diff options
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/Makefile.inc | 4 | ||||
| -rw-r--r-- | lib/Makefile.vc6 | 1 | ||||
| -rw-r--r-- | lib/config-os400.h | 5 | ||||
| -rw-r--r-- | lib/curl_setup.h | 4 | ||||
| -rw-r--r-- | lib/getinfo.c | 3 | ||||
| -rw-r--r-- | lib/hostcheck.c | 5 | ||||
| -rw-r--r-- | lib/setup-os400.h | 18 | ||||
| -rw-r--r-- | lib/urldata.h | 7 | ||||
| -rw-r--r-- | lib/vtls/qssl.c | 527 | ||||
| -rw-r--r-- | lib/vtls/qssl.h | 65 | ||||
| -rw-r--r-- | lib/vtls/vtls.c | 1 | ||||
| -rw-r--r-- | lib/vtls/vtls.h | 1 | ||||
| -rw-r--r-- | lib/x509asn1.c | 8 | ||||
| -rw-r--r-- | lib/x509asn1.h | 6 | 
14 files changed, 15 insertions, 640 deletions
| diff --git a/lib/Makefile.inc b/lib/Makefile.inc index 462d72a5f..cfbd3c7dd 100644 --- a/lib/Makefile.inc +++ b/lib/Makefile.inc @@ -21,10 +21,10 @@  ###########################################################################  LIB_VTLS_CFILES = vtls/openssl.c vtls/gtls.c vtls/vtls.c vtls/nss.c	\ -  vtls/qssl.c vtls/polarssl.c vtls/polarssl_threadlock.c vtls/axtls.c	\ +  vtls/polarssl.c vtls/polarssl_threadlock.c vtls/axtls.c		\    vtls/cyassl.c vtls/curl_schannel.c vtls/curl_darwinssl.c vtls/gskit.c -LIB_VTLS_HFILES = vtls/qssl.h vtls/openssl.h vtls/vtls.h vtls/gtls.h	\ +LIB_VTLS_HFILES = vtls/openssl.h vtls/vtls.h vtls/gtls.h		\    vtls/nssg.h vtls/polarssl.h vtls/polarssl_threadlock.h vtls/axtls.h	\    vtls/cyassl.h vtls/curl_schannel.h vtls/curl_darwinssl.h vtls/gskit.h diff --git a/lib/Makefile.vc6 b/lib/Makefile.vc6 index 2a80fc406..0edde28cf 100644 --- a/lib/Makefile.vc6 +++ b/lib/Makefile.vc6 @@ -599,7 +599,6 @@ X_OBJS= \  	$(DIROBJ)\polarssl_threadlock.obj \
  	$(DIROBJ)\pop3.obj \
  	$(DIROBJ)\progress.obj \
 -	$(DIROBJ)\qssl.obj \
  	$(DIROBJ)\rawstr.obj \
  	$(DIROBJ)\rtsp.obj \
  	$(DIROBJ)\security.obj \
 diff --git a/lib/config-os400.h b/lib/config-os400.h index e65e30acd..b6b29a525 100644 --- a/lib/config-os400.h +++ b/lib/config-os400.h @@ -7,7 +7,7 @@   *                            | (__| |_| |  _ <| |___   *                             \___|\___/|_| \_\_____|   * - * Copyright (C) 1998 - 2013, Daniel Stenberg, <daniel@haxx.se>, et al. + * Copyright (C) 1998 - 2014, Daniel Stenberg, <daniel@haxx.se>, et al.   *   * This software is licensed as described in the file COPYING, which   * you should have received as part of this distribution. The terms @@ -537,9 +537,6 @@  /* Define to the function return type for send. */  #define SEND_TYPE_RETV int -/* Define to use the QsoSSL package. */ -#undef USE_QSOSSL -  /* Define to use the GSKit package. */  #define USE_GSKIT diff --git a/lib/curl_setup.h b/lib/curl_setup.h index 173731c49..353b15fcb 100644 --- a/lib/curl_setup.h +++ b/lib/curl_setup.h @@ -7,7 +7,7 @@   *                            | (__| |_| |  _ <| |___   *                             \___|\___/|_| \_\_____|   * - * Copyright (C) 1998 - 2013, Daniel Stenberg, <daniel@haxx.se>, et al. + * Copyright (C) 1998 - 2014, Daniel Stenberg, <daniel@haxx.se>, et al.   *   * This software is licensed as described in the file COPYING, which   * you should have received as part of this distribution. The terms @@ -602,7 +602,7 @@ int netware_init(void);  #define LIBIDN_REQUIRED_VERSION "0.4.1"  #if defined(USE_GNUTLS) || defined(USE_SSLEAY) || defined(USE_NSS) || \ -    defined(USE_QSOSSL) || defined(USE_POLARSSL) || defined(USE_AXTLS) || \ +    defined(USE_POLARSSL) || defined(USE_AXTLS) || \      defined(USE_CYASSL) || defined(USE_SCHANNEL) || \      defined(USE_DARWINSSL) || defined(USE_GSKIT)  #define USE_SSL    /* SSL support has been enabled */ diff --git a/lib/getinfo.c b/lib/getinfo.c index 8905d3613..4c3dc1387 100644 --- a/lib/getinfo.c +++ b/lib/getinfo.c @@ -312,9 +312,6 @@ static CURLcode getinfo_slist(struct SessionHandle *data, CURLINFO info,  #ifdef USE_NSS        internals = conn->ssl[sockindex].handle;  #endif -#ifdef USE_QSOSSL -      internals = conn->ssl[sockindex].handle; -#endif  #ifdef USE_GSKIT        internals = conn->ssl[sockindex].handle;  #endif diff --git a/lib/hostcheck.c b/lib/hostcheck.c index 42eb2ee77..21af8fa1c 100644 --- a/lib/hostcheck.c +++ b/lib/hostcheck.c @@ -22,8 +22,7 @@  #include "curl_setup.h" -#if defined(USE_SSLEAY) || defined(USE_AXTLS) || defined(USE_QSOSSL) || \ -    defined(USE_GSKIT) +#if defined(USE_SSLEAY) || defined(USE_AXTLS) || defined(USE_GSKIT)  /* these backends use functions from this file */  #ifdef HAVE_NETINET_IN_H @@ -145,4 +144,4 @@ int Curl_cert_hostcheck(const char *match_pattern, const char *hostname)    return res;  } -#endif /* SSLEAY or AXTLS or QSOSSL or GSKIT */ +#endif /* SSLEAY or AXTLS or GSKIT */ diff --git a/lib/setup-os400.h b/lib/setup-os400.h index 0331464e4..fae8567df 100644 --- a/lib/setup-os400.h +++ b/lib/setup-os400.h @@ -7,7 +7,7 @@   *                            | (__| |_| |  _ <| |___   *                             \___|\___/|_| \_\_____|   * - * Copyright (C) 1998 - 2013, Daniel Stenberg, <daniel@haxx.se>, et al. + * Copyright (C) 1998 - 2014, Daniel Stenberg, <daniel@haxx.se>, et al.   *   * This software is licensed as described in the file COPYING, which   * you should have received as part of this distribution. The terms @@ -37,7 +37,6 @@ typedef unsigned long   u_int32_t;  #include <sys/socket.h>  #include <netdb.h> -#include <qsossl.h>  #include <gskssl.h>  #include <qsoasync.h>  #include <gssapi.h> @@ -57,21 +56,6 @@ extern int      Curl_getnameinfo_a(const struct sockaddr * sa,  #define getnameinfo             Curl_getnameinfo_a -/* SSL wrappers. */ - -extern int      Curl_SSL_Init_Application_a(SSLInitApp * init_app); -#define SSL_Init_Application    Curl_SSL_Init_Application_a - - -extern int      Curl_SSL_Init_a(SSLInit * init); -#define SSL_Init                Curl_SSL_Init_a - - -extern char *   Curl_SSL_Strerror_a(int sslreturnvalue, -                                    SSLErrorMsg * serrmsgp); -#define SSL_Strerror            Curl_SSL_Strerror_a - -  /* GSKit wrappers. */  extern int      Curl_gsk_environment_open(gsk_handle * my_env_handle); diff --git a/lib/urldata.h b/lib/urldata.h index fd59d781d..e9ddf30b8 100644 --- a/lib/urldata.h +++ b/lib/urldata.h @@ -138,10 +138,6 @@  #include <pk11pub.h>  #endif -#ifdef USE_QSOSSL -#include <qsossl.h> -#endif -  #ifdef USE_GSKIT  #include <gskssl.h>  #endif @@ -328,9 +324,6 @@ struct ssl_connect_data {    