Commit 338b6413 authored by Steve Holme's avatar Steve Holme
Browse files

docs: Updated following the addition of SSPI based HTTP digest auth

parent 0a925d78

docs/ROADMAP.md

+7 −9
Original line number Diff line number Diff line
@@ -22,28 +22,26 @@ New stuff - libcurl 
   `curl_formget()` and `curl_formfree()` by adding replacement functions and

   deprecating the old ones to allow custom mallocs and more



7. HTTP Digest authentication via Windows SSPI

7. SASL GSSAPI (Kerberos 5) authentication via a GSS-API library



8. SASL GSSAPI (Kerberos 5) authentication via a GSS-API library



9. add support for third-party SASL libraries such as Cyrus SASL - may need to

8. add support for third-party SASL libraries such as Cyrus SASL - may need to

   move existing native and SSPI based authentication into vsasl folder after

   reworking HTTP and SASL code



10. SASL authentication in LDAP

9. SASL authentication in LDAP



11. Simplify the SMTP email interface so that programmers don't have to

10. Simplify the SMTP email interface so that programmers don't have to

    construct the body of an email that contains all the headers, alternative

    content, images and attachments - maintain raw interface so that

    programmers that want to do this can



12. Allow the email protocols to return the capabilities before

11. Allow the email protocols to return the capabilities before

    authenticating. This will allow an application to decide on the best

    authentication mechanism



13. Allow Windows threading model to be replaced by Win32 pthreads port

12. Allow Windows threading model to be replaced by Win32 pthreads port



14. Implement a dynamic buffer size to allow SFTP to use much larger buffers

13. Implement a dynamic buffer size to allow SFTP to use much larger buffers

    and possibly allow the size to be customizable by applications. Use less

    memory when handles are not in use?

docs/TODO

+0 −7
Original line number Diff line number Diff line
@@ -42,7 +42,6 @@ 
 5.3 Rearrange request header order

 5.4 SPDY

 5.5 auth= in URLs

 5.6 Digest via Windows SSPI



 6. TELNET

 6.1 ditch stdin
@@ -314,12 +313,6 @@ This is not detailed in any FTP specification. 


 Additionally this should be implemented for proxy base URLs as well.



5.6 Digest via Windows SSPI



 libcurl already supports HTTP Digest Authentication via native routines as well

 as SASL Digest via both Windows SSPI and native routines. In addition to this

 libcurl should also support HTTP Digest Authentication via Windows SSPI.



6. TELNET



6.1 ditch stdin

docs/curl.1

+1 −1
Original line number Diff line number Diff line
@@ -1684,7 +1684,7 @@ Principal Name) formats. For example, EXAMPLE\\user and user@example.com 
respectively.



If you use a Windows SSPI-enabled curl binary and perform Kerberos V5,

Negotiate, NTLM or DIGEST-MD5 authentication then you can tell curl to select

Negotiate, NTLM or Digest authentication then you can tell curl to select

the user name and password from your environment by specifying a single colon

with this option: "-u :".

docs/libcurl/curl_version_info.3

+1 −1
Original line number Diff line number Diff line
@@ -125,7 +125,7 @@ letters. (Added in 7.12.0) 
.IP CURL_VERSION_SSPI

libcurl was built with support for SSPI. This is only available on Windows and

makes libcurl use Windows-provided functions for Kerberos, NTLM, SPNEGO and

SASL DIGEST-MD5 authentication. It also allows libcurl to use the current user

Digest authentication. It also allows libcurl to use the current user

credentials without the app having to pass them on. (Added in 7.13.2)

.IP CURL_VERSION_GSSAPI

libcurl was built with support for GSS-API. This makes libcurl use provided