delta/curl.git, branch bagder/http3-ngtcp2-cacert github.com: bagder/curl.git ngtcp2: verify the server certificate for the gnutls case 2021-12-25T20:53:51+00:00 Daniel Stenberg daniel@haxx.se 2021-12-25T15:14:53+00:00 08bcfd8b2d0b582b65b2669615139fe17fac05d4 






ngtcp2: verify the server cert on connect (quictls)
2021-12-25T20:53:41+00:00

Daniel Stenberg
daniel@haxx.se

2021-12-23T09:24:31+00:00

7dae4f2b5a2c5de0ef39642a046bee80a1b9e8f1

Make ngtcp2+quictls correctly acknowledge `CURLOPT_SSL_VERIFYPEER` and
`CURLOPT_SSL_VERIFYHOST`.

The name check now uses a function from lib/vtls/openssl.c which will
need attention for when TLS is not done by OpenSSL or is disabled while
QUIC is enabled.

Possibly the servercert() function in openssl.c should be adjusted to be
able to use for both regular TLS and QUIC.

Ref: #8173





Make ngtcp2+quictls correctly acknowledge `CURLOPT_SSL_VERIFYPEER` and
`CURLOPT_SSL_VERIFYHOST`.

The name check now uses a function from lib/vtls/openssl.c which will
need attention for when TLS is not done by OpenSSL or is disabled while
QUIC is enabled.

Possibly the servercert() function in openssl.c should be adjusted to be
able to use for both regular TLS and QUIC.

Ref: #8173







docs/HTTP3: describe how to setup a h3 reverse-proxy for testing
2021-12-23T16:28:13+00:00

Daniel Stenberg
daniel@haxx.se

2021-12-23T10:20:34+00:00

d4492b6d125d31ef5c74e4deb6786896606b70cc

Assisted-by: Matt Holt

Closes #8177





Assisted-by: Matt Holt

Closes #8177







libcurl-multi.3: "SOCKS proxy handshakes" are not blocking
2021-12-23T09:19:06+00:00

Daniel Stenberg
daniel@haxx.se

2021-12-23T09:18:04+00:00

193053e2edf302d176e4c7592e9d6aac60442c5c

Since 4a4b63daaa0





Since 4a4b63daaa0







tests: Add test for CURLOPT_HTTP200ALIASES
2021-12-21T07:45:06+00:00

Vladimir Panteleev
git@cy.md

2021-12-20T17:55:33+00:00

2c1dbc1af0a774ae5dce08150131a01e862c13b5












http: Fix CURLOPT_HTTP200ALIASES
2021-12-21T07:44:55+00:00

Vladimir Panteleev
git@cy.md

2021-12-20T16:49:59+00:00

1b9f1f60559979a644cc9cf26f851c4416f20248

The httpcode < 100 check was also triggered when none of the fields were
parsed, thus making the if(!nc) block unreachable.

Closes #8171





The httpcode < 100 check was also triggered when none of the fields were
parsed, thus making the if(!nc) block unreachable.

Closes #8171







RELEASE-NOTES: synced
2021-12-20T15:19:41+00:00

Daniel Stenberg
daniel@haxx.se

2021-12-20T15:19:41+00:00

ef4dc1b5be8c092550617ea0f1b9844a9cdc6ae8












language: "email"
2021-12-20T12:49:37+00:00

Daniel Stenberg
daniel@haxx.se

2021-12-20T12:49:03+00:00

e7e5cc4c63ad26ad458d8e130e2acfe25902b937

Missed three occurrences.

Follow-up to 7a92f86





Missed three occurrences.

Follow-up to 7a92f86







nss:set_cipher don't clobber the cipher list
2021-12-20T09:51:44+00:00

Daniel Stenberg
daniel@haxx.se

2021-12-17T22:40:11+00:00

556a42edfb9b3fcd744f2e032e59498bc8af4841

The string is set by the user and needs to remain intact for proper
connection reuse etc.

Reported-by: Eric Musser
Fixes #8160
Closes #8161





The string is set by the user and needs to remain intact for proper
connection reuse etc.

Reported-by: Eric Musser
Fixes #8160
Closes #8161







misc: s/e-mail/email
2021-12-19T22:48:13+00:00

Daniel Stenberg
daniel@haxx.se

2021-12-17T10:02:18+00:00

7a92f865b43aac942ae5755a7a3a06775751fdea

Consistency is king. Following the lead in everything curl.

Closes #8159





Consistency is king. Following the lead in everything curl.

Closes #8159