PK11GenericObject *obj_clicert;    ssl_connect_state connecting_state;  #endif /* USE_NSS */ -#ifdef USE_QSOSSL -  SSLHandle *handle; -#endif /* USE_QSOSSL */  #ifdef USE_GSKIT    gsk_handle handle;    int iocport; diff --git a/lib/vtls/qssl.c b/lib/vtls/qssl.c deleted file mode 100644 index 4c320538e..000000000 --- a/lib/vtls/qssl.c +++ /dev/null @@ -1,527 +0,0 @@ -/*************************************************************************** - *                                  _   _ ____  _ - *  Project                     ___| | | |  _ \| | - *                             / __| | | | |_) | | - *                            | (__| |_| |  _ <| |___ - *                             \___|\___/|_| \_\_____| - * - * Copyright (C) 1998 - 2013, Daniel Stenberg, <daniel@haxx.se>, et al. - * - * This software is licensed as described in the file COPYING, which - * you should have received as part of this distribution. The terms - * are also available at http://curl.haxx.se/docs/copyright.html. - * - * You may opt to use, copy, modify, merge, publish, distribute and/or sell - * copies of the Software, and permit persons to whom the Software is - * furnished to do so, under the terms of the COPYING file. - * - * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY - * KIND, either express or implied. - * - ***************************************************************************/ - -#include "curl_setup.h" - -#ifdef USE_QSOSSL - -#include <qsossl.h> - -#ifdef HAVE_LIMITS_H -#  include <limits.h> -#endif - -#include <curl/curl.h> -#include "urldata.h" -#include "sendf.h" -#include "qssl.h" -#include "vtls.h" -#include "connect.h" /* for the connect timeout */ -#include "select.h" -#include "x509asn1.h" -#include "curl_memory.h" -/* The last #include file should be: */ -#include "memdebug.h" - - -int Curl_qsossl_init(void) - -{ -  /* Nothing to do here. We must have connection data to initialize ssl, so -   * defer. -   */ - -  return 1; -} - - -void Curl_qsossl_cleanup(void) - -{ -  /* Nothing to do. */ -} - - -static CURLcode Curl_qsossl_init_session(struct SessionHandle * data) - -{ -  int rc; -  char * certname; -  SSLInit initstr; -  SSLInitApp initappstr; - -  /* Initialize the job for SSL according to the current parameters. -   * QsoSSL offers two ways to do it: SSL_Init_Application() that uses an -   *  application identifier to select certificates in the main certificate -   *  store, and SSL_Init() that uses named keyring files and a password. -   * It is not possible to have different keyrings for the CAs and the -   *  local certificate. We thus use the certificate name to identify the -   *  keyring if given, else the CA file name. -   * If the key file name is given, it is taken as the password for the -   *  keyring in certificate file. -   * We first try to SSL_Init_Application(), then SSL_Init() if it failed. -   */ - -  certname = data->set.str[STRING_CERT]; - -  if(!certname) { -    certname = data->set.str[STRING_SSL_CAFILE]; - -    if(!certname) -      return CURLE_OK;          /* Use previous setup. */ -    } - -  memset((char *) &initappstr, 0, sizeof initappstr); -  initappstr.applicationID = certname; -  