Skip to content
  1. Apr 04, 2017
  2. Apr 03, 2017
  3. Apr 02, 2017
  4. Apr 01, 2017
  5. Mar 31, 2017
  6. Mar 30, 2017
  7. Mar 29, 2017
  8. Mar 28, 2017
    • Daniel Stenberg's avatar
      conncache: make hashkey avoid malloc · 2066072f
      Daniel Stenberg authored
      ... to make it much faster. Idea developed with primepie on IRC.
      
      Closes #1365
      2066072f
    • Kamil Dudka's avatar
      http: do not treat FTPS over CONNECT as HTTPS · 2549831d
      Kamil Dudka authored
      If we use FTPS over CONNECT, the TLS handshake for the FTPS control
      connection needs to be initiated in the SENDPROTOCONNECT state, not
      the WAITPROXYCONNECT state.  Otherwise, if the TLS handshake completed
      without blocking, the information about the completed TLS handshake
      would be saved to a wrong flag.  Consequently, the TLS handshake would
      be initiated in the SENDPROTOCONNECT state once again on the same
      connection, resulting in a failure of the TLS handshake.  I was able to
      observe the failure with the NSS backend if curl ran through valgrind.
      
      Note that this commit partially reverts curl-7_21_6-52-ge34131d.
      2549831d
    • Daniel Stenberg's avatar
      pause: handle mixed types of data when paused · 45220334
      Daniel Stenberg authored
      When receiving chunked encoded data with trailers, and the write
      callback returns PAUSE, there might be both body and header to store to
      resend on unpause. Previously libcurl returned error for that case.
      
      Added test case 1540 to verify.
      
      Reported-by: Stephen Toub
      Fixes #1354
      Closes #1357
      45220334
    • Isaac Boukris's avatar
      http: Fix proxy connection reuse with basic-auth · 7975d10c
      Isaac Boukris authored
      When using basic-auth, connections and proxy connections
      can be re-used with different Authorization headers since
      it does not authenticate the connection (like NTLM does).
      
      For instance, the below command should re-use the proxy
      connection, but it currently doesn't:
      curl -v -U alice:a -x http://localhost:8181 http://localhost/
        --next -U bob:b -x http://localhost:8181 http://localhost/
      
      This is a regression since refactoring of ConnectionExists()
      as part of: cb4e2be7
      
      Fix the above by removing the username and password compare
      when re-using proxy connection at proxy_info_matches().
      
      However, this fix brings back another bug would make curl
      to re-print the old proxy-authorization header of previous
      proxy basic-auth connection because it wasn't cleared.
      
      For instance, in the below command the second request should
      fail if the proxy requires authentication, but would succeed
      after the above fix (and before aforementioned commit):
      curl -v -U alice:a -x http://localhost:8181 http://localhost/
        --next -x http://localhost:8181 http://localhost/
      
      
      
      Fix this by clearing conn->allocptr.proxyuserpwd after use
      unconditionally, same as we do for conn->allocptr.userpwd.
      
      Also fix test 540 to not expect digest auth header to be
      resent when connection is reused.
      
      Signed-off-by: default avatarIsaac Boukris <iboukris@gmail.com>
      
      Closes https://github.com/curl/curl/pull/1350
      7975d10c
    • Jay Satiro's avatar
      openssl: exclude DSA code when OPENSSL_NO_DSA is defined · b04e4ebd
      Jay Satiro authored
      - Fix compile errors that occur in openssl.c when OpenSSL lib was
        built without DSA support.
      
      Bug: https://github.com/curl/curl/issues/1361
      
      
      Reported-by: default avatar <neheb@users.noreply.github.com>
      b04e4ebd