net-misc/openvpn/files/2.3.6-disable-compression.patch


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

https://community.openvpn.net/openvpn/changeset/5d5233778868ddd568140c394adfcfc8e3453245/

--- openvpn-2.3.6/src/openvpn/ssl_openssl.c.orig	2014-11-29 23:00:35.000000000 +0800
+++ openvpn-2.3.6/src/openvpn/ssl_openssl.c	2015-01-12 21:14:30.186993686 +0800
@@ -238,6 +238,13 @@
     if (tls_ver_min > TLS_VER_1_2 || tls_ver_max < TLS_VER_1_2)
       sslopt |= SSL_OP_NO_TLSv1_2;
 #endif
+
+#ifdef SSL_OP_NO_COMPRESSION
+    msg (M_WARN, "[Workaround] disable SSL compression");
+    sslopt |= SSL_OP_NO_COMPRESSION;
+#endif
+
+
     SSL_CTX_set_options (ctx->ctx, sslopt);
   }