configure: if asked to use TLS, fail if no TLS lib was detected

Previously the configure script would just warn about this fact and
continue with TLS disabled build which is not always h

configure: if asked to use TLS, fail if no TLS lib was detected

Previously the configure script would just warn about this fact and
continue with TLS disabled build which is not always helpful. TLS should
be explicitly disabled if that is what the user wants.

Closes #9367

show more ...

schannel: when importing PFX, disable key persistence

By default, the PFXImportCertStore API persists the key in the user's
key store (as though the certificate was being imported for pe

schannel: when importing PFX, disable key persistence

By default, the PFXImportCertStore API persists the key in the user's
key store (as though the certificate was being imported for permanent,
ongoing use.)

The documentation specifies that keys that are not to be persisted
should be imported with the flag `PKCS12_NO_PERSIST_KEY`.
NOTE: this flag is only supported on versions of Windows newer than XP
and Server 2003.

Fixes #9300
Closes #9363

show more ...

unit1303: four tests should have TRUE for 'connecting'

To match the comments.

Reported-by: Wu Zheng

See #9355
Closes #9356

CURLOPT_BUFFERSIZE.3: add upload buffersize to see also

Closes #9354

HTTP3.md: add missing autoreconf command for building with wolfssl

Closes #9353

RELEASE-NOTES: synced

multi: have curl_multi_remove_handle close CONNECT_ONLY transfer

Ẃhen it has been used in the multi interface, it is otherwise left in
the connection cache, can't be reused and nothing w

multi: have curl_multi_remove_handle close CONNECT_ONLY transfer

Ẃhen it has been used in the multi interface, it is otherwise left in
the connection cache, can't be reused and nothing will close them since
the easy handle loses the association with the multi handle and thus the
connection cache - until the multi handle is closed or it gets pruned
because the cache is full.

Reported-by: Dominik Thalhammer
Fixes #9335
Closes #9342

show more ...

docs/cmdline-opts: remove \& escapes from all .d files

gen.pl escapes them itself now

docs/cmdline-opts/gen.pl: encode leading single and double quotes

As "(aq" and "(dq" to prevent them from implying a meaning in the nroff
output. This removes the need for using \& escap

docs/cmdline-opts/gen.pl: encode leading single and double quotes

As "(aq" and "(dq" to prevent them from implying a meaning in the nroff
output. This removes the need for using \& escapes in the .d files'
description parts.

Closes #9352

show more ...

tests/server/sockfilt.c: avoid race condition without a mutex

Avoid loosing any triggered handles by first aborting and joining
the waiting threads before evaluating the individual signa

tests/server/sockfilt.c: avoid race condition without a mutex

Avoid loosing any triggered handles by first aborting and joining
the waiting threads before evaluating the individual signal state.

This removes the race condition and therefore need for a mutex.

Closes #9023

show more ...

url: output the maximum when rejecting a url

This commit changes the failf message to output the maximum length, when
curl refuses to process a URL because it is too long.

See:

url: output the maximum when rejecting a url

This commit changes the failf message to output the maximum length, when
curl refuses to process a URL because it is too long.

See: #9317
Closes: #9327

show more ...

configure: fix broken m4 syntax in TLS options

Commit b589696f added lines to some shell within AC_ARG_WITH macros, but
inadvertently failed to move the final closing ).

Quote t

configure: fix broken m4 syntax in TLS options

Commit b589696f added lines to some shell within AC_ARG_WITH macros, but
inadvertently failed to move the final closing ).

Quote the script section using braces.

So, if these problems have been around for a while, how did I find them?
Only because I did a configure including these options:

$ ./configure --with-openssl --without-rustls
SSL: enabled (OpenSSL)

Closes #9344

show more ...

tests/data/CMakeLists: remove making the 'show' makefile target

It is not used by runtests since 3c0f462

Closes #9333

tests/data/Makefile: remove 'filecheck' target

No practical use anymore since 3c0f4622cdfd6

Closes #9332

libssh2: make atime/mtime date overflow return error

Closes #9328

libssh: make atime/mtime date overflow return error

Closes #9328

examples/curlx.c: remove

This example is a bit convoluted to use as an example, combined with the
special license for it makes it unsuitable.

Closes #9330

curl.h: include <sys/select.h> on SunOS

It is needed for fd_set to be visible to downstream consumers that use
<curl/multi.h>. Header is known to exist at least as far back as Solaris

curl.h: include <sys/select.h> on SunOS

It is needed for fd_set to be visible to downstream consumers that use
<curl/multi.h>. Header is known to exist at least as far back as Solaris
2.6.

Closes #9329

show more ...

DEPRECATE.md: push the NSS deprecation date forward one year to 2023

URL: https://curl.se/mail/lib-2022-08/0016.html

libssh2: setting atime or mtime >32bit on 4-bytes-long systems

Since the libssh2 API uses 'long' to store the timestamp, it cannot
transfer >32bit times on Windows and 32bit architecture

libssh2: setting atime or mtime >32bit on 4-bytes-long systems

Since the libssh2 API uses 'long' to store the timestamp, it cannot
transfer >32bit times on Windows and 32bit architecture builds.

Avoid nasty surprises by instead not setting such time.

Spotted by Coverity

Closes #9325

show more ...

libssh: setting atime or mtime > 32bit is now just skipped

The libssh API used caps the time to an unsigned 32bit variable. Avoid
nasty surprises by instead not setting such time.

libssh: setting atime or mtime > 32bit is now just skipped

The libssh API used caps the time to an unsigned 32bit variable. Avoid
nasty surprises by instead not setting such time.

Spotted by Coverity.

Closes #9324

show more ...

KNOWN_BUGS: Windows Unicode builds use homedir in current locale

Bug: https://github.com/curl/curl/pull/7252
Reported-by: dEajL3kA@users.noreply.github.com

Ref: https://github.c

KNOWN_BUGS: Windows Unicode builds use homedir in current locale

Bug: https://github.com/curl/curl/pull/7252
Reported-by: dEajL3kA@users.noreply.github.com

Ref: https://github.com/curl/curl/pull/7281

Closes https://github.com/curl/curl/pull/9305

show more ...

test399: switch it to use a config file instead

... as using a 65535 bytes host name in a URL does not fit on the
command line on some systems - like Windows.

Reported-by: Marce

test399: switch it to use a config file instead

... as using a 65535 bytes host name in a URL does not fit on the
command line on some systems - like Windows.

Reported-by: Marcel Raad
Fixes #9321
Closes #9322

show more ...

RELEASE-NOTES: synced

asyn-ares: make a single alloc out of hostname + async data

This saves one alloc per name resolve and simplifies the exit path.

Closes #9310