The NetBSD Project

CVS log for pkgsrc/www/gnurl/distinfo

[BACK] Up to [cvs.NetBSD.org] / pkgsrc / www / gnurl

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.7 / (download) - annotate - [select for diffs], Thu Apr 30 20:31:28 2020 UTC (3 months ago) by nikita
Branch: MAIN
CVS Tags: pkgsrc-2020Q2-base, pkgsrc-2020Q2, HEAD
Changes since 1.6: +5 -5 lines
Diff to previous 1.6 (colored)

www/gnurl: Update to Version 7.70.0

Changelog:

CHANGELOG for gnurl-7.70.0 released 2020-04-30 (curl 7.70.0)
------------------------------------------------------------

gnurl:
    no significant changes for distributors. configure-gnurl is now
    included in the dist tarball.
    The one change you will notice if you check signatures is a change
    of the pgp key used (check the gnurl website for details).

curl:
Fixed in 7.70.0 - April 29 2020

Changes:

    curl: add --ssl-revoke-best-effort to allow a "best effort"
    revocation check
    mqtt: add new experimental protocol
    schannel: add "best effort" revocation check option:
    CURLSSLOPT_REVOKE_BEST_EFFORT
    writeout: support to generate JSON output with '%{json}'

Bugfixes:

    appveyor: add Unicode winbuild jobs
    appveyor: completely disable tests that fail to timeout early
    appveyor: show failed tests in log even if test is ignored
    appveyor: sort builds by type and add two new variants
    appveyor: turn disabled tests into ignored result tests
    appveyor: use random test server ports based upon APPVEYOR_API_URL
    build: fixed build for systems with select() in unistd.h
    buildconf: avoid using tempfile when removing files
    checksrc: warn on obvious conditional blocks on the same line as
    if()
    CI-fuzz: increase fuzz time to 40 minutes
    ci/tests: fix Azure Pipelines not running Windows containers
    CI: add build with ngtcp2 + gnutls on Travis CI
    CI: bring GitHub Actions fuzzing job in line with macOS jobs
    CI: migrate macOS jobs from Azure and Travis CI to GitHub Actions
    CI: remove default Ubuntu build from GitHub Actions
    cirrus: no longer ignore test 504 which is working again
    cirrus: re-enable the FreeBSD 13 CI builds
    cleanup: insert newline after if() conditions
    cmake: add aliases so exported target names are available in tree
    cmake: add CMAKE_MSVC_RUNTIME_LIBRARY
    cmake: add support for building with wolfSSL
    cmake: Avoid MSVC C4273 warnings in send/recv checks
    cmdline: fix handling of OperationConfig linked list (--next)
    compressed.d: stress that the headers are not modified
    config: remove all defines of HAVE_DES_H
    configure: convert -I to -isystem as a last step
    configure: document 'compiler_num' for gcc
    configure: don't check for Security.framework when cross-compiling
    configure: fix -pedantic-errors for GCC 5 and later
    configure: remove use of -vec-report0 from CFLAGS with icc
    connect: happy eyeballs cleanup
    connect: store connection info for QUIC connections
    copyright: fix out-of-date copyright ranges and missing headers
    curl-functions.m4: remove inappropriate AC_REQUIRE
    curl.h: remnove CURL_VERSION_ESNI. Never supported nor documented
    curl.h: update comment typo
    curl: allow both --etag-compare and --etag-save with same file name
    curl_setup: define _WIN32_WINNT_[OS] symbols
    CURLINFO_CONDITION_UNMET: return true for 304 http status code
    CURLINFO_NUM_CONNECTS: improve accuracy
    CURLOPT_WRITEFUNCTION.3: add inline example and new see-also
    dist: add mail-rcpt-allowfails.d to the tarball
    docs/make: generate curl.1 from listed files only
    docs: add warnings about FILE: URLs on Windows
    easy: fix curl_easy_duphandle for builds missing IPv6 that use
    c-ares
    examples/sessioninfo.c: add include to fix compiler warning
    github actions: run when pushed to master or */ci + PRs
    gnutls: bump lowest supported version to 3.1.10
    gnutls: Don't skip really long certificate fields
    gnutls: ensure TLS 1.3 when SRP isn't requested
    gopher: check remaining time left during write busy loop
    gskit: use our internal select wrapper for portability
    http2: Fix erroneous debug message that h2 connection closed
    http: don't consider upload done if the request isn't completely
    sent off
    http: free memory when Alt-Used header creation fails due to OOM
    lib/mk-ca-bundle: skip empty certs
    lib670: use the same Win32 API check as all other lib tests
