MOD-HARBOUR

Código: Seleccionar todo

Changes in 8.9.0 - July 24 2024

curl: add --ip-tos (IP Type of Service / Traffic Class)
curl: add --mptcp
curl: add --vlan-priority
curl: add -w '%{num_retries}'
gnutls: support CA caching
mbedtls: support CURLOPT_CERTINFO
noproxy: patterns need to be comma separated
socket: support binding to interface *AND* IP
tcpkeepalive: add CURLOPT_TCP_KEEPCNT and --keepalive-cnt
urlapi: add CURLU_NO_GUESS_SCHEME
wolfssl: support CA caching
Bugfixes:

(lib)curl.rc: set debug flag also for `CURLDEBUG` and `UNITTESTS`
asyn-thread: avoid using GetAddrInfoExW with impersonation
aws-sigv4: url encode the canonical path
BINDINGS: update java link to one that exists
build: add Debug, TrackMemory, ECH to feature list
build: add more supported attributes to the IAR compiler
build: fix llvm 16 or older + Xcode 15 or newer, and gcc
build: fix llvm 17 and older + macOS SDK 14.4 and newer
build: sync warning options between autotools, cmake & compilers
build: tidy up `__builtin_available` feature checks (Apple)
build: untangle `CURLDEBUG` and `DEBUGBUILD` macros
build: use `#error` instead of invalid syntax
cd2nroff: convert two warnings to errors
cd2nroff: use an empty "##" to signal end of .IP sequence
cf-socket: improve SO_SNDBUF update for Winsock
cf-socket: optimize curlx_nonblock() and check its return error
cf-socket: remove obsolete recvbuf
cf-socket: remove two "useless" assignments
cfilters: make Curl_conn_connect always assign 'done'
cmake: add CURL_USE_GSASL option with detection + CI test
cmake: allow `ENABLE_CURLDEBUG=OFF` with `ENABLE_DEBUG=ON`
cmake: allow SOVERSION override with `CURL_LIBCURL_SOVERSION`
cmake: alpha-sort feature list
cmake: always build unit tests with the `testdeps` target
cmake: bring `curl-config.cmake` closer to `FindCURL`
cmake: create `configurehelp.pm` like autotools does
cmake: delete unused `HAVE_LIBSSH2`, `HAVE_LIBSOCKET` macros
cmake: detect `libidn2` also via `pkg-config`
cmake: enable SOVERSION for Cygwin and `CMAKE_DLL_NAME_WITH_SOVERSION`
cmake: fix `-Wredundant-decls` in unity/mingw-w64 builds
cmake: fix brotli lib order
cmake: fix building `unit1600` due to missing `ssl/openssl.h`
cmake: fix building in unity mode
cmake: fix building with both md4 and md5 in unity mode
cmake: fix builds with detected libidn2 lib but undetected header
cmake: fix feature and protocol lists for SecureTransport
cmake: fix quotes when appending multiple options (SecureTransport)
cmake: fix test 1013 with websockets enabled and no TLS
cmake: improve wolfSSL detection
cmake: show protocols, then features
cmake: stop setting SOVERSION for the static lib target
cmake: sync CA bundle/path detection with autotools
cmake: sync protocol/feature list with `curl -V` output
cmake: use `APPLE` instead of `CMAKE_SYSTEM_NAME` string
cmake: whitespace, formatting/tidy-up in comments
cmdline-docs: "added in" cleanups
cmdline-docs: fix `--proxy-ca-native` example + tidy-ups
cmdline-opts/_PROTOCOLS.md: mention WS(S)
cmdline-opts/ech.md: shorten the help text
cmdline-opts/fail.md: expand and clarify
cmdline-opts/interface.md: expand the documentation
cmdline-opts: category cleanup
cmdline-opts: expand the parallel explanations
cmdline-opts: shorten six help texts
cmdline: expand proxy option explanations
code: language cleanup in comments
configure: CA bundle/path detection fixes
configure: fix `SystemConfiguration` detection
configure: fix pkg-config library name 'libnghttp3'
configure: fix pkg-config names (zstd, ngtcp2*)
configure: limit `SystemConfiguration` test to non-c-ares, IPv6 builds
configure: remove 'deeper' checks for `AC_CHECK_FUNCS`
configure: require a QUIC library if nghttp3 is used
configure: sort feature list, lowercase protocols, use backticks
configure: use `$EGREP` in place of `grep -E`
