<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/curl.git/lib/vtls/nss.c, branch bagder/disabled-proxy-options</title>
<subtitle>github.com: bagder/curl.git
</subtitle>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/'/>
<entry>
<title>cleanup: remove FIXME and TODO comments</title>
<updated>2019-05-16T07:16:56+00:00</updated>
<author>
<name>Daniel Stenberg</name>
<email>daniel@haxx.se</email>
</author>
<published>2019-05-14T14:36:15+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=8ece8177f1e8ed8c76a7a6f3c90a23c5982b4641'/>
<id>8ece8177f1e8ed8c76a7a6f3c90a23c5982b4641</id>
<content type='text'>
They serve very little purpose and mostly just add noise. Most of them
have been around for a very long time. I read them all before removing
or rephrasing them.

Ref: #3876
Closes #3883
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
They serve very little purpose and mostly just add noise. Most of them
have been around for a very long time. I read them all before removing
or rephrasing them.

Ref: #3876
Closes #3883
</pre>
</div>
</content>
</entry>
<entry>
<title>nss: allow fifos and character devices for certificates.</title>
<updated>2019-05-07T15:23:02+00:00</updated>
<author>
<name>Frank Gevaerts</name>
<email>frank@gevaerts.be</email>
</author>
<published>2019-04-26T09:23:15+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=191ffd07082322cdfd4ca4581f39160166534405'/>
<id>191ffd07082322cdfd4ca4581f39160166534405</id>
<content type='text'>
Currently you can do things like --cert &lt;(cat ./cert.crt) with (at least) the
openssl backend, but that doesn't work for nss because is_file rejects fifos.

I don't actually know if this is sufficient, nss might do things internally
(like seeking back) that make this not work, so actual testing is needed.

Closes #3807
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Currently you can do things like --cert &lt;(cat ./cert.crt) with (at least) the
openssl backend, but that doesn't work for nss because is_file rejects fifos.

I don't actually know if this is sufficient, nss might do things internally
(like seeking back) that make this not work, so actual testing is needed.

Closes #3807
</pre>
</div>
</content>
</entry>
<entry>
<title>multi: provide Curl_multiuse_state to update information</title>
<updated>2019-05-01T20:51:23+00:00</updated>
<author>
<name>Daniel Stenberg</name>
<email>daniel@haxx.se</email>
</author>
<published>2019-04-30T09:14:38+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=be6e281cf2792b06b6d413d120b4a9381e4b0653'/>
<id>be6e281cf2792b06b6d413d120b4a9381e4b0653</id>
<content type='text'>
As soon as a TLS backend gets ALPN conformation about the specific HTTP
version it can now set the multiplex situation for the "bundle" and
trigger moving potentially queued up transfers to the CONNECT state.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
As soon as a TLS backend gets ALPN conformation about the specific HTTP
version it can now set the multiplex situation for the "bundle" and
trigger moving potentially queued up transfers to the CONNECT state.
</pre>
</div>
</content>
</entry>
<entry>
<title>nss: provide more specific error messages on failed init</title>
<updated>2019-04-29T08:29:53+00:00</updated>
<author>
<name>Kamil Dudka</name>
<email>kdudka@redhat.com</email>
</author>
<published>2019-04-26T10:20:21+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=9e8f28a8f1fe90c5e88c18f56f82f6c28f804839'/>
<id>9e8f28a8f1fe90c5e88c18f56f82f6c28f804839</id>
<content type='text'>
Closes #3808
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Closes #3808
</pre>
</div>
</content>
</entry>
<entry>
<title>nss: Fix compatibility with nss versions 3.14 to 3.15</title>
<updated>2018-12-05T14:24:32+00:00</updated>
<author>
<name>Paul Howarth</name>
<email>paul@city-fan.org</email>
</author>
<published>2018-12-04T18:43:51+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=8ad9e5915a95258267f2af463559ded134e8e643'/>
<id>8ad9e5915a95258267f2af463559ded134e8e643</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>nss: Improve info message when falling back SSL protocol</title>
<updated>2018-12-05T14:24:32+00:00</updated>
<author>
<name>Paul Howarth</name>
<email>paul@city-fan.org</email>
</author>
<published>2018-12-04T10:48:32+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=71a1442eb2a973164b0c3365be2e0297baa8e91d'/>
<id>71a1442eb2a973164b0c3365be2e0297baa8e91d</id>
<content type='text'>
Use descriptive text strings rather than decimal numbers.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Use descriptive text strings rather than decimal numbers.
</pre>
</div>
</content>
</entry>
<entry>
<title>nss: Fall back to latest supported SSL version</title>
<updated>2018-12-05T14:24:32+00:00</updated>
<author>
<name>Paul Howarth</name>
<email>paul@city-fan.org</email>
</author>
<published>2018-12-03T11:42:48+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=6848ea585b34d7f1d3f73c1d6749321fc5843fbe'/>
<id>6848ea585b34d7f1d3f73c1d6749321fc5843fbe</id>
<content type='text'>
NSS may be built without support for the latest SSL/TLS versions,
leading to "SSL version range is not valid" errors when the library
code supports a recent version (e.g. TLS v1.3) but it has explicitly
been disabled.

