summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* dist: ship CURLOPT_PROXY_SERVICE_NAME and CURLOPT_SERVICE_NAMEhttp2-mutiplexDaniel Stenberg2015-04-281-11/+13
|
* Negotiate: custom service names for SPNEGO.Linus Nielsen2015-04-2817-5/+185
| | | | | * Add new options, CURLOPT_PROXY_SERVICE_NAME and CURLOPT_SERVICE_NAME. * Add new curl options, --proxy-service-name and --service-name.
* http2: unify http_conn variable names to 'c'Daniel Stenberg2015-04-271-10/+10
|
* ConnectionExists: call it multi-use instead of pipeliningDaniel Stenberg2015-04-271-1/+1
| | | | So that it fits HTTP/2 as well
* nss: fix compilation failure with old versions of NSSPaul Howarth2015-04-271-2/+4
| | | | Bug: http://curl.haxx.se/mail/lib-2015-04/0095.html
* sws: init http2 state properlyDaniel Stenberg2015-04-271-0/+2
| | | | It would otherwise cause problems when running tests after 1801 etc.
* curl_easy_getinfo.3: document 'internals' in CURLINFO_TLS_SESSIONDaniel Stenberg2015-04-271-1/+21
| | | | ... as it was previouly undocumented what the pointer was.
* runtests: use a DISABLED.local file tooDaniel Stenberg2015-04-263-10/+23
| | | | | ... and have git ignore that. Allows for a dev to add tests to ignore in local tests and yet don't obstruct a normal git work flow.
* schannel.c: Fix typo introduced with 3447c973d0Marc Hoersken2015-04-261-1/+1
|
* schannel.c: Fix possible SEC_E_BUFFER_TOO_SMALL errorMarc Hoersken2015-04-261-2/+3
| | | | Reported-by: Brian Chrisman
* schannel: re-indented file to follow curl style betterDaniel Stenberg2015-04-261-91/+96
| | | | white space changes only
* Curl_ossl_init: load builtin modulesDaniel Stenberg2015-04-261-0/+2
| | | | | | | To have engine modules work, we must tell openssl to load builtin modules first. Bug: https://github.com/bagder/curl/pull/206
* configure: follow-up fix for krb5-configDaniel Stenberg2015-04-261-2/+0
| | | | | | | commit 5b66860652 was incomplete so here's a follow-up fix Reported-by: Dagobert Michelsen Bug: https://github.com/bagder/curl/commit/5b668606527613179d0349f21b4ab0df2971e3d2#commitcomment-10473445
* openssl: fix serial number outputDaniel Stenberg2015-04-261-14/+8
| | | | | | | | The code extracting the cert serial number was broken and didn't display it properly. Bug: https://github.com/bagder/curl/issues/235 Reported-by: dkjjr89
* sasl_sspi: Populate domain from the realm in the challengeGrant Pannell2015-04-264-6/+95
| | | | | | Without this, SSPI based digest auth was broken. Bug: https://github.com/bagder/curl/pull/141.patch
* tool: New option --data-raw to HTTP POST data, '@' allowed.Anthony Avina2015-04-253-7/+15
| | | | | | | | | | | | Add new option --data-raw which is almost the same as --data but does not have a special interpretation of the @ character. Prior to this change there was no (easy) way to pass the @ character as the first character in POST data without it being interpreted as a special character. Bug: https://github.com/bagder/curl/issues/198 Reported-by: Jens Rantil
* test2039: fixed line endings that caused a test failureDan Fandrich2015-04-251-7/+7
|
* netrc: add unit tests for 'default' supportViktor Szakats2015-04-243-1/+65
|
* netrc: support 'default' tokenViktor Szakats2015-04-241-0/+4
| | | | | | | | The 'default' token has no argument and means to match _any_ domain. It must be placed last if there are 'machine <name>' tokens in the same file. See full description here: https://www.gnu.org/software/inetutils/manual/html_node/The-_002enetrc-File.html
* ROADMAP.md: extended the HTTP/2 section, reformattedDaniel Stenberg2015-04-241-27/+101
| | | | | | Elaborated on several of the remaining HTTP/2 parts and made document use a format that ends up nicer on the web page: http://curl.haxx.se/dev/roadmap.html
* curl -z: do not write empty file on unmet conditionKamil Dudka2015-04-233-7/+88
| | | | | | | | This commit fixes a regression introduced in curl-7_41_0-186-g261a0fe. It also introduces a regression test 1424 based on tests 78 and 1423. Reported-by: Viktor Szakats Bug: https://github.com/bagder/curl/issues/237
* tool: fixed a comment typoDan Fandrich2015-04-231-1/+1
|
* README: convert to UTF-8Dan Fandrich2015-04-231-1/+1
|
* cyassl: Implement public key pinningJay Satiro2015-04-227-12/+64
| | | | Also add public key extraction example to CURLOPT_PINNEDPUBLICKEY doc.
