curl - cURL mirror with patches applied

Age	Commit message (Collapse)	Author
2015-03-12	openssl: use colons properly in the ciphers list	Daniel Stenberg
	While the previous string worked, this is the documented format. Reported-by: Richard Moore
2015-03-12	openssl: sort the ciphers on strength	Daniel Stenberg
	This makes curl pick better (stronger) ciphers by default. The strongest available ciphers are fine according to the HTTP/2 spec so an OpenSSL built curl is no longer rejected by string HTTP/2 servers. Bug: http://curl.haxx.se/bug/view.cgi?id=1487
2015-03-05	openssl: remove all uses of USE_SSLEAY	Daniel Stenberg
	SSLeay was the name of the library that was subsequently turned into OpenSSL many moons ago (1999). curl does not work with the old SSLeay library since years. This is now reflected by only using USE_OPENSSL in code that depends on OpenSSL.
2015-01-22	openssl: add support for the Certificate Status Request TLS extension	Alessandro Ghedini
	Also known as "status_request" or OCSP stapling, defined in RFC6066 section 8. Thanks-to: Joe Mason - for the work-around for the OpenSSL bug.
2015-01-17	vtls: Separate the SSL backend definition from the API setup	Steve Holme
	Slight code cleanup as the SSL backend #define is mixed up with the API function setup.
2014-12-28	vtls: Fixed compilation warning and an ignored return code	Steve Holme
	curl_schannel.h:123: warning: right-hand operand of comma expression has no effect Some instances of the curlssl_close_all() function were declared with a void return type whilst others as int. The schannel version returned CURLE_NOT_BUILT_IN and others simply returned zero, but in all cases the return code was ignored by the calling function Curl_ssl_close_all(). For the time being and to keep the internal API consistent, changed all declarations to use a void return type. To reduce code we might want to consider removing the unimplemented versions and use a void #define like schannel does.
2014-10-13	vtls/*: deprecate have_curlssl_md5sum and set-up default md5sum implementation	Patrick Monnerat

2014-09-13	curlssl: make tls backend symbols use curlssl in the name	Daniel Stenberg

2014-09-13	url: let the backend decide CURLOPT_SSL_CTX_ support	Daniel Stenberg
	... to further remove specific TLS backend knowledge from url.c
2014-09-13	vtls: have the backend tell if it supports CERTINFO	Daniel Stenberg

2014-09-13	CURLOPT_CAPATH: return failure if set without backend support	Daniel Stenberg

2014-07-31	ssl: generalize how the ssl backend identifier is set	Daniel Stenberg
	Each backend now defines CURL_SSL_BACKEND accordingly. Added the *AXTLS one which was missing previously.
2014-07-30	vtls: make the random function mandatory in the TLS backend	Daniel Stenberg
	To force each backend implementation to really attempt to provide proper random. If a proper random function is missing, then we can explicitly make use of the default one we use when TLS support is missing. This commit makes sure it works for darwinssl, gnutls, nss and openssl.
2014-01-12	OpenSSL: deselect weak ciphers by default	Daniel Stenberg
	By default even recent versions of OpenSSL support and accept both "export strength" ciphers, small-bitsize ciphers as well as downright deprecated ones. This change sets a default cipher set that avoids the worst ciphers, and subsequently makes https://www.howsmyssl.com/a/check no longer grade curl/OpenSSL connects as 'Bad'. Bug: http://curl.haxx.se/bug/view.cgi?id=1323 Reported-by: Jeff Hodges
2013-12-26	vtls: Updated comments referencing sslgen.c and ssluse.c	Steve Holme

2013-12-20	openssl: renamed backend files to openssl.[ch]	Daniel Stenberg