1. 10 Jun, 2009 1 commit
    • Yang Tse's avatar
      Adjusted to take in account that... · 2c166812
      Yang Tse authored
      With the curl memory tracking feature decoupled from the debug build feature,
      CURLDEBUG and DEBUGBUILD preprocessor symbol definitions are used as follows:
      
      CURLDEBUG used for curl debug memory tracking specific code (--enable-curldebug)
      
      DEBUGBUILD used for debug enabled specific code (--enable-debug)
      2c166812
  2. 04 Jun, 2009 1 commit
  3. 01 Jun, 2009 1 commit
  4. 30 May, 2009 1 commit
  5. 28 May, 2009 1 commit
  6. 28 Apr, 2009 1 commit
    • Daniel Stenberg's avatar
      - Bug report #2709004 (http://curl.haxx.se/bug/view.cgi?id=2709004) by Tim · e01b7c1e
      Daniel Stenberg authored
        Chen pointed out how curl couldn't upload with resume when reading from a
        pipe.
      
        This ended up with the introduction of a new return code for the
        CURLOPT_SEEKFUNCTION callback that basically says that the seek failed but
        that libcurl may try to resolve the situation anyway. In our case this means
        libcurl will attempt to instead read that much data from the stream instead
        of seeking and that way curl can now upload with resume when data is read
        from a stream!
      e01b7c1e
  7. 09 Apr, 2009 1 commit
  8. 08 Apr, 2009 1 commit
  9. 11 Mar, 2009 1 commit
  10. 02 Mar, 2009 1 commit
    • Daniel Stenberg's avatar
      - David Kierznowski notified us about a security flaw · 042cc1f6
      Daniel Stenberg authored
        (http://curl.haxx.se/docs/adv_20090303.html also known as CVE-2009-0037) in
        which previous libcurl versions (by design) can be tricked to access an
        arbitrary local/different file instead of a remote one when
        CURLOPT_FOLLOWLOCATION is enabled. This flaw is now fixed in this release
        together this the addition of two new setopt options for controlling this
        new behavior:
      
        o CURLOPT_REDIR_PROTOCOLS controls what protocols libcurl is allowed to
        follow to when CURLOPT_FOLLOWLOCATION is enabled. By default, this option
        excludes the FILE and SCP protocols and thus you nee to explicitly allow
        them in your app if you really want that behavior.
      
        o CURLOPT_PROTOCOLS controls what protocol(s) libcurl is allowed to fetch
        using the primary URL option. This is useful if you want to allow a user or
        other outsiders control what URL to pass to libcurl and yet not allow all
        protocols libcurl may have been built to support.
      curl-7_19_4
      042cc1f6
  11. 17 Feb, 2009 1 commit
    • Daniel Stenberg's avatar
      - CURLOPT_FTP_CREATE_MISSING_DIRS can now be set to 2 in addition to 1 for · 8f81fd6b
      Daniel Stenberg authored
        plain FTP connections, and it will then allow MKD to fail once and retry the
        CWD afterwards. This is especially useful if you're doing many simultanoes
        connections against the same server and they all have this option enabled,
        as then CWD may first fail but then another connection does MKD before this
        connection and thus MKD fails but trying CWD works! The numbers can
        (should?) now be set with the convenience enums now called
        CURLFTP_CREATE_DIR and CURLFTP_CREATE_DIR_RETRY.
      
        Tests has proven that if you're making an application that uploads a set of
        files to an ftp server, you will get a noticable gain in speed if you're
        using multiple connections and this option will be then be very useful.
      8f81fd6b
  12. 11 Feb, 2009 1 commit
  13. 10 Feb, 2009 1 commit
  14. 02 Feb, 2009 1 commit
    • Daniel Stenberg's avatar
      - Craig A West brought us: libcurl now defaults to do CONNECT with HTTP · bdd4294e
      Daniel Stenberg authored
        version 1.1 instead of 1.0 like before. This change also introduces the new
        proxy type for libcurl called 'CURLPROXY_HTTP_1_0' that then allows apps to
        switch (back) to CONNECT 1.0 requests. The curl tool also got a --proxy1.0
        option that works exactly like --proxy but sets CURLPROXY_HTTP_1_0.
      
        I updated all test cases cases that use CONNECT and I tried to do some using
        --proxy1.0 and some updated to do CONNECT 1.1 to get both versions run.
      bdd4294e
  15. 28 Jan, 2009 1 commit
  16. 26 Jan, 2009 1 commit
  17. 25 Jan, 2009 1 commit
  18. 10 Dec, 2008 1 commit
    • Daniel Stenberg's avatar
      - Internet Explorer had a broken HTTP digest authentication before v7 and · 6e376532
      Daniel Stenberg authored
        there are servers "out there" that relies on the client doing this broken
        Digest authentication. Apache even comes with an option to work with such
        broken clients.
      
