1
0
mirror of https://github.com/moparisthebest/curl synced 2024-11-05 09:05:04 -05:00
curl/lib/vtls
Jay Satiro 9c49824902 schannel_verify: Fix concurrent openings of CA file
- Open the CA file using FILE_SHARE_READ mode so that others can read
  from it as well.

Prior to this change our schannel code opened the CA file without
sharing which meant concurrent openings (eg an attempt from another
thread or process) would fail during the time it was open without
sharing, which in curl's case would cause error:
"schannel: failed to open CA file".

Bug: https://curl.haxx.se/mail/lib-2019-10/0104.html
Reported-by: Richard Alcock
2019-11-01 18:02:59 -04:00
..
gskit.c gskit: use the generic Curl_socketpair 2019-10-10 11:04:38 +02:00
gskit.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
gtls.c gtls: make gnutls_bye() not wait for response on shutdown 2019-10-31 09:10:50 +01:00
gtls.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
mbedtls.c vtls: fix narrowing conversion warnings 2019-09-23 09:44:35 +02:00
mbedtls.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
mesalink.c vtls: fix narrowing conversion warnings 2019-09-23 09:44:35 +02:00
mesalink.h vtls: add a MesaLink vtls backend 2018-09-13 08:26:37 +02:00
nss.c vtls: fix narrowing conversion warnings 2019-09-23 09:44:35 +02:00
nssg.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
openssl.c openssl: use strerror on SSL_ERROR_SYSCALL 2019-09-26 13:55:18 +02:00
openssl.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
polarssl_threadlock.c lib: reduce variable scopes 2019-05-20 08:51:11 +02:00
polarssl_threadlock.h polarssl_threadlock: remove conditionally unused code 2019-04-11 21:08:42 +02:00
polarssl.c vtls: fix narrowing conversion warnings 2019-09-23 09:44:35 +02:00
polarssl.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
schannel_verify.c schannel_verify: Fix concurrent openings of CA file 2019-11-01 18:02:59 -04:00
schannel.c schannel: reverse the order of certinfo insertions 2019-10-24 16:30:40 +02:00
schannel.h schannel: use Curl_ prefix for global private symbols 2018-11-01 09:39:45 +01:00
sectransp.c vtls: Fix comment typo about macosx-version-min compiler flag 2019-09-27 01:46:49 -04:00
sectransp.h Secure Transport: no more "darwinssl" 2019-02-28 08:42:59 +01:00
vtls.c url: only reuse TLS connections with matching pinning 2019-09-19 14:58:24 +02:00
vtls.h cleanup: remove the 'numsocks' argument used in many places 2019-07-30 23:16:44 +02:00
wolfssl.c wolfssl: fix key pinning build error 2019-06-11 07:46:04 +02:00
wolfssl.h wolfssl: refer to it as wolfSSL only 2019-06-10 09:18:16 +02:00