    lib: fix typos in comments and errormessages
    lib: never define CURL_CA_BUNDLE with a getenv
    libcurl-multi.3: added missing full stop
    libssh: avoid options override by configuration files
    libssh: Use new ECDSA key types to check known hosts
    mailmap: fixup a few author names/fields
    Makefile.m32: Improve windres parameter compatibility
    Makefile: run the cd commands in a subshell
    memdebug: don't log free(NULL)
    mime: properly check Content-Type even if it has parameters
    multi-ssl: reset the SSL backend on `Curl_global_cleanup()`
    multi: improve parameter check for curl_multi_remove_handle
    nghttp2: 1.12.0 required
    ngtcp2: update to git master for the key installation API change
    nss: check for PK11_CreateDigestContext() returning NULL
    openssl: adapt to functions marked as deprecated since version 3
    OS400: update strings for ccsid-ifier (fixes the build)
    output.d: quote the URL when globbing
    packages: add OS400/chkstrings.c to the dist
    RELEASE-PROCEDURE.md: run the copyright.pl script!
    Revert "file: on Windows, refuse paths that start with \\"
    runtests: always put test number in servercmd file
    runtests: provide nicer errormsg when protocol "dump" file is empty
    schannel: Fix blocking timeout logic
    schannel: support .P12 or .PFX client certificates
    scripts/release-notes.pl: add helper script for RELEASE-NOTES
    maintenance
    select: make Curl_socket_check take timediff_t timeout
    select: move duplicate select preparation code into Curl_select
    select: remove typecast from SOCKET_WRITABLE/READABLE macros
    server/getpart: make the "XML-parser" stricter
    server/resolve: remove AI_CANONNAME to make macos tell the truth
    smtp: set auth correctly
    sockfilt: add logmsg output to select_ws_wait_thread on Windows
    sockfilt: fix broken pipe on Windows to be ready in select_ws
    sockfilt: fix handling of ready closed sockets on Windows
    sockfilt: fix race-condition of waiting threads and event handling
    socks: Fix blocking timeout logic
    src: Remove C99 constructs to ensure C89 compliance
    SSLCERTS.md: Fix example code for setting CA cert file
    test1148: tolerate progress updates better (again)
    test1154: set a proper name
    test1177: verify that all the CURL_VERSION_ bits are documented
    test1566: verify --etag-compare that gets a 304 back
    test1908: avoid using fixed port number in test data
    test2043: use revoked.badssl.com instead of revoked.grc.com
    test2100: fix static port instead of dynamic value being used
    tests/data: fix some XML formatting issues in test cases
    tests/FILEFORMAT: converted to markdown and extended
    tests/server/util.c: use curl_off_t instead of long for pid
    tests: add %NOLISTENPORT and use it
    tests: add Windows compatible pidwait like pidkill and pidterm
    tests: fix conflict between Cygwin/msys and Windows PIDs
    tests: introduce preprocessed test cases
    tests: make Python-based servers compatible with Python 2 and 3
    tests: make runtests check that disabled tests exists
    tests: move pingpong server to dynamic listening port
    tests: remove python_dependencies for smbserver from our tree
    tests: run the RTSP test server on a dynamic port number
    tests: run the SOCKS test server on a dynamic port number
    tests: run the sws server on "any port"
    tests: run the TFTP test server on a dynamic port number
    tests: use Cygwin/msys PIDs for stunnel and sshd on Windows
    tls: remove the BACKEND define kludge from most backends
    tool: do not declare functions with Curl_ prefix
    tool_operate: fix add_parallel_transfers when more are in queue
    transfer: cap retries of "dead connections" to 5
    transfer: Switch PUT to GET/HEAD on 303 redirect
    travis: bump the wolfssl CI build to use 4.4.0
    travis: update the ngtcp2 build to use the latest OpenSSL patch
    url: allow non-HTTPS altsvc-matching for debug builds
    version: add 'cainfo' and 'capath' to version info struct
    version: increase buffer space for ssl version output
    version: skip idn2_check_version() check and add precaution
    vquic: add support for GnuTLS backend of ngtcp2
    vtls: fix ssl_config memory-leak on out-of-memory
    warnless: remove code block for icc that didn't work
    windows: enable UnixSockets with all build toolchains
    windows: suppress UI in all CryptAcquireContext() calls

