RELEASE-NOTES: synced with db59b6202d8

RELEASE-NOTES: synced with 11c2db2aa2a

RELEASE-NOTES: synced with 0c05ee3a33d4d7

nss: do not ignore value of CURLOPT_SSL_VERIFYPEER

When NSS-powered libcurl connected to a SSL server with
CURLOPT_SSL_VERIFYPEER equal to zero, NSS remembered that the peer
certific

nss: do not ignore value of CURLOPT_SSL_VERIFYPEER

When NSS-powered libcurl connected to a SSL server with
CURLOPT_SSL_VERIFYPEER equal to zero, NSS remembered that the peer
certificate was accepted by libcurl and did not ask the second time when
connecting to the same server with CURLOPT_SSL_VERIFYPEER equal to one.

This patch turns off the SSL session cache for the particular SSL socket
if peer verification is disabled. In order to avoid any performance
impact, the peer verification is completely skipped in that case, which
makes it even faster than before.

Bug: https://bugzilla.redhat.com/678580

show more ...

RELEASE-NOTES: synced with e649a7baae2

RELEASE-NOTES: synced with 2345c1dd661c

nss: do not ignore failure of SSL handshake

Flaw introduced in fc77790 and present in curl-7.21.4.
Bug: https://bugzilla.redhat.com/669702#c16

SOCKOPTFUNCTION: callback can say already-connected

Introducing a few CURL_SOCKOPT* defines for conveniance. The new
CURL_SOCKOPT_ALREADY_CONNECTED signals to libcurl that the socket is

SOCKOPTFUNCTION: callback can say already-connected

Introducing a few CURL_SOCKOPT* defines for conveniance. The new
CURL_SOCKOPT_ALREADY_CONNECTED signals to libcurl that the socket is to
be treated as already connected and thus it will skip the connect()
call.

show more ...

nss: avoid memory leak on SSL connection failure

RELEASE-NOTES: fresh start towards 7.21.5

RELEASE-NOTES: credits since 7.21.3

I went through all the names mentioned as authors and in commit messages
since 7.21.3, and this list inserted now is sorted on first name.

RELEASE-NOTES: synced with 3bb1291fbd4

RELEASE-NOTES: mention contributors

RELEASE-NOTES: synced with 7fcbdd68b9e

nss: fix a bug in handling of CURLOPT_CAPATH

... and update the curl.1 and curl_easy_setopt.3 man pages such that
they do not suggest to use an OpenSSL utility if curl is not built
a

nss: fix a bug in handling of CURLOPT_CAPATH

... and update the curl.1 and curl_easy_setopt.3 man pages such that
they do not suggest to use an OpenSSL utility if curl is not built
against OpenSSL.

Bug: https://bugzilla.redhat.com/669702

show more ...

nss: avoid CURLE_OUT_OF_MEMORY given a file name without any slash

Bug: https://bugzilla.redhat.com/623663

RELEASE-NOTES: synced with 83e9fb21aabbec2

7.21.4: version bump

RELEASE-NOTES: synced with a865bd9fbaaa43e5c

RELEASE-NOTES: synced with c28443c551825

Detect socket errors in GnuTLS on Windows

On Windows, translate WSAGetLastError() to errno values as GNU
TLS does it internally, too. This is necessary because send() and
recv() on W

Detect socket errors in GnuTLS on Windows

On Windows, translate WSAGetLastError() to errno values as GNU
TLS does it internally, too. This is necessary because send() and
recv() on Windows don't set errno when they fail but GNU TLS
expects a proper errno value.

Bug: http://curl.haxx.se/bug/view.cgi?id=3110991

show more ...

RELEASE-NOTES: synced with cbf4961bf3e4

ftp: treat server's response 421 as CURLE_OPERATION_TIMEDOUT

Bug: https://bugzilla.redhat.com/650255
Reported by: Simon H.

RELEASE-NOTES: synced with fc6c4c10f9faab08

I also recounted and updated the command line and libcurl options.

RELEASE-NOTES: synced with 7b823badbcab9d330