./www/curl, Client that groks URLs

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: CURRENT, Version: 7.69.1, Package name: curl-7.69.1, Maintainer: leot

Curl is a command line tool for transferring files with URL syntax, supporting
HTTPS certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload,
proxies, cookies, user+password authentication (Basic, Digest, NTLM, Negotiate,
kerberos...), file transfer resume, proxy tunneling and a busload of other
useful tricks.

Required to run:
[security/heimdal] [security/openssl] [www/nghttp2] [devel/libidn2]

Required to build:

Package options: gssapi, http2, idn, inet6

Master sites:

SHA1: 2dcd7c3a5ebe67cd3329f34e704be147c16ec7dc
RMD160: 802d529dac716fb17875bd40da9eb4afb3ca60d2
Filesize: 2409.445 KB

Version history: (Expand)

CVS history: (Expand)

   2020-03-11 09:30:37 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
curl: updated to 7.69.1

curl and libcurl 7.69.1

This release includes the following bugfixes:
* ares: store dns parameters for duphandle
* cirrus-ci: disable the FreeBSD 13 builds
* curl_share_setopt.3: Note sharing cookies doesn't enable the engine
* lib1564: reduce number of mid-wait wakeup calls
* libssh: Fix matching user-specified MD5 hex key
* MANUAL: update a dict-using command line
* mime: do not perform more than one read in a row
* mime: fix the binary encoder to handle large data properly
* mime: latch last read callback status
* multi: skip EINTR check on wakeup socket if it was closed
* pause: bail out on bad input
* pause: force a connection recheck after unpausing (take 2)
* pause: return early for calls that don't change pause state
* runtests.1: rephrase how to specify what tests to run
* runtests: fix missing use of exe_ext helper function
* seek: fix fall back for missing ftruncate on Windows
* sftp: fix segfault regression introduced in 7.69.0
* sha256: Added SecureTransport implementation
* sha256: Added WinCrypt implementation
* socks4: fix host resolve regression
* socks5: host name resolv regression fix
* tests/server: fix missing use of exe_ext helper function
* tests: fix static ip:port instead of dynamic values being used
* tests: make sleeping portable by avoiding select
* unit1612: fix the inclusion and compilation of the HMAC unit test
* urldata: remove the 'stream_was_rewound' connectdata struct member
* version: make curl_version* thread-safe without using global context
   2020-03-08 17:51:54 by Thomas Klausner | Files touched by this commit (2833)
Log message:
*: recursive bump for libffi
   2020-03-04 19:19:26 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
curl: updated to 7.69.0

This release includes the following changes:

 o polarssl: removed
 o smtp: add CURLOPT_MAIL_RCPT_ALLLOWFAILS and --mail-rcpt-allowfails
 o wolfSSH: new SSH backend

This release includes the following bugfixes:

