curl for Windows

[Baxajaun]

Nueva versión 7.77.0 - May 26 2021

Changes:

configure: make the TLS library choice(s) explicit
curl: ignore options asking for SSLv2 or SSLv3
hsts: enable by default
SSL: support in-memory CA certs for some backends
vtls: refuse setting any SSL version

Bugfixes:

CVE-2021-22897: schannel cipher selection surprise
CVE-2021-22898: TELNET stack contents disclosure
CVE-2021-22901: TLS session caching disaster
AmigaOS: add functions definitions for SHA256
build: fix compilation for Windows UWP platform
c-hyper: don't write to set.writeheader if null
c-hyper: fix handling of zero-byte chunk from hyper
c-hyper: handle body on HYPER_TASK_EMPTY
checksrc: complain on == NULL or != 0 checks in conditions
CI/cirrus: add shared and static Windows release builds
cmake: add CURL_ENABLE_EXPORT_TARGET option
cmake: check for getppid and utimes
cmake: detect CURL_SA_FAMILY_T
cmake: fix two invokes result in different curl_config.h
cmake: make libcurl output filename configurable
cmake: Use multithreaded compilation on VS 2008+
config: remove now-unused macros
configure: if asked for, fail if ldap is not found
configure: provide --with-openssl, deprecate --with-ssl
conn: add 'attach' to protocol handler, make libssh2 use it
connect: use CURL_SA_FAMILY_T for portability
ConnectionExists: respect requests for h1 connections better
cookie: CURLOPT_COOKIEFILE set to NULL switches off cookies
curl-wolfssl.m4: without custom include path, assume /usr/include
curl: include libmetalink version in --version output
Curl_http_header: check for colon when matching Persistent-Auth
Curl_http_input_auth: require valid separator after negotiation type
Curl_input_digest: require space after Digest
curl_mprintf.3: add description
curl_setup: provide the shutdown flags wider
curl_url_set.3: add memory management information
CURLcode: add CURLE_SSL_CLIENTCERT
CURLOPT_CAPATH.3: defaults to a path, not NULL
CURLOPT_IPRESOLVE: preventing wrong IP version from being used
CURLOPT_POSTFIELDS.3: clarify how it gets the size of the data
data_pending: check only SECONDARY socket for FTP(S) transfers
docs/TheArtOfHttpScripting: fix markdown links
docs: camelcase it like GitHub everywhere
docs: cookies from HTTP headers need domain set
docs: fix typo in fail-with-body doc
docs: improve INTERNALS.md regarding getsock cb
docs: replace dots with dashes in markdown enums
easy: ignore sigpipe in curl_easy_send
FILEFORMAT: mention sectransp as a feature
GIT-INFO: suggest using autoreconf instead of buildconf
github: add a workflow with libssh2 on macOS using cmake
github: inhibit deprecated declarations for clang on macOS
GnuTLS: don't allow TLS 1.3 for versions that don't support it
gnutls: make setting only the MAX TLS allowed version work
gskit: fix CURL_DISABLE_PROXY build
gskit: fix undefined reference to 'conn'
hostip.h: remove declaration of unimplemented function
hostip: remove the debug code for LocalHost
http2: call the handle-closed function correctly on closed stream
http2: fix a resource leak in push_promise()
http2: fix resource leaks in set_transfer_url()
http2: make sure pause is done on HTTP
http2: move the stream error field to the per-transfer storage
http2: skip immediate parsing of payload following protocol switch
http2: use nghttp2_session_upgrade2 instead of nghttp2_session_upgrade
HTTP3.md: fix nghttp2's HTTP/3 server port
HTTP3.md: make the ngtcp2 build use the quictls fork
http: deal with partial CONNECT sends
http: fix the check for 'Authorization' with Bearer
http: limit the initial send amount to used upload buffer size
http: reset the header buffer when sending the request
http: use offsets inst of integer literals for header parsing
INSTALL: add IBM i specific quirks
krb5/name_to_level: replace checkprefix with curl_strequal
krb5: don't use 'static' to store PBSZ size response
krb5: remove the unused 'overhead' function
lib/hostip6.c: make NAT64 address synthesis on macOS work
lib1564.c: enable last wakeup test part on Windows
lib: fix 0-length Curl_client_write calls
lib: fix some misuse of curlx_convert_UTF8_to_tchar
libcurl-security.3: be careful of setuid
libcurl-security.3: don't try to filter IPv4 hosts based on the URL
libcurl.3: mention the URL API
libssh2: fix Value stored to 'sshp' is never read
libssh2: ignore timeout during disconnect
libssh: fix "empty expression statement has no effect" warnings
libtest: remove lib530.c
m4: add security frameworks on Mac when compiling rustls
multi: don't close connection HTTP_1_1_REQUIRED
multi: fix slow write/upload performance on Windows
multi: reduce Win32 API calls to improve performance
ngtcp2: fix the cb_acked_stream_data_offset proto
NSS: add ciphers to map
NSS: make colons, commas and spaces valid separators in cipher list
nss_set_blocking: avoid static for sock_opt
ntlm: precaution against super huge type2 offsets
openldap: protect SSL-specific code with proper #ifdef
openldap: replace ldap_ prefix on private functions
openssl: fix build error with OpenSSL < 1.0.2
openssl: remove unneeded cast for CertOpenSystemStore()
os400: additional support for options metadata
progress: fix scan-build-11 warnings
progress: reset limit_size variables at transfer start
progress: when possible, calculate transfer speeds with microseconds
README.md: delete Codacy UTM parameters
Revert "Revert 'multi: implement wait using winsock events'"
rustls: only return CURLE_AGAIN when TLS session is fully drained
rustls: use ALPN
sasl: use 'unsigned short' to store mechanism
schannel: Disable auto credentials; add an option to enable it
schannel: Support strong crypto option
sectransp: allow cipher name to be specified
sectransp: fix EXC_BAD_ACCESS caused by uninitialized buffer
sigpipe: ignore SIGPIPE when using wolfSSL as well
sockfilt: avoid getting stuck waiting for writable socket
sockfilt: fix invalid increment of handles index variable nfd
sws: #ifdef S_IFSOCK use
sws: allow HTTP requests up to 2MB in size
test server: take care of siginterrupt() deprecation
test2100: make it run with and require IPv6
tests/disable-scan.pl: also scan all m4 files
tests/getpart: generate output URL encoded for better diffs
tests: ignore case of chunked hex numbers in tests
tls: add USE_HTTP2 define
tool_getparam: handle failure of curlx_convert_tchar_to_UTF8()
tool_getparam: replace (in-place) '%20' by '+' according to RFC1866
tool_operate: don't discard failed parallel transfer result
tool_writeout: fix the HTTP_CODE json output
travis: disable the failing libssh build
URL-SYNTAX: update IDNA section for WHATWG spec changes
urlapi: "normalize" numerical IPv4 host names
vauth: factor base64 conversions out of authentication procedures
version: add gsasl_version to curl_version_info_data
version: add OpenLDAP version in the output
vtls: deduplicate some DISABLE_PROXY ifdefs
vtls: reset ssl use flag upon negotiation failure
wolfssl: handle SSL_write() returns 0 for error
wolfssl: remove SSLv3 support leftovers

curl for Windows

Saludos,

[Baxajaun]

Buenos días !!!

Nueva versión 7.78.0 - Jul 21 21

Changes:

curl_url_set: reject spaces in URLs w/o CURLU_ALLOW_SPACE
CURLE_SETOPT_OPTION_SYNTAX: new error name for wrong setopt syntax
hostip: make 'localhost' return fixed values
mbedtls: add support for cert and key blob options
metalink: remove all support for it
mqtt: add support for username and password

Bugfixes:

