- Dec 05, 2014
-
-
Guenter Knauf authored
-
- Oct 30, 2014
-
-
Guenter Knauf authored
-
- Jul 16, 2014
-
-
David Woodhouse authored
This is just fundamentally broken. SPNEGO (RFC4178) is a protocol which allows client and server to negotiate the underlying mechanism which will actually be used to authenticate. This is *often* Kerberos, and can also be NTLM and other things. And to complicate matters, there are various different OIDs which can be used to specify the Kerberos mechanism too. A SPNEGO exchange will identify *which* GSSAPI mechanism is being used, and will exchange GSSAPI tokens which are appropriate for that mechanism. But this SPNEGO implementation just strips the incoming SPNEGO packet and extracts the token, if any. And completely discards the information about *which* mechanism is being used. Then we *assume* it was Kerberos, and feed the token into gss_init_sec_context() with the default mechanism (GSS_S_NO_OID for the mech_type argument). Furthermore... broken as this code is, it was never even *used* for input tokens anyway, because higher layers of curl would just bail out if the server actually said anything *back* to us in the negotiation. We assume that we send a single token to the server, and it accepts it. If the server wants to continue the exchange (as is required for NTLM and for SPNEGO to do anything useful), then curl was broken anyway. So the only bit which actually did anything was the bit in Curl_output_negotiate(), which always generates an *initial* SPNEGO token saying "Hey, I support only the Kerberos mechanism and this is its token". You could have done that by manually just prefixing the Kerberos token with the appropriate bytes, if you weren't going to do any proper SPNEGO handling. There's no need for the FBOpenSSL library at all. The sane way to do SPNEGO is just to *ask* the GSSAPI library to do SPNEGO. That's what the 'mech_type' argument to gss_init_sec_context() is for. And then it should all Just Work™. That 'sane way' will be added in a subsequent patch, as will bug fixes for our failure to handle any exchange other than a single outbound token to the server which results in immediate success.
-
- Mar 03, 2014
-
-
Jiří Malák authored
Remove slash/backslash problem, now only slashes are used, Wmake automaticaly translate slash/backslash to proper version or tools are not sensitive for it. Enable spaces in path. Use internal rm command for all host platforms Add error message if old Open Watcom version is used. Some old versions exhibit build problems for Curl latest version. Now only versions 1.8, 1.9 and 2.O beta are supported
-
- May 11, 2013
-
-
Guenter Knauf authored
-
- Feb 09, 2013
-
-
Guenter Knauf authored
-
- Jan 28, 2013
-
-
Guenter Knauf authored
-
- May 22, 2012
-
-
Guenter Knauf authored
-
- Apr 26, 2012
-
-
Guenter Knauf authored
-
- Apr 20, 2012
-
-
Guenter Knauf authored
-
- Apr 12, 2012
-
-
Guenter Knauf authored
-
Guenter Knauf authored
-
- Sep 11, 2011
-
-
Guenter Knauf authored
-
- Sep 03, 2011
-
-
Guenter Knauf authored
-
- Apr 24, 2011
-
-
Guenter Knauf authored
For now we directly import the Idn* symbols with the linker; an upcoming release of OWC will have these added to the import lib normaliz.lib, and prototypes are added to winnnls.h.
-
- Apr 19, 2011
-
-
Guenter Knauf authored
-
- Feb 13, 2011
-
-
Guenter Knauf authored
-
- Dec 05, 2010
-
-
Guenter Knauf authored
-
- Oct 13, 2010
-
-
Guenter Knauf authored
-
Guenter Knauf authored
-
- Oct 12, 2010
-
-
Guenter Knauf authored
-
Guenter Knauf authored
-
- Aug 18, 2010
-
-
Guenter Knauf authored
-
Guenter Knauf authored
-
- Aug 15, 2010
-
-
Guenter Knauf authored
-
- Aug 11, 2010
-
-
Guenter Knauf authored
-
- Aug 10, 2010
-
-
Guenter Knauf authored
Final fix (hopefully!) for dll wlink loader; prefer faster internal rm if available.
-
Guenter Knauf authored
-
Guenter Knauf authored
Added the -br switch to dynamic builds which fixes the issue I saw with curl's --version output. Added debug info and symfile for debug builds to linker opts. Added DLL loader for wlink back, but this time dependend on wlink version. Patch posted to the list by malak.jiri AT gmail.com.
-
Guenter Knauf authored
The var %MAKEFLAGS is only set in 3 cases: if set as environment var or as macro definition from commandline, and either with the -u or -ms switch. Since all these cases are unlikely for the average user it should be safe to only test if %MAKEFLAGS is defined; this has the benefit that now all other switches can be used again in addition to the -u which was formerly not possible.
-
- Aug 07, 2010
-
-
Guenter Knauf authored
-
- Aug 06, 2010
-
-
Guenter Knauf authored
For now removed the .autodepend directive until I've figured out which of my changes broke it again.
-
- Aug 02, 2010
-
-
Guenter Knauf authored
-
- Aug 01, 2010
-
-
Guenter Knauf authored
-
Guenter Knauf authored
These defines are only needed for older Watcom versions (< 1280).
-
Guenter Knauf authored
-
Guenter Knauf authored
-
- Jul 31, 2010
-
-
Guenter Knauf authored
-
- Jul 29, 2010
-
-
Guenter Knauf authored
lib/Makefile.Watcom works fine already, for src/Makefile.Watcom we need first to tweak src/Makefile.inc a bit - therefore the handtweaked list still exists for now.
-
Guenter Knauf authored
- make both libcurl and curl makefiles use register calling convention (previously libcurl had stack calling convention). - added include paths to the Watcom headers so its no longer required to set the environment vars for this. - added -wcd=201 to supress compiler warning about unreachable code. - use macros for all tools, and removed dependency on GNU tools like rm. - make ipv6 and debug builds controlable via env vars and so make them optional instead of default. - commented WINLDAPAPI and WINBERAPI since they broke with OW 1.8, and it seems they're not needed (anymore?). - added rule for hugehelp.c.cvs so that it will be created when not already exist - this is required for building from a release tarball since there we have no hugehelp.c.cvs, thus compilation broke. - removed C_ARG creation from lib/Makefile.Watcom and use CFLAGS directly as done too in src/Makefile.Watcom - this has the benefit that we will see all active cflags and defines during compile. - added LINK-ARG to src/Makefile.Watcom in order to better control linker input. - a couple of other minor makefile tweaks here and there ... - added largefile support for Watcom builds to config-win32.h. Not yet tested if it really works, but should since Win32 supports it. - added loaddll stuff to speed up builds if supported.
-