From 836a2b1131dd007edad24d921dbdf42a8ac10e32 Mon Sep 17 00:00:00 2001 From: Lars Strojny Date: Thu, 31 Jan 2013 00:32:44 +0100 Subject: [PATCH] NEWS entry new OpenSSL option [doc] --- NEWS | 4 ++++ ext/openssl/xp_ssl.c | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/NEWS b/NEWS index d3a450e164..2fc746e3fe 100644 --- a/NEWS +++ b/NEWS @@ -47,6 +47,10 @@ PHP NEWS . Fixed bug #63916 (PDO::PARAM_INT casts to 32bit int internally even on 64bit builds in pdo_sqlite). (srgoogleguy, Lars) +- OpenSSL: + . New SSL stream context option to prevent CRIME attack vector. (Daniel Lowrey, + Lars) + 17 Jan 2012, PHP 5.4.11 - Core: diff --git a/ext/openssl/xp_ssl.c b/ext/openssl/xp_ssl.c index 8b0fe69e42..0e1523853a 100644 --- a/ext/openssl/xp_ssl.c +++ b/ext/openssl/xp_ssl.c @@ -398,7 +398,7 @@ static inline int php_openssl_setup_crypto(php_stream *stream, #if OPENSSL_VERSION_NUMBER >= 0x10000000L { zval **val; - + if (stream->context && SUCCESS == php_stream_context_get_option( stream->context, "ssl", "disable_compression", &val) && zval_is_true(*val)) { -- 2.40.0