--socks4[a]: clarify where the host name is resolved
ares: always store IPv6 addresses first
asyn-ares: remove check for 'data' in Curl_resolver_cancel
bearssl: explicitly initialize all fields of Curl_ssl
bearssl: remove incorrect const on variable that is modified
build: fix compiler warnings when CURL_DISABLE_VERBOSE_STRINGS
c-hyper: abort CONNECT response reading early on non 2xx responses
c-hyper: add support for transfer-encoding in the request
c-hyper: bail on too long response headers
c-hyper: clear NTLM auth buffer when request is issued
c-hyper: convert HYPERE_INVALID_PEER_MESSAGE to CURLE_UNSUPPORTED_PROTOCOL
c-hyper: fix NTLM on closed connection tested with test159
c-hyper: fix the uploaded field in progress callbacks
c-hyper: handle NULL from hyper_buf_copy()
c-hyper: support CURLINFO_STARTTRANSFER_TIME
c-hyper: support CURLOPT_HEADER
ccsidcurl: fix the compile errors
CI/cirrus: install impacket from PyPI instead of FreeBSD packages
CI: add bearssl build
CI: add Circle CI
CI: add jobs using Zuul
CI: delete --enable-hsts option (it is the default now)
CI: remove travis details
cleanup: spell DoH with a lowercase o
cmake: add CURL_DISABLE_NTLM option
cmake: avoid leaking absolute paths into exported config
cmake: fix IoctlSocket FIONBIO check
cmake: fix support for UnixSockets feature on Win32
cmake: remove libssh2 feature checks
cmake: try well-known send/recv signature for Apple
configure.ac: make non-executable
configure/cmake: remove checks for many unused functions
configure: add --disable-ntlm option
configure: disable RTSP when hyper is selected
configure: do not strip out debug flags
configure: fix nghttp2 library name for static builds
configure: inhibit the implicit-fallthrough warning on gcc-12
configure: rename get-easy-option configure option to get-easy-options
conn_shutdown: if closed during CONNECT cleanup properly
conncache: lowercase the hash key for better match
cookies: track expiration in jar to optimize removals
copyright: add boiler-plate headers to CI config files
crustls: bump crustls version and use new URL
curl.h: <sys/select.h> is supported by VxWorks7
curl.h: include sys/select.h for NuttX RTOS
curl: ignore blank --output-dir
curl_endian: remove the unused Curl_write64_le function
curl_multibyte: Remove local encoding fallbacks
Curl_ntlm_core_mk_nt_hash: fix OOM in error path
Curl_ssl_getsessionid: fail if no session cache exists
CURLOPT_WRITEFUNCTION.3: minor update of the example
docs/BINDINGS: fix outdated links
docs/examples: use curl_multi_poll() in multi examples
docs/INSTALL: remove mentions of configure --with-darwin-ssl
docs: document missing arguments to commands
docs: fix inconsistencies in EGDSOCKET documentation
docs: fix incorrect argument name reference
docs: Fix typos
docs: make docs for --etag-save match the program behaviour
docs: use --max-redirs instead of --max-redir
doh: (void)-prefix call to curl_easy_setopt
doh: fix wrong DEBUGASSERT for doh private_data
easy: during upkeep, attach Curl_easy to connections in the cache
examples/multi-single: fix scan-build warning
examples: length-limit two sscanf() uses of %s
examples: safer and more proper read callback logic
filecheck: quietly remove test-place/*~
formdata: avoid "Argument cannot be negative" warning
formdata: correct typecast in curl_mime_data call
GHA: add a linux-hyper job
GHA: add several libcurl tests to the hyper job
GHA: run the newly fixed tests with hyper
github: timeout jobs on macOS after 90 minutes
glob: pass an 'int' as len when using printf's %*s
gnutls: set the preferred TLS versions in correct order
GOVERNANCE: add 'user', 'committer' and 'contributor'
hostip: (macOS) free returned memory of SCDynamicStoreCopyProxies
hostip: bad CURLOPT_RESOLVE syntax now returns error
hsts: ignore numberical IP address hosts
HSTS: not experimental anymore
http2: clarify 'Using HTTP2' verbose message
http2: init recvbuf struct for pushed streams
http2_connisdead: handle trailing GOAWAY better
http: fix crash in rate-limited upload
http: make the haproxy support work with unix domain sockets
http_proxy: deal with non-200 CONNECT response with Hyper
hyper: propagate errors back up from read callbacks
HYPER: remove mentions of deprecated development branch
idn: fix libidn2 with windows unicode builds
infof: remove newline from format strings, always append it
lib: don't compare fd to FD_SETSIZE when using poll
lib: fix compiler warnings with CURL_DISABLE_NETRC
lib: fix type of len passed to *printf's %*s
lib: more %u for port and int for %*s fixes
lib: use %u instead of %ld for port number printf
libcurl-security.3: mention file descriptors and forks
libssh2: limit time a disconnect can take to 1 second
mbedtls: make mbedtls_strerror always work
mbedtls: Remove unnecessary include
mqtt: detect illegal and too large file size
mqtt: extend the error message for no topic
msnprintf: return number of printed characters excluding null byte
multi: add scan-build-6 work-around in curl_multi_fdset
multi: alter transfer timeout ordering
multi: do not switch off connect_only flag when closing
multi: fix crash in curl_multi_wait / curl_multi_poll
netrc: skip 'macdef' definitions
ngtcp2: disable TLSv1.3 compatible mode when using GnuTLS
openssl: avoid static variable for seed flag
openssl: don't remove session id entry in disassociate
pinnedpubkey.d: fix formatting for version support lists
proto.d: fix formatting for paragraphs after margin changes
quiche: use send() instead of sendto() to avoid macOS issue
Revert "c-hyper: handle body on HYPER_TASK_EMPTY"
Revert "ftp: Expression 'ftpc->wait_data_conn' is always false"
runtests: also find the last test in Makefile.inc
runtests: enable 'hyper mode' only for HTTP tests
runtests: init $VERSION to avoid warnings when using -l
runtests: parse data/Makefile.inc instead of using make
runtests: skip disabled tests unless -f is used
rustls: remove native_roots fallback
schannel: set ALPN length correctly for HTTP/2
SChannel: Use '_tcsncmp()' instead
sectransp: check for client certs by name first, then file
setopt: fix incorrect comments
socketpair: fix potential hangs
socks4: scan for the IPv4 address in resolve results
ssl: read pending close notify alert before closing the connection
sws: malloc request struct instead of using stack
telnet: fix option parser to not send uninitialized contents
test1116: hyper doesn't pass through "surprise-trailers"
test1147: hyper doesn't allow "crazy" request headers like built-in
test1151: added missing CRLF to work with hyper
test1216: adjusted for hyper mode
test1218: adjusted for hyper mode
test1230: adjust to work in hyper mode
test1340/1341: adjusted for hyper mode
test1438/1457: add HTTP keyword to make hyper mode work
test1514: add a CRLF to the response to make it correct
test1518: adjusted to work with hyper
test1519: adjusted to work with hyper
test1594/1595/1596: fix to work in hyper mode
test269: disable for hyper
test3010: work with hyper mode
test328: avoid a header-looking body to make hyper mode work
test339: CRLFify better to work in hyper mode
test347: CRLFify to work in hyper mode
test393: make Content-Length fit within 64 bit for hyper
test394: hyper returns a different error
test395: hyper cannot work around > 64 bit content-lengths like built-in
test433: adjust for hyper mode
test434: add HTTP keyword
test500: adjust to work with hyper mode
test566: adjust to work with hyper mode
test599: adjusted to work in hyper mode
test644: remove as duplicate of test 587
tests: fix Accept-Encoding strips to work with Hyper builds
TLS: prevent shutdown loops to get stuck
tool: make _lseeki64() macro work with the PellesC compiler
tool_help: document that --tlspassword takes a password
tool_help: remove unused define
url.c: remove two variable assigns that are never read
url: (void)-prefix a curl_url_get() call
url: bad CURLOPT_CONNECT_TO syntax now returns error
version: turn version number functions into returning void
vtls: exit addsessionid if no cache is inited
vtls: fix connection reuse checks for issuer cert and case sensitivity
vtls: only store TIMER_APPCONNECT for non-proxy connect
vtls: use free() not curl_free()
warnless: simplify type size handling
Win32: fix build with Watt-32
winbuild/README: VC should be set to 6 'or larger'
winbuild: support alternate nghttp2 static lib name
wolfssl: failing to set a session id is not reason to error out
write-out.d: clarify urlnum is not unique for de-globbed URLs
zuul: use the new rustls directory name

https://curl.se/windows/


Muchas gracias .

Saludos,

[Baxajaun]

Buenos días !

