aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-02-24winssl: Enable hostname verification of IP address using SAN or CNDavid Ryskalczyk
Original commit message was: Don't omit CN verification in SChannel when an IP address is used. Side-effect of this change: SChannel and CryptoAPI do not support the iPAddress subjectAltName according to RFC 2818. If present, SChannel will first compare the IP address to the dNSName subjectAltNames and then fallback to the most specific Common Name in the Subject field of the certificate. This means that after this change curl will not connect to SSL/TLS hosts as long as the IP address is not specified in the SAN or CN of the server certificate or the verifyhost option is disabled.
2014-02-24tool_operate: Moved easy handle cleanup into tool_mainSteve Holme
2014-02-24tool_hugehelp: partially reverted 24e22e10Marc Hoersken
Compilation was not possible if manuel is disabled due this error: error: macro "hugehelp" passed 1 arguments, but takes just 0 void hugehelp(void) {}
2014-02-24tool_main: Moved easy handle into global config structureSteve Holme
2014-02-23Don't omit CN verification in DarwinSSL when an IP address is used.David Ryskalczyk
2014-02-23tool: Fixed line longer than 79 characters from commit 705a4cb549Steve Holme
2014-02-23tool_main: Corrected typo from commit d6b9f054e9 in Symbian codeSteve Holme
2014-02-23tool_main: Moved OperateConfig cleanup into main_free()Steve Holme
2014-02-23tool_main: Moved initial OperateConfig creation into main_init()Steve Holme
2014-02-23tool_cfgable: Added global config structureSteve Holme
2014-02-23tool_cfgable: Renamed Configurable structure to OperationConfigSteve Holme
To allow for the addition of a global config structure and prevent confusion between the two.
2014-02-23tool: Fixed incorrect return code with --version from commit c10bf9bb36Steve Holme
2014-02-23RELEASE-NOTES: Synced with 8c80840d01Steve Holme
2014-02-23tool_getparam: Moved tool_help() call into operate()Steve Holme
2014-02-23tool_getparam: Moved hugehelp() call into operate()Steve Holme
2014-02-23tool_getparam: Moved tool_version_info() call into operate()Steve Holme
2014-02-22tool_cfgable: Removed list_engine flag from config structureSteve Holme
In preparation for separating the global config options from the per operation config options, reworked the list engines code to not use a member variable in the Configurable structure.
2014-02-22tool_operate: Start to use CURLcode rather than int for return codesSteve Holme
To help assist with the detection of incorrect return codes, as per commits ee23d13a79, 33b8960dc8 and aba98991a5, updated the operate based functions to return CURLcode error codes.
2014-02-22tool: Fixed incorrect return code when setting HTTP request failsSteve Holme
During initialisation SetHTTPrequest() may fail and cURL would return PARAM_BAD_USE, which is equivalent to CURLE_NOT_BUILT_IN in cURL error terms. Instead, return CURLE_FAILED_INIT as we do for other functions that may fail during initialisation.
2014-02-22tool_getparam: Moved version information into separate function in tool_helpSteve Holme
2014-02-22tool_operhlp.h: Fixed compilation warningSteve Holme
warning: 'struct Configurable' declared inside parameter list
2014-02-22tool_operhlp: Consolidated engine output code into tool_helpSteve Holme
2014-02-22tool_operate: Moved list engines into separate function in tool_helpSteve Holme
2014-02-22RELEASE-NOTES: added note about impact of changes to WinSSL defaultsMarc Hoersken
2014-02-22stunnel: regenerated self-signed test certificate with SHA1 hashMarc Hoersken
The previous test certificate contained a MD5 hash which is not supported using TLSv1.2 with Schannel on Windows 7 or newer. See the update to this blog post on IEInternals / MSDN: http://blogs.msdn.com/b/ieinternals/archive/2011/03/25/ misbehaving-https-servers-impair-tls-1.1-and-tls-1.2.aspx "Update: If the server negotiates a TLS1.2 connection with a Windows 7 or 8 schannel.dll-using client application, and it provides a certificate chain which uses the (weak) MD5 hash algorithm, the client will abort the connection (TCP/IP FIN) upon receipt of the certificate."
