./www/curl, Client that groks URLs

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: CURRENT, Version: 7.71.1, Package name: curl-7.71.1, Maintainer: leot

Curl is a command line tool for transferring files with URL syntax, supporting
HTTPS certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload,
proxies, cookies, user+password authentication (Basic, Digest, NTLM, Negotiate,
kerberos...), file transfer resume, proxy tunneling and a busload of other
useful tricks.

Required to run:
[security/heimdal] [security/openssl] [www/nghttp2] [devel/libidn2]

Required to build:

Package options: gssapi, http2, idn, inet6

Master sites:

SHA1: 243b6ab55421c20500cae8224409c3242d10bcce
RMD160: d41a8efd64fe6d831948bc5ab7ef033a23b5179d
Filesize: 2331.699 KB

Version history: (Expand)

CVS history: (Expand)

   2020-07-01 09:54:09 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
curl: updated to 7.71.1

Fixed in 7.71.1:

cirrus-ci: disable FreeBSD 13 (again)
Curl_inet_ntop: always check the return code
CURLOPT_READFUNCTION.3: provide the upload data size up front
DYNBUF.md: fix a typo: trail => tail
escape: make the URL decode able to reject only %00-bytes
escape: zero length input should return a zero length output
examples/multithread.c: call curl_global_cleanup()
http2: set the correct URL in pushed transfers
http: fix proxy auth with blank password
mbedtls: fix build with disabled proxy support
ngtcp2: sync with current master
openssl: Fix compilation on Windows when ngtcp2 is enabled
Revert "multi: implement wait using winsock events"
sendf: improve the message on client write errors
terminology: call them null-terminated strings
tool_cb_hdr: Fix etag warning output and return code
url: allow user + password to contain "control codes" for HTTP(S)
vtls: compare cert blob when finding a connection to reuse
   2020-06-25 23:20:05 by Thomas Klausner | Files touched by this commit (4) | Package updated
Log message:
curl: update to 7.71.0.

freeze ok: gdt, leot

curl and libcurl 7.71.0

 Public curl releases:         192
 Command line options:         232
 curl_easy_setopt() options:   277
 Public functions in libcurl:  82
 Contributors:                 2202

This release includes the following changes:

 o CURLOPT_SSL_OPTIONS: optional use of Windows' CA store (with openssl) [10]
 o setopt: add CURLOPT_PROXY_ISSUERCERT(_BLOB) for coherency [31]
 o setopt: support certificate options in memory with struct curl_blob [41]
 o tool: Add option --retry-all-errors to retry on any error [27]

This release includes the following bugfixes:

