[Boost-bugs] [Boost C++ Libraries] #9175: Asio's SSL/TLS base_context does not provide option to disable compression

Subject: [Boost-bugs] [Boost C++ Libraries] #9175: Asio's SSL/TLS base_context does not provide option to disable compression
From: Boost C++ Libraries (noreply_at_[hidden])
Date: 2013-09-29 07:43:34

#9175: Asio's SSL/TLS base_context does not provide option to disable compression
------------------------------+----------------------------
 Reporter:  noloader@…        |      Owner:  chris_kohlhoff
     Type:  Bugs              |     Status:  new
Milestone:  To Be Determined  |  Component:  asio
  Version:  Boost 1.54.0      |   Severity:  Problem
 Keywords:                    |
------------------------------+----------------------------
 From http://www.boost.org/doc/libs/1_47_0/boost/asio/ssl/context_base.hpp:


 {{{
   BOOST_STATIC_CONSTANT(int, default_workarounds = SSL_OP_ALL);
   BOOST_STATIC_CONSTANT(int, single_dh_use = SSL_OP_SINGLE_DH_USE);
   BOOST_STATIC_CONSTANT(int, no_sslv2 = SSL_OP_NO_SSLv2);
   BOOST_STATIC_CONSTANT(int, no_sslv3 = SSL_OP_NO_SSLv3);
   BOOST_STATIC_CONSTANT(int, no_tlsv1 = SSL_OP_NO_TLSv1);
 }}}

 The list is missing SSL_OP_NO_COMPRESSION. Compression has been used in at
 least two attacks recently.

-- 
Ticket URL: <https://svn.boost.org/trac/boost/ticket/9175>
Boost C++ Libraries <http://www.boost.org/>
Boost provides free peer-reviewed portable C++ source libraries.