Re: Could the iOS libcurl support CURLOPT_SSLCERT from disk file

2013-08-31 Thread Nick Zitzmann
On Aug 23, 2013, at 2:18 PM, Nick Zitzmann wrote: > Okay! I've created a patch for curl that adds support for loading PKCS#12 > files in the curl_darwinssl code. I tried it out with a test P12 file I made > in Keychain Access, and it seems to work for me. Please try this out

Re: PATCH: prevent a double free() with a malformed LDAP URL

2013-09-07 Thread Nick Zitzmann
DAPURLDesc === #undef doesn't work on typedef'd data structures, and LDAPURLDesc is declared as a typedef struct on Mountain Lion's built-in libldap. Nick Zitzmann <http://www.chronosnet.com/> --- List admin

Re: PATCH: prevent a double free() with a malformed LDAP URL

2013-09-08 Thread Nick Zitzmann
e, and it also passes all of the unit tests for what it's worth. Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Re: Clarifications on using libcurl

2013-09-11 Thread Nick Zitzmann
. On Mac and iOS, I made it so that libcurl uses CommonCrypto to calculate digests in the MD5 and Metalink code, so the answer is yes. The code will be built if OpenSSL is not used. Nick Zitzmann <http://www.chronosnet.com/> --

Re: Need help with ./configure (curl-7.32.0.tar.gz)

2013-09-24 Thread Nick Zitzmann
3? No. SSLv2? Use an engine that doesn't support it. Only OpenSSL and NSS still support it these days. >(5) Is there an option to specifically disable compression? Yes. Nick Zitzmann <http://www.chronosnet.com/> --

FYI - New SSL client test

2013-10-03 Thread Nick Zitzmann
ith only 40- and 56-bit keys. Shouldn't we be blocking those by default? Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Re: Could the iOS libcurl support CURLOPT_SSLCERT from disk file

2013-10-03 Thread Nick Zitzmann
ote these preprocessor directives in the previous release to be far better, so don't worry about this. The next version of libcurl will also support working around BEAST in iOS 7 now that Apple finally added an API for that. Nick Zitzmann <http://w

Re: FYI - New SSL client test

2013-10-06 Thread Nick Zitzmann
I suppose you could get the cipher list with SSL_get_cipher_list(), filter out the insecure ones, and then set the results using SSL_CTX_set_cipher_list() unless the user provided their own cipher list. Nick Zitzmann <http://www.chronosnet.com/> --

Re: How to compile on ios XCode 5/iOS 7

2013-10-14 Thread Nick Zitzmann
elease of libcurl 7.33.0, I updated my pre-built binaries for iOS. Because Apple jumped from supporting three iOS architectures in Xcode 4.3 to five in Xcode 5.0, I also updated my manual build instructions to cover the new architectures. <http://seiryu.home.comcast.net/libcurl-ios.html&g

Re: Crash on iOS during HTTPS connection (libcurl with DarwinSSL)

2013-10-17 Thread Nick Zitzmann
's stack than for other threads, so does it help if you increase the stack size on that thread prior to launching it (or just using less stack memory on it)? Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Re: darwin-ssl relies upon Apple documentation error

2013-11-12 Thread Nick Zitzmann
in what is supposedly the 10.6.8 source code: <https://www.opensource.apple.com/source/libsecurity_keychain/libsecurity_keychain-55017/lib/SecImportExport.c> But I just tried it, and found out that you’re right; it won’t build due to an undefined symbols linker error. Looks like that f

Re: TCP/SSL error when connecting to outlook.office365.com

2013-11-14 Thread Nick Zitzmann
but I need to do something > to work around it. Any ideas on settings I can use to fix this? Does it help if you disable the BEAST workaround (set CURLOPT_SSL_OPTIONS to CURLSSLOPT_ALLOW_BEAST)? Nick Zitzmann <http://www.chronosnet.com/> --

Re: How to use DNS cache in curl

2013-11-14 Thread Nick Zitzmann
nlock callbacks, and assign it to your easy handle(s) using the option CURLOPT_SHARE. For the latter, see the man pages for curl_share_init and curl_share_setopt for details. Nick Zitzmann <http://www.chronosnet.com/> --- List

Re: How to build libcurl.framework?