configure: use AC_MSG_WARN for TLS/experimental warning texts
connect-to.md: expand with examples
connection: shutdown TLS (for FTP) better
cookie-jar.md: see also --junk-session-cookies
curl-config: revert to backticks to support old target envs
curl: allow etag and content-disposition for 3xx reply
curl: bsearch the --write-out variable name
curl: check for --disable case *sensitively*
curl: list categories in --help
curl: make warnings and other messages aware of terminal width
curl: output "flying saucers" with leading carriage return
curl_easy_escape: elaborate a little on encoding a URL
curl_mprintf.md: add missing comma
curl_multi_poll.md: expand the example with an custom file descriptor
curl_str[n]equal.md: tidy up text to make them stand-alone
curl_url_set.md: libcurl only parses :// URLs
curl_url_set: elaborate on scheme guessing
curldown: make 'added-in:' a mandatory header field
CURLOPT_CONNECTTIMEOUT*: clarify, document the milliseond version
CURLOPT_ECH.md: remove repeated 'if'
CURLOPT_NETRC.md: clarify what it does on Windows
CURLOPT_RESOLVE.md: mention hostname can be wildcard ('*')
CURLOPT_SSL_VERIFYHOST.md: refresh
CURLOPT_TLSAUTH_PASSWORD/USERNAME.md: language fixups
DISTROS: add a link to the list archive
DISTROS: add AlmaLinux package source link
DISTROS: add MSYS2 (native) links
docs/cmdline-opts: fix mail-auth example TLD typo
docs/cmdline-opts: remove two superfluous "Added in" mentions
docs/libcurl: polish the single-line descriptions
docs/Makefile.am: make curl-config.1 install
docs: reference non deprecated libcurl options
docs: start markdown headers with capital letter where applicable
doh-insecure.md: expand
doh: fix cleanup
doh: fix leak and zero-length HTTPS RR crash
dump-header.md: mention minus for stdout
examples/threaded-ssl: remove locking callback code
examples: add missing binaries to .gitignore
examples: delete unused includes
examples: fix compiling with MSVC
examples: suppress deprecation warnings locally
FEATURES.md: refresh
file: separate fake headers and body with a stand-alone CRLF
ftp: remove redundant null pointer check in loop condition
get.d: clarify the explanation
GHA/windows: add MSVC wolfSSL job with test
GHA/windows: ignore FTP test results for old-mingw-w64
GHA: add MSVC UWP job, expand jobs with more options
GHA: detect and warn for more English contractions
GHA: disable MQTT and WebSocket tests in Windows jobs
GHA: disable TFTP tests in Windows jobs
GHA: enable tests 1139, 1177, 1477 on Windows
GHA: improve vcpkg cache, add BoringSSL ECH and LibreSSL MSVC jobs
GHA: unify http3 workflows into one
GHA: use vcpkg to install packages for MSVC jobs
GIT-INFO.md: remove version requirements
gnutls: improve TLS shutdown
gnutls: pass in SNI name, not hostname when checking cert
help: add flags to output and ssh categories
hostip: skip error check for infallible function call
http/3: add shutdown support
http/3: resume upload on ack if we have more data to send
http: remove "struct HTTP"
http: write last header line late
idn: fix ß with AppleIDN
idn: make macidn fail before trying conversion if name too long
idn: tweak buffer use when converting with macidn
lib/v*: tidy up types and casts
lib: add a few DEBUGASSERT(data) to aid code analyzers
lib: add failure reason on bind errors
lib: fix gcc warning in certain debug builds
lib: fix thread entry point to return `DWORD` on WinCE
lib: graceful connection shutdown
lib: prefer `var = time(NULL)` over `time(&var)`
lib: tidy up types and casts
lib: xfer_setup and non-blocking shutdown
libcurl-docs: make option lists alpha-sorted
libcurl-easy.md: now *more* than 300 options
libcurl.pc: add `Requires.private`, `Requires` for static linking
libcurl.pc: add more `Requires.private`/`Requires` dependencies
libssh: remove CURLOPT_SSL_VERIFYHOST check
etc ...

