- 24 Jan, 2012 1 commit
-
-
Daniel Stenberg authored
OpenSSL added a work-around for a SSL 3.0/TLS 1.0 CBC vulnerability (http://www.openssl.org/~bodo/tls-cbc.txt). In 0.9.6e they added a bit to SSL_OP_ALL that _disables_ that work-around despite the fact that SSL_OP_ALL is documented to do "rather harmless" workarounds. The libcurl code uses the SSL_OP_ALL define and thus logically always disables the OpenSSL fix. In order to keep the secure work-around workding, the SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS bit must not be set and this change makes sure of this. Reported by: product-security at Apple
-
- 22 Jan, 2012 1 commit
-
-
Daniel Stenberg authored
3 more bugfixes, 3 more contributors
-
- 21 Jan, 2012 2 commits
-
-
Daniel Stenberg authored
-
Dan Fandrich authored
-
- 20 Jan, 2012 1 commit
-
-
Daniel Stenberg authored
Using a URL with embedded user name and password didn't work if the host was given as a numerical IPv6 string, like ftp://user:password@[::1]/ Reported by: Brandon Wang Bug: http://curl.haxx.se/mail/archive-2012-01/0047.html
-
- 19 Jan, 2012 5 commits
-
-
Yang Tse authored
-
Yang Tse authored
-
Yang Tse authored
avoid checking preprocessor definition official value
-
Pierre Joye authored
-
Daniel Stenberg authored
As is pointed out in this bug report, there can indeed be situation where --stderr has a point even when the "real" stderr can be redirected. Remove the superfluous and wrong comment. bug: http://curl.haxx.se/bug/view.cgi?id=3476020
-
- 18 Jan, 2012 12 commits
-
-
-
Yang Tse authored
-
Daniel Stenberg authored
Apparently ssl_get_ciphersuite() is needed to get the name of the used cipher suite.
-
Daniel Stenberg authored
The value was turned negative when it shouldn't have been
-
Daniel Stenberg authored
... it is now named havege_random! Reported by: Robert Schumann Bug: http://curl.haxx.se/mail/lib-2012-01/0178.html
-
Daniel Stenberg authored
5 more bug fixes, 1 more contributor
-
Colin Hogben authored
Add simple telnet tests which (ab)use the http server. The second test checks for an input file handling bug.
-
Colin Hogben authored
Remove wrongly implemented optimisation of telnet upload, apparently intended to allow the library to avoid manually polling for input.
-
Colin Hogben authored
Fix a bug where input was read from stdin even when a different FILE * had been configured via CURLOPT_READDATA
-
Yang Tse authored
bug: http://curl.haxx.se/bug/view.cgi?id=3474308
-
Johannes Bauer authored
Leak triggered when CURLOPT_SSLCERTTYPE and CURLOPT_SSLKEYTYPE set to P12 and both CURLOPT_SSLCERT and CURLOPT_SSLKEY point to the same PKCS#12 file.
-
Yang Tse authored
SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG option enabling allowed successfull interoperability with web server Netscape Enterprise Server 2.0.1 released back in 1996 more than 15 years ago. Due to CVE-2010-4180, option SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG has become ineffective as of OpenSSL 0.9.8q and 1.0.0c. In order to mitigate CVE-2010-4180 when using previous OpenSSL versions we no longer enable this option regardless of OpenSSL version and SSL_OP_ALL definition.
-
- 17 Jan, 2012 3 commits
- 16 Jan, 2012 5 commits
-
-
Yang Tse authored
-
Yang Tse authored
-
Daniel Stenberg authored
Just showing how to download the contents of a given URL into a local file. Based on a suggestion and example code by Georg Potthast
-
Daniel Stenberg authored
Just to show that IMAP is used just like other protocols
-
Yang Tse authored
-
- 15 Jan, 2012 2 commits
- 14 Jan, 2012 1 commit
-
-
Daniel Stenberg authored
This newly speced HTTP status code already works as intended in the new spec: http://greenbytes.de/tech/webdav/draft-reschke-http-status-308-02.html Test 1325 is added to verify that the method is kept after the redirect
-
- 13 Jan, 2012 3 commits
- 12 Jan, 2012 2 commits
-
-
Daniel Stenberg authored
5 bug fixes, 3 more contributors
-
Daniel Stenberg authored
Some functions using getaddrinfo and gethostbyname were still mistakingly being used/linked even if c-ares was selected as resolver backend. Reported by: Arthur Murray Bug: http://curl.haxx.se/mail/lib-2012-01/0160.html
-
- 09 Jan, 2012 2 commits