1
0
mirror of https://github.com/moparisthebest/curl synced 2024-11-16 06:25:03 -05:00
curl/docs
Daniel Stenberg da82f59b69 CURLOPT_SSL_VERIFYHOST: stop supporting the 1 value
After a research team wrote a document[1] that found several live source
codes out there in the wild that misused the CURLOPT_SSL_VERIFYHOST
option thinking it was a boolean, this change now bans 1 as a value and
will make libcurl return error for it.

1 was never a sensible value to use in production but was introduced
back in the days to help debugging. It was always documented clearly
this way.

1 was never supported by all SSL backends in libcurl, so this cleanup
makes the treatment of it unified.

The report's list of mistakes for this option were all PHP code and
while there's a binding layer between libcurl and PHP, the PHP team has
decided that they have an as thin layer as possible on top of libcurl so
they will not alter or specifically filter a 'TRUE' value for this
particular option. I sympathize with that position.

[1] = http://daniel.haxx.se/blog/2012/10/25/libcurl-claimed-to-be-dangerous/
2012-11-06 19:46:53 +01:00
..
examples httpcustomheader.c: free the headers after use 2012-11-06 11:51:19 +01:00
libcurl CURLOPT_SSL_VERIFYHOST: stop supporting the 1 value 2012-11-06 19:46:53 +01:00
.gitignore IGNORE: files generated by maketgz 2010-04-14 17:34:57 +02:00
BINDINGS a binding for Falcon 2009-11-29 19:12:00 +00:00
BUGS BUGS: fix the bug tracker URL 2012-11-01 21:36:28 +01:00
CONTRIBUTE Fixed some typos in documentation 2012-07-20 21:02:58 +02:00
curl-config.1 curl-config.1: fix curl-config usage in example 2012-05-20 15:38:54 +02:00
curl.1 curl.1: list the -w variables sorted alphabetically 2012-08-28 10:43:12 +02:00
DISTRO-DILEMMA removed trailing whitespace 2010-02-14 19:40:18 +00:00
FAQ FAQ: remove the date from the topmost line 2012-09-28 15:53:46 +02:00
FEATURES Fixed some typos in documentation 2012-07-20 21:02:58 +02:00
HISTORY HISTORY: mention the gopher story 2010-08-28 22:51:22 +02:00
HTTP-COOKIES HTTP-COOKIES: clarified and modified layout 2012-07-03 11:10:41 +02:00
index.html added doctype tag to get HTML compliant 2004-04-27 07:05:22 +00:00
INSTALL Updated build docs w.r.t. Android and binary sizes 2012-09-03 22:41:03 +02:00
INSTALL.cmake INSTALL.cmake: clarify some flaws/limits in the cmake build 2012-08-23 10:53:08 +02:00
INSTALL.devcpp Fixed some typos in documentation 2012-07-20 21:02:58 +02:00
INTERNALS Fixed some typos in documentation 2012-07-20 21:02:58 +02:00
KNOWN_BUGS socks.c: Added support for IPv6 connections through SOCKSv5 proxy 2012-09-14 00:14:38 +02:00
LICENSE-MIXING Mention axTLS in some more documentation 2011-01-21 14:27:10 -08:00
MAIL-ETIQUETTE Fixed some typos in documentation 2012-07-20 21:02:58 +02:00
Makefile.am HTTP-COOKIES: added cookie documentation 2012-07-03 09:03:08 +02:00
MANUAL MANUAL: clarified user+password in HTTP URLs 2012-09-09 23:08:59 +02:00
mk-ca-bundle.1 add a manual page for mk-ca-bundle 2012-04-27 20:25:35 +02:00
README.cmake removed execute file permission 2011-12-30 03:53:25 +01:00
README.netware removed trailing whitespace 2010-02-14 19:40:18 +00:00
README.win32 removed trailing whitespace 2010-02-14 19:40:18 +00:00
RESOURCES Implement SMTP authentication 2010-04-19 11:16:30 +02:00
SSLCERTS removed trailing whitespace 2010-02-14 19:40:18 +00:00
THANKS THANKS: 14 new contributors from 7.28.0 2012-10-10 22:33:33 +02:00
TheArtOfHttpScripting TheArtOfHttpScripting: extended 2011-01-19 13:08:03 +01:00
TODO TODO: support DANE, we already support gnutls without gcrypt 2012-08-07 14:48:34 +02:00
VERSIONS VERSIONS: clarify our versioning concept 2011-08-08 09:25:59 +02:00

                                  _   _ ____  _
                              ___| | | |  _ \| |
                             / __| | | | |_) | |
                            | (__| |_| |  _ <| |___
                             \___|\___/|_| \_\_____|

README.win32

  Read the README file first.

  Curl has been compiled, built and run on all sorts of Windows and win32
  systems. While not being the main develop target, a fair share of curl users
  are win32-based.

  The unix-style man pages are tricky to read on windows, so therefore are all
  those pages converted to HTML as well as pdf, and included in the release
  archives.

  The main curl.1 man page is also "built-in" in the command line tool. Use a
  command line similar to this in order to extract a separate text file:

        curl -M >manual.txt

  Read the INSTALL file for instructions how to compile curl self.