.github/workflows/mbedtls.yml: bump to mbedtls 3.1.0

Closes #8215

zuul: remove the mbedtls jobs

Now running as github workflows

Closes #8215

github/workflows: add mbedtls and mbedtls-clang

Closes #8215

mbedtls: fix private member designations for v3.1.0

"As a last resort, you can access the field foo of a structure bar by
writing bar.MBEDTLS_PRIVATE(foo). Note that you do so at your ow

mbedtls: fix private member designations for v3.1.0

"As a last resort, you can access the field foo of a structure bar by
writing bar.MBEDTLS_PRIVATE(foo). Note that you do so at your own risk,
since such code is likely to break in a future minor version of Mbed
TLS." -
https://github.com/ARMmbed/mbedtls/blob/f2d1199edc5834df4297f247f213e614f7782d1d/docs/3.0-migration-guide.md

That future minor version is v3.1.0. I set the >= to == for the version
checks because v3.1.0 is a release, and I am not sure when the private
designation was reverted after v3.0.0.

Closes #8214

show more ...

cmake: prevent dev warning due to mismatched arg

-- curl version=[7.81.0-DEV]
CMake Warning (dev) at /usr/share/cmake-3.22.1/Modules/FindPackageHandleStandardArgs.cmake:438 (message):

cmake: prevent dev warning due to mismatched arg

-- curl version=[7.81.0-DEV]
CMake Warning (dev) at /usr/share/cmake-3.22.1/Modules/FindPackageHandleStandardArgs.cmake:438 (message):
The package name passed to `find_package_handle_standard_args` (MBEDTLS)
does not match the name of the calling package (MbedTLS). This can lead to
problems in calling code that expects `find_package` result variables
(e.g., `_FOUND`) to follow a certain pattern.
Call Stack (most recent call first):
deps/curl/CMake/FindMbedTLS.cmake:31 (find_package_handle_standard_args)
deps/curl/CMakeLists.txt:473 (find_package)
This warning is for project developers. Use -Wno-dev to suppress it.

Closes #8207

show more ...

urlapi: if possible, shorten given numerical IPv6 addresses

Extended test 1560 to verify

Closes #8206

url: reduce ssl backend count for CURL_DISABLE_PROXY builds

Closes #8212

KNOWN_BUGS: "Trying local ports fails on Windows"

Reported-by: gclinch on github
Closes #8112

misc: update copyright year range

zuul: remove the wolfssl even more

Follow-up to 1914465cf180d32b3d

examples/multi-single.c: remove WAITMS()

As it isn't used.

Reported-by: Melroy van den Berg
Fixes #8200
Closes #8201

gtls: add gnutls include for the session type

Follow-up to 8fbd6feddfa5 to make it build more universally

m4/curl-compilers: tell clang -Wno-pointer-bool-conversion

To hush compiler warnings we don't care for: error: address of function
'X' will always evaluate to 'true'

Fixes #8197

m4/curl-compilers: tell clang -Wno-pointer-bool-conversion

To hush compiler warnings we don't care for: error: address of function
'X' will always evaluate to 'true'

Fixes #8197
Closes #8198

show more ...

http_proxy: don't close the socket (too early)

... and double-check in the OpenSSL shutdown that the socket is actually
still there before it is used.

Fixes #8193
Closes #81

http_proxy: don't close the socket (too early)

... and double-check in the OpenSSL shutdown that the socket is actually
still there before it is used.

Fixes #8193
Closes #8195

Reported-by: Leszek Kubik

show more ...

ngtcp2: verify the server certificate for the gnutls case

Closes #8178

ngtcp2: verify the server cert on connect (quictls)

Make ngtcp2+quictls correctly acknowledge `CURLOPT_SSL_VERIFYPEER` and
`CURLOPT_SSL_VERIFYHOST`.

The name check now uses a fu

ngtcp2: verify the server cert on connect (quictls)

Make ngtcp2+quictls correctly acknowledge `CURLOPT_SSL_VERIFYPEER` and
`CURLOPT_SSL_VERIFYHOST`.

The name check now uses a function from lib/vtls/openssl.c which will
need attention for when TLS is not done by OpenSSL or is disabled while
QUIC is enabled.

Possibly the servercert() function in openssl.c should be adjusted to be
able to use for both regular TLS and QUIC.

Ref: #8173
Closes #8178

show more ...

zuul: remove the wolfssl build

github workflow: add wolfssl

Closes #8196

zuul: fix quiche build pointing to wrong Cargo

Fixes #8184
Closes #8189

checksrc: detect more kinds of NULL comparisons we avoid

Co-authored-by: Jay Satiro
Closes #8180

RELEASE-NOTES: synced

mesalink: remove the BACKEND define kludge

Closes #8183

schannel: remove the BACKEND define kludge

Closes #8182

gtls: check return code for gnutls_alpn_set_protocols

Closes #8181

README: label the link to the support document

Closes #8185