I am almost sure its after...
First you encrypt and then compress.

-----Original Message-----
From: owner-openssl-dev@openssl.org
[mailtowner-openssl-dev@openssl.org] On Behalf Of Adayadil Thomas
Sent: Tuesday, September 26, 2006 7:46 PM
To: openssl-dev@openssl.org
Subject: SSL / zlib compression

Greetings.

I have an SSL session in which the client and server has negotiated for
cipherSuite SSL_RSA_WITH_RC4_128_MD5
compressionMethod zlib-compression

Now, is the zlib-compression applied before encryption or after ?

data -> zlib-compression -> encryption ======> decrypt ->
zlib->inflate-> data

or

data -> encryption -> zlib-compression ======> zlib->inflate-> decrypt
-> data


Thanks
Ashley Thomas
__________________________________________________ ____________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager majordomo@openssl.org

__________________________________________________ ____________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager majordomo@openssl.org