Código: Seleccionar todo

Changes in 8.9.1 - July 31 2024

Bugfixes:

cmake: detect `libssh` via `pkg-config`
cmake: detect `nettle` when building with GnuTLS
cmake: drop `if(PKG_CONFIG_FOUND)` guard for `pkg_check_modules()`
configure: limit `__builtin_available` test to Darwin
connect: fix connection shutdown for event based processing
contrithanks.sh: use -F with -v to match lines as strings
curl: more defensive socket code for --ip-tos
CURLOPT_SSL_CTX_FUNCTION.md: mention CA caching
CURLSHOPT_SHARE.md: mention sessions/cookies as not thread-safe
example/multi-uv: remove the use of globals
ftpserver.pl: make POP3 LIST serve content from the test file
GHA/windows: increase timeout for vcpkg build step
lib: survive some NULL input args
macos: fix Apple SDK bug workaround for non-macOS targets
misc: cleanup after removing years from copyright
os400: build cli manual.
os400: workaround an IBM ASCII run-time library bug
RELEASE-PROCEDURE.md: remove the initial build step
runtests: fold timing details with GHA, sync `-r` tflags
tests: provide FTP directory contents in the test file
tidy-up: URL updates
TODO: thread-safe sharing
transfer: speed limiting fix for 32bit systems
vtls: avoid forward declaration in MultiSSL builds
wolfSSL: allow wolfSSL's implementation of kyber to be used
wolfssl: avoid calling get_cached_x509_store if store is uncachable
wolfssl: CA store share fix
x509asn1: unittests and fixes for gtime2str

Código: Seleccionar todo

Changes in 8.10.1 - September 18 2024

Bugfixes:

autotools: fix `--with-ca-embed` build rule
cmake: ensure `CURL_USE_OPENSSL`/`USE_OPENSSL_QUIC` are set in sync
cmake: fix MSH3 to appear on the feature list
connect: store connection info when really done
CURLMOPT_TIMERFUNCTION.md: emphasize that only a single timer should run
FTP: partly revert eeb7c1280742f5c8fa48a4340fc1e1a1a2c7075a
http2: when uploading data from stdin, fix eos forwarding
http: make max-filesize check not count ignored bodies
lib: fix AF_INET6 use outside of USE_IPV6
libcurl-docs: CURLINFO_LOCAL_* work for QUIC as well as TCP
multi: check that the multi handle is valid in curl_multi_assign
QUIC: on connect, keep on trying on draining server
request: correctly reset the eos_sent flag
runtests: accecpt 'quictls' as OpenSSL compatible
rustls: fixed minor logic bug in default cipher selection
rustls: rustls-ffi 0.14.0 update
rustls: support strong CSRNG data
setopt: remove superfluous use of ternary expressions
singleuse: drop `Curl_memrchr()` for no-HTTP builds
test537: cap the rlimit max this test runs
tests: tweak lock file handling and timers
tool_cb_wrt: use "curl_response" if no file name in URL
transfer: fix sendrecv() without interim poll
vtls: fix `Curl_ssl_conn_config_match` doc param

Código: Seleccionar todo

Changes in 8.11.0 - November 6 2024
8.11.0 8.11.0
Changes:

curl: --create-dirs works for --dump-header as well
gtls: Add P12 format support
ipfs: add options to disable
TLS: TLSv1.3 earlydata support for curl
WebSockets: make support official (non-experimental)
Bugfixes:

alt-svc: honor data->state.httpwant
altsvc: avoid using local buffer and memcpy
asyn-ares: remove typecast, fix expire
autotools: add support for 'unity' builds, enable in CI
bearssl: avoid strpcy() when generating TLS version log message
bearssl: improved session handling, test exceptions
bufq: unwrite fix
build: add `ldap` to `libcurl.pc` `Requires:`
build: add pytest targets
build: clarify CA embed is for curl tool, mark default, improve summary
build: detect and use `_setmode()` with Cygwin/MSYS, also use on Windows
build: disable warning `-Wunreachable-code-break`
build: fix clang-cl builds, add CI job
build: fix cross-compile check for poll with bionic
build: fix possible `-Wformat-overflow` in lib557
build: limit arc4random detection to no-SSL configs
build: show if CA bundle to embed was found
build: tidy up and improve versioned-symbols options
build: tidy up deprecation suppression, enable warnings for clang
certs: add missing `-CAcreateserial` option for LibreSSL
checksrc: add check for spaces around logical AND operators
checksrc: Added checks for colon operator in ternary expressions
checksrc: check for spaces around '?', '>' and '<'
ci: dump `curl_config.h` to log in all jobs
CI: run with standard mod_http2
cmake, Makefile.mk: use -isystem for headers, silence BearSSL issues
cmake/FindCares: fix version detection for c-ares 1.34.1
cmake/FindNGTCP2: use library path as hint for finding crypto module
cmake: add missed variable to comment
cmake: add native `pkg-config` detection for mbedTLS, MSH3, Quiche, Rustls, wolfSSL
cmake: allow building tests in unity mode
cmake: apply `WIN32_LEAN_AND_MEAN` to all feature checks
cmake: avoid setting `BUILD_TESTING`
cmake: clear package version after `pkg-config` detection
cmake: delete unused NEED_LBER_H, HAVE_LDAP_H
cmake: detect `HAVE_NETINET_IN6_H`, `HAVE_CLOSESOCKET_CAMEL`, `HAVE_PROTO_BSDSOCKET_H`
cmake: detect GNU GSS
cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
cmake: do not propagate unused `HAVE_GSSAPI_GSSAPI_KRB5_H` to C
cmake: document `-D` and env build options
cmake: drop obsolete items from `TODO` and `INSTALL-CMAKE`
cmake: drop redundant assignments
cmake: drop redundant zlib var, rename function (internals)
cmake: expand CURL_USE_PKGCONFIG to non-cross MINGW
cmake: fix broken dependency chain for cmdline-opts, tidy-ups
cmake: fix compile warnings for clang-cl
cmake: fix missing spacing in log message
cmake: limit `CURL_STATIC_CRT` to MSVC
cmake: make `test-ci` target skip building dependencies
cmake: mark as advanced some internal Find* variables
cmake: readd `generate-curl.1` dependency for `src` just in case
cmake: rename LDAP dependency config variables to match Find modules
cmake: replace `check_include_file_concat()` for LDAP and GSS detection
cmake: replace `CURL_*_DIR` with `{PROJECT,CMAKE_CURRENT}_*_DIR`
cmake: require quictls (or fork) when using msh3 on non-Windows
cmake: separate target for examples, optimize CI, fix fallouts
cmake: set version for `project()` and add CPack support
cmake: stop adding dependency headers to global `CMAKE_REQUIRED_INCLUDES`
cmake: sync torture test parallelism with autotools
cmake: tidy up `CURL_DISABLE_FORM_API` initialization
cmake: tidy up and shorten symbol hiding initialization
cmake: tidy up line order
cmake: tidy up picky warning initialization
cmake: tidy-ups and rebase fixups
cmake: tweaks around debug mode and hidden symbols
cmake: untangle feature detection interdependencies
cmake: use `list(APPEND)` on `CURL_INCLUDES`
cmake: use OpenSSL for LDAP detection only if available
cmake: use the `BSD` variable
config: rename the OS define to CURL_OS to reduce collision risk
configure: add GSS to `libcurl.pc` `Depends:`
configure: catch Apple in more target triplets
configure: drop duplicate feature checks for `poll()`, `if_nametoindex()`
configure: drop unused bare `socket.h` detection
configure: improve help string for some options
conncache: find bundle again in case it is removed
conncache: more efficient implementation of cpool_remove_bundle
cookie: overhaul and cleanup
curl-rustls.m4: set linker flags to allow rustls build on macos
curl.h: remove the struct pointer for CURL/CURLSH/CURLM typedefs
curl: add build options for safe/no CA bundle search (Windows)
curl: detect ECH support dynamically, not at build time
curl_addrinfo: support operating systems with only getaddrinfo(3)
curl_multi_perform.md: fix typo
curl_trc: fix build with verbose messages disabled
curl_url_set.md: document HOST handling when URL is parsed
curl_ws_recv.md: the 'meta' pointer is only returned on success
curl_ws_recv: return recv 0 and point meta to NULL on all errors
CURLMOPT_PIPELINING.md: clarify that CURLPIPE_NOTHING is not default