initappstr.applicationIDLen = strlen(certname); -  initappstr.protocol = SSL_VERSION_CURRENT;    /* TLSV1 compat. SSLV[23]. */ -  initappstr.sessionType = SSL_REGISTERED_AS_CLIENT; -  rc = SSL_Init_Application(&initappstr); - -  if(rc == SSL_ERROR_NOT_REGISTERED) { -    initstr.keyringFileName = certname; -    initstr.keyringPassword = data->set.str[STRING_KEY]; -    initstr.cipherSuiteList = NULL;    /* Use default. */ -    initstr.cipherSuiteListLen = 0; -    rc = SSL_Init(&initstr); -    } - -  switch (rc) { - -  case 0:                             /* No error. */ -    break; - -  case SSL_ERROR_IO: -    failf(data, "SSL_Init() I/O error: %s", strerror(errno)); -    return CURLE_SSL_CONNECT_ERROR; - -  case SSL_ERROR_BAD_CIPHER_SUITE: -    return CURLE_SSL_CIPHER; - -  case SSL_ERROR_KEYPASSWORD_EXPIRED: -  case SSL_ERROR_NOT_REGISTERED: -    return CURLE_SSL_CONNECT_ERROR; - -  case SSL_ERROR_NO_KEYRING: -    return CURLE_SSL_CACERT; - -  case SSL_ERROR_CERT_EXPIRED: -    return CURLE_SSL_CERTPROBLEM; - -  default: -    failf(data, "SSL_Init(): %s", SSL_Strerror(rc, NULL)); -    return CURLE_SSL_CONNECT_ERROR; -  } - -  return CURLE_OK; -} - - -static CURLcode Curl_qsossl_create(struct connectdata * conn, int sockindex) - -{ -  SSLHandle * h; -  struct ssl_connect_data * connssl = &conn->ssl[sockindex]; - -  h = SSL_Create(conn->sock[sockindex], SSL_ENCRYPT); - -  if(!h) { -    failf(conn->data, "SSL_Create() I/O error: %s", strerror(errno)); -    return CURLE_SSL_CONNECT_ERROR; -  } - -  connssl->handle = h; -  return CURLE_OK; -} - - -static int Curl_qsossl_trap_cert(SSLHandle * h) - -{ -  return 1;       /* Accept certificate. */ -} - - -static CURLcode Curl_qsossl_handshake(struct connectdata * conn, int sockindex) - -{ -  int rc; -  struct SessionHandle * data = conn->data; -  struct ssl_connect_data * connssl = &conn->ssl[sockindex]; -  SSLHandle * h = connssl->handle; -  long timeout_ms; - -  h->exitPgm = data->set.ssl.verifypeer? NULL: Curl_qsossl_trap_cert; - -  /* figure out how long time we should wait at maximum */ -  timeout_ms = Curl_timeleft(data, NULL, TRUE); - -  if(timeout_ms < 0) { -    /* time-out, bail out, go home */ -    failf(data, "Connection time-out"); -    return CURLE_OPERATION_TIMEDOUT; -  } - -  /* SSL_Handshake() timeout resolution is second, so round up. */ -  h->timeout = (timeout_ms + 1000 - 1) / 1000; - -  /* Set-up protocol. */ - -  switch (data->set.ssl.version) { - -  default: -  case CURL_SSLVERSION_DEFAULT: -    h->protocol = SSL_VERSION_CURRENT;          /* TLSV1 compat. SSLV[23]. */ -    break; - -  case CURL_SSLVERSION_TLSv1: -    h->protocol = TLS_VERSION_1; -    break; - -  case CURL_SSLVERSION_SSLv2: -    h->protocol = SSL_VERSION_2; -    break; - -  case CURL_SSLVERSION_SSLv3: -    h->protocol = SSL_VERSION_3; -    break; - -  case CURL_SSLVERSION_TLSv1_0: -  case CURL_SSLVERSION_TLSv1_1: -  case CURL_SSLVERSION_TLSv1_2: -    failf(data, "TLS minor version cannot be set"); -    return CURLE_SSL_CONNECT_ERROR; -  } - -  h->peerCert = NULL; -  h->peerCertLen = 0; -  rc = SSL_Handshake(h, SSL_HANDSHAKE_AS_CLIENT); - -  switch (rc) { - -  case 0:                             /* No