rustls: add CURLOPT_CAINFO_BLOB support

Add support for `CURLOPT_CAINFO_BLOB` `CURLOPT_PROXY_CAINFO_BLOB` to the
rustls TLS backend. Multiple certificates in a single PEM string are

rustls: add CURLOPT_CAINFO_BLOB support

Add support for `CURLOPT_CAINFO_BLOB` `CURLOPT_PROXY_CAINFO_BLOB` to the
rustls TLS backend. Multiple certificates in a single PEM string are
supported just like OpenSSL does with this option.

This is compatible at least with rustls-ffi 0.8+ which is our new
minimum version anyway.

I was able to build and run this on Windows, pulling trusted certs from
the system and then add them to rustls by setting
`CURLOPT_CAINFO_BLOB`. Handy!

Closes #8255

show more ...

scripts/copyright.pl: ignore missing files

RELEASE-NOTES: synced

data/DISABLED: disable test 313 for wolfssl builds

It was previously disabled only in the CI jobs yaml

Closes #8252

runtests: make 'wolfssl' a testable feature

Closes #8252

GHA: install stunnel in the medbtls + wolfssl CI jobs

Closes #8252

CI: move the rustls CI job to GHA from Zuul

Closes #8251

DISABLE: disable a dozen tests in the rustls build

Disables tests that don't yet work with the rustls backend.

Fixes #8004
Closes #8250

runtests: make 'rustls' a testable feature

remote-header-name.d: clarify

- it strips off the path from the server provided name
- it saves in current directory or --output-dir

Ref: https://curl.se/mail/archive-2022-01/00

remote-header-name.d: clarify

- it strips off the path from the server provided name
- it saves in current directory or --output-dir

Ref: https://curl.se/mail/archive-2022-01/0032.html
Closes #8249

show more ...

url: given a user in the URL, find pwd for that user in netrc

Add test 380 and 381 to verify, edited test 133

Reported-by: Manfred Schwarb
Fixes #8241
Closes #8243

mbedtls: Fix ssl_init error with mbedTLS 3.1.0+

Since mbedTLS 3.1.0, mbedtls_ssl_setup() fails if the provided
config struct is not valid.

mbedtls_ssl_config_defaults() needs to

mbedtls: Fix ssl_init error with mbedTLS 3.1.0+

Since mbedTLS 3.1.0, mbedtls_ssl_setup() fails if the provided
config struct is not valid.

mbedtls_ssl_config_defaults() needs to be called before the config
struct is passed to mbedtls_ssl_setup().

Closes #8238

show more ...

cmake: fix iOS CMake project generation error

Closes #8244

ngtcp2: fix declaration of ‘result’ shadows a previous local

Follow-up to 8fbd6feddfa587cfd3

Closes #8245

openssl.h: avoid including OpenSSL headers here

... by instead using the struct version of the typedef'ed pointer. To
fix build errors when both Schannel and OpenSSL are enabled.

openssl.h: avoid including OpenSSL headers here

... by instead using the struct version of the typedef'ed pointer. To
fix build errors when both Schannel and OpenSSL are enabled.

Fixes #8240
Reported-by: Jan Ehrhardt
Closes #8246

show more ...

curl_url_set.3: mention when CURLU_ALLOW_SPACE was added

tool_findfile: free mem properly

Follow-up to 764e4f066d5

Closes #8242

tool_findfile: check ~/.config/curlrc too

... after the initial checks for .curlrc and if XDG_CONFIG_HOME is not
set, use $HOME and $CURL_HOME to check if ~/.config/curlrc is present.

tool_findfile: check ~/.config/curlrc too

... after the initial checks for .curlrc and if XDG_CONFIG_HOME is not
set, use $HOME and $CURL_HOME to check if ~/.config/curlrc is present.

Add test 436 to verify

Reported-by: Sandro Jaeckel
Fixes #8208
Closes #8213

show more ...

runtests: allow client/file to specify multiple directories

... and make sure to mkdir them all

scripts/copyright.pl: support many provided file names on the cmdline

tests/FILEFORMAT.md: fix typo

Add test373: multiple chunks with binary zeros

Add test372: binary zero in data element

tests/server/getpart.c: properly deal with binary data containing NUL bytes

runtests.pl: properly print the test if it contains binary zeros