CURLOPT_APPEND.md: goes for SFTP as well
CURLOPT_HEADERFUNCTION.md: do not modify the passed in buffer
DISABLED: disable test 1060 with hyper
DISTROS: avoid use of "very"
Dockerfile: update Docker digest to d830561
docs/cmdline-opts: GnuTLS supports PKCS#11 URI in --cert option
docs: clarify FTP over HTTP proxy functionality somewhat
docs: fix a typo in some cipher options
ech: spelling, whitespace, say `--ech` default config
ftp: fix 0-length last write on upload from stdin
ftp: move listen handling to socket filter
GHA: optimize test prereq steps
gnutls: use session cache for QUIC
hsts: avoid the local buffer and memcpy on lookup
hsts: improve subdomain handling
hsts: support "implied LWS" properly around max-age
http2: auto reset stream on server eos
http_aws_sigv4: avoid local buffer and strcpy
INSTALL-CMAKE.md: mention focus on shared libraries
INSTALL-CMAKE: fix punctuation and a typo
INSTALL.md: fix a typo that slipped in to RISC OS
json.md: cli-option `--json` is an alias of `--data-binary`
lib, src, tests: added space around ternary expressions
lib/cw-out: initialize 'flush_all' directly
lib/src: white space edits to comply better with code style
lib: avoid assigning 'result' temporarily
lib: fix disabled-verbose-strings + enable-debug build warnings
lib: fix unity builds with BearSSL, MSH3, Quiche, OmniOS
lib: move curl_path.[ch] into vssh/
lib: msnprintf tidy-ups
lib: remove Curl_ prefix from static functions
lib: remove function pointer typecasts for hmac/sha256/md5
lib: use bool/TRUE/FALSE properly
libcurl/opts: improve phrasing for connection cap related options
libssh.c: handle EGAINS during proto-connect correctly
libssh2: delete duplicate `break`
libssh2: put the readdir buffers into struct
libssh2: use the Curl_* memory functions to avoid memdebug
libssh2: use the filename buffer when getting the homedir
libtests: generate the lib1521 atomically
mbedTLS: fix handling of TLSv1.3 sessions
mbedtls: handle session as blobs
mbedtls: remove failf() use from mbedtls_random
mk-lib1521: fix the long return code check
mprintf: do not ignore length modifiers of `%o`, `%x`, `%X`
mprintf: treat `%o` as unsigned, add tests for `%o`, `%x`, `%X`
mqtt: fix mqtt.md wording and add clearer explanation
multi.c: make stronger check for paused transfer before asserting
multi.c: warn/assert on stall only without timer
multi: avoid reading whole struct pointer from pointer
multi: convert Curl_follow to static multi_follow
multi: make curl_multi_cleanup invalidate magic latter
multi: make multi_handle_timeout use the connect timeout
multi: split multi_runsingle into sub functions
negotiate: conditional check around GSS & SSL specific code
netrc: cache the netrc file in memory
ngtcp2: do not loop on recv
ngtcp2: set max window size to 10x of initial (128KB)
openssl quic: populate x509 store before handshake
openssl: convert a memcpy to dynbuf use
openssl: extend the OpenSSL error messages
openssl: improve retries on shutdown
openssl: remove two strcpy() calls
OS400: don't delete source files when building with debug
packages/OS400/curlmain: remove the strncpy calls
processhelp.pm: improve taskkill calls (Windows)
pytest: fix run against multissl curl
pytest: improve pytest_07_42a reliability
pytest: include `buildinfo.txt` in the output
pytest: include curl version string and python platform in log
pytest: show curl features and protocols
quic: use send/recvmmsg when available
quic: use the session cache with wolfSSL as well
request: on shutdown send, proceed normally on timeout
runtests.md: suggest a value for -j for torture tests
runtests: add comment for handle64 pathsep requirement
runtests: drop unused code for old/classic-mingw support
runtests: pass single backslashes with Windows Perl
runtests: use deterministic sort for `TESTINFO` lines
schannel: fix TLS cert verification by IP SAN
schannel: ignore error on recv beyond close notify
schannel: reclassify extra-verbose schannel_recv messages
select: use poll() if existing, avoid poll() with no sockets
sendf: add condition to max-filesize check
server/mqttd: fix two memory leaks
setopt: avoid superfluous length checks before strcmp()
setopt: return error for bad input to CURLOPT_RTSP_REQUEST
setopt_cptr: make overflow check only done when needed
singleuse: make `git grep` faster, add Apple `nm` support
smb: do not redefine `getpid` on Windows
smb: replace use of strcpy() with snprintf()
socks_gssapi: switch to dynbuf from buffer with strcpy
source: avoid use of 'very' in comments
src/lib: remove redundant ternary operators
src: guard for double declaration of `curl_ca_embed` in unity builds
sws: fix unused static function with `TCP_NODELAY` undefined
...