error. */ -    break; - -  case SSL_ERROR_BAD_CERTIFICATE: -  case SSL_ERROR_BAD_CERT_SIG: -  case SSL_ERROR_NOT_TRUSTED_ROOT: -    return CURLE_PEER_FAILED_VERIFICATION; - -  case SSL_ERROR_BAD_CIPHER_SUITE: -  case SSL_ERROR_NO_CIPHERS: -    return CURLE_SSL_CIPHER; - -  case SSL_ERROR_CERTIFICATE_REJECTED: -  case SSL_ERROR_CERT_EXPIRED: -  case SSL_ERROR_NO_CERTIFICATE: -    return CURLE_SSL_CERTPROBLEM; - -  case SSL_ERROR_IO: -    failf(data, "SSL_Handshake() I/O error: %s", strerror(errno)); -    return CURLE_SSL_CONNECT_ERROR; - -  default: -    failf(data, "SSL_Handshake(): %s", SSL_Strerror(rc, NULL)); -    return CURLE_SSL_CONNECT_ERROR; -  } - -  /* Verify host. */ -  rc = Curl_verifyhost(conn, h->peerCert, h->peerCert + h->peerCertLen); -  if(rc != CURLE_OK) -    return rc; - -  /* Gather certificate info. */ -  if(data->set.ssl.certinfo) { -    if(Curl_ssl_init_certinfo(data, 1)) -      return CURLE_OUT_OF_MEMORY; -    if(h->peerCert) { -      rc = Curl_extract_certinfo(conn, 0, h->peerCert, -                                 h->peerCert + h->peerCertLen); -      if(rc != CURLE_OK) -        return rc; -    } -  } - -  return CURLE_OK; -} - - -static Curl_recv qsossl_recv; -static Curl_send qsossl_send; - -CURLcode Curl_qsossl_connect(struct connectdata * conn, int sockindex) - -{ -  struct SessionHandle * data = conn->data; -  struct ssl_connect_data * connssl = &conn->ssl[sockindex]; -  int rc; - -  rc = Curl_qsossl_init_session(data); - -  if(rc == CURLE_OK) { -    rc = Curl_qsossl_create(conn, sockindex); - -    if(rc == CURLE_OK) { -      rc = Curl_qsossl_handshake(conn, sockindex); -      if(rc != CURLE_OK) -        SSL_Destroy(connssl->handle); -    } -  } - -  if(rc == CURLE_OK) { -    conn->recv[sockindex] = qsossl_recv; -    conn->send[sockindex] = qsossl_send; -    connssl->state = ssl_connection_complete; -  } -  else { -    connssl->handle = NULL; -    connssl->use = FALSE; -    connssl->state = ssl_connection_none; -  } - -  return rc; -} - - -static int Curl_qsossl_close_one(struct ssl_connect_data * conn, -                                 struct SessionHandle * data) - -{ -  int rc; - -  if(!conn->handle) -    return 0; - -  rc = SSL_Destroy(conn->handle); - -  if(rc) { -    if(rc == SSL_ERROR_IO) { -      failf(data, "SSL_Destroy() I/O error: %s", strerror(errno)); -      return -1; -    } - -    /* An SSL error. */ -    failf(data, "SSL_Destroy() returned error %s", SSL_Strerror(rc, NULL)); -    return -1; -  } - -  conn->handle = NULL; -  return 0; -} - - -void Curl_qsossl_close(struct connectdata *conn, int sockindex) - -{ -  struct SessionHandle *data = conn->data; -  struct ssl_connect_data *connssl = &conn->ssl[sockindex]; - -  if(connssl->use) -    (void) Curl_qsossl_close_one(connssl, data); -} - - -int Curl_qsossl_close_all(struct SessionHandle * data) - -{ -  /* Unimplemented. */ -  (void) data; -  return 0; -} - - -int Curl_qsossl_shutdown(struct connectdata * conn, int sockindex) - -{ -  struct ssl_connect_data * connssl = &conn->ssl[sockindex]; -  struct SessionHandle *data = conn->data; -  ssize_t nread; -  int what; -  int rc; -  char buf[120]; - -  if(!connssl->handle) -    