summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* writeout: fix %{http_version} for HTTP/3bagder/writeout-http_versionDaniel Stenberg2021-12-031-11/+22
| | | | | | | Output "3" properly when HTTP/3 was used. Reported-by: Bernat Mut Fixes #8072
* HTTP3: update quiche build instructionsAlessandro Ghedini2021-12-033-8/+8
| | | | | | | The repo repo was re-organized a bit, so the build instructions need to be updated. Closes #8076
* CURLMOPT_TIMERFUNCTION.3: call it expire time, not intervalDaniel Stenberg2021-12-021-3/+3
| | | | Since we say it is a non-repating timer
* mbedTLS: include NULL byte in blob data length for CURLOPT_CAINFO_BLOBFlorian Van Heghe2021-12-021-2/+7
| | | | | Fixes #8079 Closes #8081
* version_win32: Check build number and platform idWyatt O'Day2021-12-028-27/+77
| | | | | | | | | | | | | Prior to this change the build number was not checked during version comparison, and the platform id was supposed to be checked but wasn't. Checking the build number is required for enabling "evergreen" Windows 10/11 features (like TLS 1.3). Ref: https://github.com/curl/curl/pull/7784 Closes https://github.com/curl/curl/pull/7824 Closes https://github.com/curl/curl/pull/7867
* libssh2: fix error message for sha256 mismatchJay Satiro2021-12-021-1/+1
| | | | | | - On mismatch error show sha256 fingerprint in base64 format. Prior to this change the fingerprint was mistakenly printed in binary.
* openssl: check the return value of BIO_new()x20182021-12-011-0/+12
| | | | Closes #8078
* docs: Update the Reducing Size sectionDan Fandrich2021-11-301-21/+43
| | | | | | Add many more options that can reduce the size of the binary that were added since the last update. Update the sample minimal binary size for version 7.80.0.
* tests: Add some missing keywords to testsDan Fandrich2021-11-307-0/+7
| | | | | These are needed to skip some tests when configure options have disabled certain features.
* mbedTLS: add support for CURLOPT_CAINFO_BLOBFlorian Van Heghe2021-11-302-2/+21
| | | | Closes #8071
* digest: compute user:realm:pass digest w/o userhashGlenn Strauss2021-11-305-18/+17
| | | | | | | | | https://datatracker.ietf.org/doc/html/rfc7616#section-3.4.4 ... the client MUST calculate a hash of the username after any other hash calculation ... Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> Closes #8066
* config.d: update documentation to match the path searchbagder/homedir-scanDaniel Stenberg2021-11-291-23/+22
| | | | Assisted-by: Jay Satiro
* tool_findfile: search for a file in the homedirDaniel Stenberg2021-11-297-197/+180
| | | | | | | | | | | | | | | | | | | | | | | | The homedir() function is now renamed into findfile() and iterates over all the environment variables trying to access the file in question until it finds it. Last resort is then getpwuid() if available. Previously it would first try to find a home directory and if that was set, insist on checking only that directory for the file. This now returns the full file name it finds. The Windows specific checks are now done differently too and in this order: 1 - %USERPROFILE% 2 - %APPDATA% 3 - %USERPROFILE%\\Application Data The windows order is modified to match how the Windows 10 ssh tool works when it searches for .ssh/known_hosts. Reported-by: jeffrson on github Co-authored-by: Jay Satiro Fixes #8033 Closes #8035
* docs: consistent manpage SYNOPSISDaniel Stenberg2021-11-26365-447/+1202
| | | | | | | | | | Make all libcurl related options use .nf (no fill) for the SYNOPSIS section - for consistent look. roffit then renders that section using <pre> (monospace font) in html for the website. Extended manpage-syntax (test 1173) with a basic check for it. Closes #8062
* RELEASE-NOTES: syncedDaniel Stenberg2021-11-261-5/+26
|
* openldap: handle connect phase with a state machinePatrick Monnerat2021-11-261-111/+213
| | | | Closes #8054
* docs: address proselint nitsDaniel Stenberg2021-11-2670-223/+221
| | | | | | | | | - avoid exclamation marks - use consistent number of spaces after periods: one - avoid clichés - avoid using 'very' Closes #8060
