The Apache Haus Forum

Forum Topics => Apache 2.4 => Topic started by: ErrorReporter on April 26, 2021, 05:12:34 PM

Title: BUG: httpd-2.4.46-lre325-x64-vs16 | SSLCompression mode unsupported
Post by: ErrorReporter on April 26, 2021, 05:12:34 PM
Hello! I think I find a bug...
When I use httpd-2.4.46-lre325-x64-vs16 I got error "Setting Compression mode unsupported; not implemented by the SSL library"
With version httpd-2.4.46-o111k-x64-vc15/httpd-2.4.46-o111j-x64-vc15 no errors.
Title: Re: BUG: httpd-2.4.46-lre325-x64-vs16 | SSLCompression mode unsupported
Post by: Gregg on April 26, 2021, 10:12:55 PM
LibreSSL has removed that option since it was used in the CRIME (https://en.wikipedia.org/wiki/Security_of_Transport_Layer_Security#CRIME_and_BREACH_attacks) attack against TLS.
So "Setting Compression mode unsupported; not implemented by the SSL library" is not a bug.
Title: Re: BUG: httpd-2.4.46-lre325-x64-vs16 | SSLCompression mode unsupported
Post by: mario on April 27, 2021, 09:57:52 AM
Further to Greggs' reply, it is recommended to turn that of for OpenSSL in the apache settings

SSLCompression Off