Re: Incorrect Digest Username with Diegst Auth

2013-04-11 Thread Pierre Chapuis
> The command line is only taking "sip" as username due to : in username. > Is there any mechanism to make it work with current username only? The exact same question has been answered here in 2009: http://curl.haxx.se/mail/archive-2009-12/0009.html I don't think things have evolved since then.

certificate verification against system cert (?) when custom CAINFO is set

2013-04-11 Thread Dima Tisnek
I'm trying to use curl with custom CA's only, but it seems server certificate gets verified against system CA's too. steps to reproduce: air:~ dima$ mkdir empty air:~ dima$ curl http://www.startssl.com/certs/ca.pem > ca.pem # unrelated global ca air:~ dima$ curl --capath ./empty/ --cacert ca.pem

RE: Incorrect Digest Username with Diegst Auth

2013-04-11 Thread Steve Holme
Hi, On Thu, 11 Apr 2013, sumit gambhir wrote: > The command line is only taking "sip" as username due to : in username. > Is there any mechanism to make it work with current username only? I'm not saying this will work but have you tried URL encoding the colon ? For example: curl.exe --digest

Dan F's first ten years in the project!

2013-04-11 Thread Daniel Stenberg
Hello, I just want to highlight the fact that Friday April 11th, 2003 was the first time Dan Fandrich was mentioned in the git log. 019c4088cfcca0 was the first patch in a very long series from him. Thanks Dan for staying with us all these 10 years! You've made a significant impact on the pr

Re: [patch] tailmatch() returns true for invalid host.

2013-04-11 Thread Daniel Stenberg
On Thu, 11 Apr 2013, YAMADA Yasuharu wrote: I try to create at test case 1218 similar to 1216, but this is meaningless because curl command does not use curl-share. I mean... the expected sequence of attached test case is following: I don't think it is meaningless and the 1218 version you prov

Re: Curl - SQLite and temp files - large dentry cache

2013-04-11 Thread Guenter
Hi Rocky, On 11.04.2013 05:40, Rocky Downs wrote: I was not able to find a mention of temporary files created by curl (indirectly it seems) anywhere, so I thought I would ask here. I also was not able to see any link to SQLite in the source code. libcurl itself doesnt make use of SQLite; but if

Re: Curl - SQLite and temp files - large dentry cache

2013-04-11 Thread Guenter
On 11.04.2013 05:40, Rocky Downs wrote: Does anyone know why these temporary files are created and if there is anything I can do to avoid this? you can probably build your own libcurl using OpenSSL instead of NSS for the SSL support, and then link statically against it ... Gün. ---

Re: Name lookup/DNS resolution mechanism of libcurl

2013-04-11 Thread Guenter
Hi Mike, On 10.04.2013 21:54, Michael-O wrote: I strongly support this approach because its clear and makes everything explicit. I would even go one step further: Add an alias for ENABLE_THREADS_WIN32 as ENABLE_ASYNC_DNS if this define is for DNS only. Threads win22 says absolutely nothing at le

Re: Error codes from SFTP

2013-04-11 Thread Sam Deane
On 10 Apr 2013, at 23:30, Dan Fandrich wrote: > That's what's returned by CURLINFO_RESPONSE_CODE, which is already used for > non-HTTP protocols, so it sounds like a reasonable extension to me. Please > also > document this use in curl_easy_getinfo.3 Ideally, the response code for all > SFTP op

How to do sftp without an SSH agent

2013-04-11 Thread ols6000
Hi - I am trying to use libcurl in a Windows C++/MFC application, to do sftp. I've successfully built OpenSSL, libSSH2 and libcurl using Visual Studio 2005. When I followed the example in sftpget.c, I discovered that to do sftp requires an SSH agent (e g, pageant). For various reasons, I ne

Re: curl_share and persistent connections

2013-04-11 Thread David Strauss
I've sent in a patch to the docs. On Wed, Apr 10, 2013 at 10:31 PM, Nick Zitzmann wrote: > > On Apr 10, 2013, at 6:32 PM, David Strauss wrote: > >> The share interface documentation [1] specifies that DNS lookups and >> cookie data get shared, but is there an exhaustive list of what gets >> shar

[PATCH] Update sharing interface documentation to provide exhaustive list of what it does and does not share.

2013-04-11 Thread david
From: David Strauss --- docs/libcurl/libcurl-share.3 | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/docs/libcurl/libcurl-share.3 b/docs/libcurl/libcurl-share.3 index 5839021..1e6c139 100644 --- a/docs/libcurl/libcurl-share.3 +++ b/docs/libcurl/libcurl-share.3 @@ -34,8

Re: certificate verification against system cert (?) when custom CAINFO is set

2013-04-11 Thread David Strauss
What is the output of curl -V? The SSL/TLS library cURL is linked to has a major impact on how it performs system-level validation. --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/eti

Only retrieve the headers of a GET reply and return?

