[EMAIL PROTECTED] writes: >* Andrew Marlow ([EMAIL PROTECTED]) wrote: >> >> I have done some more investigation and have found that ssltest >> will compress when the TLS1 protocol is explicitly selected. > >I also took a look - it seems the problem is the v23 SSL/TLS method, >it's there to provide a handshake that can negotiate any protocol level, >but it also seems to preclude any negotiation of compression.
This is what we find :-( Running ssltest and explicitly selecting the protocol to be other than sslv2 seems to work. >As for why - this could be impossible to get around because of the >implicit constraints of SSLv2 compatibility, I'm not sure. Certainly if >you use the SSLv3 or TLSv1 client methods (and thus give up on talking >with any SSLv2 servers), then you'll probably be OK w.r.t. compression >unless you hit an SSLv2 server. I reckon you are right. >The crap way to address this (something >Lutz mentioned in another thread) is to try connecting with an >SSLv3/TLSv1 method first and if that fails on protocol troubles, retry >with SSLv2. Yes I know, bleurgh. > >Cheers, >Geoff Not ideal but it should work. That's great Geoff, thanks for looking into this, my app now works! Regards, Andrew M. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
