moparisthebest/curl
1
0
Fork 0
mirror of https://github.com/moparisthebest/curl synced 2024-12-22 16:18:48 -05:00
Code Issues Releases Wiki Activity
15feb8217f
curl/RELEASE-NOTES

73 lines
2.6 KiB
Plaintext
Raw Normal View History

start over on 7.17.1
2007-09-13 17:05:56 -04:00
Curl and libcurl 7.17.1
working draft of the upcoming 7.10.8 release notes
2003-09-22 17:38:52 -04:00
start over on 7.17.1
2007-09-13 17:05:56 -04:00
Public curl release number: 102
Releases counted from the very beginning: 128
Based on a patch brought by Johnny Luong, libcurl now offers CURLOPT_SSH_HOST_PUBLIC_KEY_MD5 and the curl tool --hostpubmd5. They both make the SCP or SFTP connection verify the remote host's md5 checksum of the public key before doing a connect, to reduce the risk of a man-in-the-middle attack.
2007-10-03 04:00:42 -04:00
Available command line options: 121
Alexey Pesternikov introduced CURLOPT_OPENSOCKETFUNCTION and CURLOPT_OPENSOCKETDATA to set a callback that allows an application to replace the socket() call used by libcurl. It basically allows the app to change address, protocol or whatever of the socket. (I also did some whitespace indent/cleanups in lib/url.c which kind of hides some of these changes, sorry for mixing those in.)
2007-10-03 04:45:00 -04:00
Available curl_easy_setopt() options: 147
Gavrie Philipson's change, updated numbers
2007-07-06 17:56:42 -04:00
Number of public functions in libcurl: 55
http://curl.cheap.co.il is a new mirror in Tel-Aviv, Israel
2007-09-06 17:38:50 -04:00
Amount of public web site mirrors: 42
A brand new binding for SP-Forth was written
2007-09-09 18:22:45 -04:00
Number of known libcurl bindings: 36
recount contributors after the 7.17.0 release
2007-10-03 04:54:35 -04:00
Number of contributors: 588
David Hull made the file: URL parser also accept the somewhat sloppy file syntax: file:/path. I added test case 203 to verify this.
2003-10-29 04:53:21 -05:00
Armel Asselin made the CURLOPT_PREQUOTE option work fine even when CURLOPT_NOBODY is set true. PREQUOTE is then run roughly at the same place in the command sequence as it would have run if there would've been a transfer.
2006-08-08 18:56:46 -04:00
This release includes the following changes:
Armel Asselin separated CA cert verification problems from problems with reading the (local) CA cert file to let users easier pinpoint the actual problem. CURLE_SSL_CACERT_BADFILE (77) is the new libcurl error code.
2006-10-21 07:32:05 -04:00
Michal Marek made libcurl automatically append ";type=<a|i>" when using HTTP proxies for FTP urls.
2007-09-15 17:14:12 -04:00
o automatically append ";type=<a|i>" when using HTTP proxies for FTP urls
Rob Crittenden provided an NSS update with the following highlights: o It looks for the NSS database first in the environment variable SSL_DIR, then in /etc/pki/nssdb, then it initializes with no database if neither of those exist. o If the NSS PKCS#11 libnspsem.so driver is available then PEM files may be loaded, including the ca-bundle. If it is not available then only certificates already in the NSS database are used. o Tries to detect whether a file or nickname is being passed in so the right thing is done o Added a bit of code to make the output more like the OpenSSL module, including displaying the certificate information when connecting in verbose mode o Improved handling of certificate errors (expired, untrusted, etc) The libnsspem.so PKCS#11 module is currently only available in Fedora 8/rawhide. Work will be done soon to upstream it. The NSS module will work with or without it, all that changes is the source of the certificates and keys.
2007-09-18 18:21:54 -04:00
o improved NSS support
Mark Davies fixed Negotiate authentication over proxy, and also introduced the --proxy-negotiate command line option to allow a user to explicitly select it.
2007-09-21 07:05:31 -04:00
o added --proxy-negotiate
Philip Langdale provided the new CURLOPT_POST301 option for curl_easy_setopt() that alters how libcurl functions when following redirects. It makes libcurl obey the RFC2616 when a 301 response is received after a non-GET request is made. Default libcurl behaviour is to change method to GET in the subsequent request (like it does for response code 302 - because that's what many/most browsers do), but with this CURLOPT_POST301 option enabled it will do what the spec says and do the next request using the same method again. I.e keep POST after 301. The curl tool got this option as --post301 Test case 1011 and 1012 were added to verify.
