Compression check relies on OpenSSL

[rbsec]

The check for TLS compression relies on OpenSSL library supporting it - so will not be available if building dynamically. This can be worked around with a static build - but would be nice to do ourselves.

[3eka]

Is there option to include existing libssl.a libcrypto.a to static build, instead of building OpenSSL again (let us say I have already self-built OpenSSL 1.1.1h with both shared and static libraries)?

If not, can you consider it? Thanks.

P.S: Tool is great, nice job

[rbsec]

I can't see any reason that you wouldn't be able to to statically link against a pre-compiled version, but it's not something that's in the Makefile as an option, so you'd have to patch that. Although maybe just symlinking the ./openssl directory to your version would be a quick workaround?

At some point the TLS compression check will be done manually (rather than via OpenSSL) - at which point it might even be possible to get rid of the static build entirely.