delta/curl.git, branch bagder/mbedtls-ssl_read-zero github.com: bagder/curl.git mbedtls: treat zero return from mbedtls_ssl_read() as non-error 2018-08-20T21:57:12+00:00 Daniel Stenberg daniel@haxx.se 2018-08-20T21:57:12+00:00 acb2fd6756834a81679a9906eedb2b043ee087ed Patch-by: jshanab on github Fixes #2899 
Patch-by: jshanab on github
Fixes #2899
SSLCERTS: improve the openssl command line 2018-08-20T12:05:28+00:00 Daniel Stenberg daniel@haxx.se 2018-08-20T12:05:28+00:00 9dad3bd6652224aa9a1ce1994a082b000243e09c ... for extracting certs from a live HTTPS server to make a cacerts.pem from them. 
... for extracting certs from a live HTTPS server to make a cacerts.pem
from them.
docs/SECURITY-PROCESS: now we name the files after the CVE id 2018-08-20T09:49:58+00:00 Daniel Stenberg daniel@haxx.se 2018-08-20T09:49:58+00:00 a040ff88e4698bdee1eddc0cdb5a7fb65db49201 






RELEASE-NOTES: synced
2018-08-18T22:06:44+00:00

Daniel Stenberg
daniel@haxx.se

2018-08-18T22:06:44+00:00

4c20b20482112b8faf190efc9381dab1851bb30b












upload: change default UPLOAD_BUFSIZE to 64KB
2018-08-18T13:48:52+00:00

Daniel Stenberg
daniel@haxx.se

2018-08-17T09:36:12+00:00

8c80a9d1e26be192d30a075e2c7397f8f12498c6

To make uploads significantly faster in some circumstances.

Part 2 of #2888
Closes #2892





To make uploads significantly faster in some circumstances.

Part 2 of #2888
Closes #2892







upload: allocate upload buffer on-demand
2018-08-18T13:48:08+00:00

Daniel Stenberg
daniel@haxx.se

2018-08-16T22:49:37+00:00

e6e9b006f770ef104fbcdef32dd6e7f42eb114b7

Saves 16KB on the easy handle for operations that don't need that
buffer.

Part 1 of #2888





Saves 16KB on the easy handle for operations that don't need that
buffer.

Part 1 of #2888







vtls: reinstantiate engine on duplicated handles
2018-08-18T13:46:23+00:00

Laurent Bonnans
laurent.bonnans@here.com

2018-08-17T15:39:01+00:00

4939f3652473c1519d2b604068efb87ef7531874

Handles created with curl_easy_duphandle do not use the SSL engine set
up in the original handle. This fixes the issue by storing the engine
name in the internal url state and setting the engine from its name
inside curl_easy_duphandle.

Reported-by: Anton Gerasimov
Signed-of-by: Laurent Bonnans
Fixes #2829
Closes #2833





Handles created with curl_easy_duphandle do not use the SSL engine set
up in the original handle. This fixes the issue by storing the engine
name in the internal url state and setting the engine from its name
inside curl_easy_duphandle.

Reported-by: Anton Gerasimov
Signed-of-by: Laurent Bonnans
Fixes #2829
Closes #2833







http2: make sure to send after RST_STREAM
2018-08-17T21:16:55+00:00

Daniel Stenberg
daniel@haxx.se

2018-08-16T11:21:11+00:00

c7ea4ddd2e5db304bc3170eeb8d5aa91f1921013

If this is the last stream on this connection, the RST_STREAM might not
get pushed to the wire otherwise.

Fixes #2882
Closes #2887
Researched-by: Michael Kaufmann





If this is the last stream on this connection, the RST_STREAM might not
get pushed to the wire otherwise.

Fixes #2882
Closes #2887
Researched-by: Michael Kaufmann







test1268: check the stderr output as "text"
2018-08-16T21:06:04+00:00

Daniel Stenberg
daniel@haxx.se

2018-08-16T21:05:09+00:00

ba58ce669ca6609253055d081a00a4f709ce382e

Follow-up to 099f37e9c57

Pointed-out-by: Marcel Raad





Follow-up to 099f37e9c57

Pointed-out-by: Marcel Raad







urldata: remove unused pipe_broke struct field
2018-08-16T07:33:12+00:00

Daniel Stenberg
daniel@haxx.se

2018-08-12T17:36:56+00:00

09da53998e04f2a375c6cafee6a4768a997d64fa

This struct field is never set TRUE in any existing code path. This
change removes the field completely.

Closes #2871





This struct field is never set TRUE in any existing code path. This
change removes the field completely.

Closes #2871