summaryrefslogtreecommitdiff
path: root/packages
Commit message (Collapse)AuthorAgeFilesLines
* version: add the CURL_VERSION_MULTI_SSL feature flagJohannes Schindelin2017-08-281-0/+2
| | | | | | | This new feature flag reports When cURL was built with multiple SSL backends. Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>
* ssh: add the ability to enable compression (for SCP/SFTP)Viktor Szakats2017-08-171-0/+2
| | | | | | | | | | | | | | | | | | The required low-level logic was already available as part of `libssh2` (via `LIBSSH2_FLAG_COMPRESS` `libssh2_session_flag()`[1] option.) This patch adds the new `libcurl` option `CURLOPT_SSH_COMPRESSION` (boolean) and the new `curl` command-line option `--compressed-ssh` to request this `libssh2` feature. To have compression enabled, it is required that the SSH server supports a (zlib) compatible compression method and that `libssh2` was built with `zlib` support enabled. [1] https://www.libssh2.org/libssh2_session_flag.html Ref: https://github.com/curl/curl/issues/1732 Closes https://github.com/curl/curl/pull/1735
* docs/comments: Update to secure URL versionsViktor Szakats2017-08-082-2/+2
| | | | Closes #1741
* includes: remove curl/curlbuild.h and curl/curlrules.hDaniel Stenberg2017-06-146-27/+6
| | | | | | | | Rely entirely on curl/system.h now. Introduced in Aug 2008 with commit 14240e9e109f. Now gone. Fixes #1456
* spelling fixesklemens2017-03-2610-10/+10
| | | | Closes #1356
* url: add option CURLOPT_SUPPRESS_CONNECT_HEADERSDesmond O. Chang2017-03-121-0/+2
| | | | | | | | | | | | | | - Add new option CURLOPT_SUPPRESS_CONNECT_HEADERS to allow suppressing proxy CONNECT response headers from the user callback functions CURLOPT_HEADERFUNCTION and CURLOPT_WRITEFUNCTION. - Add new tool option --suppress-connect-headers to expose CURLOPT_SUPPRESS_CONNECT_HEADERS and allow suppressing proxy CONNECT response headers from --dump-header and --include. Assisted-by: Jay Satiro Assisted-by: CarloCannas@users.noreply.github.com Closes https://github.com/curl/curl/pull/783
* vtls: add options to specify range of enabled TLS versionsJozef Kralik2017-03-081-0/+10
| | | | | | | This commit introduces the CURL_SSLVERSION_MAX_* constants as well as the --tls-max option of the curl tool. Closes https://github.com/curl/curl/pull/1166
* OS400: Fix symbolsJay Satiro2017-02-013-5/+7
| | | | | | | | | | | | - s/CURLOPT_SOCKS_PROXY/CURLOPT_PRE_PROXY Follow-up to 7907a2b and 845522c. - Fix incorrect id for CURLOPT_PROXY_PINNEDPUBLICKEY. - Add id for CURLOPT_ABSTRACT_UNIX_SOCKET. Bug: https://github.com/curl/curl/issues/1237 Reported-by: jonrumsey@users.noreply.github.com
* os400: support CURLOPT_PROXY_PINNEDPUBLICKEYPatrick Monnerat2016-11-263-0/+6
| | | | Also define it in ILE/RPG binding.
* os400: sync ILE/RPG bindingPatrick Monnerat2016-11-253-11/+16
|
* proxy: Support HTTPS proxy and SOCKS+HTTP(s)Alex Rousskov2016-11-243-0/+66
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * HTTPS proxies: An HTTPS proxy receives all transactions over an SSL/TLS connection. Once a secure connection with the proxy is established, the user agent uses the proxy as usual, including sending CONNECT requests to instruct the proxy to establish a [usually secure] TCP tunnel with an origin server. HTTPS proxies protect nearly all aspects of user-proxy communications as opposed to HTTP proxies that receive all requests (including CONNECT requests) in vulnerable clear text. With HTTPS proxies, it is possible to have two concurrent _nested_ SSL/TLS sessions: the "outer" one between the user agent and the proxy and the "inner" one between the user agent and the origin server (through the proxy). This change adds supports for such nested sessions as well. A secure connection with a proxy requires its own set of the usual SSL options (their actual descriptions differ and need polishing, see TODO): --proxy-cacert FILE CA certificate to verify peer against --proxy-capath DIR CA directory to verify peer against --proxy-cert CERT[:PASSWD] Client certificate file and password --proxy-cert-type TYPE Certificate file type (DER/PEM/ENG) --proxy-ciphers LIST SSL ciphers to use --proxy-crlfile FILE Get a CRL list in PEM format from the file --proxy-insecure Allow connections to proxies with bad certs --proxy-key KEY Private key file name --proxy-key-type TYPE Private key file type (DER/PEM/ENG) --proxy-pass PASS Pass phrase for the private key --proxy-ssl-allow-beast Allow security flaw to improve interop --proxy-sslv2 Use SSLv2 --proxy-sslv3 Use SSLv3 --proxy-tlsv1 Use TLSv1 --proxy-tlsuser USER TLS username --proxy-tlspassword STRING TLS password --proxy-tlsauthtype STRING TLS authentication type (default SRP) All --proxy-foo options are independent from their --foo counterparts, except --proxy-crlfile which defaults to --crlfile and --proxy-capath which defaults to --capath. Curl now also supports %{proxy_ssl_verify_result} --write-out variable, similar to the existing %{ssl_verify_result} variable. Supported backends: OpenSSL, GnuTLS, and NSS. * A SOCKS proxy + HTTP/HTTPS proxy combination: If both --socks* and --proxy options are given, Curl first connects to the SOCKS proxy and then connects (through SOCKS) to the HTTP or HTTPS proxy. TODO: Update documentation for the new APIs and --proxy-* options. Look for "Added in 7.XXX" marks.
