<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/curl.git, branch bagder/test493-https</title>
<subtitle>github.com: bagder/curl.git
</subtitle>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/'/>
<entry>
<title>test 493: require https in curl to run</title>
<updated>2021-04-20T07:38:31+00:00</updated>
<author>
<name>Daniel Stenberg</name>
<email>daniel@haxx.se</email>
</author>
<published>2021-04-20T07:38:31+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=e2f8d4bf69deeac781a737f7ae09d3f23cd8e7f7'/>
<id>e2f8d4bf69deeac781a737f7ae09d3f23cd8e7f7</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>tool_operate: don't discard failed parallel transfer result</title>
<updated>2021-04-20T05:51:56+00:00</updated>
<author>
<name>Jay Satiro</name>
<email>raysatiro@yahoo.com</email>
</author>
<published>2021-04-20T05:51:56+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=711879ca7cbda86c391c2b4dfb4b39847f773dc5'/>
<id>711879ca7cbda86c391c2b4dfb4b39847f773dc5</id>
<content type='text'>
- Save a parallel transfer's result code only when it fails and the
  transfer is not being retried.

Prior to this change the result code was always set which meant that a
failed result could be erroneously discarded if a different transfer
later had a successful result (CURLE_OK).

Before:

&gt; curl --fail -Z https://httpbin.org/status/404 https://httpbin.org/delay/10
&gt; echo %ERRORLEVEL%
0

After:

&gt; curl --fail -Z https://httpbin.org/status/404 https://httpbin.org/delay/10
&gt; echo %ERRORLEVEL%
22

Closes #xxxx
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
- Save a parallel transfer's result code only when it fails and the
  transfer is not being retried.

Prior to this change the result code was always set which meant that a
failed result could be erroneously discarded if a different transfer
later had a successful result (CURLE_OK).

Before:

&gt; curl --fail -Z https://httpbin.org/status/404 https://httpbin.org/delay/10
&gt; echo %ERRORLEVEL%
0

After:

&gt; curl --fail -Z https://httpbin.org/status/404 https://httpbin.org/delay/10
&gt; echo %ERRORLEVEL%
22

Closes #xxxx
</pre>
</div>
</content>
</entry>
<entry>
<title>openssl: fix build error with OpenSSL &lt; 1.0.2</title>
<updated>2021-04-20T04:08:36+00:00</updated>
<author>
<name>Georeth Zhou</name>
<email>georeth2010@gmail.com</email>
</author>
<published>2021-04-20T03:11:56+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=6e3f2febcba4e744eb2f78db4905c76e73615c6c'/>
<id>6e3f2febcba4e744eb2f78db4905c76e73615c6c</id>
<content type='text'>
Closes https://github.com/curl/curl/pull/6920
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Closes https://github.com/curl/curl/pull/6920
</pre>
</div>
</content>
</entry>
<entry>
<title>README.md: delete Codacy UTM parameters &amp; follow permanent redirect [ci skip]</title>
<updated>2021-04-19T22:26:48+00:00</updated>
<author>
<name>Viktor Szakats</name>
<email>commit@vsz.me</email>
</author>
<published>2021-04-19T22:26:48+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=b97718ab191046ad02d552c8b879291561ec8fc4'/>
<id>b97718ab191046ad02d552c8b879291561ec8fc4</id>
<content type='text'>
UTM parameters leak referrer and various marketing/tracking information
even if these would normally be stripped by website or client policy.
This link also works fine without them. Also took the opportunity to
update the URL to the one pointed to by the previous one via permanent
redirect.

Reviewed-by: Daniel Stenberg
Closes #6919
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
UTM parameters leak referrer and various marketing/tracking information
even if these would normally be stripped by website or client policy.
This link also works fine without them. Also took the opportunity to
update the URL to the one pointed to by the previous one via permanent
redirect.

Reviewed-by: Daniel Stenberg
Closes #6919
</pre>
</div>
</content>
</entry>
<entry>
<title>urlapi: "normalize" numerical IPv4 host names</title>
<updated>2021-04-19T06:34:55+00:00</updated>
<author>
<name>Daniel Stenberg</name>
<email>daniel@haxx.se</email>
</author>
<published>2021-04-19T06:34:52+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=56a037cc0ad1b2a770d0c08d3d09dee1ce600f0f'/>
<id>56a037cc0ad1b2a770d0c08d3d09dee1ce600f0f</id>
<content type='text'>
When the host name in a URL is given as an IPv4 numerical address, the
address can be specified with dotted numericals in four different ways:
a32, a.b24, a.b.c16 or a.b.c.d and each part can be specified in
decimal, octal (0-prefixed) or hexadecimal (0x-prefixed).

Instead of passing on the name as-is and leaving the handling to the
underlying name functions, which made them not work with c-ares but work
with getaddrinfo, this change now makes the curl URL API itself detect
and "normalize" host names specified as IPv4 numericals.

The WHATWG URL Spec says this is an okay way to specify a host name in a
URL. RFC 3896 does not allow them, but curl didn't prevent them before
and it seems other RFC 3896-using tools have not either. Host names used
like this are widely supported by other tools as well due to the
handling being done by getaddrinfo and friends.

I decided to add the functionality into the URL API itself so that all
users of these functions get the benefits, when for example wanting to
compare two URLs. Also, it makes curl built to use c-ares now support
them as well and make curl builds more consistent.

The normalization makes HTTPS and virtual hosted HTTP work fine even
when curl gets the address specified using one of the "obscure" formats.

Test 1560 is extended to verify.