2013-12-04 Thread Nick Zitzmann
or 32 bit universal framework... > > make: *** No rule to make target `clean'. Stop. > > ./MacOSX-Framework: line 85: ./configure: No such file or directory You need to run “buildconf” first in order to build an autoconf script (configu

Re: 7.34.0 compile fails in OS X 10.5

2013-12-31 Thread Nick Zitzmann
ad of the repository if you haven’t already done so 2. Make, stage, and commit your change 3. Either make a push request on Github, or use “git format-patch” to make a portable commit & send that to the list Nick Zitzmann <http://ww

Re: weak cipher suites with OpenSSL, SecureTransport and... ?

2014-01-09 Thread Nick Zitzmann
mpression_supported":false,"unknown_cipher_suite_supported":false,"beast_vuln":false,"able_to_detect_n_minus_one_splitting":false,"insecure_cipher_suites":{},"tls_version":"TLS 1.2","rating":"Improvable”} === I don

Re: Using Libcurl With Smart Cards / Maintaining TLS Session ID

2014-01-27 Thread Nick Zitzmann
ons. I think it’s 1L by default. Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Re: libcurl-7.22.0 crash when CURLMOPT_PIPELINING enabled

2014-02-19 Thread Nick Zitzmann
ulti_setopt(curlm, CURLMOPT_PIPELINING, 0), it's all fine. Did anyone > see same issue? Have you tried upgrading to a newer version? 7.22.0 is pretty ancient at this point. Nick Zitzmann <http://www.chronosnet.com/> -

Re: Compile curl 7.33 under xCode 5.1 iOS SDK 7.1

2014-03-13 Thread Nick Zitzmann
uessing you got your original instructions from my Web site, so I'm updating the page now with instructions on how to deal with this bizarre error. I think it's caused by having Mountain Lion's command line development tools installed under Mavericks, and it only happens when cros

Re: localhost problem on Mac?

2014-03-17 Thread Nick Zitzmann
fused * Trying fe80::1... * Connection failed * connect to fe80::1 port 80 failed: Connection refused * Failed to connect to localhost port 80: Connection refused * Closing connection 0 * The cache now contains 0 members * Expire cleared curl: (7) Failed to connect to localhost p

Re: Changing cipher list preference is not working with option CURLOPT_SSL_CIPHER_LIST

2014-03-25 Thread Nick Zitzmann
efore cipher string still same issue. > > Is there something I am missing here?? That particular option is only supported with the GSkit and OpenSSL back-ends. Are you using one of those two TLS back-ends? Nick Zitzmann <http

Re: [RELEASE] curl and libcurl 7.36.0

2014-03-26 Thread Nick Zitzmann
On Mar 26, 2014, at 2:03 AM, Daniel Stenberg wrote: > o darwinssl: Don't omit CN verification when an IP address is used [12] Due to this little security problem, I updated my pre-built binaries for iOS to the latest version: <http://seiryu.home.comcast.net/libcurl-ios.html>

Re: About CURLOPT_SSLVERSION

2014-04-05 Thread Nick Zitzmann
em with either OpenSSL or Secure Transport. Are you able to connect to this site using some other client, e.g. Firefox? Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Re: curl_failf causes crash with --enable-threaded-resolver

2014-04-10 Thread Nick Zitzmann
something more recent? The build I posted at <http://seiryu.home.comcast.net/libcurl-ios.html> uses the latest version and doesn't require OpenSSL. Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://c

Re: [PATCH] Handle --cacert option on Mac OS X with darwinssl

2014-04-22 Thread Nick Zitzmann
e this is a huge change to secure code used by millions of people[1], and we've already learned in the past two months how a single line in supposedly secure code can cause a huge security hole (see "goto fail" and Heartbleed). We ought to consider this for a future release, thou

Re: [PATCH] Handle --cacert option on Mac OS X with darwinssl

2014-05-11 Thread Nick Zitzmann
t merging new things just prior to the freeze, especially after "goto fail" and Heartbleed made big waves in the media. Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listin

Re: a darwinssl-related crash, #1369

2014-05-14 Thread Nick Zitzmann
already, since Apple no longer includes them with their command line tools.) Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Re: [PATCH] Handle --cacert option on Mac OS X with darwinssl

2014-05-21 Thread Nick Zitzmann
us it has > about 8 weeks to mature and get used by devs and curious minds before we > include it in a public release. The change has been pushed, with a follow-up commit from me that fixes some lint & build warnings issued by the patch's changes. Let's start test

