curl/lib
Daniel Stenberg 5c314c6bb4 Curl_input_negotiate: do not delegate GSSAPI credentials
This is a security flaw. See curl advisory 20110623 for details.

Reported by: Richard Silverman
2011-06-22 23:04:26 +02:00
..
.gitignore gitignore: ignore Makefile.vc10.dist made by maketgz 2010-10-13 00:26:19 +02:00
amigaos.c remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
amigaos.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
arpa_telnet.h Fix a couple of spelling errors in lib/ 2011-04-21 07:55:53 -07:00
asyn-ares.c Remove unnecessary typecast 2011-06-02 19:42:24 +02:00
asyn-thread.c asyn-thread: fix compiler warning 2011-06-21 16:06:56 +02:00
asyn.h compiler warning: fix 2011-05-21 14:10:17 +02:00
axtls.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
axtls.h return code cleanup: build, init and run-time errors 2011-04-05 15:14:02 +02:00
base64.c unittest: mark all unit tested functions 2011-06-10 14:40:46 +02:00
checksrc.pl Make checksrc.pl work on more out-of-tree builds 2011-05-26 19:17:10 +02:00
CMakeLists.txt CMake: improve library search, implement install. 2011-04-28 10:12:33 +02:00
config-amigaos.h build: provide SIZEOF_SIZE_T definition for non-configure builds 2010-12-02 21:41:23 +01:00
config-dos.h sources: update source headers 2011-03-10 12:04:33 +01:00
config-mac.h sources: update source headers 2011-03-10 12:04:33 +01:00
config-os400.h sources: update source headers 2011-03-10 12:04:33 +01:00
config-riscos.h sources: update source headers 2011-03-10 12:04:33 +01:00
config-symbian.h sources: update source headers 2011-03-10 12:04:33 +01:00
config-tpf.h sources: update source headers 2011-03-10 12:04:33 +01:00
config-vms.h sources: update source headers 2011-03-10 12:04:33 +01:00
config-vxworks.h sources: update source headers 2011-03-10 12:04:33 +01:00
config-win32.h sources: update source headers 2011-03-10 12:04:33 +01:00
config-win32ce.h sources: update source headers 2011-03-10 12:04:33 +01:00
connect.c unittest: mark all unit tested functions 2011-06-10 14:40:46 +02:00
connect.h CLOSESOCKETFUNCTION: added 2011-05-18 22:56:46 +02:00
content_encoding.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
content_encoding.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
cookie.c cookie_output: made private 2011-06-03 20:02:07 +02:00
cookie.h cookie_output: made private 2011-06-03 20:02:07 +02:00
curl_addrinfo.c compiler warning: fix 2011-05-26 15:44:53 +02:00
curl_addrinfo.h CURLOPT_RESOLVE: added 2010-11-08 08:56:21 +01:00
curl_base64.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
curl_config.h.cmake cmake: remove spurious definition 2011-06-21 15:28:03 +02:00
curl_fnmatch.c unittest: mark all unit tested functions 2011-06-10 14:40:46 +02:00
curl_fnmatch.h ftp wildcard: a new option CURLOPT_FNMATCH_DATA 2010-05-16 02:52:33 +02:00
curl_gethostname.c build: allow NTLM tests to run on more build configurations 2010-08-07 15:03:54 +02:00
curl_gethostname.h build: allow NTLM tests to run on more build configurations 2010-08-07 15:03:54 +02:00
curl_hmac.h include libcurl standard internal headers 2010-06-02 14:13:02 +02:00
curl_ldap.h Fixed libcurl to honour the --disable-ldaps configure option 2011-03-07 17:45:33 -08:00
curl_md4.h http_ntlm: add support for NSS 2010-06-30 13:12:25 +02:00
curl_md5.h Fix compilation problem: declare Curl_HMAC_MD5 as extern in include file. 2010-04-19 12:44:17 +02:00
curl_memory.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
curl_memrchr.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
curl_memrchr.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
curl_rand.c remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
curl_rand.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
curl_rtmp.c RTSP: convert protocol-specific checks to generic 2011-05-05 16:27:03 +02:00
curl_rtmp.h include libcurl standard internal headers 2010-06-02 14:13:02 +02:00
curl_sspi.c Use own typedef as workaround for broken sspi.h header (f.e. Watcom). 2010-09-02 00:38:16 +02:00
curl_sspi.h Fix a couple of spelling errors in lib/ 2011-04-21 07:55:53 -07:00
curl_threads.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
curl_threads.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
curlx.h Typo fixes. 2010-12-21 22:39:56 +01:00
cyassl.c Curl_socket_ready: make timeout a 'long' 2011-06-04 21:19:14 +02:00
cyassl.h return code cleanup: build, init and run-time errors 2011-04-05 15:14:02 +02:00