 o altsvc: improved header parser
 o altsvc: keep a copy of the file name to survive handle reset
 o altsvc: make saving the cache an atomic operation
 o altsvc: use h3-27
 o azure: disable brotli on the macos debug-builds
 o build: remove all HAVE_OPENSSL_ENGINE_H defines
 o checksrc.bat: Fix not being able to run script from the main curl dir
 o cleanup: fix several comment typos
 o cleanup: fix typos and wording in docs and comments
 o cmake: add support for CMAKE_LTO option
 o cmake: clean up and improve build procedures
 o cmake: enable SMB for Windows builds
 o cmake: improve libssh2 check on Windows
 o cmake: Show HTTPS-proxy in the features output
 o cmake: support specifying the target Windows version
 o cmake: use check_symbol_exists also for inet_pton
 o configure.ac: fix comments about --with-quiche
 o configure: disable metalink if mbedTLS is specified
 o configure: disable metalink support for incompatible SSL/TLS
 o conn: do not reuse connection if SOCKS proxy credentials differ
 o conncache: removed unused Curl_conncache_bundle_size()
 o connect: remove some spurious infof() calls
 o connection reuse: respect the max_concurrent_streams limits
 o contributors: also include people who contributed to curl-www
 o contrithanks: use the most recent tag by default
 o cookie: check __Secure- and __Host- case sensitively
 o cookies: make saving atomic with a rename
 o create-dirs.d: mention the mode
 o curl: avoid using strlen for testing if a string is empty
 o curl: error on --alt-svc use w/o support
 o curl: let -D merge headers in one file again
 o curl: make #0 not output the full URL
 o curl: make the -# spaceship bar not wrap the line
 o curl: remove 'config' field from OutStruct
 o curl:progressbarinit: ignore column width from terminals < 20
 o curl_escape.3: add a link to curl_free
 o curl_getenv.3: fix the memory handling description
 o curl_global_init: assume the EINTR bit by default
 o curl_global_init: move the IPv6 works status bool to multi handle
 o CURLOPT_ALTSVC_CTRL.3: fix the DEFAULT wording
 o CURLOPT_REDIR_PROTOCOLS.3: update the DEFAULT section
 o data.d: remove "Multiple files can also be specified"
 o digest: do not quote algorithm in HTTP authorisation
 o docs/HTTP3: add --enable-alt-svc to curl's configure
 o docs/HTTP3: update the OpenSSL branch to use for ngtcp2
 o docs: fix typo on CURLINFO_RETRY_AFTER
 o easy: remove dead code
 o form.d: fix two minor typos
 o ftp: convert 'sock_accepted' to a plain boolean
 o ftp: remove superfluous checking for crlf in user or pwd
 o ftp: shrink temp buffers used for PORT
 o github action: add CIFuzz
 o github: Instructions to post "uname -a" on Unix systems in issues
 o GnuTLS: always send client cert
 o gtls: fixed compilation when using GnuTLS < 3.5.0
 o hostip: move code to resolve IP address literals to `Curl_resolv`
 o HTTP-COOKIES: describe the cookie file format
 o HTTP-COOKIES: mention that a trailing newline is required
 o http2: make pausing/unpausing set/clear local stream window
 o http2: now requires nghttp2 >= 1.12.0
 o http: added 417 response treatment
 o http: increase EXPECT_100_THRESHOLD to 1Mb
 o http: mark POSTs with no body as "upload done" from the start
 o http: move "oauth_bearer" from connectdata to Curl_easy
 o include: remove non-curl prefixed defines
 o KNOWN_BUGS: Multiple methods in a single WWW-Authenticate: header
 o libssh2: add support for forcing a hostkey type
 o libssh2: fix variable type
 o libssh: improve known hosts handling
 o llist: removed unused Curl_llist_move()
 o location.d: the method change is from POST to GET only
 o md4: fixed compilation issues when using GNU TLS gcrypt
 o md4: use init/update/final functions in Secure Transport
 o md5: added implementation for mbedTLS
 o mk-ca-bundle: add support for CKA_NSS_SERVER_DISTRUST_AFTER
 o multi: change curl_multi_wait/poll to error on negative timeout
 o multi: fix outdated comment
 o multi: if Curl_readwrite sets 'comeback' use expire, not loop
 o multi_done: if multiplexed, make conn->data point to another transfer
 o multi_wait: stop loop when sread() returns zero
 o ngtcp2: add error code for QUIC connection errors
 o ngtcp2: fixed to only use AF_INET6 when ENABLE_IPV6
 o ngtcp2: update to git master and its draft-25 support
 o ntlm: move the winbind data into the NTLM data structure
 o ntlm: pass the Curl_easy structure to the private winbind functions
 o ntlm: removed the dependency on the TLS libaries when using MD5
 o ntlm_wb: use Curl_socketpair() for greater portability
 o oauth2-bearer.d: works for HTTP too
 o openssl: make CURLINFO_CERTINFO not truncate x509v3 fields
 o openssl: remove redundant assignment
 o os400: fixed the build
 o pause: force-drain the transfer on unpause
 o quiche: update to draft-25
 o README: mention that the docs is in docs/
 o RELEASE-PROCEDURE: feature win is closed post-release a few days
 o runtests: make random seed fixed for a month
 o runtests: restore the command log
 o schannel: make CURLOPT_CAINFO work better on Windows 7
 o schannel_verify: Fix alt names manual verify for UNICODE builds
 o sha256: use crypto implementations when available
 o singleuse.pl: support new API functions, fix curl_dbg_ handling
 o smtp: support the SMTPUTF8 extension
 o smtp: support UTF-8 based host names in MAIL FROM
 o SOCKS: make the connect phase non-blocking
 o strcase: turn Curl_raw_tolower into static
 o strerror: increase STRERROR_LEN 128 -> 256
 o test1323: added missing 'unit test' feature requirement
 o tests: add a unit test for MD4 digest generation
 o tests: add a unit test for SHA256 digest generation
 o tests: add a unit test for the HMAC hash generation
 o tests: deduce the tool name from the test case for unit tests
 o tests: fix Python 3 compatibility of smbserver.py
 o tool_dirhie: allow directory traversal during creation
 o tool_homedir: change GetEnv() to use libcurl's curl_getenv()
 o tool_util: improve Windows version of tvnow()
 o travis: update non-OpenSSL Linux jobs to Bionic
 o url: include the failure reason when curl_win32_idn_to_ascii() fails
 o urlapi: guess scheme properly with credentials given
 o urldata: do string enums without #ifdefs for build scripts
 o vtls: refactor Curl_multissl_version to make the code clearer
 o win32: USE_WIN32_CRYPTO to enable Win32 based MD4, MD5 and SHA256
   2020-01-18 22:51:16 by Jonathan Perkin | Files touched by this commit (1836)
Log message:
*: Recursive revision bump for openssl 1.1.1.
   2020-01-12 21:20:50 by Ryo ONODERA | Files touched by this commit (574)
Log message:
*: Recursive revbump from devel/boost-libs
   2020-01-08 12:59:18 by Leonardo Taccari | Files touched by this commit (4) | Package updated
Log message:
curl: Update to 7.68.0

