vssh: move ssh init/cleanup functions into backend code

vssh: create directory for SSH backend code

TODO/ROADMAP: remove "refuse downgrade redirects" and HTTP/3

HTTP3 is now already in full progress

Downgrade redirects can be achived almost exactly like that by setting
CURLOPT

TODO/ROADMAP: remove "refuse downgrade redirects" and HTTP/3

HTTP3 is now already in full progress

Downgrade redirects can be achived almost exactly like that by setting
CURLOPT_REDIR_PROTOCOLS.

show more ...

RELEASE-NOTES: synced

travis: add a quiche build

Closes #4207

http: fix use of credentials from URL when using HTTP proxy

When a username and password are provided in the URL, they were wrongly
removed from the stored URL so that subsequent uses of

http: fix use of credentials from URL when using HTTP proxy

When a username and password are provided in the URL, they were wrongly
removed from the stored URL so that subsequent uses of the same URL
wouldn't find the crendentials. This made doing HTTP auth with multiple
connections (like Digest) mishave.

Regression from 46e164069d1a5230 (7.62.0)

Test case 335 added to verify.

Reported-by: Mike Crowe

Fixes #4228
Closes #4229

show more ...

tests: Replace outdated test case numbering documentation

Tests are no longer grouped by numeric range[1]. Let's stop saying that
and provide some alternative advice for numbering tests.

tests: Replace outdated test case numbering documentation

Tests are no longer grouped by numeric range[1]. Let's stop saying that
and provide some alternative advice for numbering tests.

[1] https://curl.haxx.se/mail/lib-2019-08/0043.html

Closes #4227

show more ...

travis: reduce number of torture tests in 'coverage'

... to make it complete in time. This cut seems not almost not affect
the coverage percentage and yet completes within 35 minutes on

travis: reduce number of torture tests in 'coverage'

... to make it complete in time. This cut seems not almost not affect
the coverage percentage and yet completes within 35 minutes on travis
where the previous runs recently always timed out after 50.

Closes #4223

show more ...

configure: use -lquiche to link to quiche

Closes #4226

ngtcp2: provide the callbacks as a static struct

... instead of having them in quicsocket

ngtcp2: add missing nghttp3_conn_add_write_offset call

Closes #4225

ngtcp2: deal with stream close

ngtcp2: Consume QUIC STREAM data properly

ngtcp2: don't reinitialize SSL on Retry

multi: getsock improvements for QUIC connecting

connect: connections are persistent by default for HTTP/3

quiche: happy eyeballs

Closes #4220

ngtcp2: do QUIC connections happy-eyeballs friendly

curl_version: bump string buffer size to 250

With HTTP/3 libs and plenty TLS libs, I manged to hit the limit (which
causes a truncated output).

CURLOPT_ALTSVC.3: use a "" file name to not load from a file

vauth: Use CURLE_AUTH_ERROR for auth function errors

- Add new error code CURLE_AUTH_ERROR.

Prior to this change auth function errors were signaled by
CURLE_OUT_OF_MEMORY and CU

vauth: Use CURLE_AUTH_ERROR for auth function errors

- Add new error code CURLE_AUTH_ERROR.

Prior to this change auth function errors were signaled by
CURLE_OUT_OF_MEMORY and CURLE_RECV_ERROR, and neither one was
technically correct.

Ref: https://github.com/curl/curl/pull/3848

Co-authored-by: Dominik Hölzl

Closes https://github.com/curl/curl/pull/3864

show more ...

curl_version_info: make the quic_version a const

Follow-up from 1a2df1518ad8653f

Closes #4222

examples: add http3.c, altsvc.c and http3-present.c

Closes #4221

nss: use TLSv1.3 as default if supported

SSL_VersionRangeGetDefault returns (TLSv1.0, TLSv1.2) as supported
range in NSS 3.45. It looks like the intention is to raise the minimum
ver

nss: use TLSv1.3 as default if supported

SSL_VersionRangeGetDefault returns (TLSv1.0, TLSv1.2) as supported
range in NSS 3.45. It looks like the intention is to raise the minimum
version rather than lowering the maximum, so adjust accordingly. Note
that the caller (nss_setup_connect) initializes the version range to
(TLSv1.0, TLSv1.3), so there is no need to check for >= TLSv1.0 again.

Closes #4187
Reviewed-by: Daniel Stenberg
Reviewed-by: Kamil Dudka

show more ...

quic.h: remove unused proto