- 14 Aug, 2014 2 commits
-
-
Steve Holme authored
Added a kerberos5data structure which is similar in nature to the ntlmdata and negotiatedata structures.
-
Steve Holme authored
In preparation for the upcoming SSPI implementation of GSSAPI authentication, moved the definition of KERB_WRAP_NO_ENCRYPT from socks_sspi.c to curl_sspi.h allowing it to be shared amongst other SSPI based code.
-
- 13 Aug, 2014 3 commits
-
-
Daniel Stenberg authored
-
Daniel Stenberg authored
... as mxr.mozilla.org is due to be retired. The new host doesn't support If-Modified-Since nor ETags, meaning that the script will now defer to download and do a post-transfer checksum check to see if a new output is to be generated. The new output format will hold the SHA1 checksum of the source file for that purpose. We call this version 1.22 Reported-by: Ed Morley Bug: http://curl.haxx.se/bug/view.cgi?id=1409
-
Jose Alf authored
Fixed libcurl to correctly output the newer versions of OpenSSL 0.9.8, starting from openssl-0.9.8za.
-
- 12 Aug, 2014 1 commit
-
-
Frank Meier authored
Bringing back the old functionality that was mistakenly removed when the connection cache was remade. When creating a new connection, all the existing ones are checked and those that are known to be dead get disconnected for real and removed from the connection cache. It helps the cache from holding on to very many stale connections and aids in keeping down the number of system sockets in wait states. Help-by:
Jonatan Vela <jonatan.vela@ergon.ch> Bug: http://curl.haxx.se/mail/lib-2014-06/0189.html
-
- 11 Aug, 2014 2 commits
-
-
Kamil Dudka authored
Bug: http://curl.haxx.se/mail/lib-2014-07/0335.html Reported-by: David Shaw
-
Peter Wang authored
Curl_poll and Curl_wait_ms require the fix applied to Curl_socket_check in commits b61e8b81 and c771968a: When poll or select are interrupted and coincides with the timeout elapsing, the functions return -1 indicating an error instead of 0 for the timeout.
-
- 10 Aug, 2014 6 commits
-
-
Steve Holme authored
-
Steve Holme authored
-
Steve Holme authored
Added copyright due to warning from checksrc.pl.
-
Steve Holme authored
-
Steve Holme authored
Given the SSPI package info query indicates a token size of 4096 bytes, updated to use a dynamic buffer for the response message generation rather than a fixed buffer of 1024 bytes.
-
Steve Holme authored
-
- 09 Aug, 2014 7 commits
-
-
Steve Holme authored
Due to the reduction of code in commit 3b924b29 of get_gss_name() the function isn't necessary anymore.
-
Steve Holme authored
Updated to use a dynamic buffer for the SPN generation via the recently introduced Curl_sasl_build_spn() function rather than a fixed buffer of 1024 characters, which should have been more than enough, but by using the new function removes the need for another variable sname to do the wide character conversion in Unicode builds.
-
Steve Holme authored
-
Steve Holme authored
Updated Curl_sasl_create_digest_md5_message() to use a dynamic buffer for the SPN generation via the recently introduced Curl_sasl_build_spn() function rather than a fixed buffer of 128 characters.
-
Steve Holme authored
Curl_sasl_create_digest_md5_message() would simply cast the SPN variable to a TCHAR when calling InitializeSecurityContext(). This meant that, under Unicode builds, it would not be valid wide character string. Updated to use the recently introduced Curl_sasl_build_spn() function which performs the correct conversion for us.
-
Steve Holme authored
Various parts of the libcurl source code build a SPN for inclusion in authentication data. This information is either used by our own native generation routines or passed to authentication functions in third-party libraries such as SSPI. However, some of these instances use fixed buffers rather than dynamically allocated ones and not all of those that should, convert to wide character strings in Unicode builds. Implemented a common function that generates a SPN and performs the wide character conversion where necessary.
-
Steve Holme authored
Curl_sasl_create_digest_md5_message() wouldn't free the Package Info structure after QuerySecurityPackageInfo() had allocated it.
-
- 08 Aug, 2014 7 commits
-
-
Michael Osipov authored
Reflect recent changes in SPNEGO and GSS-API code in the docs. Update them with appropriate namings and remove visible spots for GSS-Negotiate.
-
Steve Holme authored
Following the recent changes and in attempt to align the SSPI based authentication code performed the following: * Use NULL and SECBUFFVERSION rather than hard coded constants. * Avoid comparison of zero in if statements. * Standardised the buf and desc setup code.
-
Steve Holme authored
vtls.c:688:43: warning: unused parameter 'data'
-
Steve Holme authored
warning: `orig_opt' might be used uninitialized in this function
-
Steve Holme authored
-
Daniel Stenberg authored
-
Steve Holme authored
Given the SSPI package info query indicates a token size of 2888 bytes, and as with the Winbind code and commit 9008f3d5, use a dynamic buffer for the Type-1 and Type-3 message generation rather than a fixed buffer of 1024 bytes.
-
- 07 Aug, 2014 8 commits
-
-
Steve Holme authored
Just as with the SSPI implementations of Digest and Negotiate added a package info query so that libcurl can a) return a more appropriate error code when the NTLM package is not supported and b) it can be of use later to allocate a dynamic buffer for the Type-1 and Type-3 output tokens rather than use a fixed buffer of 1024 bytes.
-
Daniel Stenberg authored
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
-
Daniel Stenberg authored
-
Daniel Stenberg authored
OPENSSL_config() is "strongly recommended" to use but unfortunately that function makes an exit() call on wrongly formatted config files which makes it hard to use in some situations. OPENSSL_config() itself calls CONF_modules_load_file() and we use that instead and we ignore its return code! Reported-by: Jan Ehrhardt Bug: http://curl.haxx.se/bug/view.cgi?id=1401
-
Fabian Keil authored
Test case numbers with four digits have been available for a while now.
-
Steve Holme authored
-
- 06 Aug, 2014 4 commits
-
-
Steve Holme authored
-
Steve Holme authored
-
Steve Holme authored
Bug: http://curl.haxx.se/mail/lib-2014-06/0224.html Reported-by: Leonardo Rosati
-
Steve Holme authored
If the server rejects our authentication attempt and curl hasn't called CompleteAuthToken() then the status variable will be SEC_I_CONTINUE_NEEDED and not SEC_E_OK. As such the existing detection mechanism for determining whether or not the authentication process has finished is not sufficient. However, the WWW-Authenticate: Negotiate header line will not contain any data when the server has exhausted the negotiation, so we can use that coupled with the already allocated context pointer.
-