 o CVE-2020-8177: curl overwrite local file with -J [111]
 o CVE-2020-8169: Partial password leak over DNS on HTTP redirect [48]
 o *_sspi: fix bad uses of CURLE_NOT_BUILT_IN [21]
 o all: fix codespell errors [75]
 o altsvc: bump to h3-29 [114]
 o altsvc: fix 'dsthost' may be used uninitialized in this function
 o altsvc: fix parser for lines ending with CRLF [74]
 o altsvc: remove the num field from the altsvc struct [109]
 o appveyor: add non-debug plain autotools-based build [90]
 o appveyor: disable flaky test 1501 and ignore broken 1056
 o appveyor: disable test 1139 instead of ignoring it
 o asyn-*: remove support for never-used NULL entry pointers [19]
 o azure: use matrix strategy to avoid configuration redundancy [83]
 o build: disable more code/data when built without proxy support [84]
 o buildconf: remove -print from the find command that removes files
 o checksrc: enhance the ASTERISKSPACE and update code accordingly [52]
 o CI/macos: fix 'is already installed' errors by using bundle [94]
 o cirrus: disable SFTP and SCP tests [7]
 o CMake: add ENABLE_ALT_SVC option
 o CMake: add HTTP/3 support (ngtcp2+nghttp3, quiche) [34]
 o CMake: add libssh build support [37]
 o CMake: do not build test programs by default [30]
 o CMake: fix runtests.pl with CMake, add new test targets [29]
 o CMake: ignore INTERFACE_LIBRARY targets for pkg-config file [112]
 o CMake: rebuild Makefile.inc.cmake when Makefile.inc changes [58]
 o CODE_REVIEW.md: how to do code reviews in curl [108]
 o configure: fix pthread check with static boringssl
 o configure: for wolfSSL, check for the DES func needed for NTLM
 o configure: only strip first -L from LDFLAGS [89]
 o configure: repair the check if argv can be written to [47]
 o configure: the wolfssh backend does not provide SCP [57]
 o connect: improve happy eyeballs handling [118]
 o connect: make happy eyeballs work for QUIC (again) [16]
 o curl.1: Quote globbed URLs [51]
 o curl: remove -J "informational" written on stdout [36]
 o Curl_addrinfo: use one malloc instead of three [97]
 o CURLINFO_ACTIVESOCKET.3: clarify the description [87]
 o doc: add missing closing parenthesis in CURLINFO_SSL_VERIFYRESULT.3 [5]
 o doc: Rename VERSIONS to VERSIONS.md as it already has Markdown syntax [20]
 o docs/HTTP3: add qlog to the quiche build instruction
 o docs/options-in-versions: which version added each cmdline option [53]
 o docs: unify protocol lists [54]
 o dynbuf: introduce internal generic dynamic buffer functions [17]
 o easy: fix dangling pointer on easy_perform fail [26]
 o examples/ephiperfifo: turn off interval when setting timerfd [79]
 o examples/http2-down/upload: add error checks [78]
 o examples: remove asiohiper.cpp [4]
 o FILEFORMAT: add more features that tests can depend on
 o FILEFORMAT: describe verify/stderr
 o ftp: make domore_getsock() return the secondary socket properly
 o ftp: mark return-ignoring calls to Curl_GetFTPResponse with (void) [64]
 o ftp: shut down the secondary connection properly when SSL is used [43]
 o GnuTLS: Backend support for CURLINFO_SSL_VERIFYRESULT [9]
 o hostip: make Curl_printable_address not return anything [63]
 o hostip: on macOS avoid DoH when given a numerical IP address [69]
 o http2: keep trying to send pending frames after req.upload_done [40]
 o http2: simplify and clean up trailer handling [6]
 o HTTP3.md: clarify cargo build directory [77]
 o http: move header storage to Curl_easy from connectdata [107]
 o libcurl.pc: Merge Libs.private into Libs for static-only builds [28]
 o libssh2: improved error output for wrong quote syntax [39]
 o libssh2: keep sftp errors as 'unsigned long' [103]
 o libssh2: set the expected total size in SCP upload init [2]
 o libtest/cmake: Remove commented code [13]
 o list-only.d: this option existed already in 4.0
 o manpage: add three missing environment variables [121]
 o multi: add defensive check on data->multi->num_alive [96]
 o multi: implement wait using winsock events [120]
 o ngtcp2: cleanup memory when failing to connect [70]
 o ngtcp2: fix build with current ngtcp2 master implementing draft 28 [76]