dict.c RTSP: convert protocol-specific checks to generic 2011-05-05 16:27:03 +02:00
dict.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
easy.c compiler warning: fix 2011-05-24 20:39:58 +02:00
easyif.h CURL_DOES_CONVERSIONS: cleanup 2011-04-20 00:50:07 +02:00
escape.c compiler warning: fix 2011-05-23 16:55:09 +02:00
escape.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
file.c RTSP: convert protocol-specific checks to generic 2011-05-05 16:27:03 +02:00
file.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
fileinfo.c Curl_fileinfo_dup: removed, not used 2011-06-03 19:33:23 +02:00
fileinfo.h include libcurl standard internal headers 2010-06-02 14:13:02 +02:00
firefox-db2pem.sh remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
formdata.c CURLFORM_STREAM: acknowledge CURLFORM_FILENAME 2011-06-17 22:23:42 +02:00
formdata.h formdata: provide error message 2010-10-20 14:57:43 +02:00
ftp.c Curl_socket_ready: make timeout a 'long' 2011-06-04 21:19:14 +02:00
ftp.h source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
ftplistparser.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
ftplistparser.h add Curl_ prefix to conform with cURL naming standards 2010-06-09 15:45:46 +02:00
getenv.c remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
getinfo.c Fix a couple of spelling errors in lib/ 2011-04-21 07:55:53 -07:00
getinfo.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
gopher.c RTSP: convert protocol-specific checks to generic 2011-05-05 16:27:03 +02:00
gopher.h Gopher protocol support (initial release) 2010-08-25 14:19:58 +02:00
gtls.c Curl_socket_ready: make timeout a 'long' 2011-06-04 21:19:14 +02:00
gtls.h return code cleanup: build, init and run-time errors 2011-04-05 15:14:02 +02:00
hash.c unittest: mark all unit tested functions 2011-06-10 14:40:46 +02:00
hash.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
hmac.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
hostasyn.c async resolvers: further cleanups 2011-04-25 19:47:16 +02:00
hostip4.c asynch resolvers: unified 2011-04-25 19:47:16 +02:00
hostip6.c CLOSESOCKETFUNCTION: added 2011-05-18 22:56:46 +02:00
hostip.c whitespace cleanup: no space first in conditionals 2011-04-27 09:09:35 +02:00
hostip.h Fixed compilation when the synchronous resolver is used 2011-04-25 19:01:40 -07:00
hostsyn.c async resolvers: further cleanups 2011-04-25 19:47:16 +02:00
http_chunks.c whitespace cleanup: no space first in conditionals 2011-04-27 09:09:35 +02:00
http_chunks.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
http_digest.c digest_cleanup_one: made private 2011-06-03 19:54:17 +02:00
http_digest.h digest_cleanup_one: made private 2011-06-03 19:54:17 +02:00
http_negotiate_sspi.c Remove unnecessary typecast 2011-06-02 19:42:24 +02:00
http_negotiate.c Curl_input_negotiate: do not delegate GSSAPI credentials 2011-06-22 23:04:26 +02:00
http_negotiate.h HTTP: HTTP Negotiate authentication using SSPI 2011-01-07 23:48:40 +01:00
http_ntlm.c OpenSSL enabled: require OPENSSL_VERSION_NUMBER definition before usage. 2011-06-02 12:52:52 +02:00
http_ntlm.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
http_proxy.c Curl_socket_ready: make timeout a 'long' 2011-06-04 21:19:14 +02:00
http_proxy.h build: inclusion guard 2011-05-24 15:42:02 +02:00
http.c http: fix compiler warning 2011-06-21 16:28:15 +02:00
http.h privatise: make private functions static 2011-06-03 19:51:08 +02:00
idn_win32.c Remove unnecessary typecast 2011-06-02 19:42:24 +02:00
if2ip.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
if2ip.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
imap.c set_userpass: convert from protocol-specific to generic 2011-05-05 17:07:21 +02:00
imap.h source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
inet_ntop.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
inet_ntop.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
inet_pton.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
inet_pton.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
krb4.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
krb4.h source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
krb5.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
ldap.c Fixed LDAP after RTSP readwrite change 2011-05-06 13:48:24 -07:00
libcurl.def Yang Tse: msvc7+ has deprecated the 'DESCRIPTION' section in 2005-11-14 07:48:05 +00:00