pkgsrc changes:
 - Removes patch-configure hunks applied upstream

This release includes the following changes:

 o TLS: add BearSSL vtls implementation
 o curl: add --etag-compare and --etag-save
 o curl: add --parallel-immediate
 o multi: add curl_multi_wakeup()
 o openssl: CURLSSLOPT_NO_PARTIALCHAIN can disable partial cert chains

This release includes the following bugfixes:

 o CVE-2019-15601: file: on Windows, refuse paths that start with \\
 o Azure Pipelines: add several builds
 o CMake: add support for building with the NSS vtls backend
 o CURL-DISABLE: initial docs for the CURL_DISABLE_* defines
 o CURLOPT_HEADERFUNCTION.3: Document that size is always 1
 o CURLOPT_QUOTE.3: fix typos
 o CURLOPT_READFUNCTION.3: fix the example
 o CURLOPT_URL.3: "curl supports SMB version 1 (only)"
 o HISTORY: added cmake, HTTP/3 and parallel downloads with curl
 o HISTORY: the SMB(S) support landed in 2014
 o INSTALL.md: provide Android build instructions
 o KNOWN_BUGS: Connection information when using TCP Fast Open
 o KNOWN_BUGS: LDAP on Windows doesn't work correctly
 o KNOWN_BUGS: TLS session cache doesn't work with TFO
 o OPENSOCKETFUNCTION.3: correct the purpose description
 o TrackMemory tests: always remove CR before LF
 o altsvc: bump to h3-24
 o altsvc: make the save function ignore NULL filenames
 o build: Disable Visual Studio warning "conditional expression is \ 
 o build: fix for CURL_DISABLE_DOH
 o checksrc.bat: Add a check for vquic and vssh directories
 o checksrc: repair the copyrightyear check
 o cirrus-ci: enable clang sanitizers on freebsd 13
 o cirrus: Drop the FreeBSD 10.4 build
 o config-win32: cpu-machine-OS for Windows on ARM
 o configure: avoid unportable `==' test(1) operator
 o configure: enable IPv6 support without `getaddrinfo`
 o configure: fix typo in help text
 o conncache: CONNECT_ONLY connections assumed always in-use
 o conncache: fix multi-thread use of shared connection cache
 o copyrights: fix copyright year range
 o create_conn: prefer multiplexing to using new connections
 o curl -w: handle a blank input file correctly
 o curl.h: add two missing defines for "pre ISO C" compilers
 o curl/parseconfig: fix mem-leak
 o curl/parseconfig: use curl_free() to free memory allocated by libcurl
 o curl: cleanup multi handle on failure
 o curl: fix --upload-file . hangs if delay in STDIN
 o curl: fix -T globbing
 o curl: improved cleanup in upload error path
 o curl: make a few char pointers point to const char instead
 o curl: properly free mimepost data
 o curl: show better error message when no homedir is found
 o curl: show error for --http3 if libcurl lacks support
 o curl_setup_once: consistently use WHILE_FALSE in macros
 o define: remove HAVE_ENGINE_LOAD_BUILTIN_ENGINES, not used anymore
 o docs: Change 'experiemental' to 'experimental'
 o docs: TLS SRP doesn't work with TLS 1.3
 o docs: fix several typos
 o docs: mention CURL_MAX_INPUT_LENGTH restrictions
 o doh: improved both encoding and decoding
 o doh: make it behave when built without proxy support
 o examples/postinmemory.c: Call curl_global_cleanup always
 o examples/url2file.c: corrected erroneous comment
 o examples: add multi-poll.c
 o global_init: undo the "intialized" bump in case of failure
 o hostip: suppress compiler warning
 o http_ntlm: Remove duplicate NSS initialisation
 o lib: Move lib/ssh.h -> lib/vssh/ssh.h