        The difference is only for URLs that contain a query-part (a '?'-letter and
        text to the right of it).
      
        libcurl now supports this quirk, and you enable it by setting the
        CURLAUTH_DIGEST_IE bit in the bitmask you pass to the CURLOPT_HTTPAUTH or
        CURLOPT_PROXYAUTH options. They are thus individually controlled to server
        and proxy.
      6e376532
  19. 17 Oct, 2008 1 commit
  20. 16 Oct, 2008 1 commit
  21. 09 Oct, 2008 1 commit
  22. 08 Oct, 2008 1 commit
    • Daniel Stenberg's avatar
      - Igor Novoseltsev brought a patch that introduced two new options to · 08cf6780
      Daniel Stenberg authored
        curl_easy_setopt: CURLOPT_USERNAME and CURLOPT_PASSWORD that sort of
        deprecates the good old CURLOPT_USERPWD since they allow applications to set
        the user name and password independently and perhaps more importantly allow
        both to contain colon(s) which CURLOPT_USERPWD doesn't fully support.
      08cf6780
  23. 05 Sep, 2008 2 commits
    • Daniel Stenberg's avatar
      - Martin Drasar provided the CURLOPT_POSTREDIR patch. It renames · 18110b51
      Daniel Stenberg authored
        CURLOPT_POST301 (but adds a define for backwards compatibility for you who
        don't define CURL_NO_OLDIES). This option allows you to now also change the
        libcurl behavior for a HTTP response 302 after a POST to not use GET in the
        subsequent request (when CURLOPT_FOLLOWLOCATION is enabled). I edited the
        patch somewhat before commit. The curl tool got a matching --post302
        option. Test case 1076 was added to verify this.
      18110b51
    • Daniel Stenberg's avatar
      - Introducing CURLOPT_CERTINFO and the corresponding CURLINFO_CERTINFO. By · 4c976856
      Daniel Stenberg authored
        enabling this feature with CURLOPT_CERTINFO for a request using SSL (HTTPS
        or FTPS), libcurl will gather lots of server certificate info and that info
        can then get extracted by a client after the request has completed with
        curl_easy_getinfo()'s CURLINFO_CERTINFO option. Linus Nielsen Feltzing
        helped me test and smoothen out this feature.
      
        Unfortunately, this feature currently only works with libcurl built to use
        OpenSSL.
      
        This feature was sponsored by networking4all.com - thanks!
      4c976856
  24. 17 Aug, 2008 1 commit
  25. 13 Aug, 2008 1 commit
  26. 12 Aug, 2008 1 commit
  27. 07 Aug, 2008 1 commit
  28. 30 Jul, 2008 1 commit
  29. 03 Jul, 2008 1 commit
    • Daniel Stenberg's avatar
      Introcuding a new timestamp for curl_easy_getinfo(): · 7c648782
      Daniel Stenberg authored
      CURLINFO_APPCONNECT_TIME. This is set with the "application layer"
      handshake/connection is completed (typically SSL, TLS or SSH). By using this
      you can figure out the application layer's own connect time. You can extract
      the time stamp using curl's -w option and the new variable named
      'time_appconnect'. This feature was sponsored by Lenny Rachitsky at NeuStar.
      7c648782
  30. 02 Jul, 2008 1 commit
  31. 01 Jul, 2008 1 commit
  32. 08 Jun, 2008 1 commit
  33. 06 Jun, 2008 3 commits
  34. 03 Jun, 2008 1 commit
  35. 20 May, 2008 1 commit
    • Patrick Monnerat's avatar
      Adapting last changes to OS400: · 24bf52bc
      Patrick Monnerat authored
      _ Updated packages/OS400/curl.inc.in with new definitions.
      _ New connect/bind/sendto/recvfrom wrappers to support AF_UNIX sockets.
      _ Include files line length shortened below 100 chars.
      _ Const parameter in lib/qssl.[ch].
      _ Typos in packages/OS400/initscript.sh.
      24bf52bc
  36. 12 May, 2008 1 commit
  37. 30 Apr, 2008 1 commit
    • Daniel Stenberg's avatar
      - To make it easier for applications that want lots of magic stuff done on · 85298985
      Daniel Stenberg authored
        redirections and thus cannot use CURLOPT_FOLLOWLOCATION easily, we now
        introduce the new CURLINFO_REDIRECT_URL option that lets applications
        extract the URL libcurl would've redirected to if it had been told to. This
        then enables the application to continue to that URL as it thinks is
        suitable, without having to re-implement the magic of creating the new URL
        from the Location: header etc. Test 1029 verifies it.
      85298985