* vtls: support TLS 1.3 via CURL_SSLVERSION_TLSv1_3Kamil Dudka2016-11-071-0/+2
| | | | | | Fully implemented with the NSS backend only for now. Reviewed-by: Ray Satiro
* s/cURL/curlDaniel Stenberg2016-11-077-15/+15
| | | | | | We're mostly saying just "curl" in lower case these days so here's a big cleanup to adapt to this reality. A few instances are left as the project could still formally be considered called cURL.
* strcase: fix the remaining rawstr usersDaniel Stenberg2016-10-313-6/+6
|
* New libcurl option to keep sending on errorMichael Kaufmann2016-09-221-0/+2
| | | | | | | | | | | | Add the new option CURLOPT_KEEP_SENDING_ON_ERROR to control whether sending the request body shall be completed when the server responds early with an error status code. This is suitable for manual NTLM authentication. Reviewed-by: Jay Satiro Closes https://github.com/curl/curl/pull/904
* errors: new alias CURLE_WEIRD_SERVER_REPLY (8)Jay Satiro2016-09-075-3/+7
| | | | | | | | Since we're using CURLE_FTP_WEIRD_SERVER_REPLY in imap, pop3 and smtp as more of a generic "failed to parse" introduce an alias without FTP in the name. Closes https://github.com/curl/curl/pull/975
* os400: define BUILDING_LIBCURL in make script.Patrick Monnerat2016-08-022-2/+2
|
* os400: minimum supported OS version: V6R1M0.Patrick Monnerat2016-07-251-2/+2
| | | | Do not log compilation informational messages.
* internals: rename the SessionHandle struct to Curl_easyDaniel Stenberg2016-06-221-4/+4
|
* os400: add new definitions to ILE/RPG binding.Patrick Monnerat2016-06-161-1/+10
|
* loadlibrary: Only load system DLLs from the system directorySteve Holme2016-05-301-1/+1
| | | | | | | | Inspiration provided by: Daniel Stenberg and Ray Satiro Bug: https://curl.haxx.se/docs/adv_20160530.html Ref: Windows DLL hijacking with curl, CVE-2016-4802
* os400: upgrade ILE/RPG bindingPatrick Monnerat2016-04-221-0/+6
|
* http2: Add handling stream level errorTatsuhiro Tsujikawa2016-04-111-0/+2
| | | | | | | | | | | | | Previously, when a stream was closed with other than NGHTTP2_NO_ERROR by RST_STREAM, underlying TCP connection was dropped. This is undesirable since there may be other streams multiplexed and they are very much fine. This change introduce new error code CURLE_HTTP2_STREAM, which indicates stream error that only affects the relevant stream, and connection should be kept open. The existing CURLE_HTTP2 means connection error in general. Ref: https://github.com/curl/curl/issues/659 Ref: https://github.com/curl/curl/pull/663
* http_ntlm: Renamed from curl_ntlm.[c|h]Steve Holme2016-03-271-1/+1
| | | | | | | | | | | Renamed the header and source files for this module as they are HTTP specific and as such, they should use the naming convention as other HTTP authentication source files do - this revert commit 260ee6b7bf. Note: We could also rename curl_ntlm_wb.[c|h], however, the Winbind code needs separating from the HTTP protocol and migrating into the vauth directory, thus adding support for Winbind to the SASL based protocols such as IMAP, POP3 and SMTP.
* http_negotiate: Combine GSS-API and SSPI source filesSteve Holme2016-03-261-5/+5
| | | | | | | As the GSS-API and SSPI based source files are no longer library/API specific, following the extraction of that authentication code to the vauth directory, combine these files rather than maintain two separate versions.
