delta/curl.git/packages, branch bagder/https-proxyu-req-http

symbian: drop support

2020-09-22T13:14:12+00:00

The OS is deprecated. I see no traces of anyone having actually built
curl for Symbian after 2012.

The public headers are unmodified.

Closes #5989

krb5: merged security.c and krb specific FTP functions in here

2020-09-21T21:31:39+00:00

These two files were always tightly connected and it was hard to
understand what went into which. This also allows us to make the
ftpsend() function static (moved from ftp.c).

Removed security.c
Renamed curl_sec.h to krb5.h

Closes #5987

TLS naming: fix more Winssl and Darwinssl leftovers

2020-08-07T22:19:21+00:00

The CMake option is now called CMAKE_USE_SCHANNEL

The winbuild flag is USE_SCHANNEL

The CI jobs and build scripts only use the new names and the new name
options

Tests now require 'Schannel' (when necessary)

Closes #5795

windows: add unicode to feature list

2020-07-14T08:30:17+00:00

Reviewed-by: Marcel Raad
Reviewed-by: Marc Hörsken

Closes #5491

all: fix codespell errors

2020-05-25T19:44:04+00:00

Reviewed-by: Jay Satiro
Reviewed-by: Daniel Stenberg
Closes https://github.com/curl/curl/pull/5452

doc: Rename VERSIONS to VERSIONS.md as it already has Markdown syntax

2020-05-02T21:45:09+00:00

Closes #5325

copyright: fix out-of-date copyright ranges and missing headers

2020-03-24T14:05:59+00:00

Reported by the new script 'scripts/copyright.pl'. The script has a
regex whitelist for the files that don't need copyright headers.

Removed three (mostly usesless) README files from docs/

Closes #5141

packages: add OS400/chkstrings.c to the dist

2020-03-24T13:03:38+00:00

Reported-by: Jon Rumsey
Fixes #5142
Closes #5143

OS400: Update strings for ccsid-ifier

2020-03-23T09:37:59+00:00

Fixes build.

Closes #5132

schannel: add "best effort" revocation check option

2020-03-18T07:23:39+00:00

- Implement new option CURLSSLOPT_REVOKE_BEST_EFFORT and
  --ssl-revoke-best-effort to allow a "best effort" revocation check.

A best effort revocation check ignores errors that the revocation check
was unable to take place. The reasoning is described in detail below and
discussed further in the PR.

---

When running e.g. with Fiddler, the schannel backend fails with an
unhelpful error message:

	Unknown error (0x80092012) - The revocation function was unable
	to check revocation for the certificate.

Sadly, many enterprise users who are stuck behind MITM proxies suffer
the very same problem.

This has been discussed in plenty of issues:
https://github.com/curl/curl/issues/3727,
https://github.com/curl/curl/issues/264, for example.

In the latter, a Microsoft Edge developer even made the case that the
common behavior is to ignore issues when a certificate has no recorded
distribution point for revocation lists, or when the server is offline.
This is also known as "best effort" strategy and addresses the Fiddler
issue.

Unfortunately, this strategy was not chosen as the default for schannel
(and is therefore a backend-specific behavior: OpenSSL seems to happily
ignore the offline servers and missing distribution points).

To maintain backward-compatibility, we therefore add a new flag
(`CURLSSLOPT_REVOKE_BEST_EFFORT`) and a new option
(`--ssl-revoke-best-effort`) to select the new behavior.

Due to the many related issues Git for Windows and GitHub Desktop, the
plan is to make this behavior the default in these software packages.

The test 2070 was added to verify this behavior, adapted from 310.

Based-on-work-by: georgeok 
Co-authored-by: Markus Olsson 
Signed-off-by: Johannes Schindelin 

Closes https://github.com/curl/curl/pull/4981