From b98b093d73e935f4ab4d30423b652ed38a4c6d68 Mon Sep 17 00:00:00 2001 From: Daniel Lowrey Date: Tue, 11 Feb 2014 06:27:32 -0700 Subject: [PATCH] Disable TLS compression by default in both clients and servers --- ext/openssl/xp_ssl.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/ext/openssl/xp_ssl.c b/ext/openssl/xp_ssl.c index 4dda5a4c72..99995b6814 100644 --- a/ext/openssl/xp_ssl.c +++ b/ext/openssl/xp_ssl.c @@ -418,9 +418,9 @@ static inline int php_openssl_setup_crypto(php_stream *stream, { zval **val; - if (stream->context && SUCCESS == php_stream_context_get_option( - stream->context, "ssl", "disable_compression", &val) && - zend_is_true(*val) + if (stream->context && (FAILURE == php_stream_context_get_option( + stream->context, "ssl", "disable_compression", &val) || + zend_is_true(*val)) ) { SSL_CTX_set_options(sslsock->ctx, SSL_OP_NO_COMPRESSION); } -- 2.50.1