Skip to content
Snippets Groups Projects
  1. Dec 05, 2014
  2. Oct 30, 2014
  3. Jul 16, 2014
    • David Woodhouse's avatar
      Remove all traces of FBOpenSSL SPNEGO support · 9ad282b1
      David Woodhouse authored
      This is just fundamentally broken. SPNEGO (RFC4178) is a protocol which
      allows client and server to negotiate the underlying mechanism which will
      actually be used to authenticate. This is *often* Kerberos, and can also
      be NTLM and other things. And to complicate matters, there are various
      different OIDs which can be used to specify the Kerberos mechanism too.
      
      A SPNEGO exchange will identify *which* GSSAPI mechanism is being used,
      and will exchange GSSAPI tokens which are appropriate for that mechanism.
      
      But this SPNEGO implementation just strips the incoming SPNEGO packet
      and extracts the token, if any. And completely discards the information
      about *which* mechanism is being used. Then we *assume* it was Kerberos,
      and feed the token into gss_init_sec_context() with the default
      mechanism (GSS_S_NO_OID for the mech_type argument).
      
      Furthermore... broken as this code is, it was never even *used* for input
      tokens anyway, because higher layers of curl would just bail out if the
      server actually said anything *back* to us in the negotiation. We assume
      that we send a single token to the server, and it accepts it. If the server
      wants to continue the exchange (as is required for NTLM and for SPNEGO
      to do anything useful), then curl was broken anyway.
      
      So the only bit which actually did anything was the bit in
      Curl_output_negotiate(), which always generates an *initial* SPNEGO
      token saying "Hey, I support only the Kerberos mechanism and this is its
      token".
      
      You could have done that by manually just prefixing the Kerberos token
      with the appropriate bytes, if you weren't going to do any proper SPNEGO
      handling. There's no need for the FBOpenSSL library at all.
      
      The sane way to do SPNEGO is just to *ask* the GSSAPI library to do
      SPNEGO. That's what the 'mech_type' argument to gss_init_sec_context()
      is for. And then it should all Just Work™.
      
      That 'sane way' will be added in a subsequent patch, as will bug fixes
      for our failure to handle any exchange other than a single outbound
      token to the server which results in immediate success.
      9ad282b1
  4. Mar 03, 2014
    • Jiří Malák's avatar
      Rework Open Watcom make files to use standard Wmake features · 420d9ff3
      Jiří Malák authored
      Remove slash/backslash problem, now only slashes are used,
      Wmake automaticaly translate slash/backslash to proper version or tools are not sensitive for it.
      Enable spaces in path.
      Use internal rm command for all host platforms
      Add error message if old Open Watcom version is used. Some old versions exhibit build problems for Curl latest version. Now only versions 1.8, 1.9 and 2.O beta are supported
      420d9ff3
  5. May 11, 2013
  6. Feb 09, 2013
  7. Jan 28, 2013
  8. May 22, 2012
  9. Apr 26, 2012
  10. Apr 20, 2012
  11. Apr 12, 2012
  12. Sep 11, 2011
  13. Sep 03, 2011
  14. Apr 24, 2011
  15. Apr 19, 2011
  16. Feb 13, 2011
  17. Dec 05, 2010
  18. Oct 13, 2010
  19. Oct 12, 2010
  20. Aug 18, 2010
  21. Aug 15, 2010
  22. Aug 11, 2010
  23. Aug 10, 2010
    • Guenter Knauf's avatar
      More Watcom makefile fixes ... · 06869597
      Guenter Knauf authored
      Final fix (hopefully!) for dll wlink loader;
      prefer faster internal rm if available.
      06869597
    • Guenter Knauf's avatar
      Fixed my wrong edit. · 517f3a1b
      Guenter Knauf authored
      517f3a1b
    • Guenter Knauf's avatar
      More Watcom makefile fixes. · 495d3e07
      Guenter Knauf authored
      Added the -br switch to dynamic builds which fixes the issue I saw
      with curl's --version output. Added debug info and symfile for debug
      builds to linker opts. Added DLL loader for wlink back, but this time
      dependend on wlink version.
      Patch posted to the list by malak.jiri AT gmail.com.
      495d3e07
    • Guenter Knauf's avatar
      Changed test for -u switch in order to enable other wmake switches. · 44e5e37f
      Guenter Knauf authored
      The var %MAKEFLAGS is only set in 3 cases: if set as environment
      var or as macro definition from commandline, and either with the
      -u or -ms switch. Since all these cases are unlikely for the average
      user it should be safe to only test if %MAKEFLAGS is defined; this
      has the benefit that now all other switches can be used again in
      addition to the -u which was formerly not possible.
      44e5e37f
  24. Aug 07, 2010
  25. Aug 06, 2010
  26. Aug 02, 2010
  27. Aug 01, 2010
  28. Jul 31, 2010
  29. Jul 29, 2010
    • Guenter Knauf's avatar
      Make Watcom makefiles use Makefile.inc to reduce future maintainance. · 6ad0acb6
      Guenter Knauf authored
      lib/Makefile.Watcom works fine already, for src/Makefile.Watcom we
      need first to tweak src/Makefile.inc a bit - therefore the handtweaked
      list still exists for now.
      6ad0acb6
    • Guenter Knauf's avatar
      Watcom makefiles overhaul. · cfbb351e
      Guenter Knauf authored
      - make both libcurl and curl makefiles use register calling convention
        (previously libcurl had stack calling convention).
      - added include paths to the Watcom headers so its no longer required
        to set the environment vars for this.
      - added -wcd=201 to supress compiler warning about unreachable code.
      - use macros for all tools, and removed dependency on GNU tools like rm.
      - make ipv6 and debug builds controlable via env vars and so make them
        optional instead of default.
      - commented WINLDAPAPI and WINBERAPI since they broke with OW 1.8, and
        it seems they're not needed (anymore?).
      - added rule for hugehelp.c.cvs so that it will be created when not
        already exist - this is required for building from a release tarball
        since there we have no hugehelp.c.cvs, thus compilation broke.
      - removed C_ARG creation from lib/Makefile.Watcom and use CFLAGS
        directly as done too in src/Makefile.Watcom - this has the benefit
        that we will see all active cflags and defines during compile.
      - added LINK-ARG to src/Makefile.Watcom in order to better control
        linker input.
      - a couple of other minor makefile tweaks here and there ...
      - added largefile support for Watcom builds to config-win32.h. Not yet
        tested if it really works, but should since Win32 supports it.
      - added loaddll stuff to speed up builds if supported.
      cfbb351e
Loading