Skip to content
  1. Dec 03, 2018
  2. Nov 30, 2018
  3. Nov 29, 2018
  4. Nov 28, 2018
  5. Nov 26, 2018
    • James Knight's avatar
      configure: include all libraries in ssl-libs fetch · 0fac7a10
      James Knight authored
      
      
      When compiling a collection of SSL libraries to link against (SSL_LIBS),
      ensure all libraries are included. The call `--libs-only-l` can produce
      only a subset of found in a `--libs` call (e.x. pthread may be excluded).
      Adding `--libs-only-other` ensures other libraries are also included in
      the list. This corrects select build environments compiling against a
      static version of OpenSSL. Before the change, the following could be
      observed:
      
          checking for openssl options with pkg-config... found
          configure: pkg-config: SSL_LIBS: "-lssl -lz -ldl -lcrypto -lz -ldl "
          configure: pkg-config: SSL_LDFLAGS: "-L/home/jdknight/<workdir>/staging/usr/lib -L/home/jdknight/<workdir>/staging/usr/lib "
          configure: pkg-config: SSL_CPPFLAGS: "-I/home/jdknight/<workdir>/staging/usr/include "
          checking for HMAC_Update in -lcrypto... no
          checking for HMAC_Init_ex in -lcrypto... no
          checking OpenSSL linking with -ldl... no
          checking OpenSSL linking with -ldl and -lpthread... no
          configure: WARNING: SSL disabled, you will not be able to use HTTPS, FTPS, NTLM and more.
          configure: WARNING: Use --with-ssl, --with-gnutls, --with-polarssl, --with-cyassl, --with-nss, --with-axtls, --with-winssl, or --with-darwinssl to address this.
          ...
          SSL support:      no      (--with-{ssl,gnutls,nss,polarssl,mbedtls,cyassl,axtls,winssl,darwinssl} )
          ...
      
      And include the other libraries when compiling SSL_LIBS succeeds with:
      
          checking for openssl options with pkg-config... found
          configure: pkg-config: SSL_LIBS: "-lssl -lz -ldl -pthread -lcrypto -lz -ldl -pthread "
          configure: pkg-config: SSL_LDFLAGS: "-L/home/jdknight/<workdir>/staging/usr/lib -L/home/jdknight/<workdir>/staging/usr/lib "
          configure: pkg-config: SSL_CPPFLAGS: "-I/home/jdknight/<workdir>/staging/usr/include "
          checking for HMAC_Update in -lcrypto... yes
          checking for SSL_connect in -lssl... yes
          ...
          SSL support:      enabled (OpenSSL)
          ...
      
      Signed-off-by: default avatarJames Knight <james.d.knight@live.com>
      Closes #3193
      0fac7a10
    • Daniel Gustafsson's avatar
      doh: fix typo in infof call · fd104955
      Daniel Gustafsson authored
      
      
      Reviewed-by: default avatarDaniel Stenberg <daniel@haxx.se>
      fd104955
    • Daniel Gustafsson's avatar
      cmdline-opts/gen.pl: define the correct varname · 8802ad96
      Daniel Gustafsson authored
      
      
      The variable definition had a small typo making it declare another
      variable then the intended.
      
      Closes #3304
      Reviewed-by: default avatarDaniel Stenberg <daniel@haxx.se>
      8802ad96
  6. Nov 25, 2018
    • Daniel Stenberg's avatar
      RELEASE-NOTES: synced · 27a5e1f1
      Daniel Stenberg authored
      27a5e1f1
    • Daniel Stenberg's avatar
      curl_easy_perform: fix timeout handling · 34fe0e16
      Daniel Stenberg authored
      curl_multi_wait() was erroneously used from within
      curl_easy_perform(). It could lead to it believing there was no socket
      to wait for and then instead sleep for a while instead of monitoring the
      socket and then miss acting on that activity as swiftly as it should
      (causing an up to 1000 ms delay).
      
      Reported-by: Antoni Villalonga
      Fixes #3305
      Closes #3306
      Closes #3308
      34fe0e16
  7. Nov 23, 2018
  8. Nov 22, 2018
    • Tobias Hintze's avatar
      test: update test20/1322 for eglibc bug workaround · 9944d6ba
      Tobias Hintze authored
      The tests 20 and 1322 are using getaddrinfo of libc for resolving. In
      eglibc-2.19 there is a memory leakage and invalid free bug which
      surfaces in some special circumstances (PF_UNSPEC hint with invalid or
      non-existent names). The valgrind runs in testing fail in these
      situations.
      
      As the tests 20/1322 are not specific on either protocol (IPv4/IPv6)
      this commit changes the hints to IPv4 protocol by passing `--ipv4` flag
      on the tests' command line.  This prevents the valgrind failures.
      9944d6ba
    • Tobias Hintze's avatar
      host names: allow trailing dot in name resolve, then strip it · 5b4cce2e
      Tobias Hintze authored
      Delays stripping of trailing dots to after resolving the hostname.
      
