curl/lib
Daniel Stenberg 7385610d0c
hsts: add support for Strict-Transport-Security
- enable in the build (configure)
- header parsing
- host name lookup
- unit tests for the above
- CI build
- CURL_VERSION_HSTS bit
- curl_version_info support
- curl -V output
- curl-config --features
- CURLOPT_HSTS_CTRL
- man page for CURLOPT_HSTS_CTRL
- curl --hsts (sets CURLOPT_HSTS_CTRL and works with --libcurl)
- man page for --hsts
- save cache to disk
- load cache from disk
- CURLOPT_HSTS
- man page for CURLOPT_HSTS
- added docs/HSTS.md
- fixed --version docs
- adjusted curl_easy_duphandle

Closes #5896
2020-11-03 16:08:42 +01:00
..
vauth checksrc: warn on empty line before open brace 2020-10-15 23:32:26 +02:00
vquic http3: fix two build errors, silence warnings 2020-10-16 07:15:48 +00:00
vssh sendf: move the verbose-check into Curl_debug 2020-11-02 22:49:36 +01:00
vtls gnutls: fix memory leaks (certfields memory wasn't released) 2020-11-02 09:59:48 +01:00
.gitattributes test122[12]: remove these two tests 2020-10-15 07:56:19 +02:00
.gitignore
altsvc.c alt-svc: enable by default 2020-10-25 23:08:54 +01:00
altsvc.h alt-svc: enable by default 2020-10-25 23:08:54 +01:00
amigaos.c
amigaos.h
arpa_telnet.h
asyn-ares.c symbian: drop support 2020-09-22 15:14:12 +02:00
asyn-thread.c build: disable more code/data when built without proxy support 2020-05-30 23:18:16 +02:00
asyn.h asyn.h: remove the Curl_resolver_getsock define 2020-07-12 18:06:50 +02:00
base64.c base64: also build for pop3 and imap 2020-09-10 08:50:04 +02:00
checksrc.pl checksrc: warn on empty line before open brace 2020-10-15 23:32:26 +02:00
CMakeLists.txt krb5: merged security.c and krb specific FTP functions in here 2020-09-21 23:31:39 +02:00
config-amigaos.h
config-dos.h
config-mac.h
config-os400.h alt-svc: enable by default 2020-10-25 23:08:54 +01:00
config-plan9.h
config-riscos.h
config-tpf.h
config-vxworks.h
config-win32.h windows: disable Unix Sockets for old mingw 2020-08-03 14:31:49 +00:00
config-win32ce.h
conncache.c hash: make it 'struct Curl_hash' 2020-09-02 22:41:58 +02:00
conncache.h hash: make it 'struct Curl_hash' 2020-09-02 22:41:58 +02:00
connect.c connect: repair build without ipv6 availability 2020-10-15 12:56:57 +02:00
connect.h source cleanup: remove all custom typedef structs 2020-05-15 08:54:42 +02:00
content_encoding.c symbian: drop support 2020-09-22 15:14:12 +02:00
content_encoding.h source cleanup: remove all custom typedef structs 2020-05-15 08:54:42 +02:00
cookie.c terminology: call them null-terminated strings 2020-06-28 00:31:24 +02:00
cookie.h
curl_addrinfo.c Curl_addrinfo: use one malloc instead of three 2020-06-08 16:10:53 +02:00
curl_addrinfo.h copyright: updated year ranges out of sync 2020-05-24 00:02:33 +02:00
curl_base64.h
curl_config.h.cmake alt-svc: enable by default 2020-10-25 23:08:54 +01:00
curl_ctype.c
curl_ctype.h
curl_des.c
curl_des.h
curl_endian.c
curl_endian.h
curl_fnmatch.c
curl_fnmatch.h
curl_get_line.c hsts: add support for Strict-Transport-Security 2020-11-03 16:08:42 +01:00
curl_get_line.h
curl_gethostname.c lib: make Curl_gethostname accept a const pointer 2020-08-27 22:52:22 +02:00
curl_gethostname.h lib: make Curl_gethostname accept a const pointer 2020-08-27 22:52:22 +02:00
curl_gssapi.c
curl_gssapi.h
curl_hmac.h source cleanup: remove all custom typedef structs 2020-05-15 08:54:42 +02:00
curl_krb5.h curl_krb5.h: rename from krb5.h 2020-09-22 13:46:22 +02:00
curl_ldap.h
curl_md4.h
curl_md5.h source cleanup: remove all custom typedef structs 2020-05-15 08:54:42 +02:00
curl_memory.h
curl_memrchr.c
curl_memrchr.h
curl_multibyte.c multibyte: Fixed access-> waccess to file for Windows Plarform 2020-06-21 19:31:39 +02:00
curl_multibyte.h
curl_ntlm_core.c ntlm: fix condition for curl_ntlm_core usage 2020-08-29 10:08:32 +02:00
curl_ntlm_core.h ntlm: fix condition for curl_ntlm_core usage 2020-08-29 10:08:32 +02:00
curl_ntlm_wb.c http: move header storage to Curl_easy from connectdata 2020-06-15 22:56:25 +02:00
curl_ntlm_wb.h
curl_path.c src: Consistently spell whitespace without whitespace 2020-09-30 21:10:14 +02:00
curl_path.h
curl_printf.h dynbuf: make *addf() not require extra mallocs 2020-09-23 08:54:42 +02:00
curl_range.c
curl_range.h
curl_rtmp.c Curl_handler: add 'family' to each protocol 2020-09-21 23:30:16 +02:