rapid7/metasploit-framework — pull request #2666 by jvennix-r7 (2013-11-20 21:32:19+00:00)
Title: Disable SSL/TLS-level compression in the SSL Tcp Server

Most ssl libs disable this by default, openssl seems to be the lone holdout here. Most browsers have disabled this as well, so this story disables compression by default and adds a SSLCompression datastore option to Http::Server.

Verification

- [ ] Run any web server module, setting SSL=true and SSLCompression=true.
- [ ] Ensure that the server supports SSL-level compression ([here is small jar that performs this test](http://www.bolet.org/TestSSLServer/)).
- [ ] Rerun the module with SSL=true and SSLCompression=false
- [ ] Ensure that the server has disabled SSL-level compression