Gunter Knauf [Tue, 26 Feb 2008 21:41:19 +0000 (21:41 +0000)]
some more minor makefile changes; removed useless dist target.
Gunter Knauf [Tue, 26 Feb 2008 21:24:03 +0000 (21:24 +0000)]
fixed install target to create a ca-bundle.crt since we have no longer one in the project.
Yang Tse [Tue, 26 Feb 2008 18:13:59 +0000 (18:13 +0000)]
all reads from stdin and writes to stdout will be retried until the
whole operation completes or an unrecoverable condition is detected
Yang Tse [Tue, 26 Feb 2008 15:06:44 +0000 (15:06 +0000)]
refactor some code out to write_pidfile() in util.c
Gunter Knauf [Tue, 26 Feb 2008 10:30:13 +0000 (10:30 +0000)]
Added support for server name indication (RFC 4366).
Patch submitted by Kaspar Brand.
Daniel Stenberg [Mon, 25 Feb 2008 07:51:39 +0000 (07:51 +0000)]
- Kaspar Brand made GnuTLS-built libcurl properly acknowledge the option that
forces it to prefer SSLv3.
Daniel Stenberg [Sat, 23 Feb 2008 23:00:24 +0000 (23:00 +0000)]
now builds and runs with GnuTLS-built libcurls too
Daniel Stenberg [Sat, 23 Feb 2008 12:27:45 +0000 (12:27 +0000)]
- Sam Listopad provided a patch in feature-request #1900014
http://curl.haxx.se/bug/feature.cgi?id=1900014 that makes libcurl (built to
use OpenSSL) support a full chain of certificates in a given PKCS12
certificate.
Daniel Stenberg [Fri, 22 Feb 2008 22:53:01 +0000 (22:53 +0000)]
- Georg Lippitsch made the src/Makefile.vc6 makefile use the same memory model
options as the lib/Makefile.vc6 already did.
Yang Tse [Fri, 22 Feb 2008 09:31:18 +0000 (09:31 +0000)]
Revert sockfilt.c back to revision 1.42
Changes introduced in revision 1.43 were useless
Daniel Stenberg [Thu, 21 Feb 2008 17:52:16 +0000 (17:52 +0000)]
- Zmey Petroff found a crash when libcurl accessed a NULL pointer, which
happened if you set the connection cache size to 1 and for example failed to
login to an FTP site. Bug report #1896698
(http://curl.haxx.se/bug/view.cgi?id=1896698)
Gunter Knauf [Thu, 21 Feb 2008 15:02:14 +0000 (15:02 +0000)]
fixed missing header; changed bail out from exit() to return().
Mentioned on the list by Michal Marek.
Daniel Stenberg [Thu, 21 Feb 2008 12:28:45 +0000 (12:28 +0000)]
assert that the *connp is a non-NULL pointer when Curl_done() is called
Yang Tse [Wed, 20 Feb 2008 17:17:18 +0000 (17:17 +0000)]
Avoid timeout restart when signal caught while awaiting socket and stdin events
Gunter Knauf [Wed, 20 Feb 2008 12:36:35 +0000 (12:36 +0000)]
reformatted comment.
Gunter Knauf [Wed, 20 Feb 2008 12:33:45 +0000 (12:33 +0000)]
added read callback function in order to prevent crashs on Win32 when linked against DLL:
Daniel Stenberg [Wed, 20 Feb 2008 12:18:08 +0000 (12:18 +0000)]
- Fixed test case 405 to not fail when libcurl is built with GnuTLS
Daniel Stenberg [Wed, 20 Feb 2008 12:14:31 +0000 (12:14 +0000)]
made the non-matching error code output nicer since we know it is a number
and the string contains a newline...
Gunter Knauf [Wed, 20 Feb 2008 11:58:20 +0000 (11:58 +0000)]
mention removal of SSLv2 by default.
Daniel Stenberg [Wed, 20 Feb 2008 10:01:28 +0000 (10:01 +0000)]
oops, fixed to build
Daniel Stenberg [Wed, 20 Feb 2008 09:58:42 +0000 (09:58 +0000)]
"118 - Gautam Kachroo's issue with proxies and ssl" is now in CVS
Daniel Stenberg [Wed, 20 Feb 2008 09:56:26 +0000 (09:56 +0000)]
- Based on initial work done by Gautam Kachroo to address a bug, we now keep
better control at the exact state of the connection's SSL status so that we
know exactly when it has completed the SSL negotiation or not so that there
won't be accidental re-uses of connections that are wrongly believed to be
in SSL-completed-negotiate state.