Revision 1.6 / (download) - annotate - [select for diffs], Tue Apr 7 16:45:39 2020 UTC (3 months, 3 weeks ago) by nikita
Branch: MAIN
Changes since 1.5: +5 -6 lines
Diff to previous 1.5 (colored)

gnurl: Update to 7.69.1

Changelog:

CHANGELOG (curl)
----------

Fixed in 7.69.1 - March 11 2020

Bugfixes:

    ares: store dns parameters for duphandle
    cirrus-ci: disable the FreeBSD 13 builds
    curl_share_setopt.3: Note sharing cookies doesn't enable the engine
    lib1564: reduce number of mid-wait wakeup calls
    libssh: Fix matching user-specified MD5 hex key
    MANUAL: update a dict-using command line
    mime: do not perform more than one read in a row
    mime: fix the binary encoder to handle large data properly
    mime: latch last read callback status
    multi: skip EINTR check on wakeup socket if it was closed
    pause: bail out on bad input
    pause: force a connection recheck after unpausing (take 2)
    pause: return early for calls that don't change pause state
    runtests.1: rephrase how to specify what tests to run
    runtests: fix missing use of exe_ext helper function
    seek: fix fall back for missing ftruncate on Windows
    sftp: fix segfault regression introduced by #4747 in 7.69.0
    sha256: Added SecureTransport implementation
    sha256: Added WinCrypt implementation
    socks4: fix host resolve regression
    socks5: host name resolv regression fix
    tests/server: fix missing use of exe_ext helper function
    tests: fix static ip:port instead of dynamic values being used
    tests: make sleeping portable by avoiding select
    unit1612: fix the inclusion and compilation of the HMAC unit test
    urldata: remove the 'stream_was_rewound' connectdata struct member
    version: make curl_version* thread-safe without using global context

Fixed in 7.69.0 - March 4 2020

Changes:

    polarssl: removed
    smtp: add CURLOPT_MAIL_RCPT_ALLLOWFAILS and --mail-rcpt-allowfails
    wolfSSH: new SSH backend

