Adayadil Thomas wrote:

> Greetings.
>
> I have an SSL session in which the client and server has negotiated for
> cipherSuite SSL_RSA_WITH_RC4_128_MD5
> compressionMethod zlib-compression
>
> Now, is the zlib-compression applied before encryption or after ?
>
> data -> zlib-compression -> encryption ======> decrypt ->
> zlib->inflate-> data
>
> or
>
> data -> encryption -> zlib-compression ======> zlib->inflate-> decrypt
> -> data
>
>
> Thanks
> Ashley Thomas
> __________________________________________________ ____________________
> OpenSSL Project http://www.openssl.org
> Development Mailing List openssl-dev@openssl.org
> Automated List Manager majordomo@openssl.org




Ashly look at RFC 2246 , The TLS Record Protocol part

certainly u see this :
" optionally compresses the data, applies a MAC, encrypts, and
transmits the result "

compression is an optional layer (i think no compression used in
well-known ssl implementation)
and ur question answer : zlib-compression -> encryption

regards

______________________
Shahin Khorasani
PKI Dept.
Sharif SecureWare Co.
www.parssign.com
______________________


__________________________________________________ ____________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager majordomo@openssl.org