Dan McNulty 8996300211 schannel: add support for CURLOPT_CAINFO ... - Move verify_certificate functionality in schannel.c into a new file called schannel_verify.c. Additionally, some structure defintions from schannel.c have been moved to schannel.h to allow them to be used in schannel_verify.c. - Make verify_certificate functionality for Schannel available on all versions of Windows instead of just Windows CE. verify_certificate will be invoked on Windows CE or when the user specifies CURLOPT_CAINFO and CURLOPT_SSL_VERIFYPEER. - In verify_certificate, create a custom certificate chain engine that exclusively trusts the certificate store backed by the CURLOPT_CAINFO file. - doc updates of --cacert/CAINFO support for schannel - Use CERT_NAME_SEARCH_ALL_NAMES_FLAG when invoking CertGetNameString when available. This implements a TODO in schannel.c to improve handling of multiple SANs in a certificate. In particular, all SANs will now be searched instead of just the first name. - Update tool_operate.c to not search for the curl-ca-bundle.crt file when using Schannel to maintain backward compatibility. Previously, any curl-ca-bundle.crt file found in that search would have been ignored by Schannel. But, with CAINFO support, the file found by that search would have been used as the certificate store and could cause issues for any users that have curl-ca-bundle.crt in the search path. - Update url.c to not set the build time CURL_CA_BUNDLE if the selected SSL backend is Schannel. We allow setting CA location for schannel only when explicitly specified by the user via CURLOPT_CAINFO / --cacert. - Add new test cases 3000 and 3001. These test cases check that the first and last SAN, respectively, matches the connection hostname. New test certificates have been added for these cases. For 3000, the certificate prefix is Server-localhost-firstSAN and for 3001, the certificate prefix is Server-localhost-secondSAN. - Remove TODO 15.2 (Add support for custom server certificate validation), this commit addresses it. Closes https://github.com/curl/curl/pull/1325		2018-04-18 03:59:47 -04:00
..
abstract-unix-socket.d	abstract-unix-socket.d: shorten the help text to fit within 79 cols	2017-05-03 14:22:58 +02:00
anyauth.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
append.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
basic.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
cacert.d	schannel: add support for CURLOPT_CAINFO	2018-04-18 03:59:47 -04:00
capath.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
cert-status.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
cert-type.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
cert.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
ciphers.d	docs/ciphers: link to our own new page about ciphers	2016-12-25 11:01:17 +01:00
CMakeLists.txt	cmake: fix build with cmake 2.8.12.2	2017-03-30 23:43:35 +02:00
compressed-ssh.d	compressed-ssh.d: "Added: 7.56.0"	2017-08-17 09:49:33 +02:00
compressed.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
config.d	docs/cmdline-opts/config.d: edit for language	2017-05-16 08:49:11 +02:00
connect-timeout.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
connect-to.d	connect-to.d: better language	2017-08-12 17:36:12 +02:00
continue-at.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
cookie-jar.d	cmdline-opts: support generating the --help output	2016-11-15 09:08:50 +01:00
cookie.d	cookie.d: mention that "-" as filename means stdin	2018-03-20 23:25:12 +01:00
create-dirs.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
crlf.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
crlfile.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
data-ascii.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
data-binary.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
data-raw.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
data-urlencode.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
data.d	cmdline-opts: formatting fixes	2016-12-17 23:56:50 +01:00
delegation.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
digest.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
disable-eprt.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
disable-epsv.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
disable.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
dns-interface.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
dns-ipv4-addr.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
dns-ipv6-addr.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
dns-servers.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
dump-header.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
egd-file.d	cmdline-opts: added some missing info	2016-12-16 22:01:01 +01:00
engine.d	cmdline-opts: formatting fixes	2016-12-17 23:56:50 +01:00
expect100-timeout.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
fail-early.d	fail-early.d: fix typos	2017-03-31 22:36:46 -04:00
fail.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
false-start.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
form-string.d	mime: use in curl cli tool instead of form API.	2017-09-02 18:17:33 +01:00
form.d	form.d: rephrased somewhat, added two example command lines	2018-02-22 08:28:05 +01:00
ftp-account.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
ftp-alternative-to-user.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
ftp-create-dirs.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
ftp-method.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
ftp-pasv.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
ftp-port.d	docs: fix typos	2018-04-17 15:32:51 -04:00
ftp-pret.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
ftp-skip-pasv-ip.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
ftp-ssl-ccc-mode.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
ftp-ssl-ccc.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