Nueva versión curl 7.79.1 for Windows

Código: Seleccionar todo

 Fixed in 7.79.1 - September 22 2021

Bugfixes:

    Curl_http2_setup: don't change connection data on repeat invokes
    curl_multi_fdset: make FD_SET() not operate on sockets out of range
    dist: provide lib/.checksrc in the tarball
    FAQ: add GOPHERS + curl works on data, not files
    hsts: CURLSTS_FAIL from hsts read callback should fail transfer
    hsts: handle unlimited expiry
    http: fix the broken >3 digit response code detection
    strerror: use sys_errlist instead of strerror on Windows
    test1184: disable
    tests/sshserver.pl: make it work with openssh-8.7p1 

Fixed in 7.79.0 - September 15 2021

Changes:

    bearssl: support CURLOPT_CAINFO_BLOB
    http: consider cookies over localhost to be secure
    secure transport: support CURLINFO_CERTINFO 

Bugfixes:

    CVE-2021-22945: clear the leftovers pointer when sending succeeds
    CVE-2021-22946: do not ignore --ssl-reqd
    CVE-2021-22947: reject STARTTLS server response pipelining
    ares: use ares_getaddrinfo()
    asyn-ares.c: move all version number checks to the top
    auth: do not append zero-terminator to authorisation id in kerberos
    auth: properly handle byte order in kerberos security message
    auth: use sasl authzid option in kerberos
    auth: we do not support a security layer after kerberos authentication
    BINDINGS.md: update links to use https where available
    build: fix compiler warnings
    c-hyper: deal with Expect: 100-continue combined with POSTFIELDS
    c-hyper: fix header value passed to debug callback
    c-hyper: handle HTTP/1.1 => HTTP/1.0 downgrade on reused connection
    c-hyper: initial step for 100-continue support
    c-hyper: initial support for "dumping" 1xx HTTP responses
    c-hyper: remove the hyper_executor_poll() loop from Curl_http
    CI/cirrus: reduce compile time with increased parallism
    CI: use GitHub Container Registry instead of Docker Hub
    cirrus: Add FreeBSD 13.0 job and disable sanitizer build
    cmake: avoid poll() on macOS
    cmake: sync CURL_DISABLE options
    codeql: fix error "Resource not accessible by integration"
    compressed.d: it's a request, not an order
    config.d: escape the backslash properly
    config.d: note that curlrc is used even when --config
    config: get rid of the unused HAVE_SIG_ATOMIC_T et. al.
    configure.ac: revert bad nghttp2 library detection improvements
    configure: error out if both ngtcp2 and quiche are specified
    configure: make --disable-hsts work
    configure: set classic mingw minimum OS version to XP
    configure: tweak nghttp2 library name fix
    connect: get local port + ip also when reusing connections
    connect: remove superfluous conditional
    curl-openssl.m4: check lib64 for the pkg-config file
    curl-openssl.m4: show correct output for OpenSSL v3
    curl.1: mention "global" flags
    curl.1: provide examples for each option
    curl: add warning for ignored data after quoted form parameter
    curl: add warning for incompatible parameters usage
    curl: better error message when -O fails to get a good name
    curl: stop retry if Retry-After: is longer than allowed
    curl_easy_setopt.3: improve the string copy wording
    Curl_hsts_loadcb: don't attempt to load if hsts wasn't inited
    curl_setup.h: sync values for HTTP_ONLY
    curl_url_get.3: clarify about path and query
    CURLMOPT_TIMERFUNCTION.3: remove misplaced "time"
    CURLOPT_DOH_URL.3: CURLOPT_OPENSOCKETFUNCTION is not inherited
    CURLOPT_SSL_CTX_*.3: tidy up the example
    CURLOPT_UNIX_SOCKET_PATH.3: remove nginx reference, add see also
    docs/MQTT: update state of username/password support
    docs: remove experimental mentions from HSTS and MQTT
    docs: the security list is reached at security at curl.se now
    easy: use a custom implementation of wcsdup on Windows
    examples/*hiperfifo.c: fix calloc arguments to match function proto
    examples/cookie_interface: avoid printfing time_t directly
    examples/cookie_interface: fix scan-build printf warning
    examples/ephiperfifo.c: simplify signal handler
    FAQ: add two dev related questions
    getparameter: fix the --local-port number parser
    happy-eyeballs-timeout-ms.d: polish the wording
    hostip: Make Curl_ipv6works function independent of getaddrinfo
    http2: Curl_http2_setup needs to init stream data in all invokes
    http2: revert a change that broke upgrade to h2c
    http2: revert call the handle-closed function correctly on closed stream
    http: disallow >3-digit response codes
    http: ignore content-length if any transfer-encoding is used
    http_proxy: clear 'sending' when the outgoing request is sent
    http_proxy: fix the User-Agent inclusion in CONNECT
    http_proxy: fix user-agent and custom headers for CONNECT with hyper
    http_proxy: only wait for writable socket while sending request
    INTERNALS: bump c-ares requirement to 1.16.0
    INTERNALS: c-ares has a new home: c-ares.org
    lib: don't use strerror()
    libcurl-errors.3: clarify two CURLUcode errors
    limit-rate.d: clarify base unit
    mailing lists: move from cool.haxx.se to lists.haxx.se
    mbedtls: avoid using a large buffer on the stack
    mbedTLS: initial 3.0.0 support
    mbedtls_threadlock: fix unused variable warning
    mksymbolsmanpage.pl: Fix showing symbol's last used version
    mksymbolsmanpage.pl: match symbols case insenitively
    multi: fix compiler warning with `CURL_DISABLE_WAKEUP`
    ngtcp2: compile with the latest ngtcp2 and nghttp3
    ngtcp2: fix build with ngtcp2 and nghttp3
    ngtcp2: remove the acked_crypto_offset struct field init
    ngtcp2: replace deprecated functions with nghttp3_conn_shutdown_stream_read
    ngtcp2: reset the oustanding send buffer again when drained
    ngtcp2: rework the return value handling of ngtcp2_conn_writev_stream
    ngtcp2: stop buffering crypto data
    ngtcp2: utilize crypto API functions to simplify
    openssl: annotate SSL3_MT_SUPPLEMENTAL_DATA
    openssl: when creating a new context, there cannot be an old one
    opt-docs: make sure all man pages have examples
    opt-docs: verify man page sections + order
    opts docs: unify phrasing in NAME header
    output.d: add method to suppress response bodies
    page-header: add GOPHERS, simplify wording in the 1st para
    progress: fix a compile warning on some systems
    progress: make trspeed avoid floats
    runtests: add option -u to error on server unexpectedly alive
    schannel: Work around typo in classic mingw macro
    scripts: invoke interpreters through /usr/bin/env
    setopt: enable CURLOPT_IGNORE_CONTENT_LENGTH for hyper
    strerror.h: remove the #include from files not using it
    symbols-in-versions: fix CURLSSLBACKEND_QSOSSL last used version
    test1138: remove trailing space to make work with hyper
    test1173: check references to libcurl options
    test1280: CRLFify the response to please hyper
    test1565: fix windows build errors
    test365: verify response with chunked AND Content-Length headers
    tests/*server.pl: flush output before executing subprocess
    tests/*server.py: remove pidfile on server termination
    tests/runtests.pl: cleanup copy&paste mistakes and unused code
    tests/server/*.c: align handling of portfile argument and file
    tests: adjust the tftpd output to work with hyper mode
    tests: be explicit about using 'python3' instead of 'python'
    tests: enable test 1129 for hyper builds
    tests: make three tests pass until 2037
    tool/tests: fix potential year 2038 issues
    tool_operate: Fix --fail-early with parallel transfers
    url: fix compiler warning in no-verbose builds
    urlapi.c:seturl: assert URL instead of using if-check
    vtls: fix typo in schannel_verify.c
    winbuild/README.md: clarify GEN_PDB option
    wolfssl: clean up wolfcrypt error queue
    write-out.d: clarify size_download/upload
    x509asn1: fix heap over-read when parsing x509 certificates 

Muchas gracias.

Saludos,

[Baxajaun]

Buenas tardes !

Nueva versión 7.80.0

Código: Seleccionar todo

 Fixed in 7.80.0 - November 10 2021

Changes:

    CURLOPT_MAXLIFETIME_CONN: maximum allowed lifetime for conn reuse
    CURLOPT_PREREQFUNCTION: add new callback
    libssh2: add SHA256 fingerprint support
    urlapi: add curl_url_strerror()
    urlapi: support UNC paths in file: URLs on Windows
    wolfssl: allow setting of groups/curves 

Bugfixes:

    .github: retry macos "brew install" command on failure
    aws-sigv4: make signature work when post data is binary
    BINDINGS: URL updates
    build: remove checks for WinSock 1
    c-hyper: don't abort CONNECT responses early when auth-in-progress
    c-hyper: make Curl_http propagate errors better
    c-hyper: make CURLOPT_SUPPRESS_CONNECT_HEADERS work
    c-hyper: make test 217 run
    c-hyper: use hyper_request_set_uri_parts to make h2 better
    checksrc: ignore preprocessor lines
    CI/makefiles: introduce dedicated test target
    ci: update Lift config to match requirements of curl build
    cirrus: remove FreeBSD 11.4 from the matrix
    cirrus: switch to openldap24-client
    cleanup: constify unmodified static structs
    cmake: add CURL_ENABLE_SSL option
    cmake: fix error getting LOCATION property on non-imported target
    CMake: restore support for SecureTransport on iOS
    cmake: with OpenSSL, define OPENSSL_SUPPRESS_DEPRECATED
    cmdline-opts: made the 'Added:' field mandatory
    configure.ac: replace krb5-config with pkg-config
    configure: when hyper is selected, deselect nghttp2
    connect: use sysaddr_un from sys/un.h or custom-defined for windows
    curl-confopts.m4: remove --enable/disable-hidden-symbols
    curl-openssl.m4: modify library order for openssl linking
    curl-openssl: pass argument to sed single-quoted
    curl.1: remove mentions of really old version changes
    curl: actually append "-" to --range without number only
    curl: correct grammar in generated libcurl code
    curl: print help descriptions in an aligned right column
    curl_gssapi: fix link error on macOS Monterey
    curl_multi_socket_action.3: add a "RETURN VALUE" section
    curl_ntlm_core: use OpenSSL only if DES is available
    Curl_updateconninfo: store addresses for QUIC connections too
    CURLOPT_ALTSVC_CTRL.3: mention conn reuse is preferred
    CURLOPT_HSTSWRITEFUNCTION.3: using CURLOPT_HSTS_CTRL is required
    CURLOPT_HTTPHEADER.3: add descripion for specific headers
    docs/HTTP3: improve build instructions
    docs/Makefile.am: repair 'make html'
    docs: fix typo in CURLOPT_TRAILERFUNCTION example
    docs: provide "RETURN VALUE" section for more func manpages
    docs: reduce use of "very"
    doh: remove experimental code for DoH with GET
    examples/htmltidy: correct wrong printf() use
    examples/imap-append: fix end-of-data check
    ftp: make the MKD retry to retry once per directory
    gen.pl: insert the current date and version in generated man page
    gen.pl: replace leading single quotes with \(aq
    http2: make getsock not wait for write if there's no remote window
    HTTP3: fix the HTTP/3 Explained book link
    http: fix Basic auth with empty name field in URL
    http: reject HTTP response codes < 100
    http: remove assert that breaks hyper
    http: set content length earlier
    http_proxy: make hyper CONNECT() return the correct error code
    http_proxy: multiple CONNECT with hyper done better
    hyper: disable test 1294 since hyper doesn't allow such crazy headers
    hyper: does not support disabling CURLOPT_HTTP_TRANSFER_DECODING
    hyper: pass the CONNECT line to the debug callback
    imap: display quota information
    INSTALL: update symbol hiding option
    lib/mk-ca-bundle.pl: skip certs passed Not Valid After date
    lib: avoid fallthrough cases in switch statements
    libcurl.rc: switch out the copyright symbol for plain ASCII
    libssh2: Get the version at runtime if possible
    limit-rate.d: this is average over several seconds
    llist: remove redundant code, branch will not be executed
    Makefile.m32: fix to not require OpenSSL with -libssh2 or -rtmp options
    maketgz: redirect updatemanpages.pl output to /dev/null
    man pages: require all to use the same section header order
    manpage: adjust the asterisk in some SYNOPSIS sections
    md5: fix compilation with OpenSSL 3.0 API
    misc: fix a few issues on MidnightBSD
    misc: fix typos in docs and comments
    ngtcp2: advertise h3 as well as h3-29
    ngtcp2: compile with the latest nghttp3
    ngtcp2: specify the missing required callback functions
    ngtcp2: use latest QUIC TLS RFC9001
    NTLM: use DES_set_key_unchecked with OpenSSL
    openssl: if verifypeer is not requested, skip the CA loading
    openssl: with OpenSSL 1.1.0+ a failed RAND_status means goaway
    Revert "src/tool_filetime: disable -Wformat on mingw for this file"
    sasl: binary messages
    schannel: fix memory leak due to failed SSL connection
    scripts/delta: count command line options in the new file
    sendf: accept zero-length data in Curl_client_write()
    sha256: use high-level EVP interface for OpenSSL
    smooth-gtk-thread.c: enhance the mutex lock use
    sws: fix memory leak on exit
    test1160: edited to work with hyper
    test1173: make manpage-syntax.pl spot \n errors in examples
    test1185: verify checksrc
    test1266/1267: disabled on hyper: no HTTP/0.9 support
    test1287: make work on hyper
    test207: accept a different error code for hyper
    test262: don't attempt with hyper
    test552: updated to work with hyper
    test559: add 'HTTP' in keywords
    tests/smbserver.py: fix compatibility with impacket 0.9.23+
    tests: add Schannel-specific tests and disable unsupported ones
    tests: disable test 2043
    tests: kill some test servers afterwards to avoid locked logfiles
    tests: use python3 in test 1451
    tls: remove newline from three infof() calls
    tool_cb_prg: make resumed upload progress bar show better
    tool_listhelp: easier generated with gen.pl
    tool_main: fix typo in comment
    tool_operate: a failed etag save now only fails that transfer
    URL-SYNTAX: add IMAP UID SEARCH example
    url: check the return value of curl_url()
    url: set "k->size" -1 at start of request
    urlapi: skip a strlen(), pass in zero
    urlapi: URL decode percent-encoded host names
    version_win32: use actual version instead of manifested version
    vtls: Fix a memory leak if an SSL session cannot be added to the cache
    wolfssl: use for SHA256, MD4, MD5, and setting DES odd parity
    zuul: pin the quiche build to use an older cmake-rs 

curl 7.80.0 for Windows

Muchas gracias.

Saludos,

[Baxajaun]

Buenas tardes !!!

Nueva versión 7.81.0 - January 5 2022

curl 7.81.0 for Windows

Código: Seleccionar todo

 Changes:

    mime: use percent-escaping for multipart form field and file names 

Bugfixes:

    asyn-ares: ares_getaddrinfo needs no happy eyeballs timer
    azure: make the "w/o HTTP/SMTP/IMAP" build disable SSL proper
    BINDINGS: add cURL client for PostgreSQL
    BINDINGS: add one from Everything curl and update a link
    checksrc: detect more kinds of NULL comparisons we avoid
    CI: build examples for additional code verification
    CI: bump job to use mbedtls 3.1.0
    cmake: don't set _USRDLL on a static Windows build
    cmake: prevent dev warning due to mismatched arg
    cmake: private identifiers use CURL_ instead of CMAKE_ prefix
    config.d: update documentation to match the path search
    configure: add -lm to configure for rustls build.
    configure: better diagnostics if hyper is built wrong
    configure: don't enable TLS when --without-* flags are used
    configure: fix runtime-lib detection on macOS
    curl.1: require "see also" for every documented option
    curl: improve error message for --head with -J
    curl_easy_cleanup.3: remove from multi handle first
    curl_easy_escape.3: call curl_easy_cleanup in example
    curl_easy_unescape.3: call curl_easy_cleanup in example
    curl_multi_init.3: fix EXAMPLE formatting
    curl_multi_perform/socket_action.3: clarify what errors mean
    curl_share_setopt.3: split out options into their own manpages
    CURLOPT_STDERR.3: does not work with libcurl as a win32 DLL
    digest: compute user:realm:pass digest w/o userhash
    docs/checksrc: Add documentation for STRERROR
    docs/cmdline-opts: do not say "protocols: all"
    docs/examples: workaround broken -Wno-pedantic-ms-format
    docs/HTTP3: describe how to setup a h3 reverse-proxy for testing
    docs/INSTALL.md: typo fix : added missing "get" verb
    docs/URL-SYNTAX.md: space is not fine in a given URL
    docs: add known bugs list to HTTP3.md
    docs: address proselint nits
    docs: consistent manpage SYNOPSIS
    docs: fix dead links, remove ECH.md
    docs: fix typo in OpenSSL 3 build instructions
    docs: Update the Reducing Size section
    example/progressfunc: remove code for old libcurls
    examples/multi-single.c: remove WAITMS()
    FAQ: typo fix : "yout" ➤ "your"
    ftp: disable warning 4706 in MSVC
    gen.pl: improve example output format
    github workflow: add wolfssl (removed from zuul)
    github/workflows: add mbedtls and mbedtls-clang (removed from zuul)
    gtls: check return code for gnutls_alpn_set_protocols
    hash: lazy-alloc the table in Curl_hash_add()
    http2:set_transfer_url() return early on OOM
    HTTP3: update quiche build instructions
    http: enable haproxy support for hyper backend
    http: Fix CURLOPT_HTTP200ALIASES
    http_proxy: don't close the socket (too early)
    insecure.d: detail its use for SFTP and SCP as well
    insecure.d: expand and clarify
    libcurl-multi.3: "SOCKS proxy handshakes" are not blocking
    libcurl-security.3: mention address and URL mitigations
    libssh2: fix error message for sha256 mismatch
    libtest: avoid "assignment within conditional expression"
    lift: ignore is a deprecated config option, use ignoreRules
    linkcheck.yml: add CI job that checks markdown links
    m4/curl-compilers: tell clang -Wno-pointer-bool-conversion
    Makefile.m32: rename -winssl option to -schannel and tidy up
    mbedTLS: add support for CURLOPT_CAINFO_BLOB
    mbedtls: fix CURLOPT_SSLCERT_BLOB
    mbedtls: fix private member designations for v3.1.0
    misc: remove unused doh flags when CURL_DISABLE_DOH is defined
    misc: s/e-mail/email
    multi: cleanup the socket hash when destroying it
    multi: handle errors returned from socket/timer callbacks
    multi: shut down CONNECT in Curl_detach_connnection
    netrc.d: edit the .netrc example to look nicer
    ngtcp2: verify the server cert on connect (quictls)
    ngtcp2: verify the server certificate for the gnutls case
    nss:set_cipher don't clobber the cipher list
    openldap: implement STARTTLS
    openldap: process search query response messages one by one
    openldap: several minor improvements
    openldap: simplify ldif generation code
    openssl: check the return value of BIO_new()
    openssl: define HAVE_OPENSSL_VERSION for OpenSSL 1.1.0+
    openssl: remove `RSA_METHOD_FLAG_NO_CHECK` handling if unavailable
    openssl: remove usage of deprecated `SSL_get_peer_certificate`
    openssl: use non-deprecated API to read key parameters
    page-footer: add a mention of how to report bugs to the man page
    page-footer: document more environment variables
    request.d: refer to 'method' rather than 'command'
    retry-all-errors.d: make the example complete
    runtests: make the SSH library a testable feature
    rustls: read of zero bytes might be okay
    rustls: remove comment about checking handshaking
    rustls: remove incorrect EOF check
    sha256/md5: return errors when init fails
    socks5: use appropriate ATYP for numerical IP address host names
    test1156: enable for hyper
    test1156: fixup the stdout check for Windows
    test1525: tweaked for hyper
    test1526: enable for hyper
    test1527: enable for hyper
    test1528: enable for hyper
    test1554: adjust for hyper
    test1556: adjust for hyper
    test302[12]: run only with the libssh2 backend
    test661: enable for hyper
    tests/CI.md: add more information on CI environments
    tests/data/test302[12]: fix MSYS2 path conversion of hostpubsha256
    tftp: mark protocol as not possible to do over CONNECT
    tool_findfile: updated search for a file in the homedir
    tool_operate: only set SSH related libcurl options for SSH URLs
    tool_operate: warn if too many output arguments were found
    url.c: fix the SIGPIPE comment for Curl_close
    url: check ssl_config when re-use proxy connection
    url: reduce ssl backend count for CURL_DISABLE_PROXY builds
    urlapi: accept port number zero
    urlapi: if possible, shorten given numerical IPv6 addresses
    urlapi: provide more detailed return codes
    urlapi: reject short file URLs
    version_win32: Check build number and platform id
    vtls/rustls: adapt to the updated rustls_version proto
    writeout: fix %{http_version} for HTTP/3
    x509asn1: return early on errors
    zuul.d: update rustls-ffi to version 0.8.2
    zuul: fix quiche build pointing to wrong Cargo 