Bugfixes:

    altsvc: improved header parser
    altsvc: keep a copy of the file name to survive handle reset
    altsvc: make saving the cache an atomic operation
    altsvc: use h3-27
    azure: disable brotli on the macos debug-builds
    build: remove all HAVE_OPENSSL_ENGINE_H defines
    checksrc.bat: Fix not being able to run script from the main curl dir
    cleanup: fix several comment typos
    cleanup: fix typos and wording in docs and comments
    cmake: add support for CMAKE_LTO option
    cmake: clean up and improve build procedures
    cmake: enable SMB for Windows builds
    cmake: improve libssh2 check on Windows
    cmake: Show HTTPS-proxy in the features output
    cmake: support specifying the target Windows version
    cmake: use check_symbol_exists also for inet_pton
    configure.ac: fix comments about --with-quiche
    configure: disable metalink if mbedTLS is specified
    configure: disable metalink support for incompatible SSL/TLS
    conn: do not reuse connection if SOCKS proxy credentials differ
    conncache: removed unused Curl_conncache_bundle_size()
    connect: remove some spurious infof() calls
    connection reuse: respect the max_concurrent_streams limits
    contributors: also include people who contributed to curl-www
    contrithanks: use the most recent tag by default
    cookie: check __Secure- and __Host- case sensitively
    cookies: make saving atomic with a rename
    create-dirs.d: mention the mode
    curl: avoid using strlen for testing if a string is empty
    curl: error on --alt-svc use w/o support
    curl: let -D merge headers in one file again
    curl: make #0 not output the full URL
    curl: make the -# spaceship bar not wrap the line
    curl: remove 'config' field from OutStruct
    curl:progressbarinit: ignore column width from terminals < 20
    curl_escape.3: add a link to curl_free
    curl_getenv.3: fix the memory handling description
    curl_global_init: assume the EINTR bit by default
    curl_global_init: move the IPv6 works status bool to multi handle
    CURLINFO_COOKIELIST.3: Fix example
    CURLOPT_ALTSVC_CTRL.3: fix the DEFAULT wording
    CURLOPT_PROXY_SSL_OPTIONS.3: Sync with CURLOPT_SSL_OPTIONS.3
    CURLOPT_REDIR_PROTOCOLS.3: update the DEFAULT section
    data.d: remove "Multiple files can also be specified"
    digest: do not quote algorithm in HTTP authorisation
    docs/HTTP3: add --enable-alt-svc to curl's configure
    docs/HTTP3: update the OpenSSL branch to use for ngtcp2
    docs: fix typo on CURLINFO_RETRY_AFTER
    easy: remove dead code
    form.d: fix two minor typos
    ftp: convert 'sock_accepted' to a plain boolean
    ftp: remove superfluous checking for crlf in user or pwd
    ftp: shrink temp buffers used for PORT
    github action: add CIFuzz
    github: Instructions to post "uname -a" on Unix systems in issues
    GnuTLS: always send client cert
    gtls: fixed compilation when using GnuTLS < 3.5.0
    hostip: move code to resolve IP address literals to `Curl_resolv`
    HTTP-COOKIES: describe the cookie file format
    HTTP-COOKIES: mention that a trailing newline is required
    http2: make pausing/unpausing set/clear local stream window
    http2: now requires nghttp2 >= 1.12.0
    http: added 417 response treatment
    http: increase EXPECT_100_THRESHOLD to 1Mb
    http: mark POSTs with no body as "upload done" from the start
    http: move "oauth_bearer" from connectdata to Curl_easy
    include: remove non-curl prefixed defines
    KNOWN_BUGS: Multiple methods in a single WWW-Authenticate: header
    libssh2: add support for forcing a hostkey type
    libssh2: fix variable type
    libssh: improve known hosts handling
    llist: removed unused Curl_llist_move()
    location.d: the method change is from POST to GET only
    md4: fixed compilation issues when using GNU TLS gcrypt
    md4: use init/update/final functions in Secure Transport
    md5: added implementation for mbedTLS
    mk-ca-bundle: add support for CKA_NSS_SERVER_DISTRUST_AFTER
    multi: change curl_multi_wait/poll to error on negative timeout
    multi: fix outdated comment
    multi: if Curl_readwrite sets 'comeback' use expire, not loop
    multi_done: if multiplexed, make conn->data point to another transfer
    multi_wait: stop loop when sread() returns zero
    ngtcp2: add error code for QUIC connection errors
    ngtcp2: fixed to only use AF_INET6 when ENABLE_IPV6
    ngtcp2: update to git master and its draft-25 support
    ntlm: move the winbind data into the NTLM data structure
    ntlm: pass the Curl_easy structure to the private winbind functions
    ntlm: removed the dependency on the TLS libaries when using MD5
    ntlm_wb: use Curl_socketpair() for greater portability
    oauth2-bearer.d: works for HTTP too
    openssl: make CURLINFO_CERTINFO not truncate x509v3 fields
    openssl: remove redundant assignment
    os400: fixed the build
    pause: force-drain the transfer on unpause
    quiche: update to draft-25
    README: mention that the docs is in docs/
    RELEASE-PROCEDURE: feature win is closed post-release a few days
    runtests: make random seed fixed for a month
    runtests: restore the command log
    schannel: make CURLOPT_CAINFO work better on Windows 7
    schannel_verify: Fix alt names manual verify for UNICODE builds
    sha256: use crypto implementations when available
    singleuse.pl: support new API functions, fix curl_dbg_ handling
    smtp: support the SMTPUTF8 extension
    smtp: support UTF-8 based host names in MAIL FROM
    SOCKS: make the connect phase non-blocking
    strcase: turn Curl_raw_tolower into static
    strerror: increase STRERROR_LEN 128 -> 256
    test1323: added missing 'unit test' feature requirement
    tests: add a unit test for MD4 digest generation
    tests: add a unit test for SHA256 digest generation
    tests: add a unit test for the HMAC hash generation
    tests: deduce the tool name from the test case for unit tests
    tests: fix Python 3 compatibility of smbserver.py
    tool_dirhie: allow directory traversal during creation
    tool_homedir: change GetEnv() to use libcurl's curl_getenv()
    tool_util: improve Windows version of tvnow()
    travis: update non-OpenSSL Linux jobs to Bionic
    url: include the failure reason when curl_win32_idn_to_ascii() fails
    urlapi: guess scheme properly with credentials given
    urldata: do string enums without #ifdefs for build scripts
    vtls: refactor Curl_multissl_version to make the code clearer
    win32: USE_WIN32_CRYPTO to enable Win32 based MD4, MD5 and SHA256