2014-02-22easy: Fixed a memory leak on OOM conditionDan Fandrich
2014-02-20tool_paramhlp: Fixed compilation warningsSteve Holme
declaration of 'index' shadows a global declaration
2014-02-19lib1515.c: Fixed #include path in commit 647f83e809Steve Holme
2014-02-19test1515: fix compilation with msvcMaks Naumov
... or any other systems lacking a native snprintf
2014-02-19SFTP: skip reading the dir when NOBODY=1Daniel Stenberg
When asking for an SFTP directory with NOBODY set, no directory contents should be retrieved. Bug: http://curl.haxx.se/mail/lib-2014-02/0155.html
2014-02-18axtls: comment the call ssl_read repeatedly loopDan Fandrich
2014-02-18curl.1: update the description of --tlsv1Kamil Dudka
... and mention the --tlsv1.[0-2] options in the --tslv1 entry Reported-by: Hubert Kario
2014-02-18curl_version.3: recommend using curl_version_info() insteadDaniel Stenberg
2014-02-18curl_version_info.3: added *HTTP2Daniel Stenberg
... and edited language slightly
2014-02-18curl_multi_assign.3: updated languageDaniel Stenberg
2014-02-18libcurl.3: edited slightly to improve readabilityDaniel Stenberg
2014-02-18curl_easy_perform.3: extended and clarifiedDaniel Stenberg
2014-02-18curl_multi_add_handle.3: clarify multi vs easy useDaniel Stenberg
it is only WHILE added to a multi handle that it can't be used with the easy interface
2014-02-17http2: Support HTTP POST/PUTTatsuhiro Tsujikawa
This patch enables HTTP POST/PUT in HTTP2. We disabled Expect header field and chunked transfer encoding since HTTP2 forbids them. In HTTP1, Curl sends small upload data with request headers, but HTTP2 requires upload data must be in DATA frame separately. So we added some conditionals to achieve this.
2014-02-17RELEASE-NOTES: synced with 854aca5420fDaniel Stenberg
2014-02-17multi: ignore sigpipe internallyDaniel Stenberg
When the multi API is used we must also ignore SIGPIPE signals when caused by things we do, like they can easily be generated by OpenSSL.
2014-02-17tests: Made the crypto test feature usableDan Fandrich
This feature specifies the availability of cryptographic authentication, which can be disabled at compile-time
2014-02-17configure: Fix the --disable-crypto-auth optionDan Fandrich
It now disables NTLM and GSS authentication methods, and produces compilable code when SSL is enabled.
2014-02-17curl_multi_setopt.3: clarify CURLMOPT_MAXCONNECTSDaniel Stenberg
2014-02-17ConnectionDone: default maxconnects to 4 x number of easy handlesShao Shuchao
... as documented!
2014-02-17examples: remove all use of CURLM_CALL_MULTI_PERFORMDaniel Stenberg
... since it is never returned since a long while back.
2014-02-16curl_easy_setopt.3: Add another non-matching hostnameColin Hogben
For the avoidance of doubt, show a domain which contains the no-proxy pattern but not at the top level.
2014-02-16axtls: bump copyright yearDaniel Stenberg
2014-02-16axtls: call ssl_read repeatedlyFabian Frank
Perform more work in between sleeps. This is work around the fact that axtls does not expose any knowledge about when work needs to be performed. Depending on connection and how often perform is being called this can save ~25% of time on SSL handshakes (measured on 20ms latency connection calling perform roughly every 10ms).
2014-02-16url_easy_setopt.3: Add undocumented values of curl_infotypeYehezkel Horowitz
... for debug function
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-12 11:17:35 +0000