disable SSL compression

To avoid CRIME attacks:

http://en.wikipedia.org/wiki/CRIME_%28security_exploit%29

http://en.wikipedia.org/wiki/CRIME_%28security_exploit%29http://en.wikipedia.org/wiki/CRIME_%28security_exploit%29# with '#' will be ignored, and an empty message aborts the commit.

PVE/HTTPServer.pm

@@ -13,6 +13,7 @@ use Digest::MD5;
 use AnyEvent::Util qw(guard fh_nonblocking WSAEWOULDBLOCK WSAEINPROGRESS);
 use AnyEvent::Socket;
 use AnyEvent::Handle;
+use Net::SSLeay;
 use AnyEvent::TLS;
 use AnyEvent::IO;
 use AnyEvent::HTTP;
@@ -1304,6 +1305,7 @@ sub new {
 
     if ($self->{ssl}) {
 	$self->{tls_ctx} = AnyEvent::TLS->new(%{$self->{ssl}});
+	Net::SSLeay::CTX_set_options($self->{tls_ctx}->{ctx}, &Net::SSLeay::OP_NO_COMPRESSION);
     }
 
     if ($self->{spiceproxy}) {