[bagder/curl] ebf313: nss: add support for the CURLSSLOPT_ALLOW_BEAST op...

  Branch: refs/heads/master
  Home:   https://github.com/bagder/curl
  Commit: ebf31389927dd1f514c0a7092a6ba52ad003ad95
      https://github.com/bagder/curl/commit/ebf31389927dd1f514c0a7092a6ba52ad003ad95
  Author: Kamil Dudka <kdudka <at> redhat.com>
  Date:   2012-02-09 (Thu, 09 Feb 2012)

  Changed paths:
    M lib/nss.c
  M src/tool_getparam.c
  M src/tool_help.c

  Log Message:
  -----------
  nss: add support for the CURLSSLOPT_ALLOW_BEAST option

... and fix some typos from the 62d15f1 commit.

_______________________________________________
curl-commits mailing list
curl-commits <at> cool.haxx.se
http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-commits

[bagder/curl] 8ef8a2: configure: don't modify LD_LIBRARY_PATH for cross ...

  Branch: refs/heads/master
  Home:   https://github.com/bagder/curl
  Commit: 8ef8a2b5ac66cf93e478b18abf69700237e70e52
      https://github.com/bagder/curl/commit/8ef8a2b5ac66cf93e478b18abf69700237e70e52
  Author: Rob Ward <rob <at> rob-ward.co.uk>
  Date:   2012-02-09 (Thu, 09 Feb 2012)

  Changed paths:
    M configure.ac

  Log Message:
  -----------
  configure: don't modify LD_LIBRARY_PATH for cross compiles

_______________________________________________
curl-commits mailing list
curl-commits <at> cool.haxx.se
http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-commits

[bagder/curl] 62d15f: --ssl-allow-beast added

  Branch: refs/heads/master
  Home:   https://github.com/bagder/curl
  Commit: 62d15f159e163bf4e1a27ac1b0ffd9b84e02bf56
      https://github.com/bagder/curl/commit/62d15f159e163bf4e1a27ac1b0ffd9b84e02bf56
  Author: Daniel Stenberg <daniel <at> haxx.se>
  Date:   2012-02-09 (Thu, 09 Feb 2012)

  Changed paths:
    M docs/curl.1
  M src/tool_cfgable.h
  M src/tool_getparam.c
  M src/tool_help.c
  M src/tool_operate.c

  Log Message:
  -----------
  --ssl-allow-beast added

This new option tells curl to not work around a security flaw in the
SSL3 and TLS1.0 protocols. It uses the new libcurl option
CURLOPT_SSL_OPTIONS with the CURLSSLOPT_ALLOW_BEAST bit set.

_______________________________________________
curl-commits mailing list
curl-commits <at> cool.haxx.se
http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-commits

[bagder/curl] 2a699b: CURLOPT_SSL_OPTIONS: added

  Branch: refs/heads/master
  Home:   https://github.com/bagder/curl
  Commit: 2a699bc6e94b8223d900e8880ad628aebf17ab6d
      https://github.com/bagder/curl/commit/2a699bc6e94b8223d900e8880ad628aebf17ab6d
  Author: Daniel Stenberg <daniel <at> haxx.se>
  Date:   2012-02-09 (Thu, 09 Feb 2012)

  Changed paths:
    M docs/libcurl/curl_easy_setopt.3
  M docs/libcurl/symbols-in-versions
  M include/curl/curl.h
  M lib/ssluse.c
  M lib/url.c
  M lib/urldata.h

  Log Message:
  -----------
  CURLOPT_SSL_OPTIONS: added

Allow an appliction to set libcurl specific SSL options. The first and
only options supported right now is CURLSSLOPT_ALLOW_BEAST.

It will make libcurl to disable any work-arounds the underlying SSL
library may have to address a known security flaw in the SSL3 and TLS1.0
protocol versions.

