OpenSSL: Report -fips in version if OpenSSL is built with FIPS

Older versions of OpenSSL report FIPS availabilty via an OPENSSL_FIPS
define. It uses this define to determine whether to p

OpenSSL: Report -fips in version if OpenSSL is built with FIPS

Older versions of OpenSSL report FIPS availabilty via an OPENSSL_FIPS
define. It uses this define to determine whether to publish -fips at
the end of the version displayed. Applications that utilize the version
reported by OpenSSL will see a mismatch if they compare it to what curl
reports, as curl is not modifying the version in the same way. This
change simply adds a check to see if OPENSSL_FIPS is defined, and will
alter the reported version to match what OpenSSL itself provides. This
only appears to be applicable in versions of OpenSSL <1.1.1

Closes #3771

show more ...

nss: allow fifos and character devices for certificates.

Currently you can do things like --cert <(cat ./cert.crt) with (at least) the
openssl backend, but that doesn't work for nss beca

nss: allow fifos and character devices for certificates.

Currently you can do things like --cert <(cat ./cert.crt) with (at least) the
openssl backend, but that doesn't work for nss because is_file rejects fifos.

I don't actually know if this is sufficient, nss might do things internally
(like seeking back) that make this not work, so actual testing is needed.

Closes #3807

show more ...

test2100: Fix typos in test description

ssh: define USE_SSH if SSH is enabled (any backend)

Closes #3846

winbuild: Add our standard copyright header to the winbuild batch files

makedebug: Fix ERRORLEVEL detection after running where.exe

Closes #3838

urlapi: add CURLUPART_ZONEID to set and get

The zoneid can be used with IPv6 numerical addresses.

Updated test 1560 to verify.

Closes #3834

WRITEFUNCTION: add missing set_in_callback around callback

Closes #3837

RELEASE-NOTES: synced

CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk [ci skip]

Reported-by: Ricardo Gomes

Bug: #3537
Closes #3836

CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value

The time field in the curl_fileinfo struct will always be zero. No code
was ever implemented to actually convert the date

CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value

The time field in the curl_fileinfo struct will always be zero. No code
was ever implemented to actually convert the date string to a time_t.

Fixes #3829
Closes #3835

show more ...

OS400/ccsidcurl.c: code style fixes

OS400/ccsidcurl: replace use of Curl_vsetopt

(and make the code style comply)

Fixes #3833

urlapi: strip off scope id from numerical IPv6 addresses

... to make the host name "usable". Store the scope id and put it back
when extracting a URL out of it.

Also makes curl_

urlapi: strip off scope id from numerical IPv6 addresses

... to make the host name "usable". Store the scope id and put it back
when extracting a URL out of it.

Also makes curl_url_set() syntax check CURLUPART_HOST.

Fixes #3817
Closes #3822

show more ...

RELEASE-NOTES: synced

multiif.h: remove unused protos

... for functions related to pipelining. Those functions were removed in
2f44e94efb3df.

Closes #3828

travis: mesalink: temporarily disable test 3001

... due to SHA-1 signatures in test certs

travis: upgrade the MesaLink TLS backend to v1.0.0

Closes #3823
Closes #3776

ConnectionExists: improve non-multiplexing use case

- better log output

- make sure multiplex is enabled for it to be used

multi: provide Curl_multiuse_state to update information

As soon as a TLS backend gets ALPN conformation about the specific HTTP
version it can now set the multiplex situation for the "b

multi: provide Curl_multiuse_state to update information

As soon as a TLS backend gets ALPN conformation about the specific HTTP
version it can now set the multiplex situation for the "bundle" and
trigger moving potentially queued up transfers to the CONNECT state.

show more ...

process_pending_handles: mark queued transfers as previously pending

With transfers being queued up, we only move one at a a time back to the
CONNECT state but now we mark moved transfer

process_pending_handles: mark queued transfers as previously pending

With transfers being queued up, we only move one at a a time back to the
CONNECT state but now we mark moved transfers so that when a moved
transfer is confirmed "successful" (it connected) it will trigger the
move of another pending transfer. Previously, it would otherwise wait
until the transfer was done before doing this. This makes queued up
pending transfers get processed (much) faster.

show more ...

http: mark bundle as not for multiuse on < HTTP/2 response

Fixes #3813
Closes #3815

cookie: Guard against possible NULL ptr deref

In case the name pointer isn't set (due to memory pressure most likely)
we need to skip the prefix matching and reject with a badcookie to a

cookie: Guard against possible NULL ptr deref

In case the name pointer isn't set (due to memory pressure most likely)
we need to skip the prefix matching and reject with a badcookie to avoid
a possible NULL pointer dereference.

Closes #3820 #3821
Reported-by: Jonathan Moerman
Reviewed-by: Daniel Stenberg <daniel@haxx.se>

show more ...

os400: Add CURLOPT_MAXAGE_CONN to ILE/RPG bindings

nss: provide more specific error messages on failed init

Closes #3808