Fixed in 7.68.0 - January 8 2020

Changes:

    TLS: add BearSSL vtls implementation
    XFERINFOFUNCTION: support CURL_PROGRESSFUNC_CONTINUE
    curl: add --etag-compare and --etag-save
    curl: add --parallel-immediate
    multi: add curl_multi_wakeup()
    openssl: CURLSSLOPT_NO_PARTIALCHAIN can disable partial cert chains

Bugfixes:

    CVE-2019-15601: file: on Windows, refuse paths that start with \\
    Azure Pipelines: add several builds
    CMake: add support for building with the NSS vtls backend
    CURL-DISABLE: initial docs for the CURL_DISABLE_* defines
    CURLOPT_HEADERFUNCTION.3: Document that size is always 1
    CURLOPT_QUOTE.3: fix typos
    CURLOPT_READFUNCTION.3: fix the example
    CURLOPT_URL.3: "curl supports SMB version 1 (only)"
    CURLOPT_VERBOSE.3: see also ERRORBUFFER
    HISTORY: added cmake, HTTP/3 and parallel downloads with curl
    HISTORY: the SMB(S) support landed in 2014
    INSTALL.md: provide Android build instructions
    KNOWN_BUGS: Connection information when using TCP Fast Open
    KNOWN_BUGS: LDAP on Windows doesn't work correctly
    KNOWN_BUGS: TLS session cache doesn't work with TFO
    OPENSOCKETFUNCTION.3: correct the purpose description
    TrackMemory tests: always remove CR before LF
    altsvc: bump to h3-24
    altsvc: make the save function ignore NULL filenames
    build: Disable Visual Studio warning "conditional expression is constant"
    build: fix for CURL_DISABLE_DOH
    checksrc.bat: Add a check for vquic and vssh directories
    checksrc: repair the copyrightyear check
    cirrus-ci: enable clang sanitizers on freebsd 13
    cirrus: Drop the FreeBSD 10.4 build
    config-win32: cpu-machine-OS for Windows on ARM
    configure: avoid unportable `==' test(1) operator
    configure: enable IPv6 support without `getaddrinfo`
    configure: fix typo in help text
    conncache: CONNECT_ONLY connections assumed always in-use
    conncache: fix multi-thread use of shared connection cache
    copyrights: fix copyright year range
    create_conn: prefer multiplexing to using new connections
    curl -w: handle a blank input file correctly
    curl.h: add two missing defines for "pre ISO C" compilers
    curl/parseconfig: fix mem-leak
    curl/parseconfig: use curl_free() to free memory allocated by libcurl
    curl: cleanup multi handle on failure
    curl: fix --upload-file . hangs if delay in STDIN
    curl: fix -T globbing
    curl: improved cleanup in upload error path
    curl: make a few char pointers point to const char instead
    curl: properly free mimepost data
    curl: show better error message when no homedir is found
    curl: show error for --http3 if libcurl lacks support
    curl_setup_once: consistently use WHILE_FALSE in macros
    define: remove HAVE_ENGINE_LOAD_BUILTIN_ENGINES, not used anymore
    docs: Change 'experiemental' to 'experimental'
    docs: TLS SRP doesn't work with TLS 1.3
    docs: fix several typos
    docs: mention CURL_MAX_INPUT_LENGTH restrictions
    doh: improved both encoding and decoding
    doh: make it behave when built without proxy support
    examples/postinmemory.c: Call curl_global_cleanup always
    examples/url2file.c: corrected erroneous comment
    examples: add multi-poll.c
    global_init: undo the "intialized" bump in case of failure
    hostip: suppress compiler warning
    http_ntlm: Remove duplicate NSS initialisation
    lib: Move lib/ssh.h -> lib/vssh/ssh.h
    lib: fix compiler warnings with `CURL_DISABLE_VERBOSE_STRINGS`
    lib: fix warnings found when porting to NuttX
    lib: remove ASSIGNWITHINCONDITION exceptions, use our code style
    lib: remove erroneous +x file permission on some c files
    libssh2: add support for ECDSA and ed25519 knownhost keys
    multi.h: remove INITIAL_MAX_CONCURRENT_STREAMS from public header
    multi: free sockhash on OOM
    multi_poll: avoid busy-loop when called without easy handles attached
    ngtcp2: Support the latest update key callback type
    ngtcp2: fix thread-safety bug in error-handling
    ngtcp2: free used resources on disconnect
    ngtcp2: handle key updates as ngtcp2 master branch tells us
    ngtcp2: increase QUIC window size when data is consumed
    ngtcp2: use overflow buffer for extra HTTP/3 data
    ntlm: USE_WIN32_CRYPTO check removed to get USE_NTLM2SESSION set
    ntlm_wb: fix double-free in OOM
    openssl: Revert to less sensitivity for SYSCALL errors
    openssl: improve error message for SYSCALL during connect
    openssl: prevent recursive function calls from ctx callbacks
    openssl: retrieve reported LibreSSL version at runtime
    openssl: set X509_V_FLAG_PARTIAL_CHAIN by default
    parsedate: offer a getdate_capped() alternative
    pause: avoid updating socket if done was already called
    projects: Fix Visual Studio projects SSH builds
    projects: Fix Visual Studio wolfSSL configurations
    quiche: reject HTTP/3 headers in the wrong order
    remove_handle: clear expire timers after multi_done()
    runtests: --repeat=[num] to repeat tests
    runtests: introduce --shallow to reduce huge torture tests
    schannel: fix --tls-max for when min is --tlsv1 or default
    setopt: Fix ALPN / NPN user option when built without HTTP2
    strerror: Add Curl_winapi_strerror for Win API specific errors
    strerror: Fix an error looking up some Windows error strings
    strerror: Fix compiler warning "empty expression"
    system.h: fix for MCST lcc compiler
    test/sws: search for "Testno:" header unconditionally if no testno
    test1175: verify symbols-in-versions and libcurl-errors.3 in sync
    test1270: a basic -w redirect_url test
    test1456: remove the use of a fixed local port number
    test1558: use double slash after file:
    test1560: require IPv6 for IPv6 aware URL parsing
    tests/lib1557: fix mem-leak in OOM
    tests/lib1559: fix mem-leak in OOM
    tests/lib1591: free memory properly on OOM, in the trailers callback
    tests/unit1607: fix mem-leak in OOM
    tests/unit1609: fix mem-leak in OOM
    tests/unit1620: fix bad free in OOM
    tests: Change NTLM tests to require SSL
    tests: Fix bounce requests with truncated writes
    tests: fix build with `CURL_DISABLE_DOH`
    tests: fix permissions of ssh keys in WSL
    tests: make it possible to set executable extensions
    tests: make sure checksrc runs on header files too
    tests: set LC_ALL=en_US.UTF-8 instead of blank in several tests
    tests: use DoH feature for DoH tests
    tests: use \r\n for log messages in WSL
    tool_operate: fix mem leak when failed config parse
    travis: Fix error detection
    travis: abandon coveralls, it is not reliable
    travis: build ngtcp2 with --enable-lib-only
    travis: export the CC/CXX variables when set
    vtls: make BearSSL possible to set with CURL_SSL_BACKEND
    winbuild: Define CARES_STATICLIB when WITH_CARES=static
    winbuild: Document CURL_STATICLIB requirement for static libcurl