* FAQ: typo fix : "yout" ➤ "your"Bruno Baguette2021-11-261-1/+1
| | | | Closes #8059
* docs/INSTALL.md: typo fix : added missing "get" verbBruno Baguette2021-11-261-1/+1
| | | | Closes #8058
* insecure.d: detail its use for SFTP and SCP as wellDaniel Stenberg2021-11-251-11/+14
| | | | Closes #8056
* Makefile.m32: rename -winssl option to -schannel and tidy upViktor Szakats2021-11-253-73/+73
| | | | | | | | | | | | - accept `-schannel` as an alternative to `CFG` option `-winssl` (latter still accepted, but deprecated) - rename internal variable `WINSSL` to `SCHANNEL` - make the `CFG` option evaluation shorter, without repeating the option name Reviewed-by: Marcel Raad Reviewed-by: Daniel Stenberg Closes #8053
* KNOWN_BUGS: 5.6 make distclean loops foreverDaniel Stenberg2021-11-251-0/+8
| | | | | Reported-by: David Bohman Closes #7716
* KNOWN_BUGS: add one, remove oneDaniel Stenberg2021-11-251-5/+3
| | | | | | | | | | - 5.10 SMB tests fail with Python 2 Just use python 3. + 5.10 curl hangs on SMB upload over stdin Closes #7896
* urlapi: provide more detailed return codesbagder/urlapi-returncodesDaniel Stenberg2021-11-258-111/+289
| | | | | | | | | | | | | | | | | | | | Previously, the return code CURLUE_MALFORMED_INPUT was used for almost 30 different URL format violations. This made it hard for users to understand why a particular URL was not acceptable. Since the API cannot point out a specific position within the URL for the problem, this now instead introduces a number of additional and more fine-grained error codes to allow the API to return more exactly in what "part" or section of the URL a problem was detected. Also bug-fixes curl_url_get() with CURLUPART_ZONEID, which previously returned CURLUE_OK even if no zoneid existed. Test cases in 1560 have been adjusted and extended. Tests 1538 and 1559 have been updated. Updated libcurl-errors.3 and curl_url_strerror() accordingly. Closes #8049
* urlapi: make Curl_is_absolute_url always use MAX_SCHEME_LENDaniel Stenberg2021-11-255-14/+17
| | | | | | | | | | | | Instad of having all callers pass in the maximum length, always use it. The passed in length is instead used only as the length of the target buffer for to storing the scheme name in, if used. Added the scheme max length restriction to the curl_url_set.3 man page. Follow-up to 45bcb2eaa78c79 Closes #8047
* cmake: warn on use of the now deprecated symbolsJay Satiro2021-11-251-3/+18
| | | | | | Follow-up to 9108da2c26d Closes #8052
* tests/CI.md: add more information on CI environmentsKevin Burke2021-11-234-35/+137
| | | | | Fixes #8012 Closes #8022
* cmake: private identifiers use CURL_ instead of CMAKE_ prefixDaniel Stenberg2021-11-233-47/+43
| | | | | | | | | Since the 'CMAKE_' prefix is reserved for cmake's own private use. Ref: https://cmake.org/cmake/help/latest/manual/cmake-variables.7.html Reported-by: Boris Rasin Fixes #7988 Closes #8044
* urlapi: reject short file URLsDaniel Stenberg2021-11-232-0/+10
| | | | | | | | file URLs that are 6 bytes or shorter are not complete. Return CURLUE_MALFORMED_INPUT for those. Extended test 1560 to verify. Triggered by #8041 Closes #8042
* curl: improve error message for --head with -JDaniel Stenberg2021-11-231-1/+1
| | | | | | | | | | ... it now focuses on the "output of headers" combined with the --remote-header-name option, as that is actually the problem. Both --head and --include can output headers. Reported-by: nimaje on github Fixes #7987 Closes #8045
* RELEASE-NOTES: syncedDaniel Stenberg2021-11-221-3/+32
|
* urlapi: cleanup scheme parsingStefan Eissing2021-11-221-16/+22
| | | | | | | Makea Curl_is_absolute_url() always leave a defined 'buf' and avoids copying on urls that do not start with a scheme. Closes #8043
* tool_operate: only set SSH related libcurl options for SSH URLsDaniel Stenberg2021-11-213-36/+83
| | | | | | | For example, this avoids trying to find and set the known_hosts file (or warn for its absence) if SFTP or SCP are not used. Closes #8040