Daniel Stenberg [Wed, 20 Feb 2008 08:28:02 +0000 (08:28 +0000)]
- We no longer support setting the CURLOPT_URL option from inside a callback
such as the CURLOPT_SSL_CTX_FUNCTION one treat that as if it was a Location:
following. The patch that introduced this feature was done for 7.11.0, but
this code and functionality has been broken since about 7.15.4 (March 2006)
with the introduction of non-blocking OpenSSL "connects".
It was a hack to begin with and since it doesn't work and hasn't worked
correctly for a long time and nobody has even noticed, I consider it a very
suitable subject for plain removal. And so it was done.
Gunter Knauf [Tue, 19 Feb 2008 23:10:07 +0000 (23:10 +0000)]
applied patch to disable SSLv2 by default; discussion:
http://sourceforge.net/tracker/index.php?func=detail&aid=1767276&group_id=976&atid=350976
Submitted by Kaspar Brand.
Dan Fandrich [Tue, 19 Feb 2008 21:57:41 +0000 (21:57 +0000)]
Added test309 to test HTTP redirect to HTTPS URL
Yang Tse [Tue, 19 Feb 2008 18:51:08 +0000 (18:51 +0000)]
juggle() actually returns bool.
Remove redundant and unreachable log message.
Yang Tse [Tue, 19 Feb 2008 17:25:19 +0000 (17:25 +0000)]
fix compiler warnings: 'statement is unreachable'
Gunter Knauf [Tue, 19 Feb 2008 16:23:03 +0000 (16:23 +0000)]
fix for new codestyle.
Gunter Knauf [Tue, 19 Feb 2008 16:13:52 +0000 (16:13 +0000)]
made changes to work with Win32;
replaced fstat() with stat() call and bail out if local file not found.
Yang Tse [Tue, 19 Feb 2008 15:07:50 +0000 (15:07 +0000)]
fix compiler warnings: 'enumerated type mixed with another type'
Yang Tse [Mon, 18 Feb 2008 20:13:30 +0000 (20:13 +0000)]
Reduce to 20 seconds the time allowed to set SO_REUSEADDR option on sockfilt listener socket.
Log some more error descriptions.
Daniel Stenberg [Mon, 18 Feb 2008 19:53:31 +0000 (19:53 +0000)]
https_getsock() should be static all over (and did some fixed indenting)
Daniel Stenberg [Mon, 18 Feb 2008 16:55:27 +0000 (16:55 +0000)]
the ca-bundle is now removed
Gunter Knauf [Mon, 18 Feb 2008 15:43:23 +0000 (15:43 +0000)]
added makefile for MingW32 to build most of the samples.
Gunter Knauf [Mon, 18 Feb 2008 15:32:34 +0000 (15:32 +0000)]
moved sample program defines into separate Makefile.inc so that other makefiles can pick up the defines from there.
Gunter Knauf [Mon, 18 Feb 2008 15:30:11 +0000 (15:30 +0000)]
added check symbol for linking with POSIX prelude.
Yang Tse [Mon, 18 Feb 2008 13:05:46 +0000 (13:05 +0000)]
fix compiler warnings:
'enumerated type mixed with another type'
and
'variable was set but never used'
Daniel Stenberg [Mon, 18 Feb 2008 11:40:52 +0000 (11:40 +0000)]
just mention in --cacert that curl normally has a default ca cert path built-in
Daniel Stenberg [Mon, 18 Feb 2008 11:39:11 +0000 (11:39 +0000)]
the ca-bundle is no longer shipped
Daniel Stenberg [Mon, 18 Feb 2008 11:35:12 +0000 (11:35 +0000)]
- We're no longer providing a very old ca-bundle in the curl tarball. You can
get a fresh one downloaded and created with 'make ca-bundle' or you can get
one from here => http://curl.haxx.se/docs/caextract.html if you want a fresh
new one extracted from Mozilla's recent list of ca certs.