Muchas gracias.

Saludos,

[Baxajaun]

Buenas tardes !!!

Nueva versión 7.82.0 - March 5 2022

Código: Seleccionar todo

Changes:

curl: add --json
mesalink: remove support
Bugfixes:

appveyor: update images from VS 2019 to 2022
appveyor: use VS 2017 image for the autotools builds
azure-pipelines: add a build on Windows with libssh
bearssl: fix connect error on expired cert and no verify
bearssl: fix EXC_BAD_ACCESS on incomplete CA cert
bearssl: fix session resumption (session id)
build: enable -Warith-conversion
build: fix -Wenum-conversion handling
build: fix ngtcp2 crypto library detection
checkprefix: remove strlen calls
checksrc: fix typo in comment
CI: move 'distcheck' job from zuul to azure pipelines
CI: move scan-build job from Zuul to Azure Pipelines
CI: move the NSS job from zuul to GHA
ci: move the OpenSSL + c-ares job from Zuul to Circle CI
CI: move the rustls CI job to GHA from Zuul
CI: move two jobs from Zuul to Circle CI
CI: test building wolfssl with --enable-opensslextra
CI: workflows/wolfssl: install impacket
circleci: add a job using libssh
cirlceci: also run a c-ares job on arm with debug enabled
cmake: fix iOS CMake project generation error
cmdline-opts/gen.pl: fix option matching to improve references
config.d: Clarify _curlrc filename is still valid on Windows
configure.ac: use user-specified gssapi dir when using pkg-config
configure: change output for cross-compiled alt-svc support
configure: fix '--enable-code-coverage' typo
configure: remove support for "embedded ares"
configure: requires --with-nss-deprecated to build with NSS
configure: set CURL_LIBRARY_PATH for nghttp2
configure: support specification of a nghttp2 library path
configure: use correct CFLAGS for threaded resolver with xlC on AIX
curl tool: erase some more sensitive command line arguments
curl-functions.m4: fix LIBRARY_PATH adjustment to avoid eval
curl-functions.m4: revert DYLD_LIBRARY_PATH tricks in CURL_RUN_IFELSE
curl-openssl: fix SRP check for OpenSSL 3.0
curl-openssl: remove the OpenSSL headers and library versions check
curl.h: fix typo
curl: remove "separators" (when using globbed URLs)
curl_getdate.3: remove pointless .PP line
curl_multi_socket.3: remove callback and typical usage descriptions
curl_url_set.3: mention when CURLU_ALLOW_SPACE was added
CURLMOPT_TIMERFUNCTION/DATA.3: fix the examples
CURLOPT_PROGRESSFUNCTION.3: fix example struct assignment
CURLOPT_RESOLVE.3: change example port to 443
CURLOPT_XFERINFOFUNCTION.3: fix example struct assignment
CURLOPT_XFERINFOFUNCTION.3: fix typo in example
CURLSHOPT_LOCKFUNC.3: fix typo "relased" -> "released"
des: fix compile break for OpenSSL without DES
docs/cmdline-opts: add "mutexed" options for more http versions
docs/DEPRECATE: remove NPN support in August 2022
docs: capitalize the name 'Netscape'
docs: document HTTP/2 not insisting on TLS 1.2
docs: fix mandoc -T lint formatting complaints
docs: update IETF links to use datatracker
examples/curlx: support building with OpenSSL 1.1.0+
examples/multi-app.c: call curl_multi_remove_handle as well
formdata: avoid size_t => long typecast overflows
ftp: provide error message for control bytes in path
gen.pl: terminate "example" sections better
gha: add a macOS CI job with libssh
gskit: Convert to using Curl_poll
gskit: Fix errors from Curl_strerror refactor
gskit: Fix initialization of Curl_ssl_gskit struct
h2/h3: allow CURLOPT_HTTPHEADER change ":scheme"
hostcheck: fixed to not touch used input strings
hostcheck: reduce strlen calls on chained certificates
hostip: avoid unused parameter error in Curl_resolv_check
http2: move two infof calls to debug-h2-only
http: make Curl_compareheader() take string length arguments too
if2ip: make Curl_ipv6_scope a blank macro when IPv6-disabled
KNOWN_BUGS: fix typo "libpsl"
ldap: return CURLE_URL_MALFORMAT for bad URL
lib: remove support for CURL_DOES_CONVERSIONS
libssh2: don't typecast socket to int for libssh2_session_handshake
libssh: fix include files and defines use for Windows builds
Makefile.am: Generate VS 2022 projects
maketgz: return error if 'make dist' fails
mbedtls: enable use of mbedtls without CRL support
mbedtls: enable use of mbedtls without filesystem functions support
mbedtls: fix CURLOPT_SSLCERT_BLOB (again)
mbedtls: fix ssl_init error with mbedTLS 3.1.0+
mbedtls: remove #include <mbedtls/certs.h>
mbedtls: return CURLcode result instead of a mbedtls error code
md5: check md5_init_func return value
mime: use a define instead of the magic number 24
misc: allow curl to build with wolfssl --enable-opensslextra
misc: remove BeOS code and references
misc: remove the final watcom references
misc: remove unused data when IPv6 is not supported
mqtt: free 'sendleftovers' in disconnect
mqtt: free any send leftover data when done
multi: allow user callbacks to call curl_multi_assign
multi: grammar fix in comment
multi: remember connection_id before returning connection to pool
multi: set in_callback for multi interface callbacks
netware: remove support
next.d. remove .fi/.nf as they are handled by gen.pl
ngtcp2: adapt to changed end of headers callback proto
ngtcp2: fix declaration of ‘result’ shadows a previous local
ngtcp2: Reset dynbuf when it is fully drained
nss: handshake callback during shutdown has no conn->bundle
ntlm: remove unused feature defines
openldap: fix compiler warning when built without SSL support
openldap: implement SASL authentication
openldap: pass string length arguments to client_write()
openssl.h: avoid including OpenSSL headers here
openssl: check if sessionid flag is enabled before retrieving session
openssl: check SSL_get_ex_data to prevent potential NULL dereference
openssl: check the return value of BIO_new_mem_buf()
openssl: fix `ctx_option_t` for OpenSSL v3+
openssl: fix build for version < 1.1.0
openssl: return error if TLS 1.3 is requested when not supported
os400: Add function wrapper for system command
os400: Add link to QADRT devkit to README.OS400
os400: Default build to target current release
OS400: fix typos in rpg include file
projects: add support for Visual Studio 17 (2022)
projects: fix Visual Studio wolfSSL configurations
projects: remove support for MSVC before VC10 (Visual Studio 2010)
quiche: after leaving h3_recving state, poll again
quiche: change qlog file extension to `.sqlog`
quiche: fix upload for bigger content-length
quiche: handle stream reset
quiche: remove two leftover debug infof() outputs
quiche: verify the server cert on connect
quiche: when *recv_body() returns data, drain it before polling again
README.md: fix links
remote-header-name.d: clarify
runtests.pl: disable debuginfod
runtests.pl: properly print the test if it contains binary zeros
runtests.pl: support the nonewline attribute for the data part
runtests.pl: tolerate test directories without Makefile.inc
runtests: allow client/file to specify multiple directories
runtests: make 'rustls' a testable feature
runtests: make 'wolfssl' a testable feature
runtests: set 'oldlibssh' for libssh versions before 0.9.5
rustls: add CURLOPT_CAINFO_BLOB support
schannel: move the algIds array out of schannel.h
scripts/cijobs.pl: output data about all currect CI jobs
scripts/completion.pl: improve zsh completion
scripts/copyright.pl: support many provided file names on the cmdline
scripts/delta: check the file delta for current branch
sectransp: mark a 3DES cipher as weak
setopt: do bounds-check before strdup
setopt: fix the TLSAUTH #ifdefs for proxy-disabled builds
sha256: Fix minimum OpenSSL version
smb: pass socket for writing and reading data instead of FIRSTSOCKET
ssl: reduce allocated space for ssl backend when FTP is disabled
test3021: disable all msys2 path transformation
test374: gif data without new line at the end
tests/disable-scan.pl: properly detect multiple symbols per line
tests/unit/Makefile.am: add NSS_LIBS to build with NSS fine
tool_findfile: check ~/.config/curlrc too
tool_getparam: DNS options that need c-ares now fail without it
TPF: drop support
unit1610: init SSL library before calling SHA256 functions
url: exclude zonefrom_url when no ipv6 is available
url: given a user in the URL, find pwd for that user in netrc
url: keep trailing dot in host name
url: make Curl_disconnect return void
urlapi: handle "redirects" smarter
urldata: CONN_IS_PROXIED replaces bits.proxy when proxy can be disabled
urldata: remove conn->bits.user_passwd
version_win32: fix warning for `CURL_WINDOWS_APP`
vtls: fix socket check conditions
vtls: pass on the right SNI name
vxworks: drop support
winbuild: add parameter WITH_SSH
wolfssl: return CURLE_AGAIN for the SSL_ERROR_NONE case
wolfssl: when SSL_read() returns zero, check the error
write-out.d: Fix num_headers formatting
x509asn1: toggle off functions not needed for diff tls backends

