summaryrefslogtreecommitdiff
path: root/lib/nss.c
Commit message (Collapse)AuthorAgeFilesLines
* Renamed Curl_ascii_equal to Curl_raw_equal and bugfixed the my_toupper functionDaniel Stenberg2008-10-161-1/+1
| | | | used in strequal.c so now all test cases run fine for me again.
* - Pascal Terjan filed bug #2154627Daniel Stenberg2008-10-151-2/+1
| | | | | | | | | | | (http://curl.haxx.se/bug/view.cgi?id=2154627) which pointed out that libcurl uses strcasecmp() in multiple places where it causes failures when the Turkish locale is used. This is because 'i' and 'I' isn't the same letter so strcasecmp() on those letters are different in Turkish than in English (or just about all other languages). I thus introduced a totally new internal function in libcurl (called Curl_ascii_equal) for doing case insentive comparisons for english-(ascii?) style strings that thus will make "file" and "FILE" match even if the Turkish locale is selected.
* - Rob Crittenden brought a patch to "add some locking for thread-safety to NSSDaniel Stenberg2008-09-231-4/+23
| | | | implementation".
* remove unnecessary typecasting of malloc()Yang Tse2008-09-061-9/+9
|
* Made some variables constDan Fandrich2008-09-041-1/+1
|
* fix print formatting string directivesYang Tse2008-09-041-2/+2
|
* made Curl_nss_send() take const data to kill compiler warningDaniel Stenberg2008-06-211-1/+1
|
* - Phil Pellouchoud found a case where libcurl built with NSS failed toDaniel Stenberg2008-06-201-0/+1
| | | | | | | handshake with a SSLv2 server, and it turned out to be because it didn't recognize the cipher named "rc4-md5". In our list that cipher was named plainly "rc4". I've now added rc4-md5 to work as an alias as Phil reported that it made things work for him again.
* Removed the #define of ciphernum since keeping a define updated to be theDaniel Stenberg2008-06-191-12/+7
| | | | | number of entries in a provided table is doomed to fail in the long run. Now we use the NUM_OF_CIPHERS define instead to figure out the amount.
* s/strcasecmp/strequal to make it more portableDaniel Stenberg2008-06-191-1/+2
|
* - Rob Crittenden brought a fix for the NSS layer that makes libcurl no longerDaniel Stenberg2008-06-181-0/+3
| | | | | | always fire up a new connection rather than using the existing one when the multi interface is used. Original bug report: https://bugzilla.redhat.com/show_bug.cgi?id=450140
* removed warning about unused argument by simply removing that argument fromDaniel Stenberg2008-06-181-3/+2
| | | | the check_issuer_cert() proto
* check_issuer_cert() now builds and there's one warning less. Still one compilerDaniel Stenberg2008-06-181-1/+3
| | | | | | warning in the code though but we need NSS' base64.h header for that and we don't currently have a suitable way to include it as our own base64.h header kind of "blocks" it.
* fixed bad infof() usage!Daniel Stenberg2008-06-121-1/+1
|
* - I did a cleanup of the internal generic SSL layer and how the various SSLDaniel Stenberg2008-06-111-1/+2
| | | | | | | | | | | | | | | libraries are supported. Starting now, each underlying SSL library support code does a set of defines for the 16 functions the generic layer (sslgen.c) uses (all these new function defines use the prefix "curlssl_"). This greatly simplified the generic layer in readability by involving much less #ifdefs and other preprocessor stuff and should make it easier for people to make libcurl work with new SSL libraries. Hopefully I can later on document these 16 functions somewhat as well. I also made most of the internal SSL-dependent functions (using Curl_ssl_ prefix) #defined to nothing when no SSL support is requested - previously they would unnecessarily call mostly empty functions.
* code style cleanupDaniel Stenberg2008-06-061-24/+40
|
* - Axel Tillequin and Arnaud Ebalard added support for CURLOPT_ISSUERCERT, forDaniel Stenberg2008-06-061-2/+67
| | | | OpenSSL, NSS and GnuTLS-built libcurls.
* - Axel Tillequin and Arnaud Ebalard added support for CURLOPT_CRLFILE, forDaniel Stenberg2008-06-061-0/+77
| | | | OpenSSL, NSS and GnuTLS-built libcurls.
