curl/RELEASE-NOTES

Curl and libcurl 7.29.0

 Public curl releases:         131
 Command line options:         152
 curl_easy_setopt() options:   199
 Public functions in libcurl:  58
 Known libcurl bindings:       39
 Contributors:                 993

This release includes the following changes:

 o test: offer "automake" output and check for perl better
 o 

This release includes the following bugfixes:

 o nss: prevent NSS from crashing on client auth hook failure
 o darwinssl: Fixed inability to disable peer verification on Snow Leopard
   and Lion
 o curl_multi_remove_handle: fix memory leak triggered with CURLOPT_RESOLVE
 o SCP: relative path didn't work as documented
 o setup_once.h: HP-UX <sys/socket.h> issue workaround
 o configure: fix cross pkg-config detection
 o runtests: Do not add undefined values to @INC
 o build: fix compilation with CURL_DISABLE_CRYPTO_AUTH flag
 o multi: fix re-sending request on early connection close
 o HTTP: remove stray CRLF in chunk-encoded content-free request bodies
 o build: fix AIX compilation and usage of events/revents
 o VC Makefiles: add missing hostcheck
 o nss: clear session cache if a client certificate from file is used
 o nss: fix error messages for CURLE_SSL_{CACERT,CRL}_BADFILE

This release includes the following known bugs:

 o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html)

This release would not have looked like this without help, code, reports and
advice from friends like these:

 Nick Zitzmann, Colin Watson, Fabian Keil, Kamil Dudka, Lijo Antony,
 Linus Nielsen Feltzing, Marc Hoersken, Nick Zitzmann, Stanislav Ivochkin,
 Steve Holme, Yang Tse, Balaji Parasuram, Dan Fandrich, Bob Relyea

        Thanks! (and sorry if I forgot to mention someone)

References to bug reports and discussions on issues:
RELEASE-NOTES: synced with e3ed2b82e6 2012-12-28 03:15:07 +08:00			`Curl and libcurl 7.29.0`
working draft of the upcoming 7.10.8 release notes 2003-09-23 05:38:52 +08:00
bump: start working on 7.28.2 2012-11-20 17:27:36 +08:00			`Public curl releases: 131`
RELEASE-NOTES: synced with c4e3578e4bf Also bumped the contributor number and next release is to become 7.27.0 2012-06-03 19:51:54 +08:00			`Command line options: 152`
RELEASE-NOTES: synced with e650dbde86 New: 12 bugs, 3 changes, 6 contributors and updated counters at the top 2012-03-11 05:29:30 +08:00			`curl_easy_setopt() options: 199`
- Introducing curl_easy_send() and curl_easy_recv(). They can be used to send and receive data over a connection previously setup with curl_easy_perform() and its CURLOPT_CONNECT_ONLY option. The sendrecv.c example was added to show how they can be used. 2008-05-13 05:43:24 +08:00			`Public functions in libcurl: 58`
a binding for Falcon 2009-11-30 03:12:00 +08:00			`Known libcurl bindings: 39`
bump: start working on 7.28.2 2012-11-20 17:27:36 +08:00			`Contributors: 993`
David Hull made the file: URL parser also accept the somewhat sloppy file syntax: file:/path. I added test case 203 to verify this. 2003-10-29 17:53:21 +08:00
Armel Asselin made the CURLOPT_PREQUOTE option work fine even when CURLOPT_NOBODY is set true. PREQUOTE is then run roughly at the same place in the command sequence as it would have run if there would've been a transfer. 2006-08-09 06:56:46 +08:00			`This release includes the following changes:`
mention the curl_off_t changes first 2008-09-01 22:27:24 +08:00
RELEASE-NOTES: synced with e3ed2b82e6 2012-12-28 03:15:07 +08:00			`o test: offer "automake" output and check for perl better`
bump: start working on 7.28.2 2012-11-20 17:27:36 +08:00			`o`
Armel Asselin made the CURLOPT_PREQUOTE option work fine even when CURLOPT_NOBODY is set true. PREQUOTE is then run roughly at the same place in the command sequence as it would have run if there would've been a transfer. 2006-08-09 06:56:46 +08:00
HTTP Digest auth fix on a re-used connection 2007-07-22 18:17:52 +08:00			`This release includes the following bugfixes:`