return 0; - -  if(data->set.ftp_ccc != CURLFTPSSL_CCC_ACTIVE) -    return 0; - -  if(Curl_qsossl_close_one(connssl, data)) -    return -1; - -  rc = 0; - -  what = Curl_socket_ready(conn->sock[sockindex], -                           CURL_SOCKET_BAD, SSL_SHUTDOWN_TIMEOUT); - -  for(;;) { -    if(what < 0) { -      /* anything that gets here is fatally bad */ -      failf(data, "select/poll on SSL socket, errno: %d", SOCKERRNO); -      rc = -1; -      break; -    } - -    if(!what) {                                /* timeout */ -      failf(data, "SSL shutdown timeout"); -      break; -    } - -    /* Something to read, let's do it and hope that it is the close -       notify alert from the server. No way to SSL_Read now, so use read(). */ - -    nread = read(conn->sock[sockindex], buf, sizeof(buf)); - -    if(nread < 0) { -      failf(data, "read: %s", strerror(errno)); -      rc = -1; -    } - -    if(nread <= 0) -      break; - -    what = Curl_socket_ready(conn->sock[sockindex], CURL_SOCKET_BAD, 0); -  } - -  return rc; -} - - -static ssize_t qsossl_send(struct connectdata * conn, int sockindex, -                           const void * mem, size_t len, CURLcode * curlcode) - -{ -  /* SSL_Write() is said to return 'int' while write() and send() returns -     'size_t' */ -  int rc; - -  rc = SSL_Write(conn->ssl[sockindex].handle, (void *) mem, (int) len); - -  if(rc < 0) { -    switch(rc) { - -    case SSL_ERROR_BAD_STATE: -      /* The operation did not complete; the same SSL I/O function -         should be called again later. This is basically an EWOULDBLOCK -         equivalent. */ -      *curlcode = CURLE_AGAIN; -      return -1; - -    case SSL_ERROR_IO: -      switch (errno) { -      case EWOULDBLOCK: -      case EINTR: -        *curlcode = CURLE_AGAIN; -        return -1; -        } - -      failf(conn->data, "SSL_Write() I/O error: %s", strerror(errno)); -      *curlcode = CURLE_SEND_ERROR; -      return -1; -    } - -    /* An SSL error. */ -    failf(conn->data, "SSL_Write() returned error %s", -          SSL_Strerror(rc, NULL)); -    *curlcode = CURLE_SEND_ERROR; -    return -1; -  } - -  return (ssize_t) rc; /* number of bytes */ -} - - -static ssize_t qsossl_recv(struct connectdata * conn, int num, char * buf, -                           size_t buffersize, CURLcode * curlcode) - -{ -  char error_buffer[120]; /* OpenSSL documents that this must be at -                             least 120 bytes long. */ -  unsigned long sslerror; -  int buffsize; -  int nread; - -  buffsize = (buffersize > (size_t)INT_MAX) ? INT_MAX : (int)buffersize; -  nread = SSL_Read(conn->ssl[num].handle, buf, buffsize); - -  if(nread < 0) { -    /* failed SSL_read */ - -    switch (nread) { - -    case SSL_ERROR_BAD_STATE: -      /* there's data pending, re-invoke SSL_Read(). */ -      *curlcode = CURLE_AGAIN; -      return -1; - -    case SSL_ERROR_IO: -      switch (errno) { -      case EWOULDBLOCK: -        *curlcode = CURLE_AGAIN; -        return -1; -        } - -      failf(conn->data, "SSL_Read() I/O error: %s", strerror(errno)); -      *curlcode = CURLE_RECV_ERROR; -      return -1; - -    default: -      failf(conn->data, "SSL