Skip to content
  • Kamil Dudka's avatar
    CURLOPT_SOCKS5_AUTH: allowed methods for SOCKS5 proxy auth · 8924f58c
    Kamil Dudka authored
    If libcurl was built with GSS-API support, it unconditionally advertised
    GSS-API authentication while connecting to a SOCKS5 proxy.  This caused
    problems in environments with improperly configured Kerberos: a stock
    libcurl failed to connect, despite libcurl built without GSS-API
    connected fine using username and password.
    
    This commit introduces the CURLOPT_SOCKS5_AUTH option to control the
    allowed methods for SOCKS5 authentication at run time.
    
    Note that a new option was preferred over reusing CURLOPT_PROXYAUTH
    for compatibility reasons because the set of authentication methods
    allowed by default was different for HTTP and SOCKS5 proxies.
    
    Bug: https://curl.haxx.se/mail/lib-2017-01/0005.html
    Closes https://github.com/curl/curl/pull/1454
    8924f58c