Skip to content
  1. Feb 14, 2012
    • toddouska's avatar
      cyassl: update to CyaSSL 2.0.x API · ee7e4fc1
      toddouska authored
      Modify configure.ac to test for new CyaSSL Init function and remove
      default install path to system.  Change to CyaSSL OpenSSL header and
      proper Init in code as well.
      
      Note that this no longer detects or works with CyaSSL before v2
      ee7e4fc1
  2. Feb 13, 2012
  3. Feb 09, 2012
    • Daniel Stenberg's avatar
      --ssl-allow-beast added · 62d15f15
      Daniel Stenberg authored
      This new option tells curl to not work around a security flaw in the
      SSL3 and TLS1.0 protocols. It uses the new libcurl option
      CURLOPT_SSL_OPTIONS with the CURLSSLOPT_ALLOW_BEAST bit set.
      62d15f15
    • Daniel Stenberg's avatar
      CURLOPT_SSL_OPTIONS: added · 2a699bc6
      Daniel Stenberg authored
      Allow an appliction to set libcurl specific SSL options. The first and
      only options supported right now is CURLSSLOPT_ALLOW_BEAST.
      
      It will make libcurl to disable any work-arounds the underlying SSL
      library may have to address a known security flaw in the SSL3 and TLS1.0
      protocol versions.
      
      This is a reaction to us unconditionally removing that behavior after
      this security advisory:
      
      http://curl.haxx.se/docs/adv_20120124B.html
      
      ... it did however cause a lot of programs to fail because of old
      servers not liking this work-around. Now programs can opt to decrease
      the security in order to interoperate with old servers better.
      2a699bc6
    • Dave Reisner's avatar
      curl: use new library-side TCP_KEEPALIVE options · 2a266c1c
      Dave Reisner authored
      Use the new library CURLOPT_TCP_KEEPALIVE rather than disabling this via
      the sockopt callback. If --keepalive-time is used, apply the value to
      CURLOPT_TCP_KEEPIDLE and CURLOPT_TCP_KEEPINTVL.
      2a266c1c
    • Dave Reisner's avatar
      add library support for tuning TCP_KEEPALIVE · 705f0f7a
      Dave Reisner authored
      This adds three new options to control the behavior of TCP keepalives:
      
      - CURLOPT_TCP_KEEPALIVE: enable/disable probes
      - CURLOPT_TCP_KEEPIDLE: idle time before sending first probe
      - CURLOPT_TCP_KEEPINTVL: delay between successive probes
      
      While not all operating systems support the TCP_KEEPIDLE and
      TCP_KEEPINTVL knobs, the library will still allow these options to be
      set by clients, silently ignoring the values.
      705f0f7a
  4. Jan 25, 2012
  5. Jan 21, 2012
  6. Jan 19, 2012
  7. Jan 18, 2012
  8. Jan 16, 2012
  9. Jan 04, 2012
  10. Jan 03, 2012
  11. Jan 02, 2012
  12. Dec 30, 2011
  13. Dec 23, 2011
    • Colin Hogben's avatar
      Require a less ancient version of perl · 84e7ea2f
      Colin Hogben authored
      The INTERNALS document suggested that compatibility should be
      maintained with perl version 4, but this was untrue - scripts such as
      chksource.pl and runtests.pl use perl5-isms.
      84e7ea2f
  14. Dec 21, 2011
  15. Dec 20, 2011
  16. Dec 19, 2011
  17. Dec 15, 2011
  18. Dec 12, 2011
    • Jason Glasgow's avatar
      CURLOPT_INTERFACE: avoid resolving interfaces names · 6e4835c7
      Jason Glasgow authored
      Do not try to resolve interfaces names via DNS by recognizing interface
      names in a few ways.  If the interface option argument has a prefix of
      "if!" then treat the argument as only an interface.  Similarly, if the
      interface argument is the name of an interface (even if it does not have
      an IP address assigned), treat it as an interface name.  Finally, if the
      interface argument is prefixed by "host!" treat it as a hostname that
      must be resolved by /etc/hosts or DNS.
      
      These changes allow a client using the multi interfaces to avoid
      blocking on name resolution if the interface loses its IP address or
      disappears.
      6e4835c7
  19. Dec 07, 2011
  20. Dec 05, 2011