Muchas gracias.

Saludos,

[Baxajaun]

Buenas tardes !!!

Nueva versión 7.83.0 - 27/04/2022.

Código: Seleccionar todo

Changes:

curl: add %header{name} experimental support in -w handling
curl: add %{header_json} experimental support in -w handling
curl: add --no-clobber
curl: add --remove-on-error
header api: add curl_easy_header and curl_easy_nextheader
msh3: add support for QUIC and HTTP/3 using msh3
Bugfixes:

appveyor: add Cygwin build
appveyor: only add MSYS2 to PATH where required
BearSSL: add CURLOPT_SSL_CIPHER_LIST support
BearSSL: add CURLOPT_SSL_CTX_FUNCTION support
BINDINGS.md: add Hollywood binding
CI: Do not use buildconf. Instead, just use: autoreconf -fi
CI: install Python package impacket to run SMB test 1451
configure.ac: move -pthread CFLAGS setting back where it used to be
configure: bump the copyright year range int the generated output
conncache: include the zone id in the "bundle" hashkey
connecache: remove duplicate connc->closure_handle check
connect: make Curl_getconnectinfo work with conn cache from share handle
connect: use TCP_KEEPALIVE only if TCP_KEEPIDLE is not defined
cookie.d: clarify when cookies are sent
cookies: improve errorhandling for reading cookiefile
curl/system.h: update ifdef condition for MCST-LCC compiler
curl: error out if -T and -d are used for the same URL
curl: error out when options need features not present in libcurl
curl: escape '?' in generated --libcurl code
curl: fix segmentation fault for empty output file names.
curl_easy_header: fix typos in documentation
CURLINFO_PRIMARY_PORT.3: clarify which port this is
CURLOPT*TLSAUTH.3: they only work with OpenSSL or GnuTLS
CURLOPT_DISALLOW_USERNAME_IN_URL.3: use uppercase URL
CURLOPT_PREQUOTE.3: only works for FTP file transfers, not dirs
CURLOPT_PROGRESSFUNCTION.3: fix typo in example
CURLOPT_UNRESTRICTED_AUTH.3: extended explanation
CURLSHOPT_UNLOCKFUNC.3: fix the callback prototype
docs/HYPER.md: updated to reflect current hyper build needs
docs/opts: Mention Schannel client cert type is P12
docs: Fix missing semicolon in example code
docs: lots of minor language polish
English: use American spelling consistently
fail.d: tweak the description
firefox-db2pem.sh: make the shell script safer
ftp: fix error message for partial file upload
gen.pl: change wording for mutexed options
GHA: add openssl3 jobs moved over from zuul
GHA: build hyper with nightly rustc
GHA: move bearssl jobs over from zuul
gha: move the event-based test over from Zuul
gtls: fix build for disabled TLS-SRP
http2: handle DONE called for the paused stream
http2: RST the stream if we stop it on our own will
http: avoid auth/cookie on redirects same host diff port
http: close the stream (not connection) on time condition abort
http: reject header contents with nul bytes
http: return error on colon-less HTTP headers
http: streamclose "already downloaded"
hyper: fix status_line() return code
hyper: fix tests 580 and 581 for hyper
hyper: no h2c support
infof: consistent capitalization of warning messages
ipv4/6.d: clarify that they are about using IP addresses
json.d: fix typo (overriden -> overridden)
keepalive-time.d: It takes many probes to detect brokenness
lib/warnless.[ch]: only check for WIN32 and ignore _WIN32
lib670: avoid double check result
lib: #ifdef on USE_HTTP2 better
lib: fix some misuse of curlx_convert_wchar_to_UTF8
lib: remove exclamation marks
libssh2: compare sha256 strings case sensitively
libssh2: make the md5 comparison fail if wrong length
libssh: fix build with old libssh versions
libssh: fix double close
libssh: Improve fix for missing SSH_S_ stat macros
libssh: unstick SFTP transfers when done event-based
macos: set .plist version in autoconf
mbedtls: remove 'protocols' array from backend when ALPN is not used
mbedtls: remove server_fd from backend
mk-ca-bundle.pl: Use stricter logic to process the certificates
mk-ca-bundle.vbs: delete this script in favor of mk-ca-bundle.pl
mlc_config.json: add file to ignore known troublesome URLs
mqtt: better handling of TCP disconnect mid-message
ngtcp2: add client certificate authentication for OpenSSL
ngtcp2: avoid busy loop in low CWND situation
ngtcp2: deal with sub-millisecond timeout
ngtcp2: disconnect the QUIC connection proper
ngtcp2: enlarge H3_SEND_SIZE
ngtcp2: fix HTTP/3 upload stall and avoid busy loop
ngtcp2: fix memory leak
ngtcp2: fix QUIC_IDLE_TIMEOUT
ngtcp2: make curl 1ms faster
ngtcp2: remove remote_addr which is not used in a meaningful way
ngtcp2: update to work after recent ngtcp2 updates
ngtcp2: use token when detecting :status header field
nonblock: restore setsockopt method to curlx_nonblock
openssl: check SSL_get_peer_cert_chain return value
openssl: enable CURLOPT_SSL_EC_CURVES with BoringSSL
openssl: fix CN check error code
options: remove mistaken space before paren in prototype
perl: removed a double semicolon at end of line
pop3/smtp: return *WEIRD_SERVER_REPLY when not understood
projects/README: converted to markdown
projects: Update VC version names for VS2017, VS2022
rtsp: don't let CSeq error override earlier errors
runtests: add 'bearssl' as testable feature
runtests: make 'oldlibssh' be before 0.9.4
schannel: remove dead code that will never run
scripts/copyright.pl: ignore the new mlc_config.json file
scripts: move three scripts from lib/ to scripts/
test1135: sync with recent API updates
test1459: disable for oldlibssh
test375: fix line endings on Windows
test386: Fix an incorrect test markup tag
test718: edited slightly to return better HTTP
tests/server/util.h: align WIN32 condition with util.c
tests: refactor server/socksd.c to support --unix-socket
timediff.[ch]: add curlx helper functions for timeval conversions
tls: make mbedtls and NSS check for h2, not nghttp2
tool and tests: force flush of all buffers at end of program
tool_cb_hdr: Turn the Location: into a terminal hyperlink
tool_getparam: error out on missing -K file
tool_listhelp.c: uppercase URL
tool_operate: fix a scan-build warning
tool_paramhlp: use feof(3) to identify EOF correctly when using fread(3)
transfer: redirects to other protocols or ports clear auth
unit1620: call global_init before calling Curl_open
url: check sasl additional parameters for connection reuse.
vtls: provide a unified APLN-disagree string for all backends
vtls: use a backend standard message for "ALPN: offers %s"
vtls: use a generic "ALPN, server accepted" message
winbuild/README.md: fixup dead link
winbuild: Add a Visual Studio example to the README
wolfssl: fix compiler error without IPv6

Muchas gracias.