libcurl.imp added missing curl_easy_pause to export list. 2009-08-16 15:03:58 +00:00
libcurl.plist Matt Veenstra updated to 7.12.3. Starting now, we'll update the version number 2004-12-08 23:09:23 +00:00
libcurl.rc remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
llist.c unitteset: Curl_llist_move 2011-06-19 22:22:49 +02:00
llist.h llist: hide Curl_llist_init 2010-08-10 11:07:38 +02:00
Makefile.am unit tests: more build adjustments 2011-06-01 21:40:09 +02:00
makefile.amiga Include Makefile.inc to get the list of source files for Amiga 2010-06-07 14:00:16 -07:00
Makefile.b32 lib/Makefile.b32: updates 2011-04-07 15:17:58 +02:00
makefile.dj Changed email per Gisle's request. 2011-04-16 00:11:43 +02:00
Makefile.inc async resolvers: further cleanups 2011-04-25 19:47:16 +02:00
Makefile.m32 Improve MinGW static makefile builds. 2011-04-19 20:59:24 +02:00
Makefile.netware Updated default (recommended) dependency versions. 2011-04-19 14:26:51 +02:00
Makefile.vc6 windows build: use correct MS CRT 2011-06-21 20:05:06 +02:00
Makefile.vxworks Fix a couple of spelling errors in lib/ 2011-04-21 07:55:53 -07:00
Makefile.Watcom Enabled OpenWatcom native Windows IDN build. 2011-04-24 18:58:07 +02:00
md4.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
md5.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
memdebug.c remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
memdebug.h source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
mk-ca-bundle.pl Replaced var manipulations with perlish hacks. 2011-04-14 01:27:39 +02:00
mk-ca-bundle.vbs mk-ca-bundle.vbs: use new cacert url 2011-02-03 09:59:00 +01:00
mprintf.c whitespace cleanup: no space first in conditionals 2011-04-27 09:09:35 +02:00
msvcproj.foot Store now this file in CVS with unix line endings. 2010-01-15 20:23:35 +00:00
msvcproj.head - I renamed everything in the windows builds files that used the name 'curllib' 2009-02-23 09:36:54 +00:00
multi.c multi-socks: fix connect to proxy 2011-04-28 10:06:49 +02:00
multiif.h multi: support timeouts 2010-08-15 13:16:39 +02:00
netrc.c unittest: mark all unit tested functions 2011-06-10 14:40:46 +02:00
netrc.h test1304: Added some unit tests for Curl_parsenetrc. 2011-02-10 07:38:48 -08:00
non-ascii.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
non-ascii.h compiler warning: fix 2011-05-24 15:18:26 +02:00
nonblock.c remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
nonblock.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
nss.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
nssg.h return code cleanup: build, init and run-time errors 2011-04-05 15:14:02 +02:00
nwlib.c remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
nwos.c remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
openldap.c RTSP: convert protocol-specific checks to generic 2011-05-05 16:27:03 +02:00
parsedate.c parsedate: turn private and static 2011-06-03 19:31:32 +02:00
parsedate.h parsedate: turn private and static 2011-06-03 19:31:32 +02:00
pingpong.c Curl_socket_ready: make timeout a 'long' 2011-06-04 21:19:14 +02:00
pingpong.h pingpong: response_time is milliseconds 2010-07-18 00:49:29 +02:00
polarssl.c Curl_socket_ready: make timeout a 'long' 2011-06-04 21:19:14 +02:00
polarssl.h return code cleanup: build, init and run-time errors 2011-04-05 15:14:02 +02:00
pop3.c [pop3] remove extra space in LIST command 2011-06-21 18:12:05 +03:00
pop3.h Added support for LISTing a single POP3 message 2011-03-17 16:59:30 -07:00
progress.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
progress.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
qssl.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
qssl.h return code cleanup: build, init and run-time errors 2011-04-05 15:14:02 +02:00
rawstr.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
rawstr.h source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
README.ares README.ares: we know require c-ares 1.6.0 2010-09-30 23:14:58 +02:00
README.curl_off_t spell! (most of it fixed by Tor Arntsen) 2008-08-27 06:10:47 +00:00
README.curlx remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
README.encoding transfer-encoding: document the options 2011-04-18 19:46:21 +02:00
README.hostip Added README.hostip 2005-01-14 13:43:29 +00:00
README.httpauth HTTP "auth done right". See lib/README.httpauth 2004-11-24 16:11:35 +00:00
README.memoryleak remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