 o lib: fix compiler warnings with `CURL_DISABLE_VERBOSE_STRINGS`
 o lib: fix warnings found when porting to NuttX
 o lib: remove ASSIGNWITHINCONDITION exceptions, use our code style
 o lib: remove erroneous +x file permission on some c files
 o libssh2: add support for ECDSA and ed25519 knownhost keys
 o multi.h: remove INITIAL_MAX_CONCURRENT_STREAMS from public header
 o multi: free sockhash on OOM
 o multi_poll: avoid busy-loop when called without easy handles attached
 o ngtcp2: Support the latest update key callback type
 o ngtcp2: fix thread-safety bug in error-handling
 o ngtcp2: free used resources on disconnect
 o ngtcp2: handle key updates as ngtcp2 master branch tells us
 o ngtcp2: increase QUIC window size when data is consumed
 o ngtcp2: use overflow buffer for extra HTTP/3 data
 o ntlm: USE_WIN32_CRYPTO check removed to get USE_NTLM2SESSION set
 o ntlm_wb: fix double-free in OOM
 o openssl: Revert to less sensitivity for SYSCALL errors
 o openssl: improve error message for SYSCALL during connect
 o openssl: prevent recursive function calls from ctx callbacks
 o openssl: retrieve reported LibreSSL version at runtime
 o openssl: set X509_V_FLAG_PARTIAL_CHAIN by default
 o parsedate: offer a getdate_capped() alternative
 o pause: avoid updating socket if done was already called
 o projects: Fix Visual Studio projects SSH builds
 o projects: Fix Visual Studio wolfSSL configurations
 o quiche: reject HTTP/3 headers in the wrong order
 o remove_handle: clear expire timers after multi_done()
 o runtests: --repeat=[num] to repeat tests
 o runtests: introduce --shallow to reduce huge torture tests
 o schannel: fix --tls-max for when min is --tlsv1 or default
 o setopt: Fix ALPN / NPN user option when built without HTTP2
 o strerror: Add Curl_winapi_strerror for Win API specific errors
 o strerror: Fix an error looking up some Windows error strings
 o strerror: Fix compiler warning "empty expression"
 o system.h: fix for MCST lcc compiler
 o test/sws: search for "Testno:" header unconditionally if no testno
 o test1175: verify symbols-in-versions and libcurl-errors.3 in sync
 o test1270: a basic -w redirect_url test
 o test1456: remove the use of a fixed local port number
 o test1558: use double slash after file:
 o test1560: require IPv6 for IPv6 aware URL parsing
 o tests/lib1557: fix mem-leak in OOM
 o tests/lib1559: fix mem-leak in OOM
 o tests/lib1591: free memory properly on OOM, in the trailers callback
 o tests/unit1607: fix mem-leak in OOM
 o tests/unit1609: fix mem-leak in OOM
 o tests/unit1620: fix bad free in OOM
 o tests: Change NTLM tests to require SSL
 o tests: Fix bounce requests with truncated writes
 o tests: fix build with `CURL_DISABLE_DOH`
 o tests: fix permissions of ssh keys in WSL
 o tests: make it possible to set executable extensions
 o tests: make sure checksrc runs on header files too
 o tests: set LC_ALL=en_US.UTF-8 instead of blank in several tests
 o tests: use DoH feature for DoH tests
 o tests: use \r\n for log messages in WSL
 o tool_operate: fix mem leak when failed config parse
 o travis: Fix error detection
 o travis: abandon coveralls, it is not reliable
 o travis: build ngtcp2 with --enable-lib-only
 o travis: export the CC/CXX variables when set
 o vtls: make BearSSL possible to set with CURL_SSL_BACKEND
 o winbuild: Define CARES_STATICLIB when WITH_CARES=static
 o winbuild: Document CURL_STATICLIB requirement for static libcurl

