curl - cURL mirror with patches applied

Age	Commit message (Collapse)	Author
2014-12-25	vtls: Use bool for Curl_ssl_getsessionid() return type	Steve Holme
	The return type of this function is a boolean value, and even uses a bool internally, so use bool in the function declaration as well as the variables that store the return value, to avoid any confusion.
2014-12-25	schannel: Minor code style policing for casts	Steve Holme

2014-12-25	schannel: Prefer 'CURLcode result' for curl result codes	Steve Holme

2014-12-14	curl_schannel: Improvements to memory re-allocation strategy	Marc Hoersken
	- do not grow memory by doubling its size - do not leak previously allocated memory if reallocation fails - replace while-loop with a single check to make sure that the requested amount of data fits into the buffer Bug: http://curl.haxx.se/bug/view.cgi?id=1450 Reported-by: Warren Menzer
2014-12-14	curl_schannel.c: Data may be available before connection shutdown	Marc Hoersken

2014-12-09	schannel_recv: return the correct code	Daniel Stenberg
	Bug: http://curl.haxx.se/bug/view.cgi?id=1462 Reported-by: Tae Hyoung Ahn
2014-10-24	SSL: Remove SSLv3 from SSL default due to POODLE attack	Jay Satiro
	- Remove SSLv3 from SSL default in darwinssl, schannel, cyassl, nss, openssl effectively making the default TLS 1.x. axTLS is not affected since it supports only TLS, and gnutls is not affected since it already defaults to TLS 1.x. - Update CURLOPT_SSLVERSION doc
2014-10-04	curl_schannel.c: Fixed possible memory or handle leak	Marc Hoersken
	First try to fix possible memory leaks, in this case: Only connssl->ctxt xor onnssl->cred being initialized.
2014-07-31	schannel: use CryptGenRandom for random numbers	Marcel Raad
	This function is available for every Windows version since Windows 95/NT. reference: http://msdn.microsoft.com/en-us/library/windows/desktop/aa379942.aspx
2014-05-05	schannel: don't use the connect-timeout during send	Daniel Stenberg
	As there's a default connection timeout and this wrongly used the connection timeout during a transfer after the connection is completed, this function would trigger timeouts during transfers erroneously. Bug: http://curl.haxx.se/bug/view.cgi?id=1352 Figured-out-by: Radu Simionescu
2014-04-18	curl_schannel.c: added explicit cast of structure pointers	Marc Hoersken

2014-04-18	curl_schannel.c: fix possible dereference of null pointer	Marc Hoersken

2014-02-24	curl_schannel.c: Updated copyright years	Marc Hoersken

2014-02-24	winssl: Enable hostname verification of IP address using SAN or CN	David Ryskalczyk
	Original commit message was: Don't omit CN verification in SChannel when an IP address is used. Side-effect of this change: SChannel and CryptoAPI do not support the iPAddress subjectAltName according to RFC 2818. If present, SChannel will first compare the IP address to the dNSName subjectAltNames and then fallback to the most specific Common Name in the Subject field of the certificate. This means that after this change curl will not connect to SSL/TLS hosts as long as the IP address is not specified in the SAN or CN of the server certificate or the verifyhost option is disabled.
2014-01-31	winssl: improved default SSL/TLS protocol selection	Marc Hoersken
	For some reason Windows 7 SP1 chooses TLS 1.0 instead of TLS 1.2 if it is not explicitly enabled within grbitEnabledProtocols. More information can be found on MSDN: http://msdn.microsoft.com/library/windows/desktop/aa379810.aspx
2013-12-26	vtls: Updated comments referencing sslgen.c and ssluse.c	Steve Holme

2013-12-26	vtls: Fixed up include of vtls.h	Steve Holme

2013-12-20	vtls: moved all TLS/SSL source and header files into subdir	Daniel Stenberg