 o ngtcp2: fix happy eyeballs quic connect crash [118]
 o ngtcp2: introduce qlog support [23]
 o ngtcp2: never call fprintf() in lib code in release version
 o ngtcp2: update with recent API changes [100]
 o ntlm: enable NTLM support with wolfSSL [81]
 o openssl: set FLAG_TRUSTED_FIRST unconditionally [105]
 o projects: Add crypt32.lib to dependencies for all OpenSSL configs [93]
 o quiche: clean up memory properly when failing to connect [71]
 o quiche: enable qlog output [14]
 o quiche: update SSLKEYLOGFILE support [98]
 o Revert "buildconf: use find -execdir" [38]
 o Revert "ssh: ignore timeouts during disconnect" [67]
 o runtests: remove sleep calls [18]
 o runtests: show elapsed test time with higher precision (ms)
 o select: always use Sleep in Curl_wait_ms on Win32 [82]
 o select: fix overflow protection in Curl_socket_check [22]
 o sendf: make failf() use the mvsnprintf() return code [62]
 o server/sws: fix asan warning on use of uninitialized variable
 o server/util: fix logmsg format using curl_off_t argument [106]
 o sha256: fixed potentially uninitialized variable [61]
 o share: don't set the share flag it something fails [116]
 o sockfilt: make select_ws stop waiting on exit signal event
 o socks: detect connection close during handshake [95]
 o socks: fix expected length of SOCKS5 reply [68]
 o socks: remove unreachable breaks in socks.c and mime.c [101]
 o source cleanup: remove all custom typedef structs [42]
 o test1167: fixes in badsymbols.pl [73]
 o test1177: look for curl.h in source directory [1]
 o test1238: avoid tftpd being busy for tests shortly following [33]
 o test613.pl: make tests 613 and 614 work with OpenSSH for Windows [8]
 o test75: Remove precheck test
 o tests: add https-proxy support to the test suite [49]
 o tests: add support for SSH server variant specific transfer paths [24]
 o tests: add two simple tests for --login-options [99]
 o tests: make test 1248 + 1249 use %NOLISTENPORT [3]
 o tests: pick a random port number for SSH [12]
 o tests: run stunnel for HTTPS and FTPS on dynamic ports [11]
 o timeouts: change millisecond timeouts to timediff_t from time_t [86]
 o timeouts: move ms timeouts to timediff_t from int and long [104]
 o tool: fixup a few --help descriptions [56]
 o tool: support UTF-16 command line on Windows [46]
 o tool_cfgable: free login_options at exit [102]
 o tool_getparam: fix memory leak in parse_args
 o tool_operate: fixed potentially uninitialized variables [60]
 o tool_paramhlp: fixed potentially uninitialized strtol() variable [59]
 o transfer: close connection after excess data has been read [66]
 o travis: add "qlog" as feature in the quiche build
 o travis: Add ngtcp2 and quiche tests for CMake
 o travis: upgrade to bionic, clang-9, improve readability [35]
 o typecheck-gcc.h: CURLINFO_PRIVATE does not need a 'char *' [44]
 o unit1604.c: fix implicit conv from 'SANITIZEcode' to 'CURLcode' [88]
 o url: accept "any length" credentials for proxy auth [72]
 o url: alloc the download buffer at transfer start [85]
 o url: reject too long input when parsing credentials [25]
 o url: sort the protocol schemes in rough popularity order [32]
 o urlapi: accept :: as a valid IPv6 address [15]
 o urldata: leave the HTTP method untouched in the set.* struct [45]
 o urlglob: treat literal IPv6 addresses with zone IDs as a host name [115]
 o user-agent.d: spell out what happens given a blank argument [80]
 o vauth/cleartext: fix theoretical integer overflow [50]
 o version.d: expanded and alpha-sorted [110]
 o vtls: Extract and simplify key log file handling from OpenSSL
 o wolfssl: add SSLKEYLOGFILE support [65]
 o wording: avoid blacklist/whitelist stereotypes [92]
 o write-out.d: added "response_code"
   2020-05-22 12:56:49 by Adam Ciarcinski | Files touched by this commit (624)
Log message:
revbump after updating security/nettle
   2020-05-06 16:05:09 by Adam Ciarcinski | Files touched by this commit (591) | Package updated
Log message:
revbump after boost update
   2020-04-29 13:24:19 by Leonardo Taccari | Files touched by this commit (3) | Package updated
Log message:
curl: Update to 7.70.0

