curl - cURL mirror with patches applied

Age	Commit message (Collapse)	Author
2019-05-09	spnego_gssapi: fix return code on gss_init_sec_context() failure	Kamil Dudka
	Fixes #3726 Closes #3849
2019-03-14	Negotiate: fix for HTTP POST with Negotiate	Dominik Hölzl
	* Adjusted unit tests 2056, 2057 * do not generally close connections with CURLAUTH_NEGOTIATE after every request * moved negotiatedata from UrlState to connectdata * Added stream rewind logic for CURLAUTH_NEGOTIATE * introduced negotiatedata::GSS_AUTHDONE and negotiatedata::GSS_AUTHSUCC * Consider authproblem state for CURLAUTH_NEGOTIATE * Consider reuse_forbid for CURLAUTH_NEGOTIATE * moved and adjusted negotiate authentication state handling from output_auth_headers into Curl_output_negotiate * Curl_output_negotiate: ensure auth done is always set * Curl_output_negotiate: Set auth done also if result code is GSS_S_CONTINUE_NEEDED/SEC_I_CONTINUE_NEEDED as this result code may also indicate the last challenge request (only works with disabled Expect: 100-continue and CURLOPT_KEEP_SENDING_ON_ERROR -> 1) * Consider "Persistent-Auth" header, detect if not present; Reset/Cleanup negotiate after authentication if no persistent authentication * apply changes introduced with #2546 for negotiate rewind logic Fixes #1261 Closes #1975
2018-10-03	comment: Fix multiple typos in function parameters	Daniel Gustafsson
	Ensure that the parameters in the comment match the actual names in the prototype. Closes #3079 Reviewed-by: Daniel Stenberg <daniel@haxx.se>
2017-08-05	gssapi: fix memory leak of output token in multi round context	Isaac Boukris
	When multiple rounds are needed to establish a security context (usually ntlm), we overwrite old token with a new one without free. Found by proposed gss tests using stub a gss implementation (by valgrind error), though I have confirmed the leak with a real gssapi implementation as well. Closes https://github.com/curl/curl/pull/1733
2016-08-18	vauth: Introduced Curl_auth_is_<mechansism>_supported() functions	Steve Holme
	As Windows SSPI authentication calls fail when a particular mechanism isn't available, introduced these functions for DIGEST, NTLM, Kerberos 5 and Negotiate to allow both HTTP and SASL authentication the opportunity to query support for a supported mechanism before selecting it. For now each function returns TRUE to maintain compatability with the existing code when called.
2016-07-23	spnego: Corrected miss-placed * in Curl_auth_spnego_cleanup() declaration	Steve Holme
	Typo introduced in commit ad5e9bfd5d.
2016-06-22	internals: rename the SessionHandle struct to Curl_easy	Daniel Stenberg

2016-04-06	URLs: change http to https in many places	Viktor Szakats
	Closes #754
2016-04-06	vauth: Corrected a number of typos in comments	Steve Holme
	Reported-by: Michael Osipov
2016-04-03	vauth: Removed the need for a separate GSS-API based SPN function	Steve Holme

2016-04-03	spnego: Small code tidy up	Steve Holme
	* Prefer dereference of string pointer rather than strlen() * Free challenge pointer in one place * Additional comments
2016-04-02	spnego: Renamed the context's SPN variable	Steve Holme
	To be consistent with the Kerberos 5 context and other authentication code.
2016-04-01	spnego: Corrected some typos in comments	Steve Holme
	Corrected typos from commit ad5e9bfd5d and 6d6f9ca1d9.
2016-03-29	GSS: make Curl_gss_log_error more verbose	Isaac Boukris
	Also display the GSS_C_GSS_CODE (major code) when specified instead of only GSS_C_MECH_CODE (minor code). In addition, the old code was printing a colon twice after the prefix and also miscalculated the length of the buffer in between calls to gss_display_status (the length of ": " was missing). Also, gss_buffer is not guaranteed to be NULL terminated and thus need to restrict reading by its length. Closes #738
2016-03-26	vauth: Moved the Negotiate authentication code to the new vauth directory	Steve Holme
	Part 2 of 2 - Moved the GSS-API based Negotiate authentication code.