- Markus Moeller introduced two new options to libcurl: (de4610a5) · Commits · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP curl

CHANGES

+7 −0

Original line number	Diff line number	Diff line
		@@ -6,6 +6,13 @@

		Changelog

		Daniel Stenberg (28 Jan 2009)
		- Markus Moeller introduced two new options to libcurl:
		CURLOPT_SOCKS5_GSSAPI_SERVICE and CURLOPT_SOCKS5_GSSAPI_NEC to allow libcurl
		to do GSS-style authentication with SOCKS5 proxies. The curl tool got the
		options called --socks5-gssapi-service and --socks5-gssapi-nec to enable
		these.

		Daniel Stenberg (26 Jan 2009)
		- Chad Monroe provided the new CURLOPT_TFTP_BLKSIZE option that allows an app
		to set desired block size to use for TFTP transfers instead of the default

RELEASE-NOTES

+6 −3

Original line number	Diff line number	Diff line
		Curl and libcurl 7.19.4

		Public curl releases: 110
		Command line options: 129
		curl_easy_setopt() options: 159
		Command line options: 131
		curl_easy_setopt() options: 161
		Public functions in libcurl: 58
		Known libcurl bindings: 37
		Contributors: 700
		@@ -13,6 +13,9 @@ This release includes the following changes:
		o the OpenSSL-specific code disables TICKET (rfc5077) which is enabled by
		default in openssl 0.9.8j
		o Added CURLOPT_TFTP_BLKSIZE
		o Added CURLOPT_SOCKS5_GSSAPI_SERVICE and CURLOPT_SOCKS5_GSSAPI_NEC - with
		the corresponding curl options --socks5-gssapi-service and
		--socks5-gssapi-nec

		This release includes the following bugfixes:

		@@ -28,6 +31,6 @@ This release would not have looked like this without help, code, reports and
		advice from friends like these:

		Lisa Xu, Daniel Fandrich, Craig A West, Alexey Borzov, Sharad Gupta,
		Peter Sylvester, Chad Monroe
		Peter Sylvester, Chad Monroe, Markus Moeller

		Thanks! (and sorry if I forgot to mention someone)

TODO-RELEASE

+0 −2

Original line number	Diff line number	Diff line
		@@ -3,8 +3,6 @@ To be addressed in 7.19.4 (planned release: March 2009)

		206 - A. Craig West's CURLOPT_HTTP_VERSION change for CONNECT

		208 - Patch to allow GSSAPI authentication to a socks5 server

		214 - progress bar prefix, second try (for the curl tool)

		215 - Patch for Metalink Support (for the curl tool)

docs/curl.1

+16 −1

Original line number	Diff line number	Diff line
		@@ -821,7 +821,7 @@ The only wildcard is a single * character, which matches all hosts, and
		effectively disables the proxy. Each name in this list is matched as either
		a domain which contains the hostname, or the hostname itself. For example,
		local.com would match local.com, local.com:80, and www.local.com, but not
		www.notlocal.com.
		www.notlocal.com. (Added in 7.19.4).
		.IP "--ntlm"
		(HTTP) Enables NTLM authentication. The NTLM authentication method was
		designed by Microsoft and is used by IIS web servers. It is a proprietary
		@@ -1114,6 +1114,21 @@ mutually exclusive.
		If this option is used several times, the last one will be used. (This option
		was previously wrongly documented and used as --socks without the number
		appended.)
		.IP "--socks5-gssapi-service <servicename>"
		The default service name for a socks server is rcmd/server-fqdn. This option
		allows you to change it.

		Examples:
		--socks5 proxy-name \fI--socks5-gssapi-service\fP sockd would use
		sockd/proxy-name
		--socks5 proxy-name \fI--socks5-gssapi-service\fP sockd/real-name would use
		sockd/real-name for cases where the proxy-name does not match the princpal name.
		(Added in 7.19.4).
		.IP "--socks5-gssapi-nec"
		As part of the gssapi negotiation a protection mode is negotiated. The rfc1961
		says in section 4.3/4.4 it should be protected, but the NEC reference
		implementation does not. The option \fI--socks5-gssapi-nec\fP allows the
		unprotected exchange of the protection mode negotiation. (Added in 7.19.4).
		.IP "--stderr <file>"
		Redirect all writes to stderr to the specified file instead. If the file name
		is a plain '-', it is instead written to stdout. This option has no point when

docs/libcurl/curl_easy_setopt.3

+10 −0

Original line number	Diff line number	Diff line
		@@ -487,6 +487,16 @@ Set the parameter to 1 to make the library tunnel all operations through a
		given HTTP proxy. There is a big difference between using a proxy and to
		tunnel through it. If you don't know what this means, you probably don't want
		this tunneling option.
		.IP CURLOPT_SOCKS5_GSSAPI_SERVICE
		Pass a char * as parameter to a string holding the name of the service. The
		default service name for a SOCKS5 server is rcmd/server-fqdn. This option
		allows you to change it. (Added in 7.19.4)
		.IP CURLOPT_SOCKS5_GSSAPI_NEC
		Pass a long set to 1 to enable or 0 to disable. As part of the gssapi
		negotiation a protection mode is negotiated. The rfc1961 says in section
		4.3/4.4 it should be protected, but the NEC reference implementation does not.
		If enabled, this option allows the unprotected exchange of the protection mode
		negotiation. (Added in 7.19.4).
		.IP CURLOPT_INTERFACE
		Pass a char * as parameter. This sets the interface name to use as outgoing
		network interface. The name can be an interface name, an IP address, or a host