[openssl-users] recommended build options
openssl-users at dukhovni.org
Thu Mar 3 19:08:52 UTC 2016
On Thu, Mar 03, 2016 at 02:00:31PM -0500, Jeffrey Walton wrote:
> > Note that "no-comp" is a consequence of "zlib" and "zlib-dynamic"
> > not being enabled. You have to choose to turn compression on IIRC
> > by enabling one of these.
> no-comp disables compression independent of zlib. OPENSSL_NO_COMP will
> be defined in the OpenSSL headers.
Yes, it overrides these, and I was forgetting that there can perhaps
be additional compression methods in play. So "no-comp" is reasonably
sensible, unless you're supportting some application where TLS
compression is both safe and required.
More information about the openssl-users