SSL-only Juniper VPN that supports SSL DEFLATE compression?

David Woodhouse dwmw2 at infradead.org
Fri Jan 13 06:15:34 PST 2017


On Wed, 2017-01-11 at 20:01 -0800, Daniel Lenski wrote:
> 
> Does anyone else use a Juniper VPN that supports *SSL* DEFLATE
> compression? Does it return the same config value? Any hint that I'm
> on the right track would be appreciated.

If it really means SSL deflate, then that's negotiated as part of the
SSL handshake. Can you capture and show the SSL session establishment?

Try adding COMP-ALL to the GnuTLS priority string for OpenConnect...
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4938 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20170113/61155fb0/attachment.bin>


More information about the openconnect-devel mailing list