Revision 1.5 / (download) - annotate - [select for diffs], Mon Nov 18 18:34:10 2019 UTC (8 months, 2 weeks ago) by ng0
Branch: MAIN
CVS Tags: pkgsrc-2020Q1-base, pkgsrc-2020Q1, pkgsrc-2019Q4-base, pkgsrc-2019Q4
Changes since 1.4: +6 -5 lines
Diff to previous 1.4 (colored)

gnurl: Update to 7.67.0

Changelog:

Changes:
7.67.0
------
This release includes the following changes:

 o curl: added --no-progress-meter
 o setopt: CURLMOPT_MAX_CONCURRENT_STREAMS is new
 o urlapi: CURLU_NO_AUTHORITY allows empty authority/host part

This release includes the following bugfixes:

 o BINDINGS: five new bindings addded
 o CURLOPT_TIMEOUT.3: Clarify transfer timeout time includes queue time
 o CURLOPT_TIMEOUT.3: remove the mention of "minutes"
 o ESNI: initial build/setup support
 o FTP: FTPFILE_NOCWD: avoid redundant CWDs
 o FTP: allow "rubbish" prepended to the SIZE response
 o FTP: remove trailing slash from path for LIST/MLSD
 o FTP: skip CWD to entry dir when target is absolute
 o FTP: url-decode path before evaluation
 o HTTP3.md: move -p for mkdir, remove -j for make
 o HTTP3: fix invalid use of sendto for connected UDP socket
 o HTTP3: fix ngtcp2 Windows build
 o HTTP3: fix prefix parameter for ngtcp2 build
 o HTTP3: fix typo somehere1 > somewhere1
 o HTTP3: show an --alt-svc using example too
 o INSTALL: add missing space for configure commands
 o INSTALL: add vcpkg installation instructions
 o README: minor grammar fix
 o altsvc: accept quoted ma and persist values
 o altsvc: both backends run h3-23 now
 o appveyor: Add MSVC ARM64 build
 o appveyor: Use two parallel compilation on appveyor with CMake
 o appveyor: add --disable-proxy autotools build
 o appveyor: add 32-bit MinGW-w64 build
 o appveyor: add a winbuild
 o appveyor: add a winbuild that uses VS2017
 o appveyor: make winbuilds with DEBUG=no/yes and VS 2015/2017
 o appveyor: publish artifacts on appveyor
 o appveyor: upgrade VS2017 to VS2019
 o asyn-thread: make use of Curl_socketpair() where available
 o asyn-thread: s/AF_LOCAL/AF_UNIX for Solaris
 o build: Remove unused HAVE_LIBSSL and HAVE_LIBCRYPTO defines
 o checksrc: fix uninitialized variable warning
 o chunked-encoding: stop hiding the CURLE_BAD_CONTENT_ENCODING error
 o cirrus: Increase the git clone depth
 o cirrus: Switch the FreeBSD 11.x build to 11.3 and add a 13.0 build
 o cirrus: switch off blackhole status on the freebsd CI machines
 o cleanups: 21 various PVS-Studio warnings
 o configure: only say ipv6 enabled when the variable is set
 o configure: remove all cyassl references
 o conn-reuse: requests wanting NTLM can reuse non-NTLM connections
 o connect: return CURLE_OPERATION_TIMEDOUT for errno == ETIMEDOUT
 o connect: silence sign-compare warning
 o cookie: avoid harmless use after free
 o cookie: pass in the correct cookie amount to qsort()
 o cookies: change argument type for Curl_flush_cookies
 o cookies: using a share with cookies shouldn't enable the cookie engine
 o copyrights: update copyright notices to 2019
 o curl: create easy handles on-demand and not ahead of time
 o curl: ensure HTTP 429 triggers --retry
 o curl: exit the create_transfers loop on errors
 o curl: fix memory leaked by parse_metalink()
 o curl: load large files with -d @ much faster
 o docs/HTTP3: fix `--with-ssl` ngtcp2 configure flag
 o docs: added multi-event.c example
 o docs: disambiguate CURLUPART_HOST is for host name (ie no port)
 o docs: note on failed handles not being counted by curl_multi_perform
 o doh: allow only http and https in debug mode
 o doh: avoid truncating DNS QTYPE to lower octet
 o doh: clean up dangling DOH memory on easy close
 o doh: fix (harmless) buffer overrun
 o doh: fix undefined behaviour and open up for gcc and clang optimization
 o doh: return early if there is no time left
 o examples/sslbackend: fix -Wchar-subscripts warning
 o examples: remove the "this exact code has not been verified"
 o git: add tests/server/disabled to .gitignore
 o gnutls: make gnutls_bye() not wait for response on shutdown
 o http2: expire a timeout at end of stream
 o http2: prevent dup'ed handles to send dummy PRIORITY frames
 o http2: relax verification of :authority in push promise requests
 o http2_recv: a closed stream trumps pause state
 o http: lowercase headernames for HTTP/2 and HTTP/3
 o ldap: Stop using wide char version of ldapp_err2string
 o ldap: fix OOM error on missing query string
 o mbedtls: add error message for cert validity starting in the future
 o mime: when disabled, avoid C99 macro
 o ngtcp2: adapt to API change
 o ngtcp2: compile with latest ngtcp2 + nghttp3 draft-23
 o ngtcp2: remove fprintf() calls
 o openssl: close_notify on the FTP data connection doesn't mean closure
 o openssl: fix compiler warning with LibreSSL
 o openssl: use strerror on SSL_ERROR_SYSCALL
 o os400: getpeername() and getsockname() return ebcdic AF_UNIX sockaddr
 o parsedate: fix date parsing disabled builds
 o quiche: don't close connection at end of stream
 o quiche: persist connection details (fixes -I with --http3)
 o quiche: set 'drain' when returning without having drained the queues
 o quiche: update HTTP/3 config creation to new API
 o redirect: handle redirects to absolute URLs containing spaces
 o runtests: get textaware info from curl instead of perl
 o schannel: reverse the order of certinfo insertions
 o schannel_verify: Fix concurrent openings of CA file
 o security: silence conversion warning
 o setopt: handle ALTSVC set to NULL
 o setopt: make it easier to add new enum values
 o setopt: store CURLOPT_RTSP_SERVER_CSEQ correctly
 o smb: check for full size message before reading message details
 o smbserver: fix Python 3 compatibility
 o socks: Fix destination host shown on SOCKS5 error
 o test1162: disable MSYS2's POSIX path conversion
 o test1591: fix spelling of http feature
 o tests: add `connect to non-listen` keywords
 o tests: fix narrowing conversion warnings
 o tests: fix the test 3001 cert failures
 o tests: makes tests succeed when using --disable-proxy
 o tests: use %FILE_PWD for file:// URLs
 o tests: use port 2 instead of 60000 for a safer non-listening port
 o tool_operate: Fix retry sleep time shown to user when Retry-After
 o travis: Add an ARM64 build
 o url: Curl_free_request_state() should also free doh handles
 o url: don't set appconnect time for non-ssl/non-ssh connections
 o url: fix the NULL hostname compiler warning
 o url: normalize CURLINFO_EFFECTIVE_URL
 o url: only reuse TLS connections with matching pinning
 o urlapi: avoid index underflow for short ipv6 hostnames
 o urlapi: fix URL encoding when setting a full URL
 o urlapi: fix unused variable warning
 o urlapi: question mark within fragment is still fragment
 o urldata: use 'bool' for the bit type on MSVC compilers
 o vtls: Fix comment typo about macosx-version-min compiler flag
 o vtls: fix narrowing conversion warnings
 o winbuild/MakefileBuild.vc: Add vssh
 o winbuild/MakefileBuild.vc: Fix line endings
 o winbuild: Add manifest to curl.exe for proper OS version detection
 o winbuild: add ENABLE_UNICODE option

Revision 1.4 / (download) - annotate - [select for diffs], Fri Sep 13 15:48:50 2019 UTC (10 months, 2 weeks ago) by ng0
Branch: MAIN
CVS Tags: pkgsrc-2019Q3-base, pkgsrc-2019Q3
Changes since 1.3: +5 -5 lines
Diff to previous 1.3 (colored)

www/gnurl: Update to 7.66.0

Changelog:

CHANGELOG
---------

Changes, gnurl specific:

* Almost none, mostly a merge as usual. After a chat
  with bfix on IRC, the gnurl homepage has been extended
  to explain how to build it.

