Scott Cantor

Show:

What's happening?

  • nonblock.c missing from Windows makefiles

    The Makefile.vc? files appear to be excluding a new source file from the build, so it fails to link without manual correction.

    2009-08-12 19:04:48 UTC in curl and libcurl

  • Wildcard cert name checking and null termination

    There's a new wildcard cert attack made public here: http://www.theregister.co.uk/2009/07/30/universal_ssl_certificate/ I took a pass over the name matching code, and unless something in openssl or the code that gets at the subject names is somehow immune, the matching logic seems to be vulnerable. If not, feel free to close. If a fix is needed, I think it will require capturing the...

    2009-07-30 22:27:24 UTC in curl and libcurl

  • Makefile.VC9 not included with release

    The changelog indicates a makefile for VS2008 is now available, but it isn't in the package yet. I couldn't determine how the file manifest for the package is determined, so I don't have a fix. I was able to generate the makefile after a cvs checkout.

    2009-01-30 19:34:26 UTC in curl and libcurl

  • Comment: SSL callback option with NSS-linked libcurl

    Thanks, I agree with your response, with a couple of notes: - I don't *think* the docs on that callback option explicitly say that it's for OpenSSL only, even though I assumed it probably was. If you don't currently plan to add support for library-specific callbacks, you may want to add that to the page. - The notes on the version info API are a little vague about what to look for because...

    2008-03-25 15:09:30 UTC in curl and libcurl

  • SSL callback option with NSS-linked libcurl

    I got a report that Fedora is now linking libcurl to NSS instead of OpenSSL, and I think there's a portability issue for applications using the SSL context callback option, since at least the OpenSSL version of that feature uses an OpenSSL-specific structure. I think the NSS implementation may just not support the callback option yet, but I'm not sure because the code was failing a bit...

    2008-03-24 15:59:47 UTC in curl and libcurl

  • Comment: Recent addition of ws2tcpip.h to curl.h breaks C++ apps

    Appears to work, thanks.

    2007-11-07 16:07:36 UTC in curl and libcurl

  • Comment: Recent addition of ws2tcpip.h to curl.h breaks C++ apps

    As a quick fix, this change to curl.h in that spot might be an option: #if !(defined(_WINSOCKAPI_) || defined(_WINSOCK_H)) /* The check above prevents the winsock2 inclusion if winsock.h already was included, since they can't co-exist without problems */ #ifdef __cplusplus } #endif #include #include #ifdef __cplusplus extern "C" {...

    2007-11-02 21:26:25 UTC in curl and libcurl

  • Recent addition of ws2tcpip.h to curl.h breaks C++ apps

    Bit of a mess I think, this must have to do with the whole socklen_t mess I've run into with the older Windows compiler, but this recent addition of ws2tcpip.h to fix that issue is causing a C++ build problem with the new 7.17.1 release. That header pulls in the Microsoft header at the bottom of the file. That in turn includes an actual C++ template (do NOT ask me why) and because...

    2007-11-02 21:18:44 UTC in curl and libcurl

  • Windows makefiles missing wldap32.lib

    I think a change was made to the LDAP support, and the Makefile.vc6 and Makefile.vc8 files are missing a link reference to wldap32.lib in the WINLIBS macro. A fresh build now results in undefined LDAP function symbols without that added. Last successful version I had was 7.16.2, and 7.17.0 is failing, so it broke between there.

    2007-09-15 05:34:03 UTC in curl and libcurl

  • Comment: Request option to disable SSLv2

    Quick update...it uses SSL_CTX_set_options using some bit flags that turn off specific protocols, you'll see it in s_client.c. It looks like it only works with "non-buggy" servers, but that's not too surprising. Don't know how far back the option exists, I'm looking at 0.9.8.

    2007-08-03 21:38:16 UTC in curl and libcurl

About Me


Send me a message