On Thu, Mar 03, 2016 at 02:00:31PM -0500, Jeffrey Walton wrote:
> > Note that "no-comp" is a consequence of "zlib" and "zlib-dynamic"
> > not being enabled. You have to choose to turn compression on IIRC
> > by enabling one of these.
>
> no-comp disables compression independent of zlib. OPENSSL_NO_COMP will
> be defined in the OpenSSL headers.
Yes, it overrides these, and I was forgetting that there can perhaps
be additional compression methods in play. So "no-comp" is reasonably
sensible, unless you're supportting some application where TLS
compression is both safe and required.
--
Viktor.
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
