diff options
| author | georgeok <giorgos.n.oikonomou@gmail.com> | 2019-01-29 18:26:31 +0100 |
|---|---|---|
| committer | Marcel Raad <Marcel.Raad@teamviewer.com> | 2019-02-01 09:56:27 +0100 |
| commit | a730432e59754df97c8985eb3094ca1cdd3e4955 (patch) | |
| tree | 3e19c162afb855193a7ef4db1419a3f80b0d9392 /lib/http_ntlm.c | |
| parent | 463f16d188f9e7fae2e71a6b3160d391fbe8ff18 (diff) | |
| download | curl-a730432e59754df97c8985eb3094ca1cdd3e4955.tar.gz | |
spnego_sspi: add support for channel binding
Attempt to add support for Secure Channel binding when negotiate
authentication is used. The problem to solve is that by default IIS
accepts channel binding and curl doesn't utilise them. The result was a
401 response. Scope affects only the Schannel(winssl)-SSPI combination.
Fixes https://github.com/curl/curl/issues/3503
Closes https://github.com/curl/curl/pull/3509
Diffstat (limited to 'lib/http_ntlm.c')
| -rw-r--r-- | lib/http_ntlm.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/lib/http_ntlm.c b/lib/http_ntlm.c index a9b33f98e..aaf8a3deb 100644 --- a/lib/http_ntlm.c +++ b/lib/http_ntlm.c @@ -175,6 +175,9 @@ CURLcode Curl_output_ntlm(struct connectdata *conn, bool proxy) if(s_hSecDll == NULL) return err; } +#ifdef SECPKG_ATTR_ENDPOINT_BINDINGS + ntlm->sslContext = conn->sslContext; +#endif #endif switch(ntlm->state) { |