Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						8bba99ae56 
					 
					
						
						
							
							Lots of users on Windows have reported getting the "SSL: couldn't set  
						
						... 
						
						
						
						callback" error message so I've now made the setting of that callback not be
as critical as before. The function is only used for additional loggging/
trace anyway so a failure just means slightly less data. It should still be
able to proceed and connect fine to the server. 
						
						
					 
					
						2006-03-06 22:35:51 +00:00 
						 
				 
			
				
					
						
							
							
								Dan Fandrich 
							
						 
					 
					
						
						
							
						
						178afd81a9 
					 
					
						
						
							
							Fixed lcc compiler warnings.  
						
						
						
						
					 
					
						2005-12-19 19:47:14 +00:00 
						 
				 
			
				
					
						
							
							
								Dan Fandrich 
							
						 
					 
					
						
						
							
						
						e2df946eee 
					 
					
						
						
							
							Fixed some compiler warnings on lcc.  
						
						
						
						
					 
					
						2005-12-13 18:54:31 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						083c5e17e1 
					 
					
						
						
							
							Yang Tse fixed: Openssl 0.9.9 makes 'const' the SSL_METHOD parameter in  
						
						... 
						
						
						
						SSL_CTX_new and others, and also makes functions SSLv23_client_method,
TLSv1_client_method, etc return a 'const' SSL_METHOD pointer. Previous
versions do not use the 'const' qualifier. 
						
						
					 
					
						2005-12-05 15:14:04 +00:00 
						 
				 
			
				
					
						
							
							
								Gisle Vanem 
							
						 
					 
					
						
						
							
						
						67b4d9b232 
					 
					
						
						
							
							Recent OpenSSL returns a 'const' in '*_client_method()'. So avoid  
						
						... 
						
						
						
						'assignment discards qualifiers from pointer target type' warning. 
						
						
					 
					
						2005-12-04 18:47:36 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						9ace303528 
					 
					
						
						
							
							Yang Tse fixed compiler warnings  
						
						
						
						
					 
					
						2005-11-13 23:53:14 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						20b17d6b04 
					 
					
						
						
							
							the debug callback was called with CURLINFO_TEXT with the data size one  
						
						... 
						
						
						
						too big 
						
						
					 
					
						2005-08-10 22:57:14 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						4e26b2a65b 
					 
					
						
						
							
							fix compiler warning  
						
						
						
						
					 
					
						2005-04-13 06:52:03 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						6e61939382 
					 
					
						
						
							
							GnuTLS support added. There's now a "generic" SSL layer that we use all over  
						
						... 
						
						
						
						internally, with code provided by sslgen.c. All SSL-layer-specific code is
then written in ssluse.c (for OpenSSL) and gtls.c (for GnuTLS).
As far as possible, internals should not need to know what SSL layer that is
in use. Building with GnuTLS currently makes two test cases fail.
TODO.gnutls contains a few known outstanding issues for the GnuTLS support.
GnuTLS support is enabled with configure --with-gnutls 
						
						
					 
					
						2005-04-07 15:27:13 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						ab4086bc24 
					 
					
						
						
							
							Updated the copyright year since changes have been this year.  
						
						
						
						
					 
					
						2005-03-31 07:02:02 +00:00 
						 
				 
			
				
					
						
							
							
								Dan Fandrich 
							
						 
					 
					
						
						
							
						
						b01151e81c 
					 
					
						
						
							
							Reduced the length of data read from the random entropy file.  
						
						
						
						
					 
					
						2005-03-04 22:36:56 +00:00 
						 
				 
			
				
					
						
							
							
								Dan Fandrich 
							
						 
					 
					
						
						
							
						
						67bd6f9ccd 
					 
					
						
						
							
							Don't try to read the whole of the random file because when /dev/urandom is  
						
						... 
						
						
						
						used, it slows initialization too much reading an infinitely long file! 
						
						
					 
					
						2005-03-04 20:10:29 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						446b9467da 
					 
					
						
						
							
							init fix for non-SSL builds  
						
						
						
						
					 
					
						2005-02-10 07:45:08 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						61a1e3cd01 
					 
					
						
						
							
							better error checking and SSL init by David Byron  
						
						
						
						
					 
					
						2005-02-09 23:04:51 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						83bab78bda 
					 
					
						
						
							
							Hzhijun reported a memory leak in the SSL certificate code, that leaked the  
						
						... 
						
						
						
						remote certificate name when it didn't match the used host name. 
						