Re: difference between winsock and libcurl

2014-06-03 Thread Nick Zitzmann
ibrary first? Not sure I get how this works and if eanyone cold explain I;d > be greatful forever. You'd best build the library separately and either statically or dynamically link it with your project. It will save you time and sanity. Nick Zi

Re: Mac symbol not found: _ber_free

2014-06-28 Thread Nick Zitzmann
ut is linked against a later cat's libcurl, it probably won't run in Snow Leopard anyway, since it was built with a newer deployment target. Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://

Re: [curl:bugs] #1404 Certificate verification fails using DarwinSSL (fwd)

2014-08-06 Thread Nick Zitzmann
line 1411 (connection > #0) > * STATE: WAITPERFORM => PERFORM handle 0x7fc8a2804c08; line 1424 (connection > #0) > * HTTP 1.1 or later with persistent connection, pipelining supported > < HTTP/1.1 200 OK [...] Nick Zitzmann <http://www.chronosnet.com/> -

Re: A darwinssl-related bug again

2014-08-27 Thread Nick Zitzmann
with a custom certificate bundle. I'll take a look. Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Re: A darwinssl-related bug again

2014-08-28 Thread Nick Zitzmann
succeeded" verbose log messages, and then submit a pull request? Thanks! Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Re: Query regarding SSL certificates not about libCurl

2014-08-31 Thread Nick Zitzmann
oth engines use their respective systems' certificate stores. Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Re: [PATCH] Fix darwinssl build for iPhone (was: A darwinssl-related bug again)

2014-09-04 Thread Nick Zitzmann
On Sep 4, 2014, at 8:46 AM, Vilmos Nebehaj wrote: > Attached a patch with this fix. I just pushed the patch. Thanks for your work on this. Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.hax

Re: [PATCH/RFC] Support for TLS False Start

2015-02-16 Thread Nick Zitzmann
S 7 & OS X 10.9), so if these patches get merged, I can add support for it in that back-end. Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Re: Problem with CURLOPT_SSL_VERIFYHOST on OSX

2015-03-29 Thread Nick Zitzmann
HandshakeFail on that server when that option is set. I've never seen this happen before. It certainly doesn't happen with "mainstream" sites like Google, Apple, etc. Apple's bug reporter is here: <https://bugreport.apple.com/> Nick Zitzmann <http://www.ch

Peer review! SecureTransport (native SSL on iOS/OS X) patch

2012-06-24 Thread Nick Zitzmann
be able to share the underlying trust data structure (which is called "SecTrustRef") with the rest of the app. I thought about using CURLINFO_CERTINFO, which is the OpenSSL equivalent, but since the return type is totally different, that'll break every app th

Re: Peer review! SecureTransport (native SSL on iOS/OS X) patch

2012-06-25 Thread Nick Zitzmann
On Jun 25, 2012, at 4:07 AM, Daniel Stenberg wrote: > On Sun, 24 Jun 2012, Nick Zitzmann wrote: > >> I couldn't let Windows users have all the fun with the next major release of >> Curl, so yesterday I added preliminary support for SecureTransport. > > Lovel

Re: Peer review! SecureTransport (native SSL on iOS/OS X) patch

2012-06-25 Thread Nick Zitzmann
lability of libsecurity source code? Go to <http://www.opensource.apple.com/>, select a version of OS X or iOS, and scroll down until you find a package with a name starting with "Security" with a capital S. That is where you'll find the framework source code. The API

Re: Peer review! SecureTransport (native SSL on iOS/OS X) patch

2012-06-25 Thread Nick Zitzmann
oking the command line tool with an HTTPS URL. So all I need now is a method of sharing a trust in the form of a SecTrustRef with the outside of the library and then this is done... Nick Zitzmann <http://www.chronosnet.com/> securetransport2.patch Description:

Re: Peer review! SecureTransport (native SSL on iOS/OS X) patch

2012-06-25 Thread Nick Zitzmann
On Jun 25, 2012, at 6:54 PM, Tim Bannister wrote: > On 26 Jun 2012, at 01:44, Nick Zitzmann wrote: > >> So all I need now is a method of sharing a trust in the form of a >> SecTrustRef with the outside of the library and then this is done... > > Would a callback

Re: Peer review! SecureTransport (native SSL on iOS/OS X) patch

2012-06-26 Thread Nick Zitzmann
still be working on it, I went with this > proposal. In addition to implementing your suggestions, I also fixed a teensy little bug that made non-blocking connection attempts block, and made it so that it builds cleanly against the iOS 5.1 SDK. Daniel or Yang, please push this patch. Tack.