Fixes #6863
Closes #6871
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
When the host name in a URL is given as an IPv4 numerical address, the
address can be specified with dotted numericals in four different ways:
a32, a.b24, a.b.c16 or a.b.c.d and each part can be specified in
decimal, octal (0-prefixed) or hexadecimal (0x-prefixed).

Instead of passing on the name as-is and leaving the handling to the
underlying name functions, which made them not work with c-ares but work
with getaddrinfo, this change now makes the curl URL API itself detect
and "normalize" host names specified as IPv4 numericals.

The WHATWG URL Spec says this is an okay way to specify a host name in a
URL. RFC 3896 does not allow them, but curl didn't prevent them before
and it seems other RFC 3896-using tools have not either. Host names used
like this are widely supported by other tools as well due to the
handling being done by getaddrinfo and friends.

I decided to add the functionality into the URL API itself so that all
users of these functions get the benefits, when for example wanting to
compare two URLs. Also, it makes curl built to use c-ares now support
them as well and make curl builds more consistent.

The normalization makes HTTPS and virtual hosted HTTP work fine even
when curl gets the address specified using one of the "obscure" formats.

Test 1560 is extended to verify.

Fixes #6863
Closes #6871
</pre>
</div>
</content>
</entry>
<entry>
<title>libssh: fix "empty expression statement has no effect" warnings</title>
<updated>2021-04-19T06:30:04+00:00</updated>
<author>
<name>Daniel Stenberg</name>
<email>daniel@haxx.se</email>
</author>
<published>2021-04-17T17:00:15+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=2426fa49ea30323d01db3ecff42c6d2c929943e4'/>
<id>2426fa49ea30323d01db3ecff42c6d2c929943e4</id>
<content type='text'>
... by fixing macros to do-while constructs and moving out the calls to
"break" outside of the actual macro. It also fixes the problem where the
macro was used witin a loop and the break didn't do right.

Reported-by: Emil Engler
Fixes #6847
Closes #6909
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
... by fixing macros to do-while constructs and moving out the calls to
"break" outside of the actual macro. It also fixes the problem where the
macro was used witin a loop and the break didn't do right.

Reported-by: Emil Engler
Fixes #6847
Closes #6909
</pre>
</div>
</content>
</entry>
<entry>
<title>hsts: enable by default</title>
<updated>2021-04-19T06:22:16+00:00</updated>
<author>
<name>Daniel Stenberg</name>
<email>daniel@haxx.se</email>
</author>
<published>2021-03-08T07:30:32+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=d71ff2b9db566b3f4b2eb29441c2df86715d4339'/>
<id>d71ff2b9db566b3f4b2eb29441c2df86715d4339</id>
<content type='text'>
No longer considered experimental.

Closes #6700
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
No longer considered experimental.

Closes #6700
</pre>
</div>
</content>
</entry>
<entry>
<title>vtls: refuse setting any SSL version</title>
<updated>2021-04-19T06:16:02+00:00</updated>
<author>
<name>Daniel Stenberg</name>
<email>daniel@haxx.se</email>
</author>
<published>2021-03-22T12:39:37+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=eff614fb0242cb37d33f89e2e74a93cef5203aed'/>
<id>eff614fb0242cb37d33f89e2e74a93cef5203aed</id>
<content type='text'>
... previously they were supported if a TLS library would (unexpectedly)
still support them, but from this change they will be refused already in
curl_easy_setopt(). SSLv2 and SSLv3 have been known to be insecure for
many years now.

Closes #6773
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
... previously they were supported if a TLS library would (unexpectedly)
still support them, but from this change they will be refused already in
curl_easy_setopt(). SSLv2 and SSLv3 have been known to be insecure for
many years now.

Closes #6773
</pre>
</div>
</content>
</entry>
<entry>
<title>curl: ignore options asking for SSLv2 or SSLv3</title>
<updated>2021-04-19T06:14:05+00:00</updated>
<author>
<name>Daniel Stenberg</name>
<email>daniel@haxx.se</email>
</author>
<published>2021-03-22T10:55:27+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=cf65d4237e097ace65e17580407ce56487823a47'/>
<id>cf65d4237e097ace65e17580407ce56487823a47</id>
<content type='text'>
Instead output a warning about it and continue with the defaults.

These SSL versions are typically not supported by the TLS libraries since a
long time back already since they are inherently insecure and broken. Asking
for them to be used will just cause an error to be returned slightly later.

In the unlikely event that a user's TLS library actually still supports these
protocol versions, this change might make the request a little less insecure.

Closes #6772
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Instead output a warning about it and continue with the defaults.

These SSL versions are typically not supported by the TLS libraries since a
long time back already since they are inherently insecure and broken. Asking
for them to be used will just cause an error to be returned slightly later.

In the unlikely event that a user's TLS library actually still supports these
protocol versions, this change might make the request a little less insecure.

Closes #6772
</pre>
</div>
</content>
</entry>
<entry>
<title>test972: verify the json output with jsonlint</title>
<updated>2021-04-17T09:03:40+00:00</updated>
<author>
<name>Daniel Stenberg</name>
<email>daniel@haxx.se</email>
</author>
<published>2021-04-16T21:53:22+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=6fc805d0c1f82363836f1c6199cebdd3c41cbc5b'/>
<id>6fc805d0c1f82363836f1c6199cebdd3c41cbc5b</id>
<content type='text'>
Make sure one of the azure jobs has jsonlint installed so that the test
runs there.

Ref: #6905
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Make sure one of the azure jobs has jsonlint installed so that the test
runs there.

Ref: #6905
</pre>
</div>
</content>
</entry>
</feed>