This change adjusts the maximum SSL version requested by libcurl to
be the maximum supported version at runtime, as long as that version
is at least as high as the minimum version required by libcurl.

Fixes #3261
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
NSS may be built without support for the latest SSL/TLS versions,
leading to "SSL version range is not valid" errors when the library
code supports a recent version (e.g. TLS v1.3) but it has explicitly
been disabled.

This change adjusts the maximum SSL version requested by libcurl to
be the maximum supported version at runtime, as long as that version
is at least as high as the minimum version required by libcurl.

Fixes #3261
</pre>
</div>
</content>
</entry>
<entry>
<title>snprintf: renamed and we now only use msnprintf()</title>
<updated>2018-11-23T07:26:51+00:00</updated>
<author>
<name>Daniel Stenberg</name>
<email>daniel@haxx.se</email>
</author>
<published>2018-11-22T08:01:24+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=dcd6f810255785d52b89150e18460fb0899d4f7e'/>
<id>dcd6f810255785d52b89150e18460fb0899d4f7e</id>
<content type='text'>
The function does not return the same value as snprintf() normally does,
so readers may be mislead into thinking the code works differently than
it actually does. A different function name makes this easier to detect.

Reported-by: Tomas Hoger
Assisted-by: Daniel Gustafsson
Fixes #3296
Closes #3297
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The function does not return the same value as snprintf() normally does,
so readers may be mislead into thinking the code works differently than
it actually does. A different function name makes this easier to detect.

Reported-by: Tomas Hoger
Assisted-by: Daniel Gustafsson
Fixes #3296
Closes #3297
</pre>
</div>
</content>
</entry>
<entry>
<title>ssl: replace all internal uses of CURLE_SSL_CACERT</title>
<updated>2018-11-20T13:57:00+00:00</updated>
<author>
<name>Han Han</name>
<email>hhan@thousandeyes.com</email>
</author>
<published>2018-11-20T01:48:59+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=78ff4e0de3c53b026bb23a92c5c7abe3d285038e'/>
<id>78ff4e0de3c53b026bb23a92c5c7abe3d285038e</id>
<content type='text'>
Closes #3291
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Closes #3291
</pre>
</div>
</content>
</entry>
<entry>
<title>nss: remove version selecting dead code</title>
<updated>2018-11-13T22:55:22+00:00</updated>
<author>
<name>Kamil Dudka</name>
<email>kdudka@redhat.com</email>
</author>
<published>2018-11-13T22:54:56+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/curl.git/commit/?id=3d988c5563f0438a88f4f31a1a176186aa3a399b'/>
<id>3d988c5563f0438a88f4f31a1a176186aa3a399b</id>
<content type='text'>
Closes #3262
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Closes #3262
</pre>
</div>
</content>
</entry>
</feed>
