mirror of
https://github.com/moparisthebest/curl
synced 2024-11-10 11:35:07 -05:00
f3b77e5611
When configured with '--without-ssl --with-nss', NTLM authentication now uses NSS crypto library for MD5 and DES. For MD4 we have a local implementation in that case. More details are available at https://bugzilla.redhat.com/603783 In order to get it working, curl_global_init() must be called with CURL_GLOBAL_SSL or CURL_GLOBAL_ALL. That's necessary because NSS needs to be initialized globally and we do so only when the NSS library is actually required by protocol. The mentioned call of curl_global_init() is responsible for creating of the initialization mutex. There was also slightly changed the NSS initialization scenario, in particular, loading of the NSS PEM module. It used to be loaded always right after the NSS library was initialized. Now the library is initialized as soon as any SSL or NTLM is required, while the PEM module is prevented from being loaded until the SSL is actually required.
72 lines
2.7 KiB
C
72 lines
2.7 KiB
C
#ifndef __NSSG_H
|
|
#define __NSSG_H
|
|
/***************************************************************************
|
|
* _ _ ____ _
|
|
* Project ___| | | | _ \| |
|
|
* / __| | | | |_) | |
|
|
* | (__| |_| | _ <| |___
|
|
* \___|\___/|_| \_\_____|
|
|
*
|
|
* Copyright (C) 1998 - 2010, Daniel Stenberg, <daniel@haxx.se>, et al.
|
|
*
|
|
* This software is licensed as described in the file COPYING, which
|
|
* you should have received as part of this distribution. The terms
|
|
* are also available at http://curl.haxx.se/docs/copyright.html.
|
|
*
|
|
* You may opt to use, copy, modify, merge, publish, distribute and/or sell
|
|
* copies of the Software, and permit persons to whom the Software is
|
|
* furnished to do so, under the terms of the COPYING file.
|
|
*
|
|
* This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
|
|
* KIND, either express or implied.
|
|
*
|
|
***************************************************************************/
|
|
|
|
#ifdef USE_NSS
|
|
/*
|
|
* This header should only be needed to get included by sslgen.c and nss.c
|
|
*/
|
|
|
|
#include "urldata.h"
|
|
CURLcode Curl_nss_connect(struct connectdata *conn, int sockindex);
|
|
CURLcode Curl_nss_connect_nonblocking(struct connectdata *conn,
|
|
int sockindex,
|
|
bool *done);
|
|
/* close a SSL connection */
|
|
void Curl_nss_close(struct connectdata *conn, int sockindex);
|
|
|
|
/* tell NSS to close down all open information regarding connections (and
|
|
thus session ID caching etc) */
|
|
int Curl_nss_close_all(struct SessionHandle *data);
|
|
|
|
int Curl_nss_init(void);
|
|
void Curl_nss_cleanup(void);
|
|
|
|
size_t Curl_nss_version(char *buffer, size_t size);
|
|
int Curl_nss_check_cxn(struct connectdata *cxn);
|
|
int Curl_nss_seed(struct SessionHandle *data);
|
|
|
|
/* initialize NSS library if not already */
|
|
CURLcode Curl_nss_force_init(struct SessionHandle *data);
|
|
|
|
/* API setup for NSS */
|
|
#define curlssl_init Curl_nss_init
|
|
#define curlssl_cleanup Curl_nss_cleanup
|
|
#define curlssl_connect Curl_nss_connect
|
|
|
|
/* NSS has its own session ID cache */
|
|
#define curlssl_session_free(x)
|
|
#define curlssl_close_all Curl_nss_close_all
|
|
#define curlssl_close Curl_nss_close
|
|
/* NSS has no shutdown function provided and thus always fail */
|
|
#define curlssl_shutdown(x,y) (x=x, y=y, 1)
|
|
#define curlssl_set_engine(x,y) (x=x, y=y, CURLE_FAILED_INIT)
|
|
#define curlssl_set_engine_default(x) (x=x, CURLE_FAILED_INIT)
|
|
#define curlssl_engines_list(x) (x=x, (struct curl_slist *)NULL)
|
|
#define curlssl_version Curl_nss_version
|
|
#define curlssl_check_cxn(x) Curl_nss_check_cxn(x)
|
|
#define curlssl_data_pending(x,y) (x=x, y=y, 0)
|
|
|
|
#endif /* USE_NSS */
|
|
#endif
|