ftp-ssl-control.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
gen.pl	scripts: allow all perl scripts to be run directly	2018-01-07 15:42:11 -05:00
get.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
globoff.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
happy-eyeballs-timeout-ms.d	url: Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT	2018-02-20 17:51:43 -05:00
haproxy-protocol.d	CURLOPT_HAPROXYPROTOCOL: support the HAProxy PROXY protocol	2018-03-17 11:50:06 +01:00
head.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
header.d	curl: allow --header and --proxy-header read from file	2017-06-15 11:09:40 +02:00
help.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
hostpubmd5.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
http1.0.d	cmdline-opts: support generating the --help output	2016-11-15 09:08:50 +01:00
http1.1.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
http2-prior-knowledge.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
http2.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
ignore-content-length.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
include.d	include.d: clarify --include is only for response headers	2017-07-30 02:29:36 -04:00
insecure.d	insecure.d: clarify that this is for server connections	2017-03-08 09:17:32 +01:00
interface.d	docs: fix typos	2018-04-17 15:32:51 -04:00
ipv4.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
ipv6.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
junk-session-cookies.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
keepalive-time.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
key-type.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
key.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
krb.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
libcurl.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
limit-rate.d	tool_getparam: Support size modifiers for --max-filesize	2017-12-26 02:01:48 -05:00
list-only.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
local-port.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
location-trusted.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
location.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
login-options.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
mail-auth.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
mail-from.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
mail-rcpt.d	mail-rcpt.d: fix short-text description	2018-01-07 01:04:36 -05:00
Makefile.am	curl.1: depend the build on the Makefile.inc too	2017-05-08 15:11:11 +02:00
Makefile.inc	url: Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT	2018-02-20 17:51:43 -05:00
MANPAGE.md	MANPAGE: clarify the dash situation in meta data	2017-03-08 09:20:36 +01:00
manual.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
max-filesize.d	tool_getparam: Support size modifiers for --max-filesize	2017-12-26 02:01:48 -05:00
max-redirs.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
max-time.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
metalink.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
negotiate.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
netrc-file.d	cmdline-opts: fixed a few typos	2017-03-11 11:44:18 +01:00
netrc-optional.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
netrc.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
next.d	next.d: --trace and --trace-ascii are also global	2017-01-13 15:34:01 +01:00
no-alpn.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
no-buffer.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
no-keepalive.d	no-keepalive.d: fix typo	2017-03-03 02:37:43 -05:00
no-npn.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
no-sessionid.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
noproxy.d	bump: next release will be 7.53.0	2017-01-16 08:34:15 +01:00
ntlm-wb.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
ntlm.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
oauth2-bearer.d	oauth2-bearer.d: mention the <token> argument	2017-05-17 10:55:12 +02:00
output.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
page-footer	docs: fix typos	2018-04-17 15:32:51 -04:00
page-header	docs/page-header: mention how to disable the progress meter	2017-01-07 20:22:20 +01:00
pass.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
path-as-is.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
pinnedpubkey.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
post301.d	cmdline-opts/post30X.d: fix the RFC references	2016-12-18 00:42:36 +01:00
post302.d	cmdline-opts/post30X.d: fix the RFC references	2016-12-18 00:42:36 +01:00
post303.d	cmdline-opts/post30X.d: fix the RFC references	2016-12-18 00:42:36 +01:00
preproxy.d	cmdline-opts/socks*: Mention --preproxy in --socks* opts	2017-02-09 18:26:16 -05:00
progress-bar.d	spelling fixes	2018-02-23 23:29:01 +00:00
proto-default.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
proto-redir.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
proto.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
proxy1.0.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
proxy-anyauth.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
proxy-basic.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
proxy-cacert.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
proxy-capath.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
proxy-cert-type.d	docs: fix typos	2018-04-17 15:32:51 -04:00
proxy-cert.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
proxy-ciphers.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
proxy-crlfile.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
proxy-digest.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
proxy-header.d	curl: allow --header and --proxy-header read from file	2017-06-15 11:09:40 +02:00
proxy-insecure.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
proxy-key-type.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
