curl - cURL mirror with patches applied

Age	Commit message (Collapse)	Author
2020-03-24	copyright: fix out-of-date copyright ranges and missing headers	Daniel Stenberg
	Reported by the new script 'scripts/copyright.pl'. The script has a regex whitelist for the files that don't need copyright headers. Removed three (mostly usesless) README files from docs/ Closes #5141
2018-09-23	whitespace fixes	Viktor Szakats
	- replace tabs with spaces where possible - remove line ending spaces - remove double/triple newlines at EOF - fix a non-UTF-8 character - cleanup a few indentations/line continuations in manual examples Closes https://github.com/curl/curl/pull/3037
2018-09-20	certs: generate tests certs with sha256 digest algorithm	Daniel Stenberg
	As OpenSSL 1.1.1 starts to complain and fail on sha1 CAs: "SSL certificate problem: CA signature digest algorithm too weak" Closes #3014
2018-09-12	tests/certs: rebuild certs with 2048-bit RSA keys	Yiming Jing
	The previous test certificates contained RSA keys of only 1024 bits. However, RSA claims that 1024-bit RSA keys are likely to become crackable some time before 2010. The NIST recommends at least 2048-bit keys for RSA for now. Better use full 2048 also for testing. Closes #2973
2017-03-26	spelling fixes	klemens
	Closes #1356
2015-03-21	tests/certs: added make target to rebuild certificates	Dan Fandrich
	The certificate generation scripts were also updated to better match the format of the certificates currently checked in.
2014-11-24	SSL: Add PEM format support for public key pinning	moparisthebest

2014-10-07	SSL: implement public key pinning	moparisthebest
	Option --pinnedpubkey takes a path to a public key in DER format and only connect if it matches (currently only implemented with OpenSSL). Provides CURLOPT_PINNEDPUBLICKEY for curl_easy_setopt(). Extract a public RSA key from a website like so: openssl s_client -connect google.com:443 2>&1 < /dev/null \| \ sed -n '/-----BEGIN/,/-----END/p' \| openssl x509 -noout -pubkey \ \| openssl rsa -pubin -outform DER > google.com.der
2010-05-27	tests/certs/scripts: generate also CRL	Kamil Dudka
	... and make it possible to do so without any user interaction
2010-02-14	removed trailing whitespace	Yang Tse

2009-08-11	- Peter Sylvester made the HTTPS test server use specific certificates for	Daniel Stenberg
	each test, so that the test suite can now be used to actually test the verification of cert names etc. This made an error show up in the OpenSSL- specific code where it would attempt to match the CN field even if a subjectAltName exists that doesn't match. This is now fixed and verified in test 311.