Disable TLS compression since the EAP-TTLS/PEAP/FAST payload processing

does not support it currently and EAP-TLS RFC does not allow compression to
be negotiated for TLS.

diff --git a/src/crypto/tls_openssl.c b/src/crypto/tls_openssl.c
index 22ec04c..cd410a4 100644 (file)
--- a/src/crypto/tls_openssl.c
+++ b/src/crypto/tls_openssl.c
@@ -892,7 +892,7 @@ struct tls_connection * tls_connection_init(void *ssl_ctx)
        SSL_set_app_data(conn->ssl, conn);
        SSL_set_options(conn->ssl,
                        SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 |
-                       SSL_OP_SINGLE_DH_USE);
+                       SSL_OP_SINGLE_DH_USE | SSL_OP_NO_COMPRESSION);
 
        conn->ssl_in = BIO_new(BIO_s_mem());
        if (!conn->ssl_in) {