README.multi_socket update the section on timeouts 2010-04-12 11:09:55 +02:00
README.pingpong introducing IMAP, POP3 and SMTP support (still lots of polish left to do) 2009-12-12 21:54:01 +00:00
README.pipelining updated to reflect reality 2006-10-29 09:11:44 +00:00
rtsp.c RTSP: cleanups 2011-05-05 16:53:05 +02:00
rtsp.h RTSP: cleanups 2011-05-05 16:53:05 +02:00
security.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
select.c long/int mess 2011-06-11 22:56:45 +02:00
select.h Curl_socket_ready: make timeout a 'long' 2011-06-04 21:19:14 +02:00
sendf.c compiler warning: fix 2011-05-21 14:55:10 +02:00
sendf.h sendrecv: split the I/O handling into private handler 2010-05-07 15:05:34 +02:00
setup_once.h CLOSESOCKETFUNCTION: added 2011-05-18 22:56:46 +02:00
setup-os400.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
setup.h source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
share.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
share.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
slist.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
slist.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
smtp.c RTSP: convert protocol-specific checks to generic 2011-05-05 16:27:03 +02:00
smtp.h source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
sockaddr.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
socks_gssapi.c compiler warning: fix 2011-05-26 15:44:53 +02:00
socks_sspi.c compiler warning: fix 2011-05-26 15:44:53 +02:00
socks.c Curl_socket_ready: make timeout a 'long' 2011-06-04 21:19:14 +02:00
socks.h return code cleanup: build, init and run-time errors 2011-04-05 15:14:02 +02:00
speedcheck.c whitespace cleanup: no space first in conditionals 2011-04-27 09:09:35 +02:00
speedcheck.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
splay.c splay: add unit tests 2011-06-10 20:19:35 +02:00
splay.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
ssh.c Curl_socket_ready: make timeout a 'long' 2011-06-04 21:19:14 +02:00
ssh.h SSH: set non-blocking earlier 2011-05-01 23:02:39 +02:00
sslgen.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
sslgen.h return code cleanup: build, init and run-time errors 2011-04-05 15:14:02 +02:00
ssluse.c Curl_socket_ready: make timeout a 'long' 2011-06-04 21:19:14 +02:00
ssluse.h sendrecv: split the I/O handling into private handler 2010-05-07 15:05:34 +02:00
strdup.c remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
strdup.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
strequal.c unittest: mark all unit tested functions 2011-06-10 14:40:46 +02:00
strequal.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
strerror.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
strerror.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
strtok.c remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
strtok.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
strtoofft.c source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
strtoofft.h Typo fixes. 2010-12-21 22:39:56 +01:00
telnet.c RTSP: convert protocol-specific checks to generic 2011-05-05 16:27:03 +02:00
telnet.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
tftp.c Curl_socket_ready: make timeout a 'long' 2011-06-04 21:19:14 +02:00
tftp.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
timeval.c remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
timeval.h remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
transfer.c HTTP time condition: force closure for 200 OK 2011-06-07 13:40:11 +02:00
transfer.h source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
url.c disconnect: wipe out the keeps_speed time stamp 2011-06-08 00:23:41 +02:00
url.h source cleanup: unify look, style and indent levels 2011-04-27 09:09:35 +02:00
urldata.h urldata: use uniform inclusion style for OpenSSL headers 2011-06-07 18:35:42 +02:00
vc6libcurl.dsw Fix CR 2009-05-08 19:09:36 +00:00
vc8proj.foot Use DOS line-endings. 2007-01-29 19:08:04 +00:00
vc8proj.head - I renamed everything in the windows builds files that used the name 'curllib' 2009-02-23 09:36:54 +00:00
version.c version: linkage fix 2011-05-19 11:50:20 +02:00
warnless.c warnless: icc 9.1 workaround 2011-06-01 12:13:42 +02:00
warnless.h compiler warning: fix 2011-05-26 15:44:53 +02:00
wildcard.c ensure that Curl_wildcard_dtor() leaves WildcardData struct zero initialized 2010-06-10 02:30:23 +02:00
wildcard.h include libcurl standard internal headers 2010-06-02 14:13:02 +02:00