The configure option --with-ca-bundle now lets you specify what file to use
as default ca bundle for your build. If not specified, the configure script
will check a few known standard places for a global ca cert to use.
Daniel Stenberg [Sun, 17 Feb 2008 13:49:58 +0000 (13:49 +0000)]
- Jerome Muffat-Meridol helped me fix Curl_done() to close the current
connection by force when it was called before the entire request is
completed, simply because we can't know if the connection really can be
re-used safely at that point.
Daniel Stenberg [Sun, 17 Feb 2008 13:49:01 +0000 (13:49 +0000)]
rephrased comment
Daniel Stenberg [Sun, 17 Feb 2008 13:43:32 +0000 (13:43 +0000)]
In Curl_done() if premature is TRUE, it means this connection was said to be
DONE before the entire request operation is complete and thus we can't know in
what state it is for re-using, so we're forced to close it. In a perfect world
we can add code that keep track of if we really must close it here or not, but
currently we have no such detail knowledge.
Jerome Muffat-Meridol helped us work this out.
Daniel Stenberg [Sun, 17 Feb 2008 13:40:35 +0000 (13:40 +0000)]
don't do the GOT_NOTHING error check if the DONE function was called with
premature set TRUE, which means it was done before the request comleted. It
could then very well not have received any data.
Daniel Stenberg [Sun, 17 Feb 2008 13:38:19 +0000 (13:38 +0000)]
added a comment about the ignoring of the Curl_done() return code
Yang Tse [Sun, 17 Feb 2008 04:36:08 +0000 (04:36 +0000)]
sockfilt will quit when orphaned
Daniel Stenberg [Sat, 16 Feb 2008 13:44:23 +0000 (13:44 +0000)]
oops, that was debug code not meant to be committed like this...
Daniel Stenberg [Sat, 16 Feb 2008 13:41:55 +0000 (13:41 +0000)]
fix warnings about shadowing
Gunter Knauf [Sat, 16 Feb 2008 00:44:14 +0000 (00:44 +0000)]
seems that curently we dont need the imports from (l)ldapx.imp.
Gunter Knauf [Sat, 16 Feb 2008 00:21:58 +0000 (00:21 +0000)]
fixed linker def file for tools when compiled with gcc/nlmconv.
Gunter Knauf [Sat, 16 Feb 2008 00:15:30 +0000 (00:15 +0000)]
re-ordered the module dependency list;
removed unsused ldap module dependency since the module didnt autounload from protected address space.
Daniel Stenberg [Fri, 15 Feb 2008 22:37:00 +0000 (22:37 +0000)]
- Made the gnutls code path not even try to get the server cert if no peer
verification is requested. Previously it would even return failure if gnutls
failed to get the server cert even though no verification was asked for.
- Fix my Curl_timeleft() leftover mistake in the gnutls code
Daniel Stenberg [Fri, 15 Feb 2008 21:38:54 +0000 (21:38 +0000)]
mention that we explicitly ignore the return code
Yang Tse [Fri, 15 Feb 2008 17:00:56 +0000 (17:00 +0000)]
log SSH public key authentication failure and reason
Daniel Stenberg [Fri, 15 Feb 2008 09:29:57 +0000 (09:29 +0000)]
new mirror and mirror recount after cleansing
Daniel Stenberg [Fri, 15 Feb 2008 08:56:06 +0000 (08:56 +0000)]
- Pooyan McSporran found and fixed a flaw where you first would do a normal
http request and then you'd reuse the handle and replace the Accept: header,
as then libcurl would send two Accept: headers!
Gunter Knauf [Fri, 15 Feb 2008 00:41:54 +0000 (00:41 +0000)]
fixed version var.
Gunter Knauf [Fri, 15 Feb 2008 00:26:26 +0000 (00:26 +0000)]
moved info block up before help block so that it can also be displayed before help option; trial to add a version number.
Gunter Knauf [Thu, 14 Feb 2008 21:24:59 +0000 (21:24 +0000)]
added some files which were missing in release tarballs.
Daniel Stenberg [Thu, 14 Feb 2008 10:14:23 +0000 (10:14 +0000)]
five current issues we should deal with somehow before the next release
Dan Fandrich [Wed, 13 Feb 2008 23:06:21 +0000 (23:06 +0000)]
Updated some out-of-date information.