This release includes the following known bugs:

 o see docs/KNOWN_BUGS (https://curl.haxx.se/docs/knownbugs.html)
   2019-11-06 10:17:29 by Leonardo Taccari | Files touched by this commit (4) | Package updated
Log message:
curl: Update to 7.67.0

This release includes the following changes:

 o curl: added --no-progress-meter
 o urlapi: CURLU_NO_AUTHORITY allows empty authority/host part

This release includes the following bugfixes:

 o BINDINGS: five new bindings addded
 o CURLOPT_TIMEOUT.3: Clarify transfer timeout time includes queue time
 o CURLOPT_TIMEOUT.3: remove the mention of "minutes"
 o ESNI: initial build/setup support
 o FTP: FTPFILE_NOCWD: avoid redundant CWDs
 o FTP: allow "rubbish" prepended to the SIZE response
 o FTP: remove trailing slash from path for LIST/MLSD
 o FTP: skip CWD to entry dir when target is absolute
 o FTP: url-decode path before evaluation
 o HTTP3.md: move -p for mkdir, remove -j for make
 o HTTP3: fix invalid use of sendto for connected UDP socket
 o HTTP3: fix ngtcp2 Windows build
 o HTTP3: fix prefix parameter for ngtcp2 build
 o HTTP3: fix typo somehere1 > somewhere1
 o HTTP3: show an --alt-svc using example too
 o INSTALL: add missing space for configure commands
 o INSTALL: add vcpkg installation instructions
 o README: minor grammar fix
 o altsvc: accept quoted ma and persist values
 o altsvc: both backends run h3-23 now
 o appveyor: Add MSVC ARM64 build
 o appveyor: Use two parallel compilation on appveyor with CMake
 o appveyor: add --disable-proxy autotools build
 o appveyor: add 32-bit MinGW-w64 build
 o appveyor: add a winbuild
 o appveyor: add a winbuild that uses VS2017
 o appveyor: make winbuilds with DEBUG=no/yes and VS 2015/2017
 o appveyor: publish artifacts on appveyor
 o appveyor: upgrade VS2017 to VS2019
 o asyn-thread: make use of Curl_socketpair() where available
 o asyn-thread: s/AF_LOCAL/AF_UNIX for Solaris
 o build: Remove unused HAVE_LIBSSL and HAVE_LIBCRYPTO defines
 o checksrc: fix uninitialized variable warning
 o chunked-encoding: stop hiding the CURLE_BAD_CONTENT_ENCODING error
 o cirrus: Increase the git clone depth
 o cirrus: Switch the FreeBSD 11.x build to 11.3 and add a 13.0 build
 o cirrus: switch off blackhole status on the freebsd CI machines
 o cleanups: 21 various PVS-Studio warnings
 o configure: only say ipv6 enabled when the variable is set
 o configure: remove all cyassl references
 o conn-reuse: requests wanting NTLM can reuse non-NTLM connections
 o connect: return CURLE_OPERATION_TIMEDOUT for errno == ETIMEDOUT
 o connect: silence sign-compare warning
 o cookie: avoid harmless use after free
 o cookie: pass in the correct cookie amount to qsort()
 o cookies: change argument type for Curl_flush_cookies
 o cookies: using a share with cookies shouldn't enable the cookie engine
 o copyrights: update copyright notices to 2019
 o curl: create easy handles on-demand and not ahead of time
 o curl: ensure HTTP 429 triggers --retry
 o curl: exit the create_transfers loop on errors
 o curl: fix memory leaked by parse_metalink()
 o curl: load large files with -d @ much faster
 o docs/HTTP3: fix `--with-ssl` ngtcp2 configure flag
 o docs: added multi-event.c example
 o docs: disambiguate CURLUPART_HOST is for host name (ie no port)
 o docs: note on failed handles not being counted by curl_multi_perform
 o doh: allow only http and https in debug mode
 o doh: avoid truncating DNS QTYPE to lower octet
 o doh: clean up dangling DOH memory on easy close
 o doh: fix (harmless) buffer overrun