This release includes the following changes:

 o curl: add --ssl-revoke-best-effort to allow a "best effort" \ 
revocation check
 o mqtt: add new experimental protocol
 o schannel: add "best effort" revocation check option: \ 
 o writeout: support to generate JSON output with '%{json}'

This release includes the following bugfixes:

 o appveyor: add Unicode winbuild jobs
 o appveyor: completely disable tests that fail to timeout early
 o appveyor: show failed tests in log even if test is ignored
 o appveyor: sort builds by type and add two new variants
 o appveyor: turn disabled tests into ignored result tests
 o appveyor: use random test server ports based upon APPVEYOR_API_URL
 o build: fixed build for systems with select() in unistd.h
 o buildconf: avoid using tempfile when removing files
 o checksrc: warn on obvious conditional blocks on the same line as if()
 o CI-fuzz: increase fuzz time to 40 minutes
 o ci/tests: fix Azure Pipelines not running Windows containers
 o CI: add build with ngtcp2 + gnutls on Travis CI
 o CI: bring GitHub Actions fuzzing job in line with macOS jobs
 o CI: migrate macOS jobs from Azure and Travis CI to GitHub Actions
 o CI: remove default Ubuntu build from GitHub Actions
 o cirrus: no longer ignore test 504 which is working again
 o cirrus: re-enable the FreeBSD 13 CI builds
 o cleanup: insert newline after if() conditions
 o cmake: add aliases so exported target names are available in tree
 o cmake: add support for building with wolfSSL
 o cmake: Avoid MSVC C4273 warnings in send/recv checks
 o cmdline: fix handling of OperationConfig linked list (--next)
 o compressed.d: stress that the headers are not modified
 o config: remove all defines of HAVE_DES_H
 o configure: convert -I to -isystem as a last step
 o configure: document 'compiler_num' for gcc
 o configure: don't check for Security.framework when cross-compiling
 o configure: fix -pedantic-errors for GCC 5 and later
 o configure: remove use of -vec-report0 from CFLAGS with icc
 o connect: happy eyeballs cleanup
 o connect: store connection info for QUIC connections
 o copyright: fix out-of-date copyright ranges and missing headers
 o curl-functions.m4: remove inappropriate AC_REQUIRE
 o curl.h: remnove CURL_VERSION_ESNI. Never supported nor documented
 o curl.h: update comment typo
 o curl: allow both --etag-compare and --etag-save with same file name
 o curl_setup: define _WIN32_WINNT_[OS] symbols
 o CURLINFO_CONDITION_UNMET: return true for 304 http status code
 o CURLINFO_NUM_CONNECTS: improve accuracy
 o CURLOPT_WRITEFUNCTION.3: add inline example and new see-also
 o dist: add mail-rcpt-allowfails.d to the tarball
 o docs/make: generate curl.1 from listed files only
 o docs: add warnings about FILE: URLs on Windows
 o easy: fix curl_easy_duphandle for builds missing IPv6 that use c-ares
 o examples/sessioninfo.c: add include to fix compiler warning
 o github actions: run when pushed to master or */ci + PRs
 o gnutls: bump lowest supported version to 3.1.10
 o gnutls: Don't skip really long certificate fields
 o gnutls: ensure TLS 1.3 when SRP isn't requested
 o gopher: check remaining time left during write busy loop
 o gskit: use our internal select wrapper for portability
 o http2: Fix erroneous debug message that h2 connection closed
 o http: don't consider upload done if the request isn't completely sent off
 o http: free memory when Alt-Used header creation fails due to OOM
 o lib/mk-ca-bundle: skip empty certs
 o lib670: use the same Win32 API check as all other lib tests
 o lib: fix typos in comments and errormessages
 o lib: never define CURL_CA_BUNDLE with a getenv
 o libcurl-multi.3: added missing full stop
 o libssh: avoid options override by configuration files
 o libssh: Use new ECDSA key types to check known hosts
 o mailmap: fixup a few author names/fields
 o Makefile.m32: Improve windres parameter compatibility
 o Makefile: run the cd commands in a subshell
 o memdebug: don't log free(NULL)
 o mime: properly check Content-Type even if it has parameters