      Fixes #3022
      Closes #3222
      5b4cce2e
  9. Nov 21, 2018
    • UnknownShadow200's avatar
    • Daniel Gustafsson's avatar
      configure: Fix typo in comment · 2fcc4367
      Daniel Gustafsson authored
      2fcc4367
    • Michael Kaufmann's avatar
      openssl: support session resume with TLS 1.3 · 549310e9
      Michael Kaufmann authored
      
      
      Session resumption information is not available immediately after a TLS 1.3
      handshake. The client must wait until the server has sent a session ticket.
      
      Use OpenSSL's "new session" callback to get the session information and put it
      into curl's session cache. For TLS 1.3 sessions, this callback will be invoked
      after the server has sent a session ticket.
      
      The "new session" callback is invoked only if OpenSSL's session cache is
      enabled, so enable it and use the "external storage" mode which lets curl manage
      the contents of the session cache.
      
      A pointer to the connection data and the sockindex are now saved as "SSL extra
      data" to make them available to the callback.
      
      This approach also works for old SSL/TLS versions and old OpenSSL versions.
      
      Reviewed-by: default avatarDaniel Stenberg <daniel@haxx.se>
      
      Fixes #3202
      Closes #3271
      549310e9
    • Michael Kaufmann's avatar
      ssl: fix compilation with OpenSSL 0.9.7 · 30a65381
      Michael Kaufmann authored
      - ENGINE_cleanup() was used without including "openssl/engine.h"
      - enable engine support for OpenSSL 0.9.7
      
      Closes #3266
      30a65381
    • Daniel Stenberg's avatar
      openssl: disable TLS renegotiation with BoringSSL · 59311bd3
      Daniel Stenberg authored
      Since we're close to feature freeze, this change disables this feature
      with an #ifdef. Define ALLOW_RENEG at build-time to enable.
      
      This could be converted to a bit for CURLOPT_SSL_OPTIONS to let
      applications opt-in this.
      
      Concern-raised-by: David Benjamin
      Fixes #3283
      Closes #3293
      59311bd3
  10. Nov 20, 2018
    • Romain Fliedel's avatar
      ares: remove fd from multi fd set when ares is about to close the fd · 6765e6d9
      Romain Fliedel authored
      When using c-ares for asyn dns, the dns socket fd was silently closed
      by c-ares without curl being aware. curl would then 'realize' the fd
      has been removed at next call of Curl_resolver_getsock, and only then
      notify the CURLMOPT_SOCKETFUNCTION to remove fd from its poll set with
      CURL_POLL_REMOVE. At this point the fd is already closed.
      
      By using ares socket state callback (ARES_OPT_SOCK_STATE_CB), this
      patch allows curl to be notified that the fd is not longer needed
      for neither for write nor read. At this point by calling
      Curl_multi_closed we are able to notify multi with CURL_POLL_REMOVE
      before the fd is actually closed by ares.
      
      In asyn-ares.c Curl_resolver_duphandle we can't use ares_dup anymore
      since it does not allow passing a different sock_state_cb_data
      
      Closes #3238
      6765e6d9
    • Romain Fliedel's avatar
    • pkubaj's avatar
      ntlm: Remove redundant ifdef USE_OPENSSL · 7c96f6a1
      pkubaj authored
      
      
      lib/curl_ntlm.c had code that read as follows:
      
        #ifdef USE_OPENSSL
        # ifdef USE_OPENSSL
        # else
        # ..
        # endif
        #endif
      
      Remove the redundant USE_OPENSSL along with #else (it's not possible to
      reach it anyway). The removed construction is a leftover from when the
      SSLeay support was removed.
      
      Closes #3269
      Reviewed-by: default avatarDaniel Gustafsson <daniel@yesql.se>
      Reviewed-by: default avatarDaniel Stenberg <daniel@haxx.se>
      7c96f6a1
    • Han Han's avatar
      ssl: replace all internal uses of CURLE_SSL_CACERT · 78ff4e0d
      Han Han authored
      Closes #3291
      78ff4e0d
  11. Nov 19, 2018
  12. Nov 18, 2018
    • Daniel Gustafsson's avatar
      tool_doswin: Fix uninitialized field warning · b88bf6e6
      Daniel Gustafsson authored
      The partial struct initialization in 397664a0
      
       caused
      a warning on uninitialized MODULEENTRY32 struct members:
      
        /src/tool_doswin.c:681:3: warning: missing initializer for field
        'th32ModuleID' of 'MODULEENTRY32 {aka struct tagMODULEENTRY32}'
        [-Wmissing-field-initializers]
      
      This is sort of a bogus warning as the remaining members will be set
      to zero by the compiler, as all omitted members are. Nevertheless,
      remove the warning by omitting all members and setting the dwSize
      members explicitly.
      
      Closes #3254
      Reviewed-by: default avatarMarcel Raad <Marcel.Raad@teamviewer.com>
      Reviewed-by: default avatarJay Satiro <raysatiro@yahoo.com>
      b88bf6e6
  13. Nov 17, 2018
  14. Nov 16, 2018