summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* http_negotiate: Move the Negotiate state out of the negotiatedata structureSteve Holme2019-05-156-30/+37
| | | | | | | Given that this member variable is not used by the SASL based protocols there is no need to have it here. Closes #3882
* http_ntlm: Move the NTLM state out of the ntlmdata structureSteve Holme2019-05-156-28/+34
| | | | | Given that this member variable is not used by the SASL based protocols there is no need to have it here.
* url: Move the negotiate state type into a dedicated enumSteve Holme2019-05-151-3/+9
|
* url: Remove duplicate clean up of the winbind variables in conn_shutdown()Steve Holme2019-05-141-6/+0
| | | | | | | | Given that Curl_disconnect() calls Curl_http_auth_cleanup_ntlm() prior to calling conn_shutdown() and it in turn performs this, there is no need to perform the same action in conn_shutdown(). Closes #3881
* urlapi: require a non-zero host name length when parsing URLDaniel Stenberg2019-05-142-0/+5
| | | | | | Updated test 1560 to verify. Closes #3880
* configure: error out if OpenSSL wasn't detected when asked forDaniel Stenberg2019-05-141-0/+8
| | | | | | | | | If --with-ssl is used and configure still couldn't enable SSL this creates an error instead of just silently ignoring the fact. Suggested-by: Isaiah Norton Fixes #3824 Closes #3830
* imap: Fix typo in commentDaniel Gustafsson2019-05-141-1/+1
|
* url: Remove unnecessary initialisation from allocate_conn()Steve Holme2019-05-141-14/+1
| | | | | | No need to set variables to zero as calloc() does this for us. Closes #3879
* CURLOPT_CAINFO.3: with Schannel, you want Windows 8 or later [ci skip]Daniel Stenberg2019-05-141-5/+6
| | | | | | | Clues-provided-by: Jay Satiro Clues-provided-by: Jeroen Ooms Fixes #3711 Closes #3874
* vtls: fix potential ssl_buffer stack overflowDaniel Gustafsson2019-05-131-4/+5
| | | | | | | | | | | | In Curl_multissl_version() it was possible to overflow the passed in buffer if the generated version string exceeded the size of the buffer. Fix by inverting the logic, and also make sure to not exceed the local buffer during the string generation. Closes #3863 Reported-by: nevv on HackerOne/curl Reviewed-by: Jay Satiro Reviewed-by: Daniel Stenberg
* RELEASE-NOTES: syncedDaniel Stenberg2019-05-131-6/+36
|
* appveyor: also build "/ci" branches like travisDaniel Stenberg2019-05-131-0/+1
|
* pingpong: disable more when no pingpong enabledDaniel Stenberg2019-05-132-1/+11
|
* proxy: acknowledge DISABLE_PROXY moreDaniel Stenberg2019-05-133-5/+38
|
* parsedate: CURL_DISABLE_PARSEDATEDaniel Stenberg2019-05-132-15/+37
|
* sasl: only enable if there's a protocol enabled using itDaniel Stenberg2019-05-131-0/+4
|
* mime: acknowledge CURL_DISABLE_MIMEDaniel Stenberg2019-05-135-79/+42
|
* wildcard: disable from build when FTP isn't presentDaniel Stenberg2019-05-137-6/+28
|
* http: CURL_DISABLE_HTTP_AUTHDaniel Stenberg2019-05-132-1/+20
|
* base64: build conditionally if there are usersDaniel Stenberg2019-05-131-1/+8
|
* doh: CURL_DISABLE_DOHDaniel Stenberg2019-05-133-1/+15
|
* auth: Rename the various authentication clean up functionsSteve Holme2019-05-1218-53/+54
| | | | | | For consistency and to a avoid confusion. Closes #3869
* docs/INSTALL: fix broken link [ci skip]Jay Satiro2019-05-121-1/+1
| | | | | Reported-by: Joombalaya on github Fixes #3818
* easy: fix another "clarify calculation precedence" warningMarcel Raad2019-05-121-2/+2
| | | | I missed this one in commit 6b3dde7fe62ea5a557fd1fd323fac2bcd0c2e9be.
* build: fix "clarify calculation precedence" warningsMarcel Raad2019-05-127-13/+15
| | | | | | | Codacy/CppCheck warns about this. Consistently use parentheses as we already do in some places to silence the warning. Closes https://github.com/curl/curl/pull/3866
* cmake: restore C89 compatibility of CurlTests.cMarcel Raad2019-05-121-2/+2
| | | | | | | | | I broke it in d1b5cf830bfe169745721b21245d2217d2c2453e and 97de97daefc2ed084c91eff34af2426f2e55e134. Reported-by: Viktor Szakats Ref: https://github.com/curl/curl/commit/97de97daefc2ed084c91eff34af2426f2e55e134#commitcomment-33499044 Closes https://github.com/curl/curl/pull/3868
* http_ntlm: Corrected the name of the include guardSteve Holme2019-05-111-4/+4
| | | | | | Missed in f0bdd72c. Closes #3867
* http_digest: Don't expose functions when HTTP and Crypto Auth are disabledSteve Holme2019-05-113-5/+10
| | | | Closes #3861
* http_negotiate: Don't expose functions when HTTP is disabledSteve Holme2019-05-111-2/+2
|
* SECURITY-PROCESS: fix links [ci skip]Daniel Stenberg2019-05-111-4/+4
|
* CMake: suppress unused variable warningsMarcel Raad2019-05-111-0/+2
| | | | I missed these in commit d1b5cf830bfe169745721b21245d2217d2c2453e.