* fix: preprocessor complaining about macro redefinitionYang Tse2008-05-261-4/+0
|
* - Based on initial work done by Gautam Kachroo to address a bug, we now keepDaniel Stenberg2008-02-201-0/+2
| | | | | | | better control at the exact state of the connection's SSL status so that we know exactly when it has completed the SSL negotiation or not so that there won't be accidental re-uses of connections that are wrongly believed to be in SSL-completed-negotiate state.
* applied patch to disable SSLv2 by default; discussion:Gunter Knauf2008-02-191-1/+4
| | | | | http://sourceforge.net/tracker/index.php?func=detail&aid=1767276&group_id=976&atid=350976 Submitted by Kaspar Brand.
* Calls to Curl_failf() are not supposed to provide a trailing newline as theDaniel Stenberg2008-01-151-6/+6
| | | | function itself adds that. Fixed on 50 or something strings!
* removed space after if and while before the parenthesis for better source codeDaniel Stenberg2007-11-051-34/+34
| | | | consistency
* Made libcurl built with NSS possible to ignore the peer verification.Daniel Stenberg2007-10-251-7/+10
| | | | | Previously it would fail if the ca bundle wasn't present, even if the code ignored the verification results.
* prevent compiler warnings about shadowing and one case of unused variableDaniel Stenberg2007-10-251-14/+17
|
* Rob Crittenden provided an NSS update with the following highlights:Daniel Stenberg2007-09-181-37/+535
| | | | | | | | | | | | | | | | | | | | | | | | o It looks for the NSS database first in the environment variable SSL_DIR, then in /etc/pki/nssdb, then it initializes with no database if neither of those exist. o If the NSS PKCS#11 libnspsem.so driver is available then PEM files may be loaded, including the ca-bundle. If it is not available then only certificates already in the NSS database are used. o Tries to detect whether a file or nickname is being passed in so the right thing is done o Added a bit of code to make the output more like the OpenSSL module, including displaying the certificate information when connecting in verbose mode o Improved handling of certificate errors (expired, untrusted, etc) The libnsspem.so PKCS#11 module is currently only available in Fedora 8/rawhide. Work will be done soon to upstream it. The NSS module will work with or without it, all that changes is the source of the certificates and keys.
* Renamed several libcurl error codes and options to make them more generalDan Fandrich2007-08-301-2/+2
| | | | | | | | | | | and allow reuse by multiple protocols. Several unused error codes were removed. In all cases, macros were added to preserve source (and binary) compatibility with the old names. These macros are subject to removal at a future date, but probably not before 2009. An application can be tested to see if it is using any obsolete code by compiling it with the CURL_NO_OLDIES macro defined. Documented some newer error codes in libcurl-error(3)
* Remove leading space in curl_version_info ss_version field.Patrick Monnerat2007-08-241-1/+1
|
* Patrick Monnerat and I modified libcurl so that now it *copies* all stringsDaniel Stenberg2007-08-011-4/+5
| | | | | | | passed to it with curl_easy_setopt()! Previously it has always just refered to the data, forcing the user to keep the data around until libcurl is done with it. That is now history and libcurl will instead clone the given strings and keep private copies.
* Bug report #1759542 (http://curl.haxx.se/bug/view.cgi?id=1759542). A bad useDaniel Stenberg2007-07-291-10/+5
| | | | | of a socket after it has been closed, when the FTP-SSL data connection is taken down.
* Made some const arrays static to avoid unnecessary stack usage.Dan Fandrich2007-07-201-1/+1
|
* Rob Crittenden fixed bug #1705802Daniel Stenberg2007-05-251-0/+8
| | | | | | (http://curl.haxx.se/bug/view.cgi?id=1705802), which was filed by Daniel Black identifying several FTP-SSL test cases fail when we build libcurl with NSS for TLS/SSL. Listed as #42 in KNOWN_BUGS.
* Removed inclusion of <sys/types.h> and <sys/stat.h> in .c-filesGisle Vanem2007-02-261-3/+0
| | | | since they're already included through "setup.h".
* use macros ERRNO, SET_ERRNO(), SOCKERRNO and SET_SOCKERRNO() for errno handlingYang Tse2007-02-161-1/+1
|
* use our own ISSPACE macroYang Tse2007-02-131-1/+1
|
* Rob Crittenden added support for NSS (Network Security Service) for theDaniel Stenberg2007-02-121-0/+605
SSL/TLS layer. http://www.mozilla.org/projects/security/pki/nss/
View Lorry Controller Status