moparisthebest
/
curl
mirror of https://github.com/moparisthebest/curl
1
0
Fork 0
Code Issues Releases Wiki Activity
curl/docs/libcurl
History
Daniel Stenberg da82f59b69 CURLOPT_SSL_VERIFYHOST: stop supporting the 1 value 
After a research team wrote a document[1] that found several live source
codes out there in the wild that misused the CURLOPT_SSL_VERIFYHOST
option thinking it was a boolean, this change now bans 1 as a value and
will make libcurl return error for it.

1 was never a sensible value to use in production but was introduced
back in the days to help debugging. It was always documented clearly
this way.

1 was never supported by all SSL backends in libcurl, so this cleanup
makes the treatment of it unified.

The report's list of mistakes for this option were all PHP code and
while there's a binding layer between libcurl and PHP, the PHP team has
decided that they have an as thin layer as possible on top of libcurl so
they will not alter or specifically filter a 'TRUE' value for this
particular option. I sympathize with that position.

[1] = http://daniel.haxx.se/blog/2012/10/25/libcurl-claimed-to-be-dangerous/
 		2012-11-06 19:46:53 +01:00
..
.gitignore IGNORE: files generated by maketgz 2010-04-14 17:34:57 +02:00
ABI Jose Goncalves fixed my crappy spelling! 2009-05-01 20:20:54 +00:00
Makefile.am Manpage for curl_multi_wait(). 2012-09-01 23:19:40 +02:00
curl_easy_cleanup.3 curl_easy_cleanup: clarify the callback situation 2011-08-11 14:55:17 +02:00
curl_easy_duphandle.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_easy_escape.3 url encode docs: mention '-', '.', '_' and '~' 2011-05-02 11:14:30 +02:00
curl_easy_getinfo.3 SMTP: Added support for returning SMTP response codes 2012-02-23 23:29:03 +01:00
curl_easy_init.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_easy_pause.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_easy_perform.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_easy_recv.3 remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
curl_easy_reset.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_easy_send.3 remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
curl_easy_setopt.3 CURLOPT_SSL_VERIFYHOST: stop supporting the 1 value 2012-11-06 19:46:53 +01:00
curl_easy_strerror.3 curl_easy_strerror.3: minor synopsis edit of the look 2012-01-02 16:00:46 +01:00
curl_easy_unescape.3 remove the CVSish $Id$ lines 2010-03-24 11:02:54 +01:00
curl_escape.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_formadd.3 curl_formfree: clarify which pointer to free 2011-06-23 09:31:12 +02:00
curl_formfree.3 curl_formfree: clarify which pointer to free 2011-06-23 09:31:12 +02:00
curl_formget.3 curl_formget.3: CURLFORM_STREAM has its drawbacks 2011-06-13 22:03:33 +02:00
curl_free.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_getdate.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_getenv.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_global_cleanup.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_global_init.3 docs: mention CURL_GLOBAL_DEFAULT 2012-07-12 08:41:07 +02:00
curl_global_init_mem.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_mprintf.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_multi_add_handle.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_multi_assign.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_multi_cleanup.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_multi_fdset.3 curl_multi_fdset: clarify the max_fd == -1 case 2011-10-16 23:38:48 +02:00
curl_multi_info_read.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_multi_init.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_multi_perform.3 curl_multi_perform.3: extended/clarified 2012-08-27 00:16:03 +02:00
curl_multi_remove_handle.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_multi_setopt.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_multi_socket.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_multi_socket_action.3 docs: clarify how to start with curl_multi_socket_action 2012-07-03 17:18:36 +02:00
curl_multi_socket_all.3 The inital early embryos to describe the curl_multi_socket() API. Committed 2005-12-22 15:11:11 +00:00
curl_multi_strerror.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_multi_timeout.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_multi_wait.3 curl_multi_wait: no wait if no descriptors to wait for 2012-10-09 22:19:49 +02:00
curl_share_cleanup.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_share_init.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_share_setopt.3 Fixed some typos in documentation 2012-07-20 21:02:58 +02:00
curl_share_strerror.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_slist_append.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_slist_free_all.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_strequal.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_strnequal.3 prepend the man3 dir to the file name to work better. 2004-04-02 11:04:34 +00:00
curl_unescape.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_version.3 source header: added to more files 2011-03-12 00:14:32 +01:00
curl_version_info.3 Document NTLM winbind options (and caveats) 2011-09-12 14:45:37 -07:00
getinfo-times first rough version 2005-06-03 21:38:40 +00:00
index.html - Introducing curl_easy_send() and curl_easy_recv(). They can be used to send 2008-05-12 21:43:24 +00:00
libcurl-easy.3 source header: added to more files 2011-03-12 00:14:32 +01:00
libcurl-errors.3 Fixed some typos in documentation 2012-07-20 21:02:58 +02:00
libcurl-multi.3 libcurl-multi.3: active FTP is no longer blocking! 2011-12-20 20:32:31 +01:00
libcurl-share.3 libcurl-share.3: remove wrong info of what can be shared 2012-08-27 23:51:40 +02:00
libcurl-tutorial.3 libcurl-tutorial.3: curl doesn't sent pragma no-cache 2011-12-20 20:32:47 +01:00
libcurl.3 source header: added to more files 2011-03-12 00:14:32 +01:00
libcurl.m4 libcurl.m4: Fix quoting arguments of AC_LANG_PROGRAM 2011-12-20 13:35:27 +01:00
symbols-in-versions symbols-in-versions: new CURL_WAIT_* symbols 2012-09-01 23:53:15 +02:00
symbols.pl symbols.pl: provide LIBCURL_HAS macro for apps 2011-11-24 22:56:39 +01:00