This is a reaction to us unconditionally removing that behavior after
this security advisory:

http://curl.haxx.se/docs/adv_20120124B.html

[bagder/curl] 705f0f: add library support for tuning TCP_KEEPALIVE

  Branch: refs/heads/master
  Home:   https://github.com/bagder/curl
  Commit: 705f0f7a5b6120bb783d139c9266b285a4c8acd8
      https://github.com/bagder/curl/commit/705f0f7a5b6120bb783d139c9266b285a4c8acd8
  Author: Dave Reisner <dreisner <at> archlinux.org>
  Date:   2012-02-09 (Thu, 09 Feb 2012)

  Changed paths:
    M docs/libcurl/curl_easy_setopt.3
  M docs/libcurl/symbols-in-versions
  M include/curl/curl.h
  M lib/connect.c
  M lib/url.c
  M lib/urldata.h

  Log Message:
  -----------
  add library support for tuning TCP_KEEPALIVE

This adds three new options to control the behavior of TCP keepalives:

- CURLOPT_TCP_KEEPALIVE: enable/disable probes
- CURLOPT_TCP_KEEPIDLE: idle time before sending first probe
- CURLOPT_TCP_KEEPINTVL: delay between successive probes

While not all operating systems support the TCP_KEEPIDLE and
TCP_KEEPINTVL knobs, the library will still allow these options to be
set by clients, silently ignoring the values.

  Commit: 2a266c1c7c075f9faced0248ed3f870dac1fc749

[bagder/curl] ea0554: curl_easy_reset: reset the referer string

  Branch: refs/heads/master
  Home:   https://github.com/bagder/curl
  Commit: ea055407fa45c4247042e7370d463364f03c3136
      https://github.com/bagder/curl/commit/ea055407fa45c4247042e7370d463364f03c3136
  Author: Daniel Stenberg <daniel <at> haxx.se>
  Date:   2012-02-07 (Tue, 07 Feb 2012)

  Changed paths:
    M lib/url.c
  A tests/data/test598
  M tests/libtest/Makefile.inc
  A tests/libtest/lib598.c

  Log Message:
  -----------
  curl_easy_reset: reset the referer string

When CURLOPT_REFERER has been used, curl_easy_reset() did not properly
clear it.

Verified with the new test 598

Bug: http://curl.haxx.se/bug/view.cgi?id=3481551
Reported by: Michael Day

_______________________________________________
curl-commits mailing list
curl-commits <at> cool.haxx.se

[bagder/curl] 440503: curl tool: allow glob-loops to abort again upon cr...

  Branch: refs/heads/master
  Home:   https://github.com/bagder/curl
  Commit: 4405039fdcc60f6348c8d69159953f18a5c11fed
      https://github.com/bagder/curl/commit/4405039fdcc60f6348c8d69159953f18a5c11fed
  Author: Yang Tse <yangsita <at> gmail.com>
  Date:   2012-02-07 (Tue, 07 Feb 2012)

  Changed paths:
    M src/tool_operate.c

  Log Message:
  -----------
  curl tool: allow glob-loops to abort again upon critical errors

This prevents clobbering of non recoverable error return codes while
retaining intended functionality of commit 65103efe

_______________________________________________
curl-commits mailing list
curl-commits <at> cool.haxx.se
http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-commits

[bagder/curl] 466150: CONNECT: send correct Host: with IPv6 numerical ad...

  Branch: refs/heads/master
  Home:   https://github.com/bagder/curl
  Commit: 466150bc64de0caef08f22cc8a88f7922483a639
      https://github.com/bagder/curl/commit/466150bc64de0caef08f22cc8a88f7922483a639
  Author: Daniel Stenberg <daniel <at> haxx.se>
  Date:   2012-01-31 (Tue, 31 Jan 2012)

  Changed paths:
    M lib/http_proxy.c

  Log Message:
  -----------
  CONNECT: send correct Host: with IPv6 numerical address

When the target host was given as a IPv6 numerical address, it was not
properly put within square brackets for the Host: header in the CONNECT
request. The "normal" request did fine.

