We have successful deployed a FIPS build of OpenSSL 0.9.7m w/zlib compression on Windows clients and linux servers in stunnel. Now we want to upgrade to a FIPS build of 0.9.8k. We are running into a couple of issues. Here are my two questions:
1. Should a 0.9.7m build work with a 0.9.8k build? Mixing client and server versions seems to cause compression issues. We get errors like: SSL3_GET_RECORD:bad decompression. When I turn off zlib compression the two different versions work fine. 2. Is the RLE compression truly implemented? The c_rle.c file does not seem to have any RLE compression routines in it. Thanks. -Joe Joe A. Kemp CapWIN Senior Systems Architect (O) 301-614-3727 (C) 301-502-1281
