Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-06-22 | internals: rename the SessionHandle struct to Curl_easy | Daniel Stenberg | |
2016-03-25 | vauth: Moved the NTLM authentication code to the new vauth directory | Steve Holme | |
2016-03-25 | vauth: Moved the Kerberos V5 authentication code to the new vauth directory | Steve Holme | |
2016-03-25 | vauth: Moved the DIGEST authentication code to the new vauth directory | Steve Holme | |
2016-03-25 | vauth: Moved Curl_sasl_build_spn() to create the initial vauth source files | Steve Holme | |
2016-03-12 | digest: Use boolean based success code for Curl_sasl_digest_get_pair() | Steve Holme | |
Rather than use a 0 and 1 integer base result code use a TRUE / FALSE based success code. | |||
2016-02-03 | URLs: change all http:// URLs to https:// | Daniel Stenberg | |
2015-11-15 | oauth2: Support OAUTHBEARER failures sent as continuation responses | Steve Holme | |
According to RFC7628 a failure message may be sent by the server in a base64 encoded JSON string as a continuation response. Currently only implemented for OAUTHBEARER and not XAUTH2. | |||
2015-11-14 | oauth2: Added support for OAUTHBEARER SASL mechanism to IMAP, POP3 and SNMP | Steve Holme | |
OAUTHBEARER is now the official "registered" SASL mechanism name for OAuth 2.0. However, we don't want to drop support for XOAUTH2 as some servers won't support the new mechanism yet. | |||
2015-11-12 | sasl: Re-introduced XOAUTH2 in the default enabled authentication mechanism | Steve Holme | |
Following the fix in commit d6d58dd558 it is necessary to re-introduce XOAUTH2 in the default enabled authentication mechanism, which was removed in commit 7b2012f262, otherwise users will have to specify AUTH=XOAUTH2 in the URL. Note: OAuth 2.0 will only be used when the bearer is specified. | |||
2015-11-12 | oauth2: Re-factored OAuth 2.0 state variable | Steve Holme | |
2015-08-31 | sasl: Only define Curl_sasl_digest_get_pair() when CRYPTO_AUTH enabled | Steve Holme | |
Introduced in commit 59f3f92ba6 this function is only implemented when CURL_DISABLE_CRYPTO_AUTH is not defined. As such we shouldn't define the function in the header file either. | |||
2015-08-31 | sasl: Updated SPN variables and comments for consistency | Steve Holme | |
In places the "host name" and "realm" variable was referred to as "instance" whilst in others it was referred to as "host". | |||
2015-04-26 | sasl_sspi: Populate domain from the realm in the challenge | Grant Pannell | |
Without this, SSPI based digest auth was broken. Bug: https://github.com/bagder/curl/pull/141.patch | |||
2015-01-27 | sasl: remove XOAUTH2 from default enabled authentication mechanism. | Patrick Monnerat | |
2015-01-27 | sasl: implement EXTERNAL authentication mechanism. | Patrick Monnerat | |
Its use is only enabled by explicit requirement in URL (;AUTH=EXTERNAL) and by not setting the password. | |||
2015-01-22 | curl_sasl: Minor code policing following recent commits | Steve Holme | |
2015-01-20 | SASL: make some procedures local-scoped | Patrick Monnerat | |
2015-01-20 | SASL: common state engine for imap/pop3/smtp | Patrick Monnerat | |
2015-01-20 | SASL: common URL option and auth capabilities decoders for all protocols | Patrick Monnerat | |
2015-01-20 | IMAP/POP3/SMTP: use a per-connection sub-structure for SASL parameters. | Patrick Monnerat | |
2015-01-18 | sasl_gssapi: Make Curl_sasl_build_gssapi_spn() public | Steve Holme | |
2014-11-16 | kerberos: Use symbol qualified with _KERBEROS5 | Michael Osipov | |
For consistency renamed USE_KRB5 to USE_KERBEROS5. | |||
2014-11-14 | sasl: Moved Curl_sasl_gssapi_cleanup() definition into header file | Steve Holme | |
Rather than define the function as extern in the source files that use it, moved the function declaration into the SASL header file just like the Digest and NTLM clean-up functions. Additionally, added a function description comment block. | |||
2014-11-09 | ntlm: Moved the native Target Info clean-up from HTTP specific function | Steve Holme | |
2014-11-09 | ntlm: Moved SSPI clean-up code into SASL module | Steve Holme | |
2014-11-05 | sasl: Fixed compilation warning from commit 25264131e2 | Steve Holme | |
Added forward declaration of digestdata to overcome the following compilation warning: warning: 'struct digestdata' declared inside parameter list Additionally made the ntlmdata forward declaration dependent on USE_NTLM similar to how digestdata and kerberosdata are. | |||