* rustls: remove comment about checking handshakingJacob Hoffman-Andrews2021-11-201-3/+0
| | | | | | | | The comment is incorrect in two ways: - It says the check needs to be last, but the check is actually first. - is_handshaking actually starts out true. Closes #8038
* openssl: use non-deprecated API to read key parametersMarcel Raad2021-11-201-28/+66
| | | | | | | With OpenSSL 3.0, the parameters are read directly from the `EVP_PKEY` using `EVP_PKEY_get_bn_param`. Closes https://github.com/curl/curl/pull/7893
* openssl: reduce code duplicationMarcel Raad2021-11-201-25/+12
| | | | | | `BN_print`'s `BIGNUM` parameter has been `const` since OpenSSL 0.9.4. Closes https://github.com/curl/curl/pull/7893
* openssl: remove `RSA_METHOD_FLAG_NO_CHECK` handling if unavailableMarcel Raad2021-11-201-1/+2
| | | | | | The flag has been deprecated without replacement in OpenSSL 3.0. Closes https://github.com/curl/curl/pull/7893
* openssl: remove usage of deprecated `SSL_get_peer_certificate`Marcel Raad2021-11-201-2/+6
| | | | | | | The function name was changed to `SSL_get1_peer_certificate` in OpenSSL 3.0. Closes https://github.com/curl/curl/pull/7893
* page-footer: fix typoDaniel Stenberg2021-11-191-1/+1
| | | | Closes #8036
* http: enable haproxy support for hyper backendDaniel Stenberg2021-11-193-10/+3
| | | | | | | | | | | | | | This is done by having native code do the haproxy header output before hyper issues its request. The little downside with this approach is that we need the entire Curl_buffer_send() function built, which is otherwise not used for hyper builds. If hyper ends up getting native support for the haproxy protocols we can backpedal on this. Enables test 1455 and 1456 Closes #8034
* configure: fix runtime-lib detection on macOSBernhard Walle2021-11-181-4/+10
| | | | | | | | | | | | With a non-standard installation of openssl we get this error: checking run-time libs availability... failed configure: error: one or more libs available at link-time are not available run-time. Libs used at link-time: -lnghttp2 -lssl -lcrypto -lssl -lcrypto -lz There's already code to set LD_LIBRARY_PATH on Linux, so set DYLD_LIBRARY_PATH equivalent on macOS. Closes #8028
* cmake: don't set _USRDLL on a static Windows buildDon2021-11-181-4/+1
| | | | Closes #8030
* page-footer: document more environment variablesDaniel Stenberg2021-11-171-0/+29
| | | | | | ... that curl might use. Closes #8027
* netrc.d: edit the .netrc example to look nicerDaniel Stenberg2021-11-171-2/+4
| | | | | | Works nicely thanks to d1828b470f43d Closes #8025
* tftp: mark protocol as not possible to do over CONNECTDaniel Stenberg2021-11-154-7/+14
| | | | | | | | | ... and make connect_init() refusing trying to tunnel protocols marked as not working. Avoids a double-free. Reported-by: Even Rouault Fixes #8018 Closes #8020
* docs/cmdline-opts: do not say "protocols: all"Daniel Stenberg2021-11-153-3/+0
| | | | | | | | Remove the lines saying "protocols: all". It makes the output in the manpage look funny, and the expectation is probably by default that if not anything is mentioned about protocols the option apply to them all. Closes #8021
* curl.1: require "see also" for every documented optionDaniel Stenberg2021-11-15168-8/+179
| | | | | | | | | | gen.pl now generates a warning if the "See Also" field is not filled in for a command line option All command line options now provide one or more related options. 167 "See alsos" added! Closes #8019
* insecure.d: expand and clarifyDaniel Stenberg2021-11-151-7/+9
| | | | Closes #8017
* gen.pl: improve example output formatDaniel Stenberg2021-11-153-10/+16
| | | | | | | | | Treat consecutive lines that start with a space to be "examples". They are output enclosed by .nf and .fi Updated form.d to use this new fanciness Closes #8016
* Revert "form-escape.d: double the back-slashes for proper man page output"Daniel Stenberg2021-11-151-1/+1
| | | | | | This reverts commit a2d8eac04a4eb1d5a98cf24b4e5cec5cec565d27. silly me, it was intended to be one backslash!