INN commit: trunk/nnrpd (tls.c)

INN Commit rra at isc.org
Tue Nov 3 19:55:06 UTC 2015


    Date: Tuesday, November 3, 2015 @ 11:55:06
  Author: iulius
Revision: 9959

Support older versions of OpenSSL (up to v0.9.8) to disable TLS compression

The tlscompression parameter in inn.conf now works for OpenSSL versions
superior to v0.9.8.

Modified:
  trunk/nnrpd/tls.c

-------+
 tls.c |    3 +++
 1 file changed, 3 insertions(+)

Modified: tls.c
===================================================================
--- tls.c	2015-10-26 20:26:04 UTC (rev 9958)
+++ tls.c	2015-11-03 19:55:06 UTC (rev 9959)
@@ -627,6 +627,9 @@
     if (!tls_compression) {
 #ifdef SSL_OP_NO_COMPRESSION
         SSL_CTX_set_options(CTX, SSL_OP_NO_COMPRESSION);
+#elif OPENSSL_VERSION_NUMBER >= 0x00090800fL
+        /* Workaround for OpenSSL 0.9.8. */
+        sk_SSL_COMP_zero(SSL_COMP_get_compression_methods());
 #endif
     }
 



More information about the inn-committers mailing list