2014-11-05 | http_digest: Moved response generation into SASL module | Steve Holme | |
2014-11-05 | http_digest: Moved challenge decoding into SASL module | Steve Holme | |
2014-11-05 | http_digest: Moved clean-up function into SASL module | Steve Holme | |
2014-11-05 | http_digest: Moved algorithm definitions to SASL module | Steve Holme | |
2014-11-02 | sasl: Fixed Kerberos V5 inclusion when CURL_DISABLE_CRYPTO_AUTH is used | Steve Holme | |
Typically the USE_WINDOWS_SSPI definition would not be used when the CURL_DISABLE_CRYPTO_AUTH define is, however, it is still a valid build configuration and, as such, the SASL Kerberos V5 (GSSAPI) authentication data structures and functions would incorrectly be used when they shouldn't be. Introduced a new USE_KRB5 definition that takes into account the use of CURL_DISABLE_CRYPTO_AUTH like USE_SPNEGO and USE_NTLM do. | |||
2014-08-14 | curl_sasl.h: Fixed compilation error from commit 4b491c675f | Steve Holme | |
warning: 'struct kerberos5data' declared inside parameter list Due to missing forward declaration. | |||
2014-08-14 | sasl_sspi: Added GSSAPI message functions | Steve Holme | |
2014-08-09 | sasl: Introduced Curl_sasl_build_spn() for building a SPN | Steve Holme | |
Various parts of the libcurl source code build a SPN for inclusion in authentication data. This information is either used by our own native generation routines or passed to authentication functions in third-party libraries such as SSPI. However, some of these instances use fixed buffers rather than dynamically allocated ones and not all of those that should, convert to wide character strings in Unicode builds. Implemented a common function that generates a SPN and performs the wide character conversion where necessary. | |||
2014-04-06 | sasl: Added forward declaration of structures following recent changes | Steve Holme | |
To avoid urldata.h being included from the header file or that the source file has the correct include order as highlighted by one of the auto builds recently. | |||
2014-04-06 | sasl: Corrected add of Curl_sasl_decode_digest_md5_message() from 2c49e96092 | Steve Holme | |
2014-04-06 | sasl: Corrected pre-processor inclusion of SSPI based DIGEST-MD5 code | Steve Holme | |
When CURL_DISABLE_CRYPTO_AUTH is defined the DIGEST-MD5 code should not be included, regardless of whether USE__WINDOWS_SSPI is defined or not. This is indicated by the definition of USE_HTTP_NEGOTIATE and USE_NTLM in curl_setup.h. | |||
2014-04-05 | sasl: Added initial stub functions for SSPI DIGEST-MD support | Steve Holme | |
2014-04-05 | sasl: Combined DIGEST-MD5 message decoding and generation | Steve Holme | |
2013-10-27 | email: Added support for cancelling NTLM authentication | Steve Holme | |
2013-10-27 | email: Added support for cancelling DIGEST-MD5 authentication | Steve Holme | |
2013-10-27 | email: Corrected a couple of typos from 1e39b95682781f | Steve Holme | |
2013-10-27 | email: Added support for canceling CRAM-MD5 authentication | Steve Holme | |
2013-09-24 | sasl: Centralised the authentication mechanism strings | Steve Holme | |
Moved the standard SASL mechanism strings into curl_sasl.h rather than hard coding the same values over and over again in the protocols that use SASL authentication. For more information about the mechanism strings see: http://www.iana.org/assignments/sasl-mechanisms | |||
2013-09-04 | SASL: fix compiler warnings | Daniel Stenberg | |
comparison between signed and unsigned integer expressions suggest parentheses around '&&' within '||' (twice) | |||
2013-08-25 | sasl: added basic SASL XOAUTH2 support | Kyle L. Huff | |
Added the ability to generated a base64 encoded XOAUTH2 token containing: "user=<username>^Aauth=Bearer <bearer token>^A^A" as per RFC6749 "OAuth 2.0 Authorization Framework". | |||
2013-04-13 | sasl: Reworked SASL mechanism constants | Steve Holme | |
... to use left-shifted values, like those defined in curl.h, rather than 16-bit hexadecimal values. | |||
2013-04-13 | sasl: Added predefined preferred mechanism values | Steve Holme | |
In preparation for the upcoming changes to IMAP, POP3 and SMTP added preferred mechanism values. | |||
2013-03-21 | sasl: Corrected a few violations of the curl coding standards | Steve Holme | |
Corrected some incorrectly positioned pointer variable declarations to be "char *" rather than "char* ". |