The usual curl Changelog applies, consult https://curl.haxx.se for the
ChangeLog.
curl Changelog:
 Changes:

    CURLINFO_RETRY_AFTER: parse the Retry-After header value
    HTTP3: initial (experimental still not working) support
    curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
    curl: support parallel transfers with -Z
    curl_multi_poll: a sister to curl_multi_wait() that waits more
    sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID

 Bugfixes:

    CVE-2019-5481: FTP-KRB double-free
    CVE-2019-5482: TFTP small blocksize heap buffer overflow
    CI: remove duplicate configure flag for LGTM.com
    CMake: remove needless newlines at end of gss variables
    CMake: use platform dependent name for dlopen() library
    CURLINFO docs: mention that in redirects times are added
    CURLOPT_ALTSVC.3: use a "" file name to not load from a file
    CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
    CURLOPT_HEADERFUNCTION.3: clarify
    CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
    CURLOPT_READFUNCTION.3: provide inline example
    CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
    Curl_addr2string: take an addrlen argument too
    Curl_fillreadbuffer: avoid double-free trailer buf on error
    HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
    alt-svc: add protocol version selection masking
    alt-svc: fix removal of expired cache entry
    alt-svc: make it use h3-22 with ngtcp2 as well
    alt-svc: more liberal ALPN name parsing
    alt-svc: send Alt-Used: in redirected requests
    alt-svc: with quiche, use the quiche h3 alpn string
    appveyor: pass on -k to make
    asyn-thread: create a socketpair to wait on
    build-openssl: fix build with Visual Studio 2019
    cleanup: move functions out of url.c and make them static
    cleanup: remove the 'numsocks' argument used in many places
    configure: avoid undefined check_for_ca_bundle
    curl.h: add CURL_HTTP_VERSION_3 to the version enum
    curl.h: fix outdated comment
    curl: cap the maximum allowed values for retry time arguments
    curl: handle a libcurl build without netrc support
    curl: make use of CURLINFO_RETRY_AFTER when retrying
    curl: remove outdated comment
    curl: use .curlrc (with a dot) on Windows
    curl: use CURLINFO_PROTOCOL to check for HTTP(s)
    curl_global_init_mem.3: mention it was added in 7.12.0
    curl_version: bump string buffer size to 250
    curl_version_info.3: mentioned ALTSVC and HTTP3
    curl_version_info: offer quic (and h3) library info
    curl_version_info: provide nghttp2 details
    defines: avoid underscore-prefixed defines
    docs/ALTSVC: remove what works and the experimental explanation
    docs/EXPERIMENTAL: explain what it means and what's experimental now
    docs/MANUAL.md: converted to markdown from plain text
    docs/examples/curlx: fix errors
    docs: s/curl_debug/curl_dbg_debug in comments and docs
    easy: resize receive buffer on easy handle reset
    examples: Avoid reserved names in hiperfifo examples
    examples: add http3.c, altsvc.c and http3-present.c
    getenv: support up to 4K environment variable contents on windows
    http09: disable HTTP/0.9 by default in both tool and library
    http2: when marked for closure and wanted to close == OK
    http2_recv: trigger another read when the last data is returned
    http: fix use of credentials from URL when using HTTP proxy
    http_negotiate: improve handling of gss_init_sec_context() failures
    md4: Use our own MD4 when no crypto libraries are available
    multi: call detach_connection before Curl_disconnect
    netrc: make the code try ".netrc" on Windows
    nss: use TLSv1.3 as default if supported
    openssl: build warning free with boringssl
    openssl: use SSL_CTX_set__proto_version() when available
    plan9: add support for running on Plan 9
    progress: reset download/uploaded counter between transfers
    readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
    scp: fix directory name length used in memcpy
    smb: init *msg to NULL in smb_send_and_recv()
    smtp: check for and bail out on too short EHLO response
    source: remove names from source comments
    spnego_sspi: add typecast to fix build warning
    src/makefile: fix uncompressed hugehelp.c generation
    ssh-libssh: do not specify O_APPEND when not in append mode
    ssh: move code into vssh for SSH backends
    sspi: fix memory leaks
    tests: Replace outdated test case numbering documentation
    tftp: return error when packet is too small for options
    timediff: make it 64 bit (if possible) even with 32 bit time_t
    travis: reduce number of torture tests in 'coverage'
    url: make use of new HTTP version if alt-svc has one
    urlapi: verify the IPv6 numerical address
    urldata: avoid 'generic', use dedicated pointers
    vauth: Use CURLE_AUTH_ERROR for auth function errors

Revision 1.3 / (download) - annotate - [select for diffs], Thu Aug 15 17:19:09 2019 UTC (11 months, 2 weeks ago) by ng0
Branch: MAIN
Changes since 1.2: +5 -5 lines
Diff to previous 1.2 (colored)

www/gnurl: Update to 7.65.3

Changelog:

* make the warning in buildconf more clear, month
  after noting that the hardfailure was not necessary.
* comment nroff parts of configure script, build +
  check + release without groff tested succesfully on NetBSD 9.99.4
* Dependencies: python-3 is now supported (should be in curl
  as well) for the tests. If python is required at all for
  the tests needs to be looked at more closely. groff/nroff dropped.

