Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-02-03 | URLs: change all http:// URLs to https:// | Daniel Stenberg | |
2015-08-30 | makefiles: Added our standard copyright header | Steve Holme | |
But kept the original author, when they were specified in a comment, as the initial copyright holder. | |||
2015-04-30 | build: update depedency versions, urls, example makefiles | Viktor Szakats | |
- update default versions of dependencies (except for rare/old platforms) - update urls - sync examples makefiles with main ones - remove line ending space | |||
2014-12-05 | build: updated dependencies in makefiles. | Guenter Knauf | |
2014-10-29 | Added NetWare support to build with nghttp2. | Guenter Knauf | |
2014-07-16 | Remove all traces of FBOpenSSL SPNEGO support | David Woodhouse | |
This is just fundamentally broken. SPNEGO (RFC4178) is a protocol which allows client and server to negotiate the underlying mechanism which will actually be used to authenticate. This is *often* Kerberos, and can also be NTLM and other things. And to complicate matters, there are various different OIDs which can be used to specify the Kerberos mechanism too. A SPNEGO exchange will identify *which* GSSAPI mechanism is being used, and will exchange GSSAPI tokens which are appropriate for that mechanism. But this SPNEGO implementation just strips the incoming SPNEGO packet and extracts the token, if any. And completely discards the information about *which* mechanism is being used. Then we *assume* it was Kerberos, and feed the token into gss_init_sec_context() with the default mechanism (GSS_S_NO_OID for the mech_type argument). Furthermore... broken as this code is, it was never even *used* for input tokens anyway, because higher layers of curl would just bail out if the server actually said anything *back* to us in the negotiation. We assume that we send a single token to the server, and it accepts it. If the server wants to continue the exchange (as is required for NTLM and for SPNEGO to do anything useful), then curl was broken anyway. So the only bit which actually did anything was the bit in Curl_output_negotiate(), which always generates an *initial* SPNEGO token saying "Hey, I support only the Kerberos mechanism and this is its token". You could have done that by manually just prefixing the Kerberos token with the appropriate bytes, if you weren't going to do any proper SPNEGO handling. There's no need for the FBOpenSSL library at all. The sane way to do SPNEGO is just to *ask* the GSSAPI library to do SPNEGO. That's what the 'mech_type' argument to gss_init_sec_context() is for. And then it should all Just Work™. That 'sane way' will be added in a subsequent patch, as will bug fixes for our failure to handle any exchange other than a single outbound token to the server which results in immediate success. | |||
2014-05-21 | build: Renamed CURLX_ONES file list definition to CURLX_CFILES | Steve Holme | |
Renamed the CURLX_ONES file list definition in order to a) try and be consistent with other file lists and b) to allow for the addition of the curlx header files, which will assist with Visual Studio project files generation rather than hard coding those files. | |||
2013-05-11 | Updated zlib version in build files. | Guenter Knauf | |
2013-02-09 | Updated dependency libs. | Guenter Knauf | |
2013-01-28 | Updated dependency libs. | Guenter Knauf | |
2012-12-26 | curl tool: renaming hugehelp files to tool_hugehelp | Yang Tse | |
2012-06-19 | Fixed NetWare makefile broken from last commit. | Guenter Knauf | |
2012-06-18 | Some more NetWare makefile tweaks for metalink. | Guenter Knauf | |
2012-06-09 | Added metalink support to NetWare builds. | Guenter Knauf | |
2012-05-22 | Updated dependency libary versions. | Guenter Knauf | |
2012-04-26 | Updated dependency lib versions. | Guenter Knauf | |
2012-04-20 | Updated dependency lib versions. | Guenter Knauf | |
2012-04-12 | Updated dependency lib versions (2nd try). | Guenter Knauf | |
2012-04-12 | Updated dependency lib versions. | Guenter Knauf | |
2012-04-06 | curl tool: use configuration files from lib directory | Yang Tse | |
Configuration files such as curl_config.h and all config-*.h no longer exist nor are generated/copied into 'src' directory, now these only exist in 'lib' directory from where curl tool sources uses them. Additionally old src/setup.h has been refactored into src/tool_setup.h which now pulls lib/setup.h The possibility of a makefile needing an include path adjustment exists. | |||
2011-09-27 | Added SPNEGO to NetWare build. | Guenter Knauf | |
2011-09-25 | NetWare makefile tweaks to select different builds. | Guenter Knauf | |
2011-09-11 | Updated makefiles to latest libssh2. | Guenter Knauf | |
2011-09-03 | Updated dependecies versions. | Guenter Knauf | |
2011-07-24 | errno.h inclusion conditionally done in setup_once.h | Yang Tse | |
2011-04-19 | Updated default (recommended) dependency versions. | Guenter Knauf | |
2011-02-17 | Set -fpcc-struct-return only for gcc compiler. | Guenter Knauf | |
2011-02-13 | Added -m32 to CFLAGS to compile with x86_64 gcc. | Guenter Knauf | |
2011-02-13 | Updated OpenSSL version, added links to docu. | Guenter Knauf | |
2010-12-22 | Added support for axTLS to NetWare build. | Guenter Knauf | |
2010-12-05 | Updated OpenSSL version. | Guenter Knauf | |
2010-12-02 | build: provide SIZEOF_SIZE_T netware definition | Yang Tse | |
2010-10-12 | Added build bits for librtmp to NetWare makefiles. | Guenter Knauf | |
2010-10-03 | Some NetWare makefile tweaks. | Guenter Knauf | |
Renamed SDK_* to NDK_*; made NDK_* defines overwriteable from environment; removed now obsolete YACC macro; moved some curl_config.h defines to IPv6 section since they are only needed when IPv6 is enabled - this makes libcurl compile with older NDKs too which were not IPv6-aware. | |||
2010-08-15 | Syncroniszed vclean target; fixed some comments. | Guenter Knauf | |
2010-08-02 | Rename CURL_SOURCES macro; revert previous rename of curl_SOURCES macro. | Guenter Knauf | |
2010-07-22 | Updated library versions. | Guenter Knauf | |
2010-04-24 | encourage users to take latest lib dependencies. | Guenter Knauf | |
2010-04-12 | fixed a path typo in src/Makefile.netware. | Guenter Knauf | |
2010-03-31 | make folks use latest available dependent libraries. | Guenter Knauf | |
2010-03-24 | remove the CVSish $Id$ lines | Daniel Stenberg | |
2010-02-26 | fix sizeof short | Yang Tse | |
2010-02-26 | Added SIZEOF_INT and SIZEOF_SHORT definitions for non-configure systems | Yang Tse | |
2009-09-07 | changed NetWare makefiles to rely on SHELL rather than OSTYPE since we can ↵ | Gunter Knauf | |
have a sh-like shell also on Windows (MSYS, Cygwin). | |||
2009-07-14 | renamed generated config.h to curl_config.h in order to avoid clashes when ↵ | Gunter Knauf | |
libcurl is used with other projects which also have a config.h. | |||
2009-05-02 | Use build-time configured curl_socklen_t instead of socklen_t | Yang Tse | |
2009-04-15 | moved HAVE_LIMITS_H to common defines (no idea why I didnt this initially ↵ | Gunter Knauf | |
already) | |||
2009-04-14 | HAVE_LIMITS_H definition for NetWare CLIB | Yang Tse | |
2009-04-09 | some minor Makefile tweaks for latest libssh2. | Gunter Knauf | |
2009-03-29 | some minor Makefile tweaks. | Gunter Knauf | |