Código: Seleccionar todo

Changes in 8.12.1 - February 13 2025

Bugfixes:

all: remove FIXME and TODO comments
asyn-thread: fix build with `CURL_DISABLE_SOCKETPAIR`
asyn-thread: fix HTTPS RR crash
asyn-thread: fix the returned bitmask from Curl_resolver_getsock
asyn-thread: survive a c-ares channel set to NULL
build: add tool_hugehelp.c into IBMi build
checksrc.pl: warn on FIXME/TODO comments
cmake/Find: set `<Modulename>_FOUND` for compatibility when found via `pkg-config`
cmake: add integration tests, run them in CI
cmake: always reference OpenSSL and ZLIB via imported targets
cmake: avoid unnecessary `-L` for implicit link dirs
cmake: drop `LDAP_DEPRECATED=1` macro, to sync with autotools
cmake: fix `HAVE_GETHOSTBYNAME_R_*` detections with `CURL_WERROR=ON`
cmake: fix to detect `HAVE_OPENSSL_SRP` in MSVC UWP builds
cmake: fix/add missing feature detections for Windows/MS-DOS
cmake: initialize variables where missing
cmake: lib order fixes for picky linkers (e.g. binutils `ld`)
cmake: normalize before matching paths with syspaths
cmake: respect `GNUTLS_CFLAGS` when detected via `pkg-config`
cmake: respect `GNUTLS_LIBRARY_DIRS` in `libcurl.pc` and `curl-config`
cmake: save a line with `CMAKE_C_IMPLICIT_LINK_DIRECTORIES` exclusion
cmake: tidy up string append and list prepend syntax
configure/cmake: check for realpath
configure/cmake: set asyn-rr a feature only if httpsrr is enabled
content_encoding: #error on too old zlib
curl_global_sslset.md: Add SSL backend names
CURLOPT_SSH_KNOWNHOSTS.md: strongly recommend using this
CURLSHOPT_SHARE.md: adjust for the new SSL session cache
docs: better explain multi-part byte range behavior
docs: use valid example domain names
generate.bat: remove curl_get_line.c from the curlx file list
header.md: mention `Authorization:` and `Cookie:` special treatment
imap: TLS upgrade fix
INTERNALS: fix c-ares, as we actually support 1.6.0 or later
ldap: drop support for legacy Novell LDAP SDK
lib: include necessary headers for `inet_ntop`/`inet_pton`
lib: silence LibreSSL collision warning on non-MSVC Windows
libssh2: comparison is always true because rc <= -1
libssh2: raise lowest supported version to 1.2.8
libssh: drop support for libssh older than 0.9.0
libssh: silence `-Wconversion` with a cast (Windows 32-bit)
netrc: return code cleanup, fix missing file error
openssl-quic: ignore ciphers for h3
openssl: fix out of scope variables in goto
pop3: TLS upgrade fix
runtests: fix the disabling of the memory tracking
runtests: quote commands to support paths with spaces
scache: add magic checks
smb: silence `-Warray-bounds` with gcc 13+
smtp: TLS upgrade fix
SPONSORS.md: clarify that we don't promise goods or services
test1516: avoid failure due to spaces in path
test2080: simplify, avoid the null byte
tests: fix test 558, 1330 for MSVC, allow TrackMemory with MSVC in cmake
tidy-up: make per-file `ARRAYSIZE` macros global as `CURL_ARRAYSIZE`
tool_cfgable: sort struct fields by size, use bitfields for booleans
tool_getparam: add "TLS required" flag for each such option
tool_progress: fix percent output of large parallel transfers
tool_ssls: switch to tool-specific get_line function
verbose.md: mention how carriage-return might occur in headers
vquic: make the "disable GSO" use infof, not failf
vtls: fix multissl-init
vtsl: eliminate 'data->state.ssl_scache'
wakeup_write: make sure the eventfd write sends eight bytes
wolfssl: silence compiler warning (MSVC 2019), simplify existing