The usual curl Changelog applies, consult https://curl.haxx.se for the
ChangeLog.

Revision 1.2 / (download) - annotate - [select for diffs], Tue Mar 5 00:40:37 2019 UTC (17 months ago) by gdt
Branch: MAIN
CVS Tags: pkgsrc-2019Q2-base, pkgsrc-2019Q2, pkgsrc-2019Q1-base, pkgsrc-2019Q1
Changes since 1.1: +5 -5 lines
Diff to previous 1.1 (colored)

www/gnurl: updated to 7.64.0 (from ng0@ in wip)

* upstream (curl) ChangeLog:

This release includes the following changes:
* cookies: leave secure cookies alone
* hostip: support wildcard hosts
* http: Implement trailing headers for chunked transfers
* http: added options for allowing HTTP/0.9 responses
* timeval: Use high resolution timestamps on Windows

This release includes the following bugfixes:
* CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
* CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
* CVE-2019-3823: SMTP end-of-response out-of-bounds read
* FAQ: remove mention of sourceforge for github
* OS400: handle memory error in list conversion
* OS400: upgrade ILE/RPG binding.
* README: add codacy code quality badge
* Revert http_negotiate: do not close connection
* THANKS: added several missing names from year <= 2000
* build: make 'tidy' target work for metalink builds
* cmake: added checks for variadic macros
* cmake: updated check for HAVE_POLL_FINE to match autotools
* cmake: use lowercase for function name like the rest of the code
* configure: detect xlclang separately from clang
* configure: fix recv/send/select detection on Android
* configure: rewrite --enable-code-coverage
* conncache_unlock: avoid indirection by changing input argument type
* cookie: fix comment typo
* cookies: allow secure override when done over HTTPS
* cookies: extend domain checks to non psl builds
* cookies: skip custom cookies when redirecting cross-site
* curl --xattr: strip credentials from any URL that is stored
* curl -J: refuse to append to the destination file
* curl/urlapi.h: include "curl.h" first
* curl_multi_remove_handle() don't block terminating c-ares requests
* darwinssl: accept setting max-tls with default min-tls
* disconnect: separate connections and easy handles better
* disconnect: set conn->data for protocol disconnect
* docs/version.d: mention MultiSSL
* docs: fix the --tls-max description
* docs: use $(INSTALL_DATA) to install man page
* docs: use meaningless port number in CURLOPT_LOCALPORT example
* gopher: always include the entire gopher-path in request
* http2: clear pause stream id if it gets closed
* if2ip: remove unused function Curl_if_is_interface_name
* libssh: do not let libssh create socket
* libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
* libssh: free sftp_canonicalize_path() data correctly
* libtest/stub_gssapi: use "real" snprintf
* mbedtls: use VERIFYHOST
* multi: multiplexing improvements
* multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
* ntlm: fix NTMLv2 compliance
* ntlm_sspi: add support for channel binding
* openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
* openssl: fix the SSL_get_tlsext_status_ocsp_resp call
* openvms: fix OpenSSL discovery on VAX
* openvms: fix typos in documentation
* os400: add a missing closing bracket
* os400: fix extra parameter syntax error
* pingpong: change default response timeout to 120 seconds
* pingpong: ignore regular timeout in disconnect phase
* printf: fix format specifiers
* runtests.pl: Fix perl call to include srcdir
* schannel: fix compiler warning
* schannel: preserve original certificate path parameter
* schannel: stop calling it "winssl"
* sigpipe: if mbedTLS is used, ignore SIGPIPE
* smb: fix incorrect path in request if connection reused
* ssh: log the libssh2 error message when ssh session startup fails
* test1558: verify CURLINFO_PROTOCOL on file:// transfer
* test1561: improve test name
* test1653: make it survive torture tests
* tests: allow tests to pass by 2037-02-12
* tests: move objnames-* from lib into tests
* timediff: fix math for unsigned time_t
* timeval: Disable MSVC Analyzer GetTickCount warning
* tool_cb_prg: avoid integer overflow
* travis: added cmake build for osx
* urlapi: Fix port parsing of eol colon
* urlapi: distinguish possibly empty query
* urlapi: fix parsing ipv6 with zone index
* urldata: rename easy_conn to just conn
* winbuild: conditionally use /DZLIB_WINAPI
* wolfssl: fix memory-leak in threaded use
* spnego_sspi: add support for channel binding

Revision 1.1 / (download) - annotate - [select for diffs], Fri Feb 1 15:21:29 2019 UTC (18 months ago) by gdt
Branch: MAIN

gnurl: Import from wip (packaged by ng0)

libgnurl is a fork of libcurl. The goal for libgnurl is to support
only HTTP and HTTPS (and only HTTP 1.x) with a single crypto backend
(GnuTLS) to ensure a small footprint and uniform experience for
developers regardless of how libcurl was compiled.
This software is mainly used by GNUnet. The modifications to curl
are kept to the bare minimum, intended to track upstream closely.
gnurl is not a replacement for curl, so different paths are used.

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.




CVSweb <webmaster@jp.NetBSD.org>