nss: prevent NSS from crashing on client auth hook failure Although it is not explicitly stated in the documentation, NSS uses pRetCert and pRetKey even if the client authentication hook returns a failure. Namely, if we destroy pRetCert without clearing pRetCert afterwards, NSS destroys the certificate once again, which causes a double free. Reported by: Bob Relyea 2012-12-03 20:17:50 +08:00			`o nss: prevent NSS from crashing on client auth hook failure`
RELEASE-NOTES: synced with e3ed2b82e6 2012-12-28 03:15:07 +08:00			`o darwinssl: Fixed inability to disable peer verification on Snow Leopard`
			`and Lion`
			`o curl_multi_remove_handle: fix memory leak triggered with CURLOPT_RESOLVE`
			`o SCP: relative path didn't work as documented`
			`o setup_once.h: HP-UX <sys/socket.h> issue workaround`
			`o configure: fix cross pkg-config detection`
			`o runtests: Do not add undefined values to @INC`
			`o build: fix compilation with CURL_DISABLE_CRYPTO_AUTH flag`
			`o multi: fix re-sending request on early connection close`
			`o HTTP: remove stray CRLF in chunk-encoded content-free request bodies`
			`o build: fix AIX compilation and usage of events/revents`
			`o VC Makefiles: add missing hostcheck`
nss: clear session cache if a client cert from file is used This commit fixes a regression introduced in 052a08ff. NSS caches certs/keys returned by the SSL_GetClientAuthDataHook callback and if we connect second time to the same server, the cached cert/key pair is used. If we use multiple client certificates for different paths on the same server, we need to clear the session cache to force NSS to call the hook again. The commit 052a08ff prevented the session cache from being cleared if a client certificate from file was used. The condition is now fixed to cover both cases: consssl->client_nickname is not NULL if a client certificate from the NSS database is used and connssl->obj_clicert is not NULL if a client certificate from file is used. Review by: Kai Engert 2013-01-11 17:24:21 +08:00			`o nss: clear session cache if a client certificate from file is used`
nss: fix error messages for CURLE_SSL_{CACERT,CRL}_BADFILE Do not use the error messages from NSS for errors not occurring in NSS. 2013-01-15 19:58:08 +08:00			`o nss: fix error messages for CURLE_SSL_{CACERT,CRL}_BADFILE`
7.21.4: version bump 2010-12-15 22:54:17 +08:00
HTTP Digest auth fix on a re-used connection 2007-07-22 18:17:52 +08:00			`This release includes the following known bugs:`

			`o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html)`

			`This release would not have looked like this without help, code, reports and`
			`advice from friends like these:`

RELEASE-NOTES: synced with e3ed2b82e6 2012-12-28 03:15:07 +08:00			`Nick Zitzmann, Colin Watson, Fabian Keil, Kamil Dudka, Lijo Antony,`
			`Linus Nielsen Feltzing, Marc Hoersken, Nick Zitzmann, Stanislav Ivochkin,`
			`Steve Holme, Yang Tse, Balaji Parasuram, Dan Fandrich, Bob Relyea`
RELEASE-NOTES: synced with fa6d78829fd30ad 2012-11-06 19:03:29 +08:00
working draft of the upcoming 7.10.8 release notes 2003-09-23 05:38:52 +08:00			`Thanks! (and sorry if I forgot to mention someone)`
RELEASE-NOTES: synced with af9bc1604c1 One new feature, one bug fix. Introduced references in this file for mentioned issues after this discussion: http://curl.haxx.se/mail/lib-2011-12/0187.html The plan is to let the references get moved over to the changes.html file at release-time 2011-12-20 03:08:59 +08:00
			`References to bug reports and discussions on issues:`

nss: prevent NSS from crashing on client auth hook failure Although it is not explicitly stated in the documentation, NSS uses pRetCert and pRetKey even if the client authentication hook returns a failure. Namely, if we destroy pRetCert without clearing pRetCert afterwards, NSS destroys the certificate once again, which causes a double free. Reported by: Bob Relyea 2012-12-03 20:17:50 +08:00