						
					 
					
						2005-01-10 09:48:39 +00:00 
						 
				 
			
				
					
						
							
							
								Gisle Vanem 
							
						 
					 
					
						
						
							
						
						754d6c3abd 
					 
					
						
						
							
							Remove 'data' initialiser.  
						
						
						
						
					 
					
						2004-12-19 11:39:34 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						3d647b9a98 
					 
					
						
						
							
							if the pkcs12.h header exists, include it already in urldata.h to work around  
						
						... 
						
						
						
						a precedence problem with the zlib header. See CHANGES for details. 
						
						
					 
					
						2004-12-19 09:37:32 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						8ad47a13e5 
					 
					
						
						
							
							Samuel Listopad added support for PKCS12 formatted certificates.  
						
						
						
						
					 
					
						2004-12-18 10:42:48 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						553082e24a 
					 
					
						
						
							
							prevent compiler warning when built without engine support  
						
						
						
						
					 
					
						2004-12-14 22:06:25 +00:00 
						 
				 
			
				
					
						
							
							
								Dan Fandrich 
							
						 
					 
					
						
						
							
						
						10d6d8b2ae 
					 
					
						
						
							
							Header files are in openssl/ only if USE_OPENSSL is set.  
						
						
						
						
					 
					
						2004-12-14 20:25:23 +00:00 
						 
				 
			
				
					
						
							
							
								Gisle Vanem 
							
						 
					 
					
						
						
							
						
						7d3f5d7ac1 
					 
					
						
						
							
							urldata.h: Removed engine_list.  
						
						... 
						
						
						
						ssluse.*: Added SSL_strerror(). Curl_SSL_engines_list() now returns a slist
which must be freed by caller. 
						
						
					 
					
						2004-12-14 14:20:21 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						07f107ae20 
					 
					
						
						
							
							Moved the engine stuff from the root-level of the SessionHandle struct to the  
						
						... 
						
						
						
						UrlState sub-struct. Also made the engine_list exist for non-ssl builds to
make curl build. 
						
						
					 
					
						2004-12-14 09:36:22 +00:00 
						 
				 
			
				
					
						
							
							
								Gisle Vanem 
							
						 
					 
					
						
						
							
						
						bdb0620529 
					 
					
						
						
							
							Added handling of CURLINFO_SSL_ENGINES;  
						
						... 
						
						
						
						Added Curl_SSL_engines_list(), cleanup SSL in url.c
(no HAVE_OPENSSL_x etc.). 
						
						
					 
					
						2004-12-13 16:43:00 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						8e34e75100 
					 
					
						
						
							
							Curl_select's timeout arg is an int  
						
						
						
						
					 
					
						2004-11-22 13:28:44 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						1a05a90f1c 
					 
					
						
						
							
							David Phillips' FD_SETSIZE fix  
						
						
						
						
					 
					
						2004-11-19 08:52:33 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						5931d43a36 
					 
					
						
						
							
							clean up start time and t_startsingle use so that redirect_time works properly  
						
						
						
						
					 
					
						2004-11-15 11:27:03 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						39af394a1c 
					 
					
						
						
							
							removed tabs and trailing whitespace from source  
						
						
						
						
					 
					
						2004-10-06 07:50:18 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						6fa624cf8c 
					 
					
						
						
							
							improved error message when client cert return failure  
						
						
						
						
					 
					
						2004-09-02 21:03:41 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						4934e6471b 
					 
					
						
						
							
							In OpenSSL 0.9.7d and earlier, ASN1_STRING_to_UTF8 fails if the input is  
						
						... 
						
						
						
						already UTF-8 encoded. We check for this case and copy the raw string manually
to avoid the problem. This code can be made conditional in the future when
OpenSSL has been fixed. Work-around brought by Alexis S. L. Carvalho. 
						
						
					 
					
						2004-08-10 08:06:43 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						ae2f002b44 
					 
					
						
						
							
							added typecast in an attempt to fix a mingw32 warning  
						
						
						
						
					 
					
						2004-07-29 07:34:17 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						4511f7ac50 
					 
					
						
						
							
							SSL_get_verify_result() returns a long, so we receive the result in a long  
						
						... 
						
						
						
						and not an int. 
						
						
					 
					
						2004-07-04 21:42:32 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						090b89cc76 
					 
					
						
						
							
							Variable type cleanups to please the picky MIPSPro compiler.  
						
