curl - cURL mirror with patches applied

Age	Commit message (Collapse)	Author
2019-02-01	spnego_sspi: add support for channel binding	georgeok
	Attempt to add support for Secure Channel binding when negotiate authentication is used. The problem to solve is that by default IIS accepts channel binding and curl doesn't utilise them. The result was a 401 response. Scope affects only the Schannel(winssl)-SSPI combination. Fixes https://github.com/curl/curl/issues/3503 Closes https://github.com/curl/curl/pull/3509
2019-01-11	urldata: rename easy_conn to just conn	Daniel Stenberg
	We use "conn" everywhere to be a pointer to the connection. Introduces two functions that "attaches" and "detaches" the connection to and from the transfer. Going forward, we should favour using "data->conn" (since a transfer always only has a single connection or none at all) to "conn->data" (since a connection can have none, one or many transfers associated with it and updating conn->data to be correct is error prone and a frequent reason for internal issues). Closes #3442
2018-10-03	comment: Fix multiple typos in function parameters	Daniel Gustafsson
	Ensure that the parameters in the comment match the actual names in the prototype. Closes #3079 Reviewed-by: Daniel Stenberg <daniel@haxx.se>
2018-04-15	vauth: Fix typo	Daniel Gustafsson
	Address various spellings of "credentials". Closes https://github.com/curl/curl/pull/2496
2018-04-15	all: Refactor malloc+memset to use calloc	Daniel Gustafsson
	When a zeroed out allocation is required, use calloc() rather than malloc() followed by an explicit memset(). The result will be the same, but using calloc() everywhere increases consistency in the codebase and avoids the risk of subtle bugs when code is injected between malloc and memset by accident. Closes https://github.com/curl/curl/pull/2497
2017-04-07	sspi: print out InitializeSecurityContext() error message	Isaac Boukris
	Reported-by: Carsten (talksinmath) Fixes #1384 Closes #1395
2016-11-24	checksrc: white space edits to comply to stricter checksrc	Daniel Stenberg

2016-08-21	vauth: Added check for supported SSPI based authentication mechanisms	Steve Holme
	Completing commit 00417fd66c and 2708d4259b.
2016-08-19	spnego_sspi: fix memory leak in case *outlen is zero (#970)	Miroslav Franc

2016-08-18	vauth: Introduced Curl_auth_is_<mechansism>_supported() functions	Steve Holme
	As Windows SSPI authentication calls fail when a particular mechanism isn't available, introduced these functions for DIGEST, NTLM, Kerberos 5 and Negotiate to allow both HTTP and SASL authentication the opportunity to query support for a supported mechanism before selecting it. For now each function returns TRUE to maintain compatability with the existing code when called.
2016-07-23	spnego: Corrected miss-placed * in Curl_auth_spnego_cleanup() declaration	Steve Holme
	Typo introduced in commit ad5e9bfd5d.
2016-06-22	internals: rename the SessionHandle struct to Curl_easy	Daniel Stenberg

2016-04-06	URLs: change http to https in many places	Viktor Szakats
	Closes #754
2016-04-06	vauth: Corrected a number of typos in comments	Steve Holme
	Reported-by: Michael Osipov
2016-04-03	vauth: Removed the need for a separate GSS-API based SPN function	Steve Holme

2016-04-03	spnego: Small code tidy up	Steve Holme
	* Prefer dereference of string pointer rather than strlen() * Free challenge pointer in one place * Additional comments
2016-04-02	spnego: Renamed the context's SPN variable	Steve Holme
	To be consistent with the Kerberos 5 context and other authentication code.
2016-04-01	spnego: Corrected some typos in comments	Steve Holme
	Corrected typos from commit ad5e9bfd5d and 6d6f9ca1d9.
2016-03-26	vauth: Moved the Negotiate authentication code to the new vauth directory	Steve Holme
	Part 2 of 2 - Moved the GSS-API based Negotiate authentication code.
2016-03-26	vauth: Moved the Negotiate authentication code to the new vauth directory	Steve Holme
	Part 1 of 2 - Moved the SSPI based Negotiate authentication code.