0
0
mirror of https://github.com/nodejs/node.git synced 2024-12-01 16:10:02 +01:00
nodejs/deps/openssl
Ben Noordhuis e6b35f4a86 crypto: disable ssl compression at build time
SSL compression was first disabled at runtime in March 2011 in commit
e83c6959 ("Disable compression with OpenSSL.") for performance reasons
and was later shown to be vulnerable to information leakage (CRIME.)
Let's stop compiling it in altogether.

This commit removes a broken CHECK from src/node_crypto.cc; broken
because sk_SSL_COMP_num() returns -1 for a NULL stack, not 0.  As a
result, node.js would abort when linked to an OPENSSL_NO_COMP build
of openssl.

PR-URL: https://github.com/nodejs/node/pull/6582
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Fedor Indutny <fedor.indutny@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
2016-05-05 00:26:26 +02:00
..
asm deps: update openssl asm and asm_obsolete files 2016-05-04 12:09:03 +09:00
asm_obsolete deps: update openssl asm and asm_obsolete files 2016-05-04 12:09:03 +09:00
config build: enable compilation for linuxOne 2016-03-29 18:52:48 -04:00
doc deps: upgrade openssl sources to 1.0.2f 2016-01-31 15:07:12 +09:00
fips crypto: support FIPS mode of OpenSSL 2015-06-11 01:49:20 +02:00
openssl deps: add -no_rand_screen to openssl s_client 2016-05-04 12:09:03 +09:00
buildinf.h import openssl from chrome 2011-08-22 11:30:45 -07:00
masm_compile.gypi deps: refactor openssl.gyp 2015-04-04 12:37:26 +09:00
openssl-cli.gypi deps, build: add support older assembler 2015-04-15 00:38:57 +09:00
openssl.gyp build: correctly detect clang version 2016-03-04 18:57:23 +01:00
openssl.gypi crypto: disable ssl compression at build time 2016-05-05 00:26:26 +02:00