[openssl-users] recommended build options

[Viktor Dukhovni]

On Thu, Mar 03, 2016 at 02:00:31PM -0500, Jeffrey Walton wrote:

> > Note that "no-comp" is a consequence of "zlib" and "zlib-dynamic"
> > not being enabled.  You have to choose to turn compression on IIRC
> > by enabling one of these.
> 
> no-comp disables compression independent of zlib. OPENSSL_NO_COMP will
> be defined in the OpenSSL headers.

Yes, it overrides these, and I was forgetting that there can perhaps
be additional compression methods in play.  So "no-comp" is reasonably
sensible, unless you're supportting some application where TLS
compression is both safe and required.

-- 
	Viktor.