						
						
						
					 
					
						2004-07-01 08:10:21 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						85bd4621db 
					 
					
						
						
							
							Prevent a very long password to buffer overflow the global variable we  
						
						... 
						
						
						
						use when built with a very old OpenSSL version. 
						
						
					 
					
						2004-06-30 11:53:34 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						ba40eccc90 
					 
					
						
						
							
							make the SSL connect use the same default connect timeout define as the  
						
						... 
						
						
						
						generic connect uses 
						
						
					 
					
						2004-06-30 09:22:48 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						feb2dd2835 
					 
					
						
						
							
							Replaced all uses of sprintf() with the safer snprintf(). It is just a  
						
						... 
						
						
						
						precaution to prevent mistakes to lead to buffer overflows. 
						
						
					 
					
						2004-06-24 11:54:11 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						76920413d9 
					 
					
						
						
							
							Gisle fixed the wildcard checks for certificates.  
						
						
						
						
					 
					
						2004-06-22 08:51:22 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						cf3f1ef284 
					 
					
						
						
							
							prevent compiler warning  
						
						
						
						
					 
					
						2004-06-19 09:38:08 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						bd3d5a17b4 
					 
					
						
						
							
							Gisle's "SSL patch" from June 16th 2004, modified by me as discussed on the  
						
						... 
						
						
						
						mailing list. 
						
						
					 
					
						2004-06-18 06:20:43 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						be72eaa327 
					 
					
						
						
							
							use Curl_strcasestr() when checking wildcard cert names  
						
						
						
						
					 
					
						2004-06-13 08:33:26 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						2511d1193a 
					 
					
						
						
							
							* seed_enough() was converted to a macro to avoid the IRIX compiler warning  
						
						... 
						
						
						
						about that passed-in argument not being used.
* killed trailing whitespace 
						
						
					 
					
						2004-05-18 07:25:13 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						a9893ca79a 
					 
					
						
						
							
							Peter Sylvester's patch that addresses two flaws in the peer certificate name  
						
						... 
						
						
						
						verification:
- when multiple common names are used (as in the curl tests), the last name
needs to be selected.
- allow comparing with encoded values, at least with BMP and ISO latin1
encoded T61strings. 
						
						
					 
					
						2004-05-17 22:01:16 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						b5f85ba77d 
					 
					
						
						
							
							memory cleanup and check fix  
						
						
						
						
					 
					
						2004-05-13 15:19:02 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						bbafb2eb27 
					 
					
						
						
							
							curl_global_init_mem() allows the memory functions to be replaced.  
						
						... 
						
						
						
						memory.h is included everywhere for this. 
						
						
					 
					
						2004-05-11 11:30:23 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						699ebe2f0b 
					 
					
						
						
							
							Gisle made the code use ERR_error_string_n()  
						
						
						
						
					 
					
						2004-04-29 07:36:40 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						4b9f8e766d 
					 
					
						
						
							
							Made host name and proxy name get stored in a 'struct hostname' and set  
						
						... 
						
						
						
						all things up to work with encoded host names internally, as well as keeping
'display names' to show in debug messages. IDN resolves work for me now using
ipv6, ipv4 and ares resolving. Even cookies on IDN sites seem to do right. 
						
						
					 
					
						2004-04-27 13:56:23 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						fb1039f2ab 
					 
					
						
						
							
							Tor Arntsen fixed a 'Statement not reachable'-warning  
						
						
						
						
					 
					
						2004-04-26 11:52:43 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						b7a7600465 
					 
					
						
						
							
							Cleaned up hostname/name/gname and path/ppath confusion. Removed the fixed-  
						
						... 
						
						
						
						length limit of the hostname part of the URL. 
						
						
					 
					
						2004-04-20 07:53:24 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						0c791d1e76 
					 
					
						
						
							
							variable type usage cleanup to please picky compilers  
						
						
						
						
					 
					
						2004-03-23 15:20:57 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						326e8b9fc1 
					 
					
						
						
							
							don't let the EINTR stuff build on windows  
						
						
						
						
					 
					
						2004-03-11 12:57:04 +00:00 
						 
				 
			
				
					
						
							
							
								Daniel Stenberg 
							
						 
					 
					
						
						
							
						
						40e892bb36 
					 
					
						
						
							
							Jeff Lawson fixed the SSL connection to deal with received signals during the  
						
						... 
						
						
						
						connect. 
						
						
					 
					
						2004-03-10 08:43:01 +00:00