proxy-key.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
proxy-negotiate.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
proxy-ntlm.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
proxy-pass.d	cmdline-opts: formatting fixes	2016-12-17 23:56:50 +01:00
proxy-pinnedpubkey.d	curl: add --proxy-pinnedpubkey	2018-01-30 08:00:31 +01:00
proxy-service-name.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
proxy-ssl-allow-beast.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
proxy-tlsauthtype.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
proxy-tlspassword.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
proxy-tlsuser.d	cmdline-opts/proxy-tlsuser.d: remove trailing .d	2016-12-17 18:13:47 +01:00
proxy-tlsv1.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
proxy-user.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
proxy.d	docs: Add more HTTPS proxy documentation	2017-02-06 03:13:42 -05:00
proxytunnel.d	docs: fix typos	2018-04-17 15:32:51 -04:00
pubkey.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
quote.d	cmdline-opts: added some missing info	2016-12-16 22:01:01 +01:00
random-file.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
range.d	docs: fix typos	2018-04-17 15:32:51 -04:00
raw.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
referer.d	cmdline-opts: fixed a few typos	2017-03-11 11:44:18 +01:00
remote-header-name.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
remote-name-all.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
remote-name.d	cmdline-docs: more conversion	2016-11-16 15:15:57 +01:00
remote-time.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
request-target.d	request-target.d: mention added in 7.55.0	2017-08-22 14:48:33 +02:00
request.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
resolve.d	CURLOPT_RESOLVE: Add support for multiple IP addresses per entry	2018-02-20 04:24:28 -05:00
retry-connrefused.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
retry-delay.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
retry-max-time.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
retry.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
sasl-ir.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
service-name.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
show-error.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
silent.d	docs/silent: mention --show-error in --silent description	2017-01-07 20:23:31 +01:00
socks4.d	cmdline-opts/socks*: Mention --preproxy in --socks* opts	2017-02-09 18:26:16 -05:00
socks4a.d	cmdline-opts/socks*: Mention --preproxy in --socks* opts	2017-02-09 18:26:16 -05:00
socks5-basic.d	curl --socks5-{basic,gssapi}: control socks5 auth	2017-06-28 08:03:00 +02:00
socks5-gssapi-nec.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
socks5-gssapi-service.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
socks5-gssapi.d	curl --socks5-{basic,gssapi}: control socks5 auth	2017-06-28 08:03:00 +02:00
socks5-hostname.d	cmdline-opts/socks*: Mention --preproxy in --socks* opts	2017-02-09 18:26:16 -05:00
socks5.d	cmdline-opts/socks*: Mention --preproxy in --socks* opts	2017-02-09 18:26:16 -05:00
speed-limit.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
speed-time.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
ssl-allow-beast.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
ssl-no-revoke.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
ssl-reqd.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
ssl.d	cmdline-opts: more command line options documented	2016-11-28 00:50:25 +01:00
sslv2.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
sslv3.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
stderr.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
suppress-connect-headers.d	url: add option CURLOPT_SUPPRESS_CONNECT_HEADERS	2017-03-12 01:32:33 -05:00
tcp-fastopen.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
tcp-nodelay.d	cmdline-opts: fixed a few typos	2017-03-11 11:44:18 +01:00
telnet-option.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
tftp-blksize.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
tftp-no-options.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
time-cond.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
tls-max.d	vtls: add options to specify range of enabled TLS versions	2017-03-08 15:54:07 +01:00
tlsauthtype.d	tlsauthtype.d: works only if libcurl is built with TLS-SRP support	2018-02-12 18:09:54 +01:00
tlspassword.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
tlsuser.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
tlsv1.0.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
tlsv1.1.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
tlsv1.2.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
tlsv1.3.d	darwinssl: add support for TLSv1.3	2017-10-05 00:51:38 -04:00
tlsv1.d	cmdline-opts/tlsv1.d: rephrased	2016-12-19 08:19:44 +01:00
tr-encoding.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
trace-ascii.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
trace-time.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
trace.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
unix-socket.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
upload-file.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
url.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
use-ascii.d	cmdline-opts/gen.pl: Open input files in CRLF mode	2017-01-23 13:57:54 +01:00
user-agent.d	user-agent.d:: mention --proxy-header as well	2018-03-15 23:52:43 +01:00
user.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
verbose.d	cmdline-docs: more options converted over	2016-11-16 10:42:51 +01:00
version.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00
write-out.d	redirect: store the "would redirect to" URL when max redirs is reached	2017-05-23 23:27:58 +02:00
xattr.d	cmdline-docs: more options converted and fixed	2016-11-28 09:53:15 +01:00