More peer review! Patch for NTLM support with Darwin SSL

2012-06-27 Thread Nick Zitzmann
rvers around that use NTLM for authentication that I could use for testing. If anyone reading this has one, could you please help me test this (if you also have a Mac or an OS X virtual machine) or make a server available for testing (if you don't)? Contact me off-list. Nick Zitzmann <http://ww

Re: More peer review! Patch for NTLM support with Darwin SSL

2012-06-27 Thread Nick Zitzmann
ot public API, and using private APIs is a great way to get your Mac or iOS app rejected from Apple's store. I've never written one on my own, and was going to incorporate LibTomMath until I saw the size of that library. If anyone has any suggestions... Nick

One more proposal: Getting a trust

2012-06-28 Thread Nick Zitzmann
ndows SSL support could use as well? Nick Zitzmann <http://www.chronosnet.com/> trust.patch Description: Binary data --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Patch to remove a non-warning, and print the cipher name

2012-07-04 Thread Nick Zitzmann
he strings manually. Here's a patch for your consideration... Nick Zitzmann <http://www.chronosnet.com/> 7-4darwinssl.patch Description: Binary data --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette:

Re: Patch to remove a non-warning, and print the cipher name

2012-07-07 Thread Nick Zitzmann
On Jul 4, 2012, at 2:42 PM, Nick Zitzmann wrote: > Hi Daniel/Dan/Yang: > > I did some more testing of my SecureTransport (aka curl_darwinssl) code > recently, and found two things that need to be patched: Was anyone able to review patches this week? I haven't heard back from

Patch to remove use of arc4random_buf from curl_darwinssl.c

2012-07-07 Thread Nick Zitzmann
arc4random() is present. So I rewrote the function Curl_darwinssl_random() so it uses arc4random() instead and fills the buffer manually. I generated this patch using git format-patch as Daniel requested… Can't you tell I'm used to Subversion? Nick Zitzmann <http://www.chronosnet.c

Re: HTTPS via schannel not working with multi-interface

2012-07-09 Thread Nick Zitzmann
n't require changes to other SSL plugins… Oh, and I already tried implementing custom "would block reading" and "would block writing" status codes in the functions that do socket communications, and SecureTransport didn't know how to interpret them, so it raised errors

Re: HTTPS via schannel not working with multi-interface

2012-07-16 Thread Nick Zitzmann
On Jul 9, 2012, at 1:27 PM, Nick Zitzmann wrote: > And you would be correct; it just freezes when I try adapting the > 10-at-a-time example code to use SSL. Oh dear. Never mind! I have a patch for this that fixes the problem so curl_multi won't freeze anymore. I tested it with

Re: HTTPS via schannel not working with multi-interface

2012-07-20 Thread Nick Zitzmann
On Jul 16, 2012, at 8:36 PM, Nick Zitzmann wrote: > Never mind! I have a patch for this that fixes the problem so curl_multi > won't freeze anymore. I tested it with the 10-at-a-time example, and it > passed this time. I posted the patch to fix the curl_multi problem when b

Re: darwinssl support

2012-07-23 Thread Nick Zitzmann
to the user in a GUI app. (With OpenSSL, this is possible by using the CURLOPT_SSL_CTX_FUNCTION feature and evaluating the trust manually using the Security framework.) > and nick,... thanks for the highly appreciated work! You're welcome. Nick Zitzmann <http://www.chronosnet.com/> -

Re: [PORPOSAL] add implementations for sha1 ans sha256 to libcurl

2012-07-30 Thread Nick Zitzmann
cant support > metalink ... CommonCrypto, one of the two encryption libraries used by darwinssl, does support generating MD5 and SHA1 and SHA256 digests. I know I wrote a function for MD5 support; I didn't know we used the other two... Nick Zitzmann <ht

Patch to add TLS 1.1 and 1.2 support & replace deprecated functions in SecureTransport

2012-08-16 Thread Nick Zitzmann
on while setting the deployment target to, say, Snow Leopard, and sacrifice nothing. Nick Zitzmann <http://www.chronosnet.com/> 0001-lib-curl_darwinssl.c-TLS-1.1-and-1.2-support-replace.patch Description: Binary data --

Building for Win64...

