Commit 3e1caa61 authored by Daniel Stenberg's avatar Daniel Stenberg
Browse files

HTTP "auth done right". See lib/README.httpauth

parent 50eafb76

CHANGES

+10 −0
Original line number Diff line number Diff line
@@ -11,6 +11,16 @@ Daniel (24 November 2004) 
  with Msys/Mingw on Windows.



Daniel (22 November 2004)

- Made HTTP PUT and POST requests no longer use HEAD when doing multi-pass

  auth negotiation (NTLM, Digest and Negotiate), but instead use the request

  keyword "properly". Details in lib/README.httpauth. This also introduces

  CURLOPT_IOCTLFUNCTION and CURLOPT_IOCTLDATA, to be used by apps that use the

  "any" auth alternative as then libcurl may need to send the PUT/POST data

  more than once and thus may need to ask the app to "rewind" the read data

  stream to start.



  See also the new example using this: docs/examples/anyauthput.c



- David Phillips enhanced test 518. I made it depend on a "feature" so that

  systems without getrlimit() won't attempt to test 518. configure now checks

  for getrlimit() and setrlimit() for this test case.

RELEASE-NOTES

+5 −1
Original line number Diff line number Diff line
@@ -3,13 +3,16 @@ Curl and libcurl 7.12.3 
 Public curl release number:               84

 Releases counted from the very beginning: 111

 Available command line options:           100

 Available curl_easy_setopt() options:     121

 Available curl_easy_setopt() options:     123

 Number of public functions in libcurl:    46

 Amount of public web site mirrors:        13

 Number of known libcurl bindings:         29



This release includes the following changes:



 o CURLOPT_IOCTLFUNCTION and CURLOPT_IOCTLDATA added. If your app uses HTTP

   Digest, NTLM or Negotiate authentication, you will most likely want to use

   these

 o -w time_redirect and num_redirects

 o no longer uses libcurl.def for building on Windows, OS/2 and Netware

 o builds on Windows CE
@@ -19,6 +22,7 @@ This release includes the following changes: 


This release includes the following bugfixes:



 o HTTP PUT/POST with Digest, NTLM or Negotiate no longer uses HEAD

 o now gracefully bails out when exceeding FD_SETSIZE file descriptors

 o CURLINFO_REDIRECT_TIME works

 o building with gssapi libs and hdeaders in the default dirs

TODO-RELEASE

+0 −4
Original line number Diff line number Diff line
@@ -6,7 +6,3 @@ To get fixed in 7.12.3 (planned release: December 2004) 
47 - Peter Sylvester's patch for SRP on the TLS layer

     Awaits OpenSSL support for this, no need to support this in libcurl before

     there's an OpenSSL release that does it.
 


51 - PUT/POST with multipass authenticaion

     Daniel works on this.

docs/TODO

+5 −0
Original line number Diff line number Diff line
@@ -38,6 +38,11 @@ TODO 


 LIBCURL - multi interface



 * Add a curl_multi_fdset() alternative that returns only two arrays with file

   desrciptors for reading and writing to allow the app to use whatever

   function it prefers. Plus, this allows apps to avoid the FD_SETSIZE problem

   with select().



 * Add curl_multi_timeout() to make libcurl's ares-functionality better.



 * Make sure we don't ever loop because of non-blocking sockets return

docs/curl.1

+5 −0
Original line number Diff line number Diff line
@@ -91,6 +91,11 @@ network round-trip. This is used instead of setting a specific authentication 
method, which you can do with \fI--basic\fP, \fI--digest\fP, \fI--ntlm\fP, and

\fI--negotiate\fP. (Added in 7.10.6)



Note that using --anyauth is not recommended if you do uploads from stdin,

since it may require data to be sent twice and then the client must be able to

rewind. If the need should arise when uploading from stdin, the upload

operation will fail.



If this option is used several times, the following occurrences make no

difference.

.IP "-b/--cookie <name=data>"