[Boost-bugs] [Boost C++ Libraries] #9175: Asio's SSL/TLS base_context does not provide option to disable compression

Subject: [Boost-bugs] [Boost C++ Libraries] #9175: Asio's SSL/TLS base_context does not provide option to disable compression
From: Boost C++ Libraries (noreply_at_[hidden])
Date: 2013-09-29 07:43:34


#9175: Asio's SSL/TLS base_context does not provide option to disable compression
------------------------------+----------------------------
 Reporter: noloader@… | Owner: chris_kohlhoff
     Type: Bugs | Status: new
Milestone: To Be Determined | Component: asio
  Version: Boost 1.54.0 | Severity: Problem
 Keywords: |
------------------------------+----------------------------
 From http://www.boost.org/doc/libs/1_47_0/boost/asio/ssl/context_base.hpp:

 {{{
   BOOST_STATIC_CONSTANT(int, default_workarounds = SSL_OP_ALL);
   BOOST_STATIC_CONSTANT(int, single_dh_use = SSL_OP_SINGLE_DH_USE);
   BOOST_STATIC_CONSTANT(int, no_sslv2 = SSL_OP_NO_SSLv2);
   BOOST_STATIC_CONSTANT(int, no_sslv3 = SSL_OP_NO_SSLv3);
   BOOST_STATIC_CONSTANT(int, no_tlsv1 = SSL_OP_NO_TLSv1);
 }}}

 The list is missing SSL_OP_NO_COMPRESSION. Compression has been used in at
 least two attacks recently.

-- 
Ticket URL: <https://svn.boost.org/trac/boost/ticket/9175>
Boost C++ Libraries <http://www.boost.org/>
Boost provides free peer-reviewed portable C++ source libraries.

This archive was generated by hypermail 2.1.7 : 2017-02-16 18:50:14 UTC