aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2008-02-20"118 - Gautam Kachroo's issue with proxies and ssl" is now in CVSDaniel Stenberg
2008-02-20- Based on initial work done by Gautam Kachroo to address a bug, we now keepDaniel Stenberg
better control at the exact state of the connection's SSL status so that we know exactly when it has completed the SSL negotiation or not so that there won't be accidental re-uses of connections that are wrongly believed to be in SSL-completed-negotiate state.
2008-02-20- We no longer support setting the CURLOPT_URL option from inside a callbackDaniel Stenberg
such as the CURLOPT_SSL_CTX_FUNCTION one treat that as if it was a Location: following. The patch that introduced this feature was done for 7.11.0, but this code and functionality has been broken since about 7.15.4 (March 2006) with the introduction of non-blocking OpenSSL "connects". It was a hack to begin with and since it doesn't work and hasn't worked correctly for a long time and nobody has even noticed, I consider it a very suitable subject for plain removal. And so it was done.
2008-02-19applied patch to disable SSLv2 by default; discussion:Gunter Knauf
http://sourceforge.net/tracker/index.php?func=detail&aid=1767276&group_id=976&atid=350976 Submitted by Kaspar Brand.
2008-02-19Added test309 to test HTTP redirect to HTTPS URLDan Fandrich
2008-02-19juggle() actually returns bool.Yang Tse
Remove redundant and unreachable log message.
2008-02-19fix compiler warnings: 'statement is unreachable'Yang Tse
2008-02-19fix for new codestyle.Gunter Knauf
2008-02-19made changes to work with Win32;Gunter Knauf
replaced fstat() with stat() call and bail out if local file not found.
2008-02-19fix compiler warnings: 'enumerated type mixed with another type'Yang Tse
2008-02-18Reduce to 20 seconds the time allowed to set SO_REUSEADDR option on sockfilt ↵Yang Tse
listener socket. Log some more error descriptions.
2008-02-18https_getsock() should be static all over (and did some fixed indenting)Daniel Stenberg
2008-02-18the ca-bundle is now removedDaniel Stenberg
2008-02-18added makefile for MingW32 to build most of the samples.Gunter Knauf
2008-02-18moved sample program defines into separate Makefile.inc so that other ↵Gunter Knauf
makefiles can pick up the defines from there.
2008-02-18added check symbol for linking with POSIX prelude.Gunter Knauf
2008-02-18fix compiler warnings:Yang Tse
'enumerated type mixed with another type' and 'variable was set but never used'
2008-02-18just mention in --cacert that curl normally has a default ca cert path built-inDaniel Stenberg
2008-02-18the ca-bundle is no longer shippedDaniel Stenberg
2008-02-18- We're no longer providing a very old ca-bundle in the curl tarball. You canDaniel Stenberg
get a fresh one downloaded and created with 'make ca-bundle' or you can get one from here => http://curl.haxx.se/docs/caextract.html if you want a fresh new one extracted from Mozilla's recent list of ca certs. The configure option --with-ca-bundle now lets you specify what file to use as default ca bundle for your build. If not specified, the configure script will check a few known standard places for a global ca cert to use.
2008-02-17- Jerome Muffat-Meridol helped me fix Curl_done() to close the currentDaniel Stenberg
connection by force when it was called before the entire request is completed, simply because we can't know if the connection really can be re-used safely at that point.
2008-02-17rephrased commentDaniel Stenberg
2008-02-17In Curl_done() if premature is TRUE, it means this connection was said to beDaniel Stenberg
DONE before the entire request operation is complete and thus we can't know in what state it is for re-using, so we're forced to close it. In a perfect world we can add code that keep track of if we really must close it here or not, but currently we have no such detail knowledge. Jerome Muffat-Meridol helped us work this out.
2008-02-17don't do the GOT_NOTHING error check if the DONE function was called withDaniel Stenberg
premature set TRUE, which means it was done before the request comleted. It could then very well not have received any data.
2008-02-17added a comment about the ignoring of the Curl_done() return codeDaniel Stenberg
2008-02-17sockfilt will quit when orphanedYang Tse
2008-02-16oops, that was debug code not meant to be committed like this...Daniel Stenberg
2008-02-16fix warnings about shadowingDaniel Stenberg
2008-02-16seems that curently we dont need the imports from (l)ldapx.imp.Gunter Knauf
2008-02-16fixed linker def file for tools when compiled with gcc/nlmconv.Gunter Knauf
2008-02-16re-ordered the module dependency list;Gunter Knauf
removed unsused ldap module dependency since the module didnt autounload from protected address space.
2008-02-15- Made the gnutls code path not even try to get the server cert if no peerDaniel Stenberg
verification is requested. Previously it would even return failure if gnutls failed to get the server cert even though no verification was asked for. - Fix my Curl_timeleft() leftover mistake in the gnutls code
2008-02-15mention that we explicitly ignore the return codeDaniel Stenberg
2008-02-15log SSH public key authentication failure and reasonYang Tse
2008-02-15new mirror and mirror recount after cleansingDaniel Stenberg
2008-02-15- Pooyan McSporran found and fixed a flaw where you first would do a normalDaniel Stenberg
http request and then you'd reuse the handle and replace the Accept: header, as then libcurl would send two Accept: headers!
2008-02-15fixed version var.Gunter Knauf
2008-02-15moved info block up before help block so that it can also be displayed ↵Gunter Knauf
before help option; trial to add a version number.
2008-02-14added some files which were missing in release tarballs.Gunter Knauf
2008-02-14five current issues we should deal with somehow before the next releaseDaniel Stenberg
2008-02-13Updated some out-of-date information.Dan Fandrich
2008-02-13make this test disabled properly when built with yasslDaniel Stenberg
2008-02-13verifyserver() actually returns the pid of the unsecure http and ftp serversYang Tse
when verifying the https and ftps servers
2008-02-12On heavily loaded systems any test server start up can take longer than theYang Tse
timeout passed to startnew, when this happens startnew completes without being able to read the pidfile and consequently returns a zero pid2. To fix the above posibility the server pid is recovered from the verification stage which will actually return the server pid when verification is valid.
2008-02-12fix grammatical issuesYang Tse
2008-02-11Yang Tse pointed out a few remaining quirks from my timeout refactoring fromDaniel Stenberg
Feb 7 that didn't abort properly on timeouts. These are actually old problems but now they should be fixed.
2008-02-11shell startup scripts and possible influence in scp/sftp/socks testsYang Tse
2008-02-11Disable test due to keyword before disabling due to bad server.Dan Fandrich
2008-02-11open pipe to openssl commandline instead of writing into temp file.Gunter Knauf
2008-02-11Fixed unused variable warning.Dan Fandrich