 o multi-ssl: reset the SSL backend on `Curl_global_cleanup()`
 o multi: improve parameter check for curl_multi_remove_handle
 o nghttp2: 1.12.0 required
 o ngtcp2: update to git master for the key installation API change
 o nss: check for PK11_CreateDigestContext() returning NULL
 o openssl: adapt to functions marked as deprecated since version 3
 o OS400: update strings for ccsid-ifier (fixes the build)
 o output.d: quote the URL when globbing
 o packages: add OS400/chkstrings.c to the dist
 o RELEASE-PROCEDURE.md: run the copyright.pl script!
 o Revert "file: on Windows, refuse paths that start with \\"
 o runtests: always put test number in servercmd file
 o runtests: provide nicer errormsg when protocol "dump" file is empty
 o schannel: Fix blocking timeout logic
 o schannel: support .P12 or .PFX client certificates
 o scripts/release-notes.pl: add helper script for RELEASE-NOTES maintenance
 o select: make Curl_socket_check take timediff_t timeout
 o select: move duplicate select preparation code into Curl_select
 o select: remove typecast from SOCKET_WRITABLE/READABLE macros
 o server/getpart: make the "XML-parser" stricter
 o server/resolve: remove AI_CANONNAME to make macos tell the truth
 o smtp: set auth correctly
 o sockfilt: add logmsg output to select_ws_wait_thread on Windows
 o sockfilt: fix broken pipe on Windows to be ready in select_ws
 o sockfilt: fix handling of ready closed sockets on Windows
 o sockfilt: fix race-condition of waiting threads and event handling
 o socks: Fix blocking timeout logic
 o src: Remove C99 constructs to ensure C89 compliance
 o SSLCERTS.md: Fix example code for setting CA cert file
 o test1148: tolerate progress updates better (again)
 o test1154: set a proper name
 o test1177: verify that all the CURL_VERSION_ bits are documented
 o test1566: verify --etag-compare that gets a 304 back
 o test1908: avoid using fixed port number in test data
 o test2043: use revoked.badssl.com instead of revoked.grc.com
 o test2100: fix static port instead of dynamic value being used
 o tests/data: fix some XML formatting issues in test cases
 o tests/FILEFORMAT: converted to markdown and extended
 o tests/server/util.c: use curl_off_t instead of long for pid
 o tests: add %NOLISTENPORT and use it
 o tests: add Windows compatible pidwait like pidkill and pidterm
 o tests: fix conflict between Cygwin/msys and Windows PIDs
 o tests: introduce preprocessed test cases
 o tests: make Python-based servers compatible with Python 2 and 3
 o tests: make runtests check that disabled tests exists
 o tests: move pingpong server to dynamic listening port
 o tests: remove python_dependencies for smbserver from our tree
 o tests: run the RTSP test server on a dynamic port number
 o tests: run the SOCKS test server on a dynamic port number
 o tests: run the sws server on "any port"
 o tests: run the TFTP test server on a dynamic port number
 o tests: use Cygwin/msys PIDs for stunnel and sshd on Windows
 o tls: remove the BACKEND define kludge from most backends
 o tool: do not declare functions with Curl_ prefix
 o tool_operate: fix add_parallel_transfers when more are in queue
 o transfer: cap retries of "dead connections" to 5
 o transfer: Switch PUT to GET/HEAD on 303 redirect
 o travis: bump the wolfssl CI build to use 4.4.0
 o travis: update the ngtcp2 build to use the latest OpenSSL patch
 o url: allow non-HTTPS altsvc-matching for debug builds
 o version: add 'cainfo' and 'capath' to version info struct
 o version: increase buffer space for ssl version output
 o version: skip idn2_check_version() check and add precaution
 o vquic: add support for GnuTLS backend of ngtcp2
 o vtls: fix ssl_config memory-leak on out-of-memory
 o warnless: remove code block for icc that didn't work
 o windows: enable UnixSockets with all build toolchains
 o windows: suppress UI in all CryptAcquireContext() calls
   2020-03-11 09:30:37 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
curl: updated to 7.69.1