2013-04-11 Thread Mohammad_Alsaleh
Hello. Is there a simple clean way to only retrieve the headers of a GET reply and return without retrieving the data. Maybe something similar to CURLOPT_NOBODY but with GET. I need this because some servers send an empty reply or never reply to HEAD. And I need to know some info (included in GE

Re: certificate verification against system cert (?) when custom CAINFO is set

2013-04-11 Thread Guenter
On 11.04.2013 21:06, David Strauss wrote: What is the output of curl -V? The SSL/TLS library cURL is linked to has a major impact on how it performs system-level validation. air:~ dima$ curl --version curl 7.24.0 (x86_64-apple-darwin12.0) libcurl/7.24.0 OpenSSL/0.9.8r zlib/1.2.5 Protocols: dic

Re: certificate verification against system cert (?) when custom CAINFO is set

2013-04-11 Thread David Strauss
On Thu, Apr 11, 2013 at 1:22 PM, Guenter wrote: > (that info was already in OP's initial post) Oh, it certainly is. I must have missed it. So, I would check out OpenSSL's validation path. As a last resort, it should be possible to run curl in a chroot or modified file system namespace to remove

Re: certificate verification against system cert (?) when custom CAINFO is set

2013-04-11 Thread Daniel Stenberg
On Thu, 11 Apr 2013, Dima Tisnek wrote: I'm trying to use curl with custom CA's only, but it seems server certificate gets verified against system CA's too. I don't remember the exact details right now, but Apple has added some magic for certificate verification in their OpenSSL version. --

Re: certificate verification against system cert (?) when custom CAINFO is set

2013-04-11 Thread David Strauss
On Thu, Apr 11, 2013 at 1:39 PM, Daniel Stenberg wrote: > Apple has added some magic for certificate verification in their OpenSSL > version. Apple OS X has a certificate management system that might even be accessible within a chroot. -

Re: Only retrieve the headers of a GET reply and return?

2013-04-11 Thread David Strauss
On Thu, Apr 11, 2013 at 12:37 PM, Mohammad_Alsaleh wrote: > Is there a simple clean way to only retrieve the headers of a GET reply > and return without retrieving the data. You can certainly set (1) a CURLOPT_HEADERFUNCTION that stores header data, (2) a CURLOPT_WRITEFUNCTION that simply returns

Re: Only retrieve the headers of a GET reply and return?

2013-04-11 Thread David Strauss
On Thu, Apr 11, 2013 at 1:40 PM, David Strauss wrote: > (3) CURLOPT_PROGRESSFUNCTION (with > CURLOPT_NOPROGRESS set to zero) to cancel after the body starts. Here's a good write-up on how to do that: http://curl.haxx.se/mail/lib-2009-04/0296.html -- David Strauss | da...@davidstrauss.net |

Re: Only retrieve the headers of a GET reply and return?

2013-04-11 Thread David Strauss
Oh, actually it looks like you can make the transfer "fail" right from the CURLOPT_WRITEFUNCTION, which means you could just have it return zero. You would have to expect libcurl to consider the request failed, though. On Thu, Apr 11, 2013 at 1:46 PM, David Strauss wrote: > On Thu, Apr 11, 2013 a

Re: How to do sftp without an SSH agent

2013-04-11 Thread Nick Zitzmann
On Apr 11, 2013, at 11:29 AM, ols6...@sbcglobal.net wrote: > When I followed the example in sftpget.c, I discovered that to do sftp > requires an SSH agent (e g, pageant). For various reasons, I need to make my > application self-contained. So I am asking for advice from you libcurl gurus > on

Re: Dan F's first ten years in the project!

2013-04-11 Thread Dan Fandrich
On Thu, Apr 11, 2013 at 11:23:04AM +0200, Daniel Stenberg wrote: > I just want to highlight the fact that Friday April 11th, 2003 was > the first time Dan Fandrich was mentioned in the git log. > 019c4088cfcca0 was the first patch in a very long series from him. Wow, looking at that commit brings

Re: Only retrieve the headers of a GET reply and return?

2013-04-11 Thread Mohammad_Alsaleh
On Thu, Apr 11, 2013 at 01:47:39PM -0700, David Strauss wrote: > Oh, actually it looks like you can make the transfer "fail" right from > the CURLOPT_WRITEFUNCTION, which means you could just have it return > zero. You would have to expect libcurl to consider the request failed, > though. > This

Re: certificate verification against system cert (?) when custom CAINFO is set

2013-04-11 Thread Dima Tisnek
On 11 April 2013 23:39, Daniel Stenberg wrote: > On Thu, 11 Apr 2013, Dima Tisnek wrote: > >> I'm trying to use curl with custom CA's only, but it seems server >> certificate gets verified against system CA's too. > > > I don't remember the exact details right now, but Apple has added some magic >