 o doh: fix undefined behaviour and open up for gcc and clang optimization
 o doh: return early if there is no time left
 o examples/sslbackend: fix -Wchar-subscripts warning
 o examples: remove the "this exact code has not been verified"
 o git: add tests/server/disabled to .gitignore
 o gnutls: make gnutls_bye() not wait for response on shutdown
 o http2: expire a timeout at end of stream
 o http2: prevent dup'ed handles to send dummy PRIORITY frames
 o http2: relax verification of :authority in push promise requests
 o http2_recv: a closed stream trumps pause state
 o http: lowercase headernames for HTTP/2 and HTTP/3
 o ldap: Stop using wide char version of ldapp_err2string
 o ldap: fix OOM error on missing query string
 o mbedtls: add error message for cert validity starting in the future
 o mime: when disabled, avoid C99 macro
 o ngtcp2: adapt to API change
 o ngtcp2: compile with latest ngtcp2 + nghttp3 draft-23
 o ngtcp2: remove fprintf() calls
 o openssl: close_notify on the FTP data connection doesn't mean closure
 o openssl: fix compiler warning with LibreSSL
 o openssl: use strerror on SSL_ERROR_SYSCALL
 o os400: getpeername() and getsockname() return ebcdic AF_UNIX sockaddr
 o parsedate: fix date parsing disabled builds
 o quiche: don't close connection at end of stream
 o quiche: persist connection details (fixes -I with --http3)
 o quiche: set 'drain' when returning without having drained the queues
 o quiche: update HTTP/3 config creation to new API
 o redirect: handle redirects to absolute URLs containing spaces
 o runtests: get textaware info from curl instead of perl
 o schannel: reverse the order of certinfo insertions
 o schannel_verify: Fix concurrent openings of CA file
 o security: silence conversion warning
 o setopt: handle ALTSVC set to NULL
 o setopt: make it easier to add new enum values
 o setopt: store CURLOPT_RTSP_SERVER_CSEQ correctly
 o smb: check for full size message before reading message details
 o smbserver: fix Python 3 compatibility
 o socks: Fix destination host shown on SOCKS5 error
 o test1162: disable MSYS2's POSIX path conversion
 o test1591: fix spelling of http feature
 o tests: add `connect to non-listen` keywords
 o tests: fix narrowing conversion warnings
 o tests: fix the test 3001 cert failures
 o tests: makes tests succeed when using --disable-proxy
 o tests: use %FILE_PWD for file:// URLs
 o tests: use port 2 instead of 60000 for a safer non-listening port
 o tool_operate: Fix retry sleep time shown to user when Retry-After
 o travis: Add an ARM64 build
 o url: Curl_free_request_state() should also free doh handles
 o url: don't set appconnect time for non-ssl/non-ssh connections
 o url: fix the NULL hostname compiler warning
 o url: normalize CURLINFO_EFFECTIVE_URL
 o url: only reuse TLS connections with matching pinning
 o urlapi: avoid index underflow for short ipv6 hostnames
 o urlapi: fix URL encoding when setting a full URL
 o urlapi: fix unused variable warning
 o urlapi: question mark within fragment is still fragment
 o urldata: use 'bool' for the bit type on MSVC compilers
 o vtls: Fix comment typo about macosx-version-min compiler flag
 o vtls: fix narrowing conversion warnings
 o winbuild/MakefileBuild.vc: Add vssh
 o winbuild/MakefileBuild.vc: Fix line endings
 o winbuild: Add manifest to curl.exe for proper OS version detection
 o winbuild: add ENABLE_UNICODE option
   2019-09-18 09:21:08 by Adam Ciarcinski | Files touched by this commit (2)
Log message:
curl: http2 is now a suggested option; bump revision