which turned up to be due to the number of dots in the 'domain'. I've now
  made curl follow the the original netscape cookie spec less strict on that
  part.

 with FOLLOWLOCATION and chunked transfer-encoding, as libcurl would not
 properly ignore the body contents of 3XX response that included the
 Location: header.

connects and otherwise enforced tunnel-thru-proxy requests), the same
authentication header is also wrongly sent to the remote host.

The name and password can then be captured by an evil host and possibly get
used for malicious purposes.

style like other faked HTTP headers when NOBODY and HEADER are used.

unsigned and we want this to be able to hold -1 for illegal/unset values.

"double slash" as indicating the root directory. In the RFC1738-fix of April
30, that ability was removed (since it is not the "right" way).

SSL/CA.

need it.

accidentally re-use the connect_addr field, as that might no longer be
around. Fix verified by Tracy Boehrer who basicly debugged and tracked down
this problem.

CVS. This will be updated by the configure script, and a default is placed
here by the maketgz script.

a separate struct properly.

than the remote server's. That is, both the server and the proxy can in
fact require NTLM auth.

connectdata to work as expected

with a blank argument is a bad idea. Now skip blanks.

credentials.

of the sessionhandle struct, as that was not good.

connectdata struct instead. Each being an allocated pointer.

The passwdgiven field was turned into a local variable in the only
function it was being used.

authenticates connections and not single requests. This should make it work
better when we mix requests from multiple hosts. Problem pointed out by
Cris Bailiff.

Bailiff's bug report 768275.

for the user field. I changed it slightly to stay with strchr() only instead
of strpbrk() for portability reasons.

the multi interface

the configure script. We set it differently now and generate the
lib/ca-bundle.h file entirely.

   CURLOPT_SSL_CTX_FUNCTION to set a callback that gets called with the
   OpenSSL's ssl_ctx pointer passed in and allow a callback to act on it. If
   anything but CURLE_OK is returned, that will also be returned by libcurl
   all the way back. If this function changes the CURLOPT_URL, libcurl will
   detect this and instead go use the new URL.

   CURLOPT_SSL_CTX_DATA is a pointer you set to get passed to the callback set
   with CURLOPT_SSL_CTX_FUNCTION.