Daniel Stenberg [Wed, 13 Feb 2008 21:36:24 +0000 (21:36 +0000)]
make this test disabled properly when built with yassl
Yang Tse [Wed, 13 Feb 2008 06:06:57 +0000 (06:06 +0000)]
verifyserver() actually returns the pid of the unsecure http and ftp servers
when verifying the https and ftps servers
Yang Tse [Tue, 12 Feb 2008 13:47:56 +0000 (13:47 +0000)]
On heavily loaded systems any test server start up can take longer than the
timeout passed to startnew, when this happens startnew completes without being
able to read the pidfile and consequently returns a zero pid2.
To fix the above posibility the server pid is recovered from the verification
stage which will actually return the server pid when verification is valid.
Yang Tse [Tue, 12 Feb 2008 01:11:55 +0000 (01:11 +0000)]
fix grammatical issues
Daniel Stenberg [Mon, 11 Feb 2008 22:03:31 +0000 (22:03 +0000)]
Yang Tse pointed out a few remaining quirks from my timeout refactoring from
Feb 7 that didn't abort properly on timeouts. These are actually old
problems but now they should be fixed.
Yang Tse [Mon, 11 Feb 2008 20:21:06 +0000 (20:21 +0000)]
shell startup scripts and possible influence in scp/sftp/socks tests
Dan Fandrich [Mon, 11 Feb 2008 20:10:36 +0000 (20:10 +0000)]
Disable test due to keyword before disabling due to bad server.
Gunter Knauf [Mon, 11 Feb 2008 18:52:45 +0000 (18:52 +0000)]
open pipe to openssl commandline instead of writing into temp file.
Dan Fandrich [Mon, 11 Feb 2008 18:27:36 +0000 (18:27 +0000)]
Fixed unused variable warning.
Gunter Knauf [Mon, 11 Feb 2008 15:00:00 +0000 (15:00 +0000)]
added strict to make sure all vars are properly defined;
added -t switch to make text info of CAs optional;
added -q switch to be really quiet.
Yang Tse [Mon, 11 Feb 2008 14:28:48 +0000 (14:28 +0000)]
Additional SunSSH 1.1 ssh server options
Yang Tse [Sun, 10 Feb 2008 04:20:09 +0000 (04:20 +0000)]
Bug report #1888932 (curl.haxx.se/bug/view.cgi?id=1888932) points
out and provides test program that demonstrates that libcurl might not set
error description message for error CURLE_COULDNT_RESOLVE_HOST for Windows
threaded name resolver builds. Fixed now.
Yang Tse [Sun, 10 Feb 2008 02:52:17 +0000 (02:52 +0000)]
Verify only once test harness sftp server connectivity and functionality.
Make sure that the sftp client tool uses the ssh client binary that we have
used to generate the configuration files, otherwise sftp might be using one
located in the preferred path compiled into sftp.
Gunter Knauf [Sun, 10 Feb 2008 01:32:43 +0000 (01:32 +0000)]
removed 'mv' call and changed to use new backup feature of mk-ca-bundle.pl.
Gunter Knauf [Sun, 10 Feb 2008 01:29:24 +0000 (01:29 +0000)]
added -b switch to provide a backup functionality for existing ca-bundle.crt file.
Gunter Knauf [Sat, 9 Feb 2008 15:32:54 +0000 (15:32 +0000)]
fixed another wrong var in error message.
Gunter Knauf [Sat, 9 Feb 2008 15:07:35 +0000 (15:07 +0000)]
make use of mv's backup feature so that calling the ca-bundle target more than once will never fail; ignore error which can occure if for whatever reason there's no orignial ca-bundle.crt to rename.
Gunter Knauf [Sat, 9 Feb 2008 15:00:07 +0000 (15:00 +0000)]
fixed wrong var in error message.
Dan Fandrich [Sat, 9 Feb 2008 02:37:31 +0000 (02:37 +0000)]
Fixed some XML parsing problems.
Dan Fandrich [Sat, 9 Feb 2008 02:08:34 +0000 (02:08 +0000)]
Added key words to all SSL-using tests so they can be skipped if necessary.
Removed a few unnecessary requires SSL statements.
Dan Fandrich [Sat, 9 Feb 2008 02:01:36 +0000 (02:01 +0000)]
Fixed test to use HTTPS as documented.