2012-08-19 Thread Nick Zitzmann
is 64 bits wide, and I know Microsoft kept longs 32 bits wide in Win64. What's the best way to go about fixing this? I thought about just casting that warning out of existence, but then I thought that might cause other problems… Nick Zitzmann <http://www.chronosnet.com/> -

Re: One or more libs available at link-time are not available run-time

2012-08-20 Thread Nick Zitzmann
not a library. > Has anyone successfully built 7.27.0 with SSH support on a Mac system? I have... Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://cu

Re: One or more libs available at link-time are not available run-time

2012-08-20 Thread Nick Zitzmann
se suggested; the man page to dlopen() suggests that the variable works on OS X as well as on GNU/Linux. Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Re: One or more libs available at link-time are not available run-time

2012-08-20 Thread Nick Zitzmann
tion --disable-shared, and only "installing" libssh2 so I could build libcurl. Then I just added the two static libraries I built into the final project, along with its dynamic library dependencies (libz, LDAP, etc.). That worked fine for me. libssh2 can even be built as a 32/64-bit uni

A patch for my previous patch

2012-08-20 Thread Nick Zitzmann
patch that caused TLS/SSL to not work under versions of OS X older than Mountain Lion. Nick Zitzmann <http://www.chronosnet.com/> 0001-darwinssl-Bugfix-for-previous-commit-for-older-cats.patch Description: Binary data ---

Re: One or more libs available at link-time are not available run-time

2012-08-22 Thread Nick Zitzmann
] > --with-darwinssl" > > Doing this presumably gives the benefits provided by darwinssl but also keeps > support for SSH and SFTP. > > If Apple drop openssl from future Mac OSes, we could keep SFTP by building > openssl separat

Re: A patch for my previous patch

2012-08-31 Thread Nick Zitzmann
Did anyone get a chance to review this patch? I submitted it a week and a half ago and haven't seen it in the trunk or heard back from anyone yet. (Apologies for the top-post; the mail client I'm using at the moment does not allow inline responses.) Sent from my ASUS Eee Pad Nic

Another patch for my previous SecureTransport patch

2012-09-07 Thread Nick Zitzmann
ing an SSL connection worked fine in Mountain Lion but didn't work at all in Snow Leopard. Oops. Here's one more bug-fix patch for the trunk. Have a good weekend, all. Nick Zitzmann <http://www.chronosnet.com/> 0001-curl_darwinssl.c-SSL-didn-t-work-on-older-cats-if-bu.patc

Re: Debugging Curl in xcode 4.5

2012-10-01 Thread Nick Zitzmann
to run the "otool" command against the binary with the -L option. If the path "/usr/lib/libcurl.*.dylib" shows up, then you're doing it wrong. If you are using your own libcurl, did you pass the --enable-debug option to the configu

Re: Making 7.27 problem

2012-10-06 Thread Nick Zitzmann
new, and they will be a little more stable in the next release. Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Re: Debugging Curl in xcode 4.5

2012-10-12 Thread Nick Zitzmann
ld of the product After that, the breakpoint was hit and I was able to step through the libcurl source code just fine. Again, you need to make absolutely sure that your product is not accidentally being linked against OS X's libcurl, and the only way to tell is by using the otool

Regression in 7.28 (and 7.27) with HTTP Digest authentication and connection reuse

2012-10-12 Thread Nick Zitzmann
uld be able to re-use connections with Digest authentication.) Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Re: Regression in 7.28 (and 7.27) with HTTP Digest authentication and connection reuse

2012-10-15 Thread Nick Zitzmann
OS X's built-in curl tool, which is at version 7.24 under Mountain Lion, and it does not have this problem. I hope this helps resolve the issue. And I realize how frustrating it is when a bug-fix ends up causing a regression… Nick Zitzmann <http://www.chronosnet.com/> --

SecureTransport patch: Fixes broken build under iOS

2012-10-16 Thread Nick Zitzmann
uild under both platforms. I tested it, and made sure I didn't break the build under OS X as well, and everything seems to be good now. I also found and fixed a bug where, if SecureTransport was in use and the server hung up, then an error was raised. Please fold this into the next point

Re: EXTRACT PUBLIC KEY FROM X509 SERVER CERTIFICATE

2012-10-22 Thread Nick Zitzmann
e code against OS X's built-in libcurl, which is version 7.24.0. Try that instead. Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

lib/gtls.c question about handshake()

2012-10-23 Thread Nick Zitzmann
it returns CURLE_SSL_CONNECT_ERROR. That doesn't seem right to me; shouldn't it be the other way around? Just wondering... Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/cur

Re: "The Most Dangerous Code in the World"

2012-10-27 Thread Nick Zitzmann
, just like in the other TLS/SSL back-ends. Please add this onto your patch. Nick Zitzmann <http://www.chronosnet.com/> darwinssl_verifyhost.patch Description: Binary data --- List admin: http://cool.haxx.se/list/listinfo/curl-

Re: "The Most Dangerous Code in the World"

2012-10-29 Thread Nick Zitzmann
d against an older version of the library, which you can't really do in a cross-platform library since not every platform uses the same ABI. Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/lis

Re: Is every Mac has cURL pre-installed?