HTTP Pipelining with libcurl
============================

Background

Since pipelining implies that one or more requests are sent to a server before
the previous response(s) have been received, we only support it for multi
interface use.

Considerations

When using the multi interface, you create one easy handle for each transfer.
Bascially any number of handles can be created, added and used with the multi
interface - simultaneously. It is an interface designed to allow many
simultaneous transfers while still using a single thread. Pipelining does not
change any of these details.

API

We've added a new option to curl_multi_setopt() called CURLMOPT_PIPELINING
that enables "attempted pipelining" and then all easy handles used on that
handle will attempt to use an existing pipeline.

Details

- A pipeline is only created if a previous connection exists to the same IP
  address that the new request is being made to use.

- Pipelines are only supported for HTTP(S) as no other currently supported
  protocol has features resemembling this, but we still name this feature
  plain 'pipelining' to possibly one day support it for other protocols as
  well.

- HTTP Pipelining is for GET and HEAD requests only.

- When a pipeline is in use, we must take precautions so that when used easy
  handles (i.e those who still wait for a response) are removed from the multi
  handle, we must deal with the outstanding response nicely.

- Explicitly asking for pipelining handle X and handle Y won't be supported.
  It isn't easy for an app to do this association. The lib should probably
  still resolve the second one properly to make sure that they actually _can_
  be considered for pipelining. Also, asking for explicit pipelining on handle
  X may be tricky when handle X get a closed connection.

- We need options to control max pipeline length, and probably how to behave
  if we reach that limit. As was discussed on the list, it can probably be
  made very complicated, so perhaps we can think of a way to pass all
  variables involved to a callback and let the application decide how to act
  in specific situations. Either way, these fancy options are only interesting
  to work on when everything is working and we have working apps to test with.