Daniel Stenberg [Fri, 8 Feb 2008 22:02:00 +0000 (22:02 +0000)]
- Mike Hommey filed and fixed bug report #1889856
(http://curl.haxx.se/bug/view.cgi?id=1889856): When using the gnutls ssl
layer, cleaning-up and reinitializing curl ends up with https requests
failing with "ASN1 parser: Element was not found" errors. Obviously a
regression added in 7.16.3.
Gunter Knauf [Fri, 8 Feb 2008 21:04:24 +0000 (21:04 +0000)]
fixed a typo.
Dan Fandrich [Fri, 8 Feb 2008 18:42:12 +0000 (18:42 +0000)]
Missed checking in these test data files.
Yang Tse [Fri, 8 Feb 2008 17:32:58 +0000 (17:32 +0000)]
Get rid of sftp subsystem additional parameters, they aren't widely supported
Yang Tse [Fri, 8 Feb 2008 13:54:02 +0000 (13:54 +0000)]
To verify that the sftp server is actually running, responsive and that
all curl's tests generated configuration and key files are fine, a real
connection is established to the test harness sftp server authenticating
and running a simple sftp remote pwd command.
The verification is done using OpenSSH's or SunSSH's sftp client tool with
a configuration file with the same options as the test harness socks server
with the exception that dynamic forwarding is not used for sftp.
Daniel Stenberg [Fri, 8 Feb 2008 11:20:20 +0000 (11:20 +0000)]
and mention make ca-bundle in the 1.11 faq entry as well
Daniel Stenberg [Fri, 8 Feb 2008 11:18:23 +0000 (11:18 +0000)]
for step 5, mention that we can now generate an own version locally if wanted
instead of downloading it from the curl site
Daniel Stenberg [Fri, 8 Feb 2008 11:16:44 +0000 (11:16 +0000)]
Günter Knauf added lib/mk-ca-bundle.pl which gets the Firefox ca bundle and
creates a suitable ca-bundle.crt file in PEM format for use with curl. The
recommended way to run it is to use 'make ca-bundle' in the build tree root.
Daniel Stenberg [Fri, 8 Feb 2008 11:12:54 +0000 (11:12 +0000)]
oops, we make the copyright year ranges the simple style
Daniel Stenberg [Fri, 8 Feb 2008 11:11:59 +0000 (11:11 +0000)]
provide the ca-bundle target the same way as the Makefile.dist does it so that
it works the same way for configure-based platforms as for non-configure ones
Daniel Stenberg [Fri, 8 Feb 2008 09:56:23 +0000 (09:56 +0000)]
include mk-ca-bundle.pl in the tarballs
Gunter Knauf [Fri, 8 Feb 2008 02:57:27 +0000 (02:57 +0000)]
added ca-bundle target to main makefile;
for now this does rename the existing ca-bundle.crt to ca-bundle.crt.old;
maybe we can remove this once we are 100% sure that the new script works properly, and just overwrite the shipping one?
Gunter Knauf [Fri, 8 Feb 2008 02:38:12 +0000 (02:38 +0000)]
use argument to specify output filename if present.
Gunter Knauf [Fri, 8 Feb 2008 01:58:11 +0000 (01:58 +0000)]
fixed regex to fetch certdata.txt version since it was replaced by CVS (argh!)
added a switch to display certdata.txt version header.
Dan Fandrich [Fri, 8 Feb 2008 01:21:03 +0000 (01:21 +0000)]
Added tests 1022 and 1023 to validate output of curl-config --version and
--vernum
Gunter Knauf [Fri, 8 Feb 2008 01:08:25 +0000 (01:08 +0000)]
added Perl script to create a fresh ca-bundle.crt.
Daniel Stenberg [Thu, 7 Feb 2008 22:25:04 +0000 (22:25 +0000)]
- Refactored a lot of timeout code into a few functions in an attempt to make
them all use the same (hopefully correct) logic to make it less error-prone
and easier to introduce library-wide where it should be used.
Daniel Stenberg [Thu, 7 Feb 2008 15:43:36 +0000 (15:43 +0000)]
ca-bundle.crt documentational updates that more clearly describe the bundle
ca-bundle.crt file as outdated and in need for replacement by anyone who wants
to verify modern peers as the one we have is from year 2000!