Reported by: "zooloo"
Bug: http://curl.haxx.se/bug/view.cgi?id=3482093

_______________________________________________
curl-commits mailing list
curl-commits <at> cool.haxx.se
http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-commits

[bagder/curl] f710aa: Explicitly link to the nettle/gcrypt libraries

  Branch: refs/heads/master
  Home:   https://github.com/bagder/curl
  Commit: f710aa40b326377b6834b59cc937bf50e929aba7
      https://github.com/bagder/curl/commit/f710aa40b326377b6834b59cc937bf50e929aba7
  Author: Martin Storsjo <martin <at> martin.st>
  Date:   2012-01-28 (Sat, 28 Jan 2012)

  Changed paths:
    M configure.ac

  Log Message:
  -----------
  Explicitly link to the nettle/gcrypt libraries

When support for nettle was added in 64f328c787ab, I overlooked
the fact that AC_CHECK_LIB doesn't add the tested lib to LIBS
if the check succeeded, if a custom success code block was present.
(The previous version of the check had an empty block for
successful checks, adding the lib to LIBS implicitly.)

Therefore, explicitly add either nettle or gcrypt to LIBS, after
deciding which one to use. Even if they can be linked in
transitively, it is safer to actually link explicitly to them.

This fixes building with gnutls with linkers that don't allow
linking transitively, such as for windows.

_______________________________________________

[bagder/curl] 4d2737: remove write-only variable

  Branch: refs/heads/master
  Home:   https://github.com/bagder/curl
  Commit: 4d2737bcb2c6713d5eebba09343367b6b4d5580c
      https://github.com/bagder/curl/commit/4d2737bcb2c6713d5eebba09343367b6b4d5580c
  Author: Pierre Ynard <linkfanel <at> yahoo.fr>
  Date:   2012-01-28 (Sat, 28 Jan 2012)

  Changed paths:
    M lib/connect.c

  Log Message:
  -----------
  remove write-only variable

  Commit: f4d3c0cbfb648917a0b78d291ac9855fd12975a9
      https://github.com/bagder/curl/commit/f4d3c0cbfb648917a0b78d291ac9855fd12975a9
  Author: Pierre Ynard <linkfanel <at> yahoo.fr>
  Date:   2012-01-28 (Sat, 28 Jan 2012)

  Changed paths:
    M lib/connect.c

  Log Message:
  -----------
  more resilient connection times among IP addresses

When connecting to a domain with multiple IP addresses, allow different,
decreasing connection timeout values. This should guarantee some
connections attempts with sufficiently long timeouts, while still
providing fallback.

[bagder/curl] 575f3c: - fix IPV6 and IDN options

  Branch: refs/heads/master
  Home:   https://github.com/bagder/curl
  Commit: 575f3c30ed60aafddbaeeb26745cca942fb9ee2f
      https://github.com/bagder/curl/commit/575f3c30ed60aafddbaeeb26745cca942fb9ee2f
  Author: Pierre Joye <pierre.php <at> gmail.com>
  Date:   2012-01-26 (Thu, 26 Jan 2012)

  Changed paths:
    M winbuild/Makefile.vc
  M winbuild/MakefileBuild.vc

  Log Message:
  -----------
  - fix IPV6 and IDN options

  Commit: 8ee2576b6fcc8aee0c768255a55e255a1868b609
      https://github.com/bagder/curl/commit/8ee2576b6fcc8aee0c768255a55e255a1868b609
  Author: Pierre Joye <pierre.php <at> gmail.com>
  Date:   2012-01-26 (Thu, 26 Jan 2012)

  Changed paths:
    M RELEASE-NOTES
  M TODO-RELEASE
  M docs/THANKS
  M docs/examples/README
  M docs/libcurl/curl_easy_setopt.3
  M include/curl/curlver.h
  M lib/escape.c
  M lib/escape.h
  M lib/gtls.c