* vauth: Moved the Negotiate authentication code to the new vauth directorySteve Holme2016-03-261-1/+2
| | | | Part 2 of 2 - Moved the GSS-API based Negotiate authentication code.
* vauth: Moved the Negotiate authentication code to the new vauth directorySteve Holme2016-03-261-1/+1
| | | | Part 1 of 2 - Moved the SSPI based Negotiate authentication code.
* build: Corrected typos from commit 70e56939aaSteve Holme2016-03-251-1/+1
|
* vauth: Moved the OAuth 2.0 authentication code to the new vauth directorySteve Holme2016-03-251-1/+1
|
* vauth: Moved the NTLM authentication code to the new vauth directorySteve Holme2016-03-251-4/+5
|
* vauth: Moved the Kerberos V5 authentication code to the new vauth directorySteve Holme2016-03-251-3/+3
|
* vauth: Moved the DIGEST authentication code to the new vauth directorySteve Holme2016-03-251-1/+1
|
* vauth: Moved the CRAM-MD5 authentication code to the new vauth directorySteve Holme2016-03-251-1/+2
|
* vauth: Moved the ClearText authentication code to the new vauth directorySteve Holme2016-03-251-1/+1
|
* vauth: Moved Curl_sasl_build_spn() to create the initial vauth source filesSteve Holme2016-03-251-1/+1
|
* os400: Fix ILE/RPG definition of CURLOPT_TFTP_NO_OPTIONSPatrick Monnerat2016-02-241-1/+1
|
* getinfo: CURLINFO_TLS_SSL_PTR supersedes CURLINFO_TLS_SESSIONJay Satiro2016-02-232-0/+3
| | | | | | | | | | | | | | | | | | | | | The two options are almost the same, except in the case of OpenSSL: CURLINFO_TLS_SESSION OpenSSL session internals is SSL_CTX *. CURLINFO_TLS_SSL_PTR OpenSSL session internals is SSL *. For backwards compatibility we couldn't modify CURLINFO_TLS_SESSION to return an SSL pointer for OpenSSL. Also, add support for the 'internals' member to point to SSL object for the other backends axTLS, PolarSSL, Secure Channel, Secure Transport and wolfSSL. Bug: https://github.com/curl/curl/issues/234 Reported-by: dkjjr89@users.noreply.github.com Bug: https://curl.haxx.se/mail/lib-2015-09/0127.html Reported-by: Michael König
* TFTP: add option to suppress TFTP option requests (Part 1)Michael Koenig2016-02-231-0/+2
| | | | | | | | | | | Some TFTP server implementations ignore the "TFTP Option extension" (RFC 1782-1784, 2347-2349), or implement it in a flawed way, causing problems with libcurl. Another switch for curl_easy_setopt "CURLOPT_TFTP_NO_OPTIONS" is introduced which prevents libcurl from sending TFTP option requests to a server, avoiding many problems caused by faulty implementations. Bug: https://github.com/curl/curl/issues/481
* os400: sync ILE/RPG definitions with latest public header files.Patrick Monnerat2016-02-081-0/+2
|
* URLs: Change more haxx.se URLs from http: to https:Dan Fandrich2016-02-031-1/+1
|
* URLs: change all http:// URLs to https://Daniel Stenberg2016-02-0314-15/+15
|
* os400: define CURL_VERSION_PSL in ILE/RPG bindingPatrick Monnerat2015-12-071-0/+2
|
* os400: synchronize ILE/RPG header filePatrick Monnerat2015-11-191-0/+2
|
* os400: Provide options for libssh2 use in compile scripts. Adjust README.Patrick Monnerat2015-11-193-6/+35
|
* os400: adjust specific code to support new options.Patrick Monnerat2015-11-052-7/+30
|
* os400: include new options in wrappers and update ILE/RPG binding.Patrick Monnerat2015-08-243-0/+9
|
* os400: ebcdic wrappers for new functions. Upgrade ILE/RPG bindings.Patrick Monnerat2015-07-215-5/+110
|
* OpenVMS: VMS Software, Inc now the supplier.John Malmberg2015-07-011-2/+6
| | | | | | | | setup-vms.h: Symbol case fixups submitted by Michael Steve build_gnv_curl_pcsi_desc.com: VSI aka as VMS Software, is now the supplier of new versions of VMS. The install kit needs to accept VSI as a producer.
* build: removed bundles.c from make filesDan Fandrich2015-05-141-1/+1
| | | | This file was removed in commit fd137786
* OS400: Add SPNEGO service name options to ILE/RPG binding.Patrick Monnerat2015-05-053-4/+10
|
View Lorry Controller Status