read error: %s", SSL_Strerror(nread, NULL)); -      *curlcode = CURLE_RECV_ERROR; -      return -1; -    } -  } -  return (ssize_t) nread; -} - - -size_t Curl_qsossl_version(char * buffer, size_t size) - -{ -  strncpy(buffer, "IBM OS/400 SSL", size); -  return strlen(buffer); -} - - -int Curl_qsossl_check_cxn(struct connectdata * cxn) - -{ -  int err; -  int errlen; - -  /* The only thing that can be tested here is at the socket level. */ - -  if(!cxn->ssl[FIRSTSOCKET].handle) -    return 0; /* connection has been closed */ - -  err = 0; -  errlen = sizeof err; - -  if(getsockopt(cxn->sock[FIRSTSOCKET], SOL_SOCKET, SO_ERROR, -                 (unsigned char *) &err, &errlen) || -      errlen != sizeof err || err) -    return 0; /* connection has been closed */ - -  return -1;  /* connection status unknown */ -} - -#endif /* USE_QSOSSL */ diff --git a/lib/vtls/qssl.h b/lib/vtls/qssl.h deleted file mode 100644 index 07edb67e0..000000000 --- a/lib/vtls/qssl.h +++ /dev/null @@ -1,65 +0,0 @@ -#ifndef HEADER_CURL_QSSL_H -#define HEADER_CURL_QSSL_H -/*************************************************************************** - *                                  _   _ ____  _ - *  Project                     ___| | | |  _ \| | - *                             / __| | | | |_) | | - *                            | (__| |_| |  _ <| |___ - *                             \___|\___/|_| \_\_____| - * - * Copyright (C) 1998 - 2014, Daniel Stenberg, <daniel@haxx.se>, et al. - * - * This software is licensed as described in the file COPYING, which - * you should have received as part of this distribution. The terms - * are also available at http://curl.haxx.se/docs/copyright.html. - * - * You may opt to use, copy, modify, merge, publish, distribute and/or sell - * copies of the Software, and permit persons to whom the Software is - * furnished to do so, under the terms of the COPYING file. - * - * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY - * KIND, either express or implied. - * - ***************************************************************************/ -#include "curl_setup.h" - -/* - * This header should only be needed to get included by vtls.c and qssl.c - */ - -#include "urldata.h" - -#ifdef USE_QSOSSL -int Curl_qsossl_init(void); -void Curl_qsossl_cleanup(void); -CURLcode Curl_qsossl_connect(struct connectdata * conn, int sockindex); -void Curl_qsossl_close(struct connectdata *conn, int sockindex); -int Curl_qsossl_close_all(struct SessionHandle * data); -int Curl_qsossl_shutdown(struct connectdata * conn, int sockindex); - -size_t Curl_qsossl_version(char * buffer, size_t size); -int Curl_qsossl_check_cxn(struct connectdata * cxn); - -/* this backend supports CURLOPT_CERTINFO */ -#define have_curlssl_certinfo 1 - -/* API setup for QsoSSL */ -#define curlssl_init Curl_qsossl_init -#define curlssl_cleanup Curl_qsossl_cleanup -#define curlssl_connect Curl_qsossl_connect - -/*  No session handling for QsoSSL */ -#define curlssl_session_free(x) Curl_nop_stmt -#define curlssl_close_all Curl_qsossl_close_all -#define curlssl_close Curl_qsossl_close -#define curlssl_shutdown(x,y) Curl_qsossl_shutdown(x,y) -#define