2012-11-01 Thread Nick Zitzmann
you're wondering, iOS does not ship with curl/libcurl. Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Build broken when not building with HAVE_KRB4 or HAVE_GSSAPI

2012-11-04 Thread Nick Zitzmann
fined. Changing "data" to "conn->data" on line 677 fixes the build. Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Re: Auth regression

2012-11-05 Thread Nick Zitzmann
when using the command line tool with the --anyauth flag, the regression is fixed. So there are no objections here! The servers our apps deal with generally pick a single authentication method for all paths and stick with that method. N

Re: Using http DELETE how to add param

2012-11-06 Thread Nick Zitzmann
On Nov 6, 2012, at 8:55 PM, huancong deng wrote: > how can i use libcurl to sent a http delete request? Set CURLOPT_CUSTOMREQUEST to "DELETE" in your easy handle. > how can i add some to the http delete request?? What are you trying to accomplish? Nick Zitzmann <http:/

Re: TCP port# for HTTP

2012-11-07 Thread Nick Zitzmann
gt; variables or configuration file) to allow 2 different running instances of > this same “simple.c” program to use different TCP ports for the HTTP request? Of course. You could read one in from the arguments passed into the program as well. Just plug it into the URL, or set the

Re: Patch: tftp rx block acknowledgement

2012-11-16 Thread Nick Zitzmann
ecently received block again. Log it and ACK it again. */ […] libtool: link: ( cd ".libs" && rm -f "libcurlu.la" && ln -s "../libcurlu.la" "libcurlu.la" ) make[1]: *** [all] Error 2 make: *** [all-recursive] Error 1 Nick Zitzmann <http://www.chron

Re: SFTP and SCP protocols - configure problem

2012-11-19 Thread Nick Zitzmann
details you need... > > In addition, I didn't found a way to disable SCP (--disable-scp), did I > missed something? If you disable libssh2 by using the configure option --without-libssh2, then that should turn off SCP and SFTP. Nick Zitzmann <http://www.chronosnet.com/> --

Re: [RELEASE] curl and libcurl 7.28.1

2012-11-20 Thread Nick Zitzmann
pbox.com/s/q0brncyyjguiktr/Screen%20Shot%202012-11-20%20at%207.50.06%20PM.png> Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Patch to fix some compiler warnings

2012-12-11 Thread Nick Zitzmann
things that llvm-gcc didn't notice. Please consider this patch for the next point release. Thanks. Nick Zitzmann <http://www.chronosnet.com/> 0001-darwinssl-Fix-implicit-conversion-compiler-warnings.patch Description:

Patch to fix disabling peer verification in darwinssl under Snow Leopard and Lion

2012-12-26 Thread Nick Zitzmann
nd if they aren't, then we use the old and deprecated (but working) method of disabling peer verification. I and the person who contacted me off-list tested this, and it works for us, so please consider this for the next release. Nick Zitzmann <http://www.chronosnet.com/> 0001-darwins

Another change for docs/INSTALL, and a suggestion

2013-01-07 Thread Nick Zitzmann
ed at winbuild/BUILD.WINDOWS.txt. Shouldn't these two documents be merged, or should docs/INSTALL point to the other document? Nick Zitzmann <http://www.chronosnet.com/> 0001-Added-documentation-for-the-with-darwinssl-option-av.patc

Re: [PATCH] always multi v5

2013-01-18 Thread Nick Zitzmann
d6fe] Is there anything I can do to help resolve the issue, and if so, then how can I help? Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Re: [PATCH] always multi v5

2013-01-21 Thread Nick Zitzmann
ails that were > recorded! Hope this helps then! Nick Zitzmann <http://www.chronosnet.com/> log254.tar.gz Description: GNU Zip compressed data --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: h

