From a730432e59754df97c8985eb3094ca1cdd3e4955 Mon Sep 17 00:00:00 2001 From: georgeok Date: Tue, 29 Jan 2019 18:26:31 +0100 Subject: spnego_sspi: add support for channel binding Attempt to add support for Secure Channel binding when negotiate authentication is used. The problem to solve is that by default IIS accepts channel binding and curl doesn't utilise them. The result was a 401 response. Scope affects only the Schannel(winssl)-SSPI combination. Fixes https://github.com/curl/curl/issues/3503 Closes https://github.com/curl/curl/pull/3509 --- lib/vtls/schannel.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'lib/vtls/schannel.c') diff --git a/lib/vtls/schannel.c b/lib/vtls/schannel.c index 4c816fdda..c8574f56c 100644 --- a/lib/vtls/schannel.c +++ b/lib/vtls/schannel.c @@ -1428,7 +1428,7 @@ schannel_connect_common(struct connectdata *conn, int sockindex, * binding to pass the IIS extended protection checks. * Available on Windows 7 or later. */ - conn->ntlm.sslContext = &BACKEND->ctxt->ctxt_handle; + conn->sslContext = &BACKEND->ctxt->ctxt_handle; #endif *done = TRUE; -- cgit v1.2.3