Saludos,

[Baxajaun]

Buenas tardes !

Nueva versión 7.83.1 - 11/05/2022

Código: Seleccionar todo

Fixed in 7.83.1 - May 11 2022

Bugfixes:

altsvc: fix host name matching for trailing dots
cirrus: Update to FreeBSD 12.3
cirrus: Use pip for Python packages on FreeBSD
conn: fix typo 'connnection' -> 'connection' in two function names
cookies: make bad_domain() not consider a trailing dot fine
curl: free resource in error path
curl: guard against size_t wraparound in no-clobber code
CURLOPT_DOH_URL.3: mention the known bug
CURLOPT_HSTS*FUNCTION.3: document the involved structs as well
CURLOPT_SSH_AUTH_TYPES.3: fix the default
data/test376: set a proper name
GHA/mbedtls: enabled nghttp2 in the build
gha: build msh3
gskit: fixed bogus setsockopt calls
gskit: remove unused function set_callback
hsts: ignore trailing dots when comparing hosts names
HTTP-COOKIES: add missing CURLOPT_COOKIESESSION
http: move Curl_allow_auth_to_host()
http_proxy/hyper: handle closed connections
hyper: fix test 357
Makefile: fix "make ca-firefox"
mbedtls: bail out if rng init fails
mbedtls: fix compile when h2-enabled
mbedtls: fix some error messages
misc: use "autoreconf -fi" instead buildconf
msh3: get msh3 version from MsH3Version
msh3: print boolean value as text representation
msh3: psss remote_port to MsH3ConnectionOpen
ngtcp2: add ca-fallback support for OpenSSL backend
nss: return error if seemingly stuck in a cert loop
openssl: define HAVE_SSL_CTX_SET_EC_CURVES for libressl
post_per_transfer: remove the updated file name
sectransp: bail out if SSLSetPeerDomainName fails
tests/server: declare variable 'reqlogfile' static
tests: fix markdown formatting in README
test{898,974,976}: add 'HTTP proxy' keywords
tls: check more TLS details for connection reuse
url: check SSH config match on connection reuse
urlapi: address (harmless) UndefinedBehavior sanitizer warning
urlapi: reject percent-decoding host name into separator bytes
x509asn1: make do_pubkey handle EC public keys

Muchas gracias.

Saludos,

[Baxajaun]

Buenos días !!!

Nueva versión 7.84.0 - 27/06/2022

Código: Seleccionar todo

Fixed in 7.84.0 - June 27 2022

Changes:

curl: add --rate to set max request rate per time unit
curl: deprecate --random-file and --egd-file
curl_version_info: add CURL_VERSION_THREADSAFE
CURLINFO_CAPATH/CAINFO: get the default CA paths from libcurl
lib: make curl_global_init() threadsafe when possible
libssh2: add CURLOPT_SSH_HOSTKEYFUNCTION
opts: deprecate RANDOM_FILE and EGDSOCKET
socks: support unix sockets for socks proxy
Bugfixes:

aws-sigv4: fix potentional NULL pointer arithmetic
bindlocal: don't use a random port if port number would wrap
c-hyper: mark status line as status for Curl_client_write()
ci: avoid `cmake -Hpath`
CI: bump FreeBSD 13.0 to 13.1
ci: update github actions
cmake: add libpsl support
cmake: do not add libcurl.rc to the static libcurl library
cmake: enable curl.rc for all Windows targets
cmake: fix detecting libidn2
cmake: support adding a suffix to the OS value
configure: skip libidn2 detection when winidn is used
configure: use the SED value to invoke sed
configure: warn about rustls being experimental
content_encoding: return error on too many compression steps
cookie: address secure domain overlay
cookie: apply limits
copyright.pl: parse and use .reuse/dep5 for skips
copyright: make repository REUSE compliant
curl.1: add a few see also --tls-max
curl.1: mention exit code zero too
curl: re-enable --no-remote-name
curl_easy_pause.3: remove explanation of progress function
curl_getdate.3: document that some illegal dates pass through
Curl_parsenetrc: don't access local pwbuf outside of scope
curl_url_set.3: clarify by default using known schemes only
CURLOPT_ALTSVC.3: document the file format
CURLOPT_FILETIME.3: fix the protocols this works with
CURLOPT_HTTPHEADER.3: improve comment in example
CURLOPT_NETRC.3: document the .netrc file format
CURLOPT_PORT.3: We discourage using this option
CURLOPT_RANGE.3: remove ranged upload advice
digest: added detection of more syntax error in server headers
digest: tolerate missing "realm"
digest: unquote realm and nonce before processing
DISABLED: disable 1021 for hyper again
docs/cmdline-opts: add copyright and license identifier to each file
docs/CONTRIBUTE.md: document the 'needs-votes' concept
docs: clarify data replacement policy for MIME API
doh: remove UNITTEST macro definition
examples/crawler.c: use the curl license
examples: remove fopen.c and rtsp.c
FAQ: Clarify Windows double quote usage
fopen: add Curl_fopen() for better overwriting of files
ftp: restore protocol state after http proxy CONNECT
ftp: when failing to do a secure GSSAPI login, fail hard
GHA/hyper: enable debug in the build
gssapi: improve handling of errors from gss_display_status
gssapi: initialize gss_buffer_desc strings
headers api: remove EXPERIMENTAL tag
http2: always debug print stream id in decimal with %u
http2: reject overly many push-promise headers
http: restore header folding behavior
hyper: use 'alt-used'
krb5: return error properly on decode errors
lib: make more protocol specific struct fields #ifdefed
libcurl-security.3: add "Secrets in memory"
libcurl-security.3: document CRLF header injection
libssh: skip the fake-close when libssh does the right thing
links: update dead links to the curl-wiki
log2changes: do not indent empty lines [ci skip]
macos9: remove partial support
Makefile.am: fix portability issues
Makefile.m32: delete obsolete options, improve -On [ci skip]
Makefile.m32: delete two obsolete OpenSSL options [ci skip]
Makefile.m32: stop forcing XP target with ipv6 enabled [ci skip]
max-time.d: clarify max-time sets max transfer time
mprintf: ignore clang non-literal format string
netrc: check %USERPROFILE% as well on Windows
netrc: support quoted strings
ngtcp2: allow curl to send larger UDP datagrams
ngtcp2: correct use of ngtcp2 and nghttp3 signed integer types
ngtcp2: enable Linux GSO
ngtcp2: extend QUIC transport parameters buffer
ngtcp2: fix alert_read_func return value
ngtcp2: fix typo in preprocessor condition
ngtcp2: handle error from ngtcp2_conn_submit_crypto_data
ngtcp2: send appropriate connection close error code
ngtcp2: support boringssl crypto backend
ngtcp2: use helper funcs to simplify TLS handshake integration
ntlm: provide a fixed fake host name
projects: fix third-party SSL library build paths for Visual Studio
quic: add Curl_quic_idle
quiche: support ca-fallback
rand: stop detecting /dev/urandom in cross-builds
remote-name.d: mention --output-dir
runtests.pl: add the --repeat parameter to the --help output
runtests: fix skipping tests not done event-based
runtests: skip starting the ssh server if user name is lacking
scripts/copyright.pl: fix the exclusion to not ignore man pages
sectransp: check for a function defined when __BLOCKS__ is undefined
select: return error from "lethal" poll/select errors
server/sws: support spaces in the HTTP request path
speed-limit/time.d: mention these affect transfers in either direction
strcase: some optimisations
test 2081: add a valid reply for the second request
test 675: add missing CR so the test passes when run through Privoxy
test414: add the '--resolve' keyword
test681: verify --no-remote-name
tests 266, 116 and 1540: add a small write delay
tests/data/test1501: kill ftp server after slow LIST response
tests/getpart: fix getpartattr to work with "data" and "data2"
tests/server/sws.c: change the HTTP writedelay unit to milliseconds
test{440,441,493,977}: add "HTTP proxy" keywords
tool_getparam: fix --parallel-max maximum value constraint
tool_operate: make sure --fail-with-body works with --retry
transfer: fix potential NULL pointer dereference
transfer: maintain --path-as-is after redirects
transfer: upload performance; avoid tiny send
url: free old conn better on reuse
url: remove redundant #ifdefs in allocate_conn()
url: URL encode the path when extracted, if spaces were set
urlapi: make curl_url_set(url, CURLUPART_URL, NULL, 0) clear all parts
urlapi: support CURLU_URLENCODE for curl_url_get()
urldata: reduce size of a few struct fields
urldata: remove three unused booleans from struct UserDefined
urldata: store tcp_keepidle and tcp_keepintvl as ints
version: allow stricmp() for sorting the feature list
vtls: make curl_global_sslset thread-safe
wolfssh.h: removed
wolfssl: correct the failf() message when a handle can't be made
wolfSSL: explicitly use compatibility layer
x509asn1: mark msnprintf return as unchecked

Muchas gracias.