2007-09-26 08:44:59 -04:00
o added --post301 and CURLOPT_POST301
Adapted the c-ares code to the API change c-ares 1.5.0 brings in the notifier callback(s).
2007-09-28 17:48:28 -04:00
o builds with c-ares 1.5.0
Based on a patch brought by Johnny Luong, libcurl now offers CURLOPT_SSH_HOST_PUBLIC_KEY_MD5 and the curl tool --hostpubmd5. They both make the SCP or SFTP connection verify the remote host's md5 checksum of the public key before doing a connect, to reduce the risk of a man-in-the-middle attack.
2007-10-03 04:00:42 -04:00
o added CURLOPT_SSH_HOST_PUBLIC_KEY_MD5 and --hostpubmd5
Alexey Pesternikov introduced CURLOPT_OPENSOCKETFUNCTION and CURLOPT_OPENSOCKETDATA to set a callback that allows an application to replace the socket() call used by libcurl. It basically allows the app to change address, protocol or whatever of the socket. (I also did some whitespace indent/cleanups in lib/url.c which kind of hides some of these changes, sorry for mixing those in.)
2007-10-03 04:45:00 -04:00
o renamed CURLE_SSL_PEER_CERTIFICATE to CURLE_PEER_FAILED_VERIFICATION
o added CURLOPT_OPENSOCKETFUNCTION and CURLOPT_OPENSOCKETDATA
Michael Wallner made the CULROPT_COOKIELIST option support a new magic string: "FLUSH". Using that will cause libcurl to flush its cookies to the CURLOPT_COOKIEJAR file.
2007-10-05 10:37:33 -04:00
o CULROPT_COOKIELIST supports "FLUSH"
mention Patrick Monnerat's recent work on the postfields problems
2007-10-22 05:28:42 -04:00
o added CURLOPT_COPYPOSTFIELDS
Added the --static-libs option to curl-config
2007-10-25 18:30:35 -04:00
o added --static-libs to curl-config
Armel Asselin made the CURLOPT_PREQUOTE option work fine even when CURLOPT_NOBODY is set true. PREQUOTE is then run roughly at the same place in the command sequence as it would have run if there would've been a transfer.
2006-08-08 18:56:46 -04:00
HTTP Digest auth fix on a re-used connection
2007-07-22 06:17:52 -04:00
This release includes the following bugfixes:
Added LDAPS, SCP and SFTP to curl-config --protocols. Removed and fixed some AC_SUBST configure entries.
2007-09-13 21:56:08 -04:00
o curl-config --protocols now properly reports LDAPS, SCP and SFTP
Gnter's ldap fixes
2007-09-17 16:43:05 -04:00
o ldapv3 support on Windows
o ldap builds with the MSVC makefiles
Immanuel pointed out that public key SSH auth failed if no public/private key was specified and there was no HOME environment variable, and then it didn't continue to try the other auth methods. Now it will instead try to get the files id_dsa.pub and id_dsa from the current directory if none of the two conditions were met.
2007-09-18 17:14:28 -04:00
o no HOME and no key given caused SSH auth failure
Mark Davies fixed Negotiate authentication over proxy, and also introduced the --proxy-negotiate command line option to allow a user to explicitly select it.
2007-09-21 07:05:31 -04:00
o Negotiate authentication over proxy
Immanuel Gregoire fixed KNOWN_BUGS #44: --ftp-method nocwd did not handle URLs ending with a slash properly (it should list the contents of that directory). Test case 351 brought back and also test 1010 was added.
2007-09-24 17:47:35 -04:00
o --ftp-method nocwd on directory listings
Max Katsev reported that when doing a libcurl FTP request with CURLOPT_NOBODY enabled but not CURLOPT_HEADER, libcurl wouldn't do TYPE before it does SIZE which makes it less useful. I walked over the code and made it do this properly, and added test case 542 to verify it.
2007-09-26 08:00:01 -04:00
o FTP, CURLOPT_NOBODY enabled and CURLOPT_HEADER disabled now does TYPE
before SIZE
Alex Fishman reported a curl_easy_escape() problem that was made the function do wrong on all input bytes that are >= 0x80 (decimal 128) due to a signed / unsigned mistake in the code. I fixed it and added test case 543 to verify.
2007-09-30 18:40:24 -04:00
o re-used handle transfers with SFTP
o curl_easy_escape() problem with byte values >= 128
known bug #46: chunked-encoded CONNECT responses from a http proxy now works. Added test case 1008 to verify. Note that #47 is still there.
2007-10-02 06:21:36 -04:00
o handles chunked-encoded CONNECT responses
Fix issue related with the use of ares_timeout() result.