* curl.1: fix typoAlessandro Ghedini2015-04-221-1/+1
|
* docs: distribute the CURLOPT_PINNEDPUBLICKEY(3) man page, tooKamil Dudka2015-04-221-3/+6
|
* tests/unit/.gitignore: hide unit1601 and above, tooKamil Dudka2015-04-221-2/+1
|
* connectionexists: follow-up to fd9d3a1ef1fDaniel Stenberg2015-04-221-4/+7
| | | | | | | PROTOPT_CREDSPERREQUEST still needs to be checked even when NTLM is not enabled. Mistake-caught-by: Kamil Dudka
* connectionexists: fix build without NTLMDaniel Stenberg2015-04-221-2/+4
| | | | | | | | Do not access NTLM-specific struct fields when built without NTLM enabled! bug: http://curl.haxx.se/?i=231 Reported-by: Patrick Rapin
* bump: start working toward 7.43.0Daniel Stenberg2015-04-222-172/+9
|
* nss: implement public key pinning for NSS backendKamil Dudka2015-04-225-3/+58
| | | | Bug: https://bugzilla.redhat.com/1195771
* dist: include {src,lib}/checksrc.whitelistDaniel Stenberg2015-04-222-8/+8
|
* RELEASE-NOTES: updated for 7.42.0curl-7_42_0Daniel Stenberg2015-04-221-6/+16
|
* THANKS: added contributors from 7.42.0 release notesDaniel Stenberg2015-04-221-0/+21
|
* THANKS-filter: a few more alterations to squashDaniel Stenberg2015-04-221-1/+3
|
* contrithanks.sh: helper script for maintaining THANKSDaniel Stenberg2015-04-221-0/+57
|
* http_done: close Negotiate connections when doneDaniel Stenberg2015-04-211-1/+7
| | | | | | | | | | | | | When doing HTTP requests Negotiate authenticated, the entire connnection may become authenticated and not just the specific HTTP request which is otherwise how HTTP works, as Negotiate can basically use NTLM under the hood. curl was not adhering to this fact but would assume that such requests would also be authenticated per request. CVE-2015-3148 Bug: http://curl.haxx.se/docs/adv_20150422B.html Reported-by: Isaac Boukris
* fix_hostname: zero length host name caused -1 index offsetDaniel Stenberg2015-04-211-1/+1
| | | | | | | | | | | | If a URL is given with a zero-length host name, like in "http://:80" or just ":80", `fix_hostname()` will index the host name pointer with a -1 offset (as it blindly assumes a non-zero length) and both read and assign that address. CVE-2015-3144 Bug: http://curl.haxx.se/docs/adv_20150422D.html Reported-by: Hanno Böck
* cookie: cookie parser out of boundary memory accessDaniel Stenberg2015-04-211-5/+7
| | | | | | | | | | | | | | The internal libcurl function called sanitize_cookie_path() that cleans up the path element as given to it from a remote site or when read from a file, did not properly validate the input. If given a path that consisted of a single double-quote, libcurl would index a newly allocated memory area with index -1 and assign a zero to it, thus destroying heap memory it wasn't supposed to. CVE-2015-3145 Bug: http://curl.haxx.se/docs/adv_20150422C.html Reported-by: Hanno Böck
* ConnectionExists: for NTLM re-use, require credentials to matchDaniel Stenberg2015-04-211-1/+1
| | | | | | | CVE-2015-3143 Bug: http://curl.haxx.se/docs/adv_20150422A.html Reported-by: Paras Sethia
* openssl: add OPENSSL_NO_SSL3_METHOD checkbyronhe2015-04-211-0/+5
|
* CURLOPT_HEADERFUNCTION.3: match parameter name in synopsis and descDaniel Stenberg2015-04-201-1/+1
| | | | | Bug: https://github.com/bagder/curl/issues/229 Reported-by: bsammon
* configure --with-nss: remove unneeded libs from the fallbackMostyn Bramley-Moore2015-04-201-1/+1
|
* contributors.sh: fix help output, filter out (-prefix from namesDaniel Stenberg2015-04-201-3/+4
|
* RELEASE-NOTES: synced with cc0e7ebc3be0Daniel Stenberg2015-04-201-2/+13
|
* CURLMOPT_TIMERFUNCTION.3: Clarify, add an exampleMichael Stapelberg2015-04-191-9/+47
|
* vtls/openssl: use https in URLs and a comment typo fixedViktor Szakáts2015-04-191-8/+8
|
* curl_version_info.3: fixed the 'protocols' variable typeDaniel Stenberg2015-04-181-2/+2
| | | | | Reported-by: John Marshall Bug: https://github.com/bagder/curl/issues/225
* test1423: added missing "file" to server sectionDan Fandrich2015-04-181-0/+1
|
* TheArtOfHttpScripting: Multiple URLs + Multiple HTTP methodsDaniel Stenberg2015-04-171-3/+54
| | | | ... and some minor edits
View Lorry Controller Status