Saludos,

[Baxajaun]

Buenas noches !!!

Nueva versión curl 7.87.0 for Windows - 2022-12-21

Código: Seleccionar todo

Changes:

curl: add --url-query
CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
lib: add CURL_WRITEFUNC_ERROR to signal write callback error
openssl: reduce CA certificate bundle reparsing by caching
version: add a feature names array to curl_version_info_data
Bugfixes:

altsvc: fix rejection of negative port numbers
aws_sigv4: consult x-%s-content-sha256 for payload hash
aws_sigv4: fix typos in aws_sigv4.c
base64: better alloc size
base64: encode without using snprintf
base64: faster base64 decoding
build: assume assert.h is always available
build: assume errno.h is always available
c-hyper: CONNECT respones are not server responses
c-hyper: fix multi-request mechanism
CI: Change FreeBSD image from 12.3 to 12.4
CI: LGTM.com will be shut down in December 2022
ci: Remove zuul fuzzing job as it's superseded by CIFuzz
cmake: check for cross-compile, not for toolchain
CMake: fix build with `CURL_USE_GSSAPI`
cmake: really enable warnings with clang
cmake: set the soname on the shared library
cmdline-opts/gen.pl: fix the linkifier
cmdline-opts/page-footer: remove long option nroff formatting
config-mac: define HAVE_SYS_IOCTL_H
config-mac: fix typo: size_T -> size_t
config-mac: remove HAVE_SYS_SELECT_H
config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
configure: require fork for NTLM-WB
contributors.sh: actually use $CURLWWW instead of just setting it
cookie: compare cookie prefixes case insensitively
cookie: expire cookies at once when max-age is negative
cookie: open cookie jar as a binary file
curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
curl-rustls.m4: on macOS, rustls also needs the Security framework
curl.h: include <sys/select.h> on SerenityOS
curl.h: name all public function parameters
curl.h: reword comment to not use deprecated option
curl: override the numeric locale and set "C" by force
curl: timeout in the read callback
curl_endian: remove Curl_write64_le from header
curl_get_line: allow last line without newline char
curl_path: do not add '/' if homedir ends with one
curl_url_get.3: remove spurious backtick
curl_url_set.3: document CURLU_DISALLOW_USER
curl_url_set.3: fix typo
CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
CURLOPT_COOKIEFILE.3: advice => advise
CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
CURLOPT_POST.3: Explain setting to 0 changes request type
docs/curl_ws_send: Fixed typo in websocket docs
docs/EARLY-RELEASE.md: how to determine an early release
docs/examples: spell correction ('Retrieve')
docs/INSTALL.md: expand on static builds
docs/WEBSOCKET.md: explain the URL use
docs: add missing parameters for --retry flag
docs: add more "SEE ALSO" links to CA related pages
docs: explain the noproxy CIDR notation support
docs: extend the dump-header documentation
docs: remove performance note in CURLOPT_SSL_VERIFYPEER
examples/10-at-a-time: fix possible skipped final transfers
examples: update descriptions
ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
gen.pl: do not generate CURLHELP bitmask lines > 79 characters
GHA: clarify workflows permissions, set least possible privilege
GHA: NSS use clang instead of clang-9
gnutls: use common gnutls init and verify code for ngtcp2
headers: add endif comments
HTTP-COOKIES.md: mention that http://localhost is a secure context
HTTP-COOKIES.md: update the 6265bis link to draft-11
http: do not send PROXY more than once
http: fix the ::1 comparison for IPv6 localhost for cookies
http: set 'this_is_a_follow' in the Location: logic
http: use the IDN decoded name in HSTS checks
hyper: classify headers as CONNECT and 1XX
hyper: fix handling of hyper_task's when reusing the same address
idn: remove Curl_win32_ascii_to_idn
INSTALL: update operating systems and CPU archs
KNOWN_BUGS: remove eight entries
lib1560: add some basic IDN host name tests
lib: connection filters (cfilter) addition to curl:
lib: feature deprecation warnings in gcc >= 4.3
lib: fix some type mismatches and remove unneeded typecasts
lib: parse numbers with fixed known base 10
lib: remove bad set.opt_no_body assignments
lib: rewind BEFORE request instead of AFTER previous
lib: sync guard for Curl_getaddrinfo_ex() definition and use
lib: use size_t or int etc instead of longs
libcurl-errors.3: remove duplicate word
libssh2: return error when ssh_hostkeyfunc returns error
limit-rate.d: see also --rate
log2changes.pl: wrap long lines at 80 columns
Makefile.mk: address minor issues
Makefile.mk: improve a GNU Make hack
Makefile.mk: portable Makefile.m32
maketgz: set the right version in lib/libcurl.plist
mime: relax easy/mime structures binding
misc: Fix incorrect spelling
misc: remove duplicated include files
misc: typo and grammar fixes
negtelnetserver.py: have it call its close() method
netrc.d: provide mutext info
netware: remove leftover traces
noproxy: also match with adjacent comma
noproxy: guard against empty hostnames in noproxy check
noproxy: tailmatch like in 7.85.0 and earlier
nroff-scan.pl: detect double highlights
ntlm: improve comment for encrypt_des
ntlm: silence ubsan warning about copying from null target_info pointer
openssl/mbedtls: use %d for outputing port with failf (int)
openssl: prefix errors with '[lib]/[version]: '
os400: use platform socklen_t in Curl_getnameinfo_a
page-header: grammar improvement (display transfer rate)
proxy: refactor haproxy protocol handling as connection filter
README.md: remove badges and xmas-tree garnish
rtsp: fix RTSP auth
runtests: --no-debuginfod now disables DEBUGINFOD_URLS
runtests: do CRLF replacements per section only
scripts/checksrc.pl: detect duplicated include files
sendf: change Curl_read_plain to wrap Curl_recv_plain
sendf: remove unnecessary if condition
setup: do not require __MRC__ defined for Mac OS 9 builds
smb/telnet: do not free the protocol struct in *_done()
socks: fix username max size is 255 (0xFF)
spellcheck.words: remove 'github' as an accepted word
ssl-reqd.d: clarify that this is for upgrading connections only
strcase: use curl_str(n)equal for case insensitive matches
styled-output.d: this option does not work on Windows
system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
system.h: support 64-bit curl_off_t for NonStop 32-bit
test1421: fix typo
test3026: reduce runtime in legacy mingw builds
tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
tests: add authorityInfoAccess to generated certs
tests: add HTTP/3 test case, custom location for proper nghttpx
tls: backends use connection filters for IO, enabling HTTPS-proxy
tool: determine the correct fopen option for -D
tool_cfgable: free the ssl_ec_curves on exit
tool_cfgable: make socks5_gssapi_nec a boolean
tool_formparse: avoid clobbering on function params
tool_getparam: make --no-get work as the opposite of --get
tool_operate: provide better errmsg for -G with bad URL
tool_operate: when aborting, make sure there is a non-NULL error buffer
tool_paramhlp: free the proto strings on exit
url: move back the IDN conversion of proxy names
urlapi: reject more bad letters from the host name: &+()
urldata: change port num storage to int and unsigned short
vms: remove SIZEOF_SHORT
vtls: fix build without proxy support
vtls: localization of state data in filters
WEBSOCKET.md: fix broken link
Websocket: fixes for partial frames and buffer updates
websockets: fix handling of partial frames
windows: fail early with a missing windres in autotools
windows: fix linking .rc to shared curl with autotools
winidn: drop WANT_IDN_PROTOTYPES
ws: if no connection is around, return error
ws: return CURLE_NOT_BUILT_IN when websockets not built in
x509asn1: avoid freeing unallocated pointers

Muchas gracias.

Saludos,