curlssl_set_engine(x,y) CURLE_NOT_BUILT_IN -#define curlssl_set_engine_default(x) CURLE_NOT_BUILT_IN -#define curlssl_engines_list(x) NULL -#define curlssl_version Curl_qsossl_version -#define curlssl_check_cxn(x) Curl_qsossl_check_cxn(x) -#define curlssl_data_pending(x,y) 0 -#define CURL_SSL_BACKEND CURLSSLBACKEND_QSOSSL -#endif /* USE_QSOSSL */ - -#endif /* HEADER_CURL_QSSL_H */ diff --git a/lib/vtls/vtls.c b/lib/vtls/vtls.c index bd1af0133..7d9894449 100644 --- a/lib/vtls/vtls.c +++ b/lib/vtls/vtls.c @@ -31,7 +31,6 @@     Curl_ossl_ - prefix for OpenSSL ones     Curl_gtls_ - prefix for GnuTLS ones     Curl_nss_ - prefix for NSS ones -   Curl_qssl_ - prefix for QsoSSL ones     Curl_gskit_ - prefix for GSKit ones     Curl_polarssl_ - prefix for PolarSSL ones     Curl_cyassl_ - prefix for CyaSSL ones diff --git a/lib/vtls/vtls.h b/lib/vtls/vtls.h index 217b1d358..4c29d98a2 100644 --- a/lib/vtls/vtls.h +++ b/lib/vtls/vtls.h @@ -26,7 +26,6 @@  #include "openssl.h" /* OpenSSL versions */  #include "gtls.h"   /* GnuTLS versions */  #include "nssg.h"   /* NSS versions */ -#include "qssl.h"   /* QSOSSL versions */  #include "gskit.h"  /* Global Secure ToolKit versions */  #include "polarssl.h" /* PolarSSL versions */  #include "axtls.h"  /* axTLS versions */ diff --git a/lib/x509asn1.c b/lib/x509asn1.c index 1f87155a6..31ea5de00 100644 --- a/lib/x509asn1.c +++ b/lib/x509asn1.c @@ -22,7 +22,7 @@  #include "curl_setup.h" -#if defined(USE_QSOSSL) || defined(USE_GSKIT) || defined(USE_NSS) +#if defined(USE_GSKIT) || defined(USE_NSS)  #include <curl/curl.h>  #include "urldata.h" @@ -1019,9 +1019,9 @@ CURLcode Curl_extract_certinfo(struct connectdata * conn,    return CURLE_OK;  } -#endif /* USE_QSOSSL or USE_GSKIT or USE_NSS */ +#endif /* USE_GSKIT or USE_NSS */ -#if defined(USE_QSOSSL) || defined(USE_GSKIT) +#if defined(USE_GSKIT)  static const char * checkOID(const char * beg, const char * end,                               const char * oid) @@ -1180,4 +1180,4 @@ CURLcode Curl_verifyhost(struct connectdata * conn,    return CURLE_PEER_FAILED_VERIFICATION;  } -#endif /* USE_QSOSSL or USE_GSKIT */ +#endif /* USE_GSKIT */ diff --git a/lib/x509asn1.h b/lib/x509asn1.h index 1741d6dca..274d728b7 100644 --- a/lib/x509asn1.h +++ b/lib/x509asn1.h @@ -8,7 +8,7 @@   *                            | (__| |_| |  _ <| |___   *                             \___|\___/|_| \_\_____|   * - * Copyright (C) 1998 - 2013, Daniel Stenberg, <daniel@haxx.se>, et al. + * Copyright (C) 1998 - 2014, Daniel Stenberg, <daniel@haxx.se>, et al.   *   * This software is licensed as described in the file COPYING, which   * you should have received as part of this distribution. The terms @@ -25,7 +25,7 @@  #include "curl_setup.h" -#if defined(USE_QSOSSL) || defined(USE_GSKIT) || defined(USE_NSS) +#if defined(USE_GSKIT) || defined(USE_NSS)  #include "urldata.h" @@ -125,5 +125,5 @@ CURLcode Curl_extract_certinfo(struct connectdata * conn, int certnum,  CURLcode Curl_verifyhost(struct connectdata * conn,                           const char * beg, const char * end); -#endif /* USE_QSOSSL or USE_GSKIT or USE_NSS */ +#endif /* USE_GSKIT or USE_NSS */  #endif /* HEADER_CURL_X509ASN1_H */ | 