2007-10-03 09:19:34 -04:00
o misuse of ares_timeout() result
Kim Rinnewitz reported that --local-port didn't work with TFTP transfers. This happened because the tftp code always uncondionally did a bind() without caring if one already had been done and then it failed. I wrote a test case (1009) to verify this, but it is a bit error-prone since it will have to pick a fixed local port number and since the tests are run on so many different hosts in different situations I add it in disabled state.
2007-10-04 06:01:41 -04:00
o --local-port on TFTP transfers
mention Patrick Monnerat's recent work on the postfields problems
2007-10-22 05:28:42 -04:00
o CURLOPT_POSTFIELDS could fail to send binary data
Bug report #1815530 (http://curl.haxx.se/bug/view.cgi?id=1815530) points out that specifying a proxy with a trailing slash didn't work (unless it also contained a port number).
2007-10-22 05:25:45 -04:00
o specifying a proxy with a trailing slash didn't work (unless it also
contained a port number)
Fixed a TFTP memory leak. Enabled test 2003 to verify this.
2007-10-25 03:47:38 -04:00
o redirect from HTTP to FTP or TFTP memory problems and leaks
Bug report #1812190 (http://curl.haxx.se/bug/view.cgi?id=1812190) points out that libcurl tried to re-use connections a bit too much when using non-SSL protocols tunneled over a HTTP proxy.
2007-10-23 17:00:51 -04:00
o re-used connections a bit too much when using non-SSL protocols tunneled
over a HTTP proxy
Vladimir Lazarenko pointed out that we should do some 'mt' magic when building with VC8 to get the "manifest" embedded to make fine stand-alone binaries. The maketgz and the src/Makefile.vc6 files were adjusted accordingly.
2007-10-24 05:28:36 -04:00
o embed the manifest in VC8 builds
Michal Marek fixed the test script to be able to use valgrind even when the lib is built shared with libtool.
2007-10-25 10:30:51 -04:00
o use valgrind in the tests even when the lib is built shared with libtool
oops
2007-10-25 17:14:15 -04:00
o libcurl built with NSS can now ignore the peer verification even when the
Made libcurl built with NSS possible to ignore the peer verification. Previously it would fail if the ca bundle wasn't present, even if the code ignored the verification results.
2007-10-25 17:08:55 -04:00
ca cert bundle is absent
HTTP Digest auth fix on a re-used connection
2007-07-22 06:17:52 -04:00
This release includes the following known bugs:
o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html)
Other curl-related news:
start over on 7.17.1
2007-09-13 17:05:56 -04:00
o
HTTP Digest auth fix on a re-used connection
2007-07-22 06:17:52 -04:00
New curl mirrors:
start over on 7.17.1
2007-09-13 17:05:56 -04:00
o
HTTP Digest auth fix on a re-used connection
2007-07-22 06:17:52 -04:00
This release would not have looked like this without help, code, reports and
advice from friends like these:
Mark Davies fixed Negotiate authentication over proxy, and also introduced the --proxy-negotiate command line option to allow a user to explicitly select it.
2007-09-21 07:05:31 -04:00
Dan Fandrich, Michal Marek, G<>nter Knauf, Rob Crittenden, Immanuel Gregoire,
Alexey Pesternikov introduced CURLOPT_OPENSOCKETFUNCTION and CURLOPT_OPENSOCKETDATA to set a callback that allows an application to replace the socket() call used by libcurl. It basically allows the app to change address, protocol or whatever of the socket. (I also did some whitespace indent/cleanups in lib/url.c which kind of hides some of these changes, sorry for mixing those in.)
2007-10-03 04:45:00 -04:00
Mark Davies, Max Katsev, Philip Langdale, Alex Fishman, Johnny Luong,
mention Patrick Monnerat's recent work on the postfields problems
2007-10-22 05:28:42 -04:00
Alexey Pesternikov, Yang Tse, Kim Rinnewitz, Michael Wallner,
Vladimir Lazarenko pointed out that we should do some 'mt' magic when building with VC8 to get the "manifest" embedded to make fine stand-alone binaries. The maketgz and the src/Makefile.vc6 files were adjusted accordingly.
2007-10-24 05:28:36 -04:00
Patrick Monnerat, Vladimir Lazarenko
start working on 7.16.5...
2007-07-10 18:07:33 -04:00
working draft of the upcoming 7.10.8 release notes
2003-09-22 17:38:52 -04:00
Thanks! (and sorry if I forgot to mention someone)
Reference in New Issue Copy Permalink