* doh: disable DOH for the cases it doesn't workDaniel Stenberg2019-05-116-11/+26
| | | | | | | | | | Due to limitations in Curl_resolver_wait_resolv(), it doesn't work for DOH resolves. This fix disables DOH for those. Limitation added to KNOWN_BUGS. Fixes #3850 Closes #3857
* checksrc.bat: Ignore snprintf warnings in docs/examplesJay Satiro2019-05-111-1/+1
| | | | | | .. because we allow snprintf use in docs/examples. Closes https://github.com/curl/curl/pull/3862
* vauth: Fix incorrect function description for Curl_auth_user_contains_domain()Steve Holme2019-05-101-21/+21
| | | | | | ...and misalignment of these comments. From a78c61a4. Closes #3860
* Revert "multi: support verbose conncache closure handle"Jay Satiro2019-05-102-6/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit b0972bc. - No longer show verbose output for the conncache closure handle. The offending commit was added so that the conncache closure handle would inherit verbose mode from the user's easy handle. (Note there is no way for the user to set options for the closure handle which is why that was necessary.) Other debug settings such as the debug function were not also inherited since we determined that could lead to crashes if the user's per-handle private data was used on an unexpected handle. The reporter here says he has a debug function to capture the verbose output, and does not expect or want any output to stderr; however because the conncache closure handle does not inherit the debug function the verbose output for that handle does go to stderr. There are other plausible scenarios as well such as the user redirects stderr on their handle, which is also not inherited since it could lead to crashes when used on an unexpected handle. Short of allowing the user to set options for the conncache closure handle I don't think there's much we can safely do except no longer inherit the verbose setting. Bug: https://curl.haxx.se/mail/lib-2019-05/0021.html Reported-by: Kristoffer Gleditsch Ref: https://github.com/curl/curl/pull/3598 Ref: https://github.com/curl/curl/pull/3618 Closes https://github.com/curl/curl/pull/3856
* ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup()Steve Holme2019-05-101-9/+9
| | | | | | From 6012fa5a. Closes #3858
* BUG-BOUNTY: minor formatting fixes [ci skip]Daniel Stenberg2019-05-091-4/+6
|
* RELEASE-NOTES: syncedDaniel Stenberg2019-05-091-13/+32
|
* BUG-BOUNTY.md: add the Dropbox "bonus" extra payout ability [ci skip]Daniel Stenberg2019-05-091-7/+21
| | | | Closes #3839
* http_negotiate: do not treat failure of gss_init_sec_context() as fatalKamil Dudka2019-05-091-1/+7
| | | | | Fixes #3726 Closes #3849
* spnego_gssapi: fix return code on gss_init_sec_context() failureKamil Dudka2019-05-091-1/+1
| | | | | Fixes #3726 Closes #3849
* gen_resp_file.bat: Removed unnecessary @ from all but the first commandSteve Holme2019-05-091-4/+6
| | | | | | There is need to use @ on every command once echo has been turned off. Closes #3854
* http: Ignore HTTP/2 prior knowledge setting for HTTP proxiesJay Satiro2019-05-081-0/+7
| | | | | | | | | | | | | | | | | | | - Do not switch to HTTP/2 for an HTTP proxy that is not tunnelling to the destination host. We already do something similar for HTTPS proxies by not sending h2. [1] Prior to this change setting CURL_HTTP_VERSION_2_PRIOR_KNOWLEDGE would incorrectly use HTTP/2 to talk to the proxy, which is not something we support (yet?). Also it's debatable whether or not that setting should apply to HTTP/2 proxies. [1]: https://github.com/curl/curl/commit/17c5d05 Bug: https://github.com/curl/curl/issues/3570 Bug: https://github.com/curl/curl/issues/3832 Closes https://github.com/curl/curl/pull/3853
* travis: update mesalink build to xenialMarcel Raad2019-05-081-1/+1
| | | | Closes https://github.com/curl/curl/pull/3842
* OpenSSL: Report -fips in version if OpenSSL is built with FIPSRicky Leverence2019-05-081-1/+5
| | | | | | | | | | | | | Older versions of OpenSSL report FIPS availabilty via an OPENSSL_FIPS define. It uses this define to determine whether to publish -fips at the end of the version displayed. Applications that utilize the version reported by OpenSSL will see a mismatch if they compare it to what curl reports, as curl is not modifying the version in the same way. This change simply adds a check to see if OPENSSL_FIPS is defined, and will alter the reported version to match what OpenSSL itself provides. This only appears to be applicable in versions of OpenSSL <1.1.1 Closes #3771
* nss: allow fifos and character devices for certificates.Frank Gevaerts2019-05-071-1/+1
| | | | | | | | | | Currently you can do things like --cert <(cat ./cert.crt) with (at least) the openssl backend, but that doesn't work for nss because is_file rejects fifos. I don't actually know if this is sufficient, nss might do things internally (like seeking back) that make this not work, so actual testing is needed. Closes #3807
* test2100: Fix typos in test descriptionDaniel Gustafsson2019-05-061-0/+0
|
* ssh: define USE_SSH if SSH is enabled (any backend)Daniel Stenberg2019-05-066-8/+12
| | | | Closes #3846
* winbuild: Add our standard copyright header to the winbuild batch filesSteve Holme2019-05-053-1/+66
|
* makedebug: Fix ERRORLEVEL detection after running where.exeSteve Holme2019-05-051-1/+1
| | | | Closes #3838
View Lorry Controller Status