +01:00

pqueue.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

s3_cbc.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

s3_enc.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

s3_lib.c

constify PACKET

2016-02-01 16:21:57 +01:00

s3_msg.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

ssl_algs.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

ssl_asn1.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

ssl_cert.c

make EVP_PKEY opaque

2016-01-20 03:24:59 +00:00

ssl_ciph.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

ssl_conf.c

RT3234: disable compression

2016-02-03 18:08:16 +01:00

ssl_err2.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

ssl_err.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

ssl_lib.c

RT3234: disable compression

2016-02-03 18:08:16 +01:00

ssl_locl.h

constify PACKET

2016-02-01 16:21:57 +01:00

ssl_mcnf.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

ssl_rsa.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

ssl_sess.c

constify PACKET

2016-02-01 16:21:57 +01:00

ssl_stat.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

ssl_txt.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

ssl_utst.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

ssl-lib.com

Move SSLv3_*method() functions

2015-05-16 09:20:58 +01:00

t1_enc.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

t1_ext.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

t1_lib.c

constify PACKET

2016-02-01 16:21:57 +01:00

t1_reneg.c

constify PACKET

2016-02-01 16:21:57 +01:00

t1_trce.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00

tls_srp.c

Remove /* foo.c */ comments

2016-01-26 16:40:43 -05:00