- Phil Pellouchoud found a case where libcurl built with NSS failed to

                                  Changelog

Daniel Stenberg (20 Jun 2008)

- Phil Pellouchoud found a case where libcurl built with NSS failed to

  handshake with a SSLv2 server, and it turned out to be because it didn't

  recognize the cipher named "rc4-md5". In our list that cipher was named

  plainly "rc4". I've now added rc4-md5 to work as an alias as Phil reported

  that it made things work for him again.

- Hans-Jurgen May pointed out that trying SCP or SFTP over a SOCKS proxy

  crashed libcurl. This is now addressed by making sure we use "plain send"

  internally when doing the socks handshake instead of the Curl_write()

 o connection re-use when using the multi interface with pipelining enabled

 o curl_multi_socket() socket callback fix for close/re-create sockets case

 o SCP or SFTP over socks proxy crashed

 o RC4-MD5 cipher now works with NSS-built libcurl

This release includes the following known bugs:

advice from friends like these:

 Lenny Rachitsky, Axel Tillequin, Arnaud Ebalard, Yang Tse, Dan Fandrich,

 Rob Crittenden, Dengminwen, Christopher Palow, Hans-Jrgen May

 Rob Crittenden, Dengminwen, Christopher Palow, Hans-Jurgen May,

 Phil Pellouchoud

        Thanks! (and sorry if I forgot to mention someone)

static const cipher_s cipherlist[] = {

  /* SSL2 cipher suites */

  {"rc4", SSL_EN_RC4_128_WITH_MD5, SSL2},

  {"rc4-md5", SSL_EN_RC4_128_WITH_MD5, SSL2},

  {"rc4export", SSL_EN_RC4_128_EXPORT40_WITH_MD5, SSL2},

  {"rc2", SSL_EN_RC2_128_CBC_WITH_MD5, SSL2},

  {"rc2export", SSL_EN_RC2_128_CBC_EXPORT40_WITH_MD5, SSL2},