Re: [PATCH] always multi v5

2013-01-21 Thread Nick Zitzmann
server, read zero > 11:04:30.683660 Exited from sysread_or_die() at ./ftpserver.pl line 417. > FTP-IPv6 server, read zero But it started happening once the change was made; that test used to pass. Would it help if I ran all tests and then submitted what was logged prior to th

Re: [PATCH] always multi v5

2013-01-23 Thread Nick Zitzmann
On Jan 21, 2013, at 6:33 PM, Nick Zitzmann wrote: > But it started happening once the change was made; that test used to pass. > Would it help if I ran all tests and then submitted what was logged prior to > the stall? Well, I did it anyway, and according to trace254 it appears t

A small suggested FAQ update...

2013-01-23 Thread Nick Zitzmann
noticed that I'm thanked twice in the release notes. I don't know whether that's a typo or I'm special for some reason. ;) I'm guessing it's the former… Nick Zitzmann <http://www.chronosnet.com/> 0001-FAQ-Darwinssl-is-

Re: HTTPS upload bug using Darwin SSL

2013-01-24 Thread Nick Zitzmann
eturns the number of bytes it sent off prior to the EAGAIN occurring. And now I'm wondering why the OpenSSL code doesn't do this. Anyway, the sample project you created works for me after the patch. Does it work as expected in your project now? Nick Zitzmann <http

Re: HTTPS upload bug using Darwin SSL

2013-01-28 Thread Nick Zitzmann
l-upload-bug -- not > sure how you guys feel about it so lemme know if I should take it down and > just zip the contents. Bruno, thanks for finding that, you can take it down now. And, for Daniel, here is the final check-in with the fix. Please consider it for the trunk

Test 254 (passive FTP) still fails for me

2013-01-29 Thread Nick Zitzmann
f PASV and PORT. I looked at ftp.c and it appears they are supported, but they're not being used on my system for some reason. 2. Should the faux server be returning an IPv6 address in its PASV response? It seems to me that it should only ever return an IPv4 address… Nick Z

Re: Test 254 (passive FTP) still fails for me

2013-01-30 Thread Nick Zitzmann
ould be able to reproduce the problem. Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Re: Test 254 (passive FTP) still fails for me

2013-01-31 Thread Nick Zitzmann
On Jan 31, 2013, at 4:39 PM, Daniel Stenberg wrote: > Okay, my suggested fix is here. It cleans up the code a bit and works fine > for me. I believe it will fix the 254 bug for you. Thanks! I can verify that this patch fixes tests 254 and 255 for me. Nick Zitzmann <http://www.chron

Re: libcurl: Problem when connect to a shared hosting server over ftp+ssl

2013-02-04 Thread Nick Zitzmann
client to connect to the server? Are you using implicit or explicit FTP-SSL? (There's a difference.) Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html

Re: Errors/crashes with FTP using multi interface?

2013-02-04 Thread Nick Zitzmann
this happening in the code in the trunk, or in a released version, or in Apple's shared libcurl library? If it's anything but the trunk, can you build the trunk and test that? There has been a lot of changes in the trunk since the last point release of libcur

Re: libcurl: Problem when connect to a shared hosting server over ftp+ssl

2013-02-04 Thread Nick Zitzmann
thing. If you can't get accurate connection transcripts, you may need to use a man-in-the-middle proxy to decode the connections… Obviously TLS/SSL connection debugging is not as easy as clear-text connection debugging. Nick Zitzmann <http://www.chronosnet.com/>

[PATCH] Updating the MacOSX-Framework script

2013-02-06 Thread Nick Zitzmann
to things as well as the compilers. It should still work under older versions of Xcode. Nick Zitzmann <http://www.chronosnet.com/> 0002-MacOSX-Framework-Updated-for-Xcode-4.0-and-later.patch Description: Binary data ---

[PATCH] More features changes

2013-02-06 Thread Nick Zitzmann
axTLS does not support SSLv3. Hopefully they won't cause parsing problems when converting to HTML for the Web site… Nick Zitzmann <http://www.chronosnet.com/> 0001-FEATURES-More-NTLM-and-SSL-changes-added-two-others-.patch Descript

Re: [PATCH] More features changes

2013-02-07 Thread Nick Zitzmann
dded to the back-end one day that happens to support SSLv2, and then that statement would be completely incorrect instead of just outdated. Nick Zitzmann <http://www.chronosnet.com/> --- List admin: http://cool.haxx.se/list

  1   2   >