curl and libcurl 7.69.1

This release includes the following bugfixes:
* ares: store dns parameters for duphandle
* cirrus-ci: disable the FreeBSD 13 builds
* curl_share_setopt.3: Note sharing cookies doesn't enable the engine
* lib1564: reduce number of mid-wait wakeup calls
* libssh: Fix matching user-specified MD5 hex key
* MANUAL: update a dict-using command line
* mime: do not perform more than one read in a row
* mime: fix the binary encoder to handle large data properly
* mime: latch last read callback status
* multi: skip EINTR check on wakeup socket if it was closed
* pause: bail out on bad input
* pause: force a connection recheck after unpausing (take 2)
* pause: return early for calls that don't change pause state
* runtests.1: rephrase how to specify what tests to run
* runtests: fix missing use of exe_ext helper function
* seek: fix fall back for missing ftruncate on Windows
* sftp: fix segfault regression introduced in 7.69.0
* sha256: Added SecureTransport implementation
* sha256: Added WinCrypt implementation
* socks4: fix host resolve regression
* socks5: host name resolv regression fix
* tests/server: fix missing use of exe_ext helper function
* tests: fix static ip:port instead of dynamic values being used
* tests: make sleeping portable by avoiding select
* unit1612: fix the inclusion and compilation of the HMAC unit test
* urldata: remove the 'stream_was_rewound' connectdata struct member
* version: make curl_version* thread-safe without using global context
   2020-03-08 17:51:54 by Thomas Klausner | Files touched by this commit (2833)
Log message:
*: recursive bump for libffi
   2020-03-04 19:19:26 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
curl: updated to 7.69.0

This release includes the following changes:

 o polarssl: removed
 o smtp: add CURLOPT_MAIL_RCPT_ALLLOWFAILS and --mail-rcpt-allowfails
 o wolfSSH: new SSH backend

This release includes the following bugfixes:

 o altsvc: improved header parser
 o altsvc: keep a copy of the file name to survive handle reset
 o altsvc: make saving the cache an atomic operation
 o altsvc: use h3-27
 o azure: disable brotli on the macos debug-builds
 o build: remove all HAVE_OPENSSL_ENGINE_H defines
 o checksrc.bat: Fix not being able to run script from the main curl dir
 o cleanup: fix several comment typos
 o cleanup: fix typos and wording in docs and comments
 o cmake: add support for CMAKE_LTO option
 o cmake: clean up and improve build procedures
 o cmake: enable SMB for Windows builds
 o cmake: improve libssh2 check on Windows
 o cmake: Show HTTPS-proxy in the features output
 o cmake: support specifying the target Windows version
 o cmake: use check_symbol_exists also for inet_pton
 o configure.ac: fix comments about --with-quiche
 o configure: disable metalink if mbedTLS is specified
 o configure: disable metalink support for incompatible SSL/TLS
 o conn: do not reuse connection if SOCKS proxy credentials differ
 o conncache: removed unused Curl_conncache_bundle_size()
 o connect: remove some spurious infof() calls
 o connection reuse: respect the max_concurrent_streams limits
 o contributors: also include people who contributed to curl-www
 o contrithanks: use the most recent tag by default
 o cookie: check __Secure- and __Host- case sensitively
 o cookies: make saving atomic with a rename
 o create-dirs.d: mention the mode
 o curl: avoid using strlen for testing if a string is empty
 o curl: error on --alt-svc use w/o support
 o curl: let -D merge headers in one file again
 o curl: make #0 not output the full URL
 o curl: make the -# spaceship bar not wrap the line
 o curl: remove 'config' field from OutStruct
 o curl:progressbarinit: ignore column width from terminals < 20
 o curl_escape.3: add a link to curl_free
 o curl_getenv.3: fix the memory handling description
 o curl_global_init: assume the EINTR bit by default
 o curl_global_init: move the IPv6 works status bool to multi handle
 o CURLOPT_ALTSVC_CTRL.3: fix the DEFAULT wording
 o CURLOPT_REDIR_PROTOCOLS.3: update the DEFAULT section
 o data.d: remove "Multiple files can also be specified"
 o digest: do not quote algorithm in HTTP authorisation
 o docs/HTTP3: add --enable-alt-svc to curl's configure
 o docs/HTTP3: update the OpenSSL branch to use for ngtcp2
 o docs: fix typo on CURLINFO_RETRY_AFTER
 o easy: remove dead code
 o form.d: fix two minor typos
 o ftp: convert 'sock_accepted' to a plain boolean
 o ftp: remove superfluous checking for crlf in user or pwd
 o ftp: shrink temp buffers used for PORT
 o github action: add CIFuzz
 o github: Instructions to post "uname -a" on Unix systems in issues
 o GnuTLS: always send client cert
 o gtls: fixed compilation when using GnuTLS < 3.5.0
 o hostip: move code to resolve IP address literals to `Curl_resolv`
 o HTTP-COOKIES: describe the cookie file format
 o HTTP-COOKIES: mention that a trailing newline is required
 o http2: make pausing/unpausing set/clear local stream window
 o http2: now requires nghttp2 >= 1.12.0
 o http: added 417 response treatment
 o http: increase EXPECT_100_THRESHOLD to 1Mb
 o http: mark POSTs with no body as "upload done" from the start
 o http: move "oauth_bearer" from connectdata to Curl_easy
 o include: remove non-curl prefixed defines
 o KNOWN_BUGS: Multiple methods in a single WWW-Authenticate: header
 o libssh2: add support for forcing a hostkey type
 o libssh2: fix variable type
 o libssh: improve known hosts handling
 o llist: removed unused Curl_llist_move()
 o location.d: the method change is from POST to GET only
 o md4: fixed compilation issues when using GNU TLS gcrypt
 o md4: use init/update/final functions in Secure Transport
 o md5: added implementation for mbedTLS
 o mk-ca-bundle: add support for CKA_NSS_SERVER_DISTRUST_AFTER
 o multi: change curl_multi_wait/poll to error on negative timeout
 o multi: fix outdated comment
 o multi: if Curl_readwrite sets 'comeback' use expire, not loop
 o multi_done: if multiplexed, make conn->data point to another transfer
 o multi_wait: stop loop when sread() returns zero
 o ngtcp2: add error code for QUIC connection errors
 o ngtcp2: fixed to only use AF_INET6 when ENABLE_IPV6
 o ngtcp2: update to git master and its draft-25 support
 o ntlm: move the winbind data into the NTLM data structure
 o ntlm: pass the Curl_easy structure to the private winbind functions
 o ntlm: removed the dependency on the TLS libaries when using MD5
 o ntlm_wb: use Curl_socketpair() for greater portability
 o oauth2-bearer.d: works for HTTP too
 o openssl: make CURLINFO_CERTINFO not truncate x509v3 fields
 o openssl: remove redundant assignment
 o os400: fixed the build
 o pause: force-drain the transfer on unpause
 o quiche: update to draft-25
 o README: mention that the docs is in docs/
 o RELEASE-PROCEDURE: feature win is closed post-release a few days
 o runtests: make random seed fixed for a month
 o runtests: restore the command log
 o schannel: make CURLOPT_CAINFO work better on Windows 7
 o schannel_verify: Fix alt names manual verify for UNICODE builds
 o sha256: use crypto implementations when available
 o singleuse.pl: support new API functions, fix curl_dbg_ handling
 o smtp: support the SMTPUTF8 extension
 o smtp: support UTF-8 based host names in MAIL FROM
 o SOCKS: make the connect phase non-blocking
 o strcase: turn Curl_raw_tolower into static
 o strerror: increase STRERROR_LEN 128 -> 256
 o test1323: added missing 'unit test' feature requirement
 o tests: add a unit test for MD4 digest generation
 o tests: add a unit test for SHA256 digest generation
 o tests: add a unit test for the HMAC hash generation
 o tests: deduce the tool name from the test case for unit tests
 o tests: fix Python 3 compatibility of smbserver.py
 o tool_dirhie: allow directory traversal during creation
 o tool_homedir: change GetEnv() to use libcurl's curl_getenv()
 o tool_util: improve Windows version of tvnow()
 o travis: update non-OpenSSL Linux jobs to Bionic
 o url: include the failure reason when curl_win32_idn_to_ascii() fails
 o urlapi: guess scheme properly with credentials given
 o urldata: do string enums without #ifdefs for build scripts
 o vtls: refactor Curl_multissl_version to make the code clearer
 o win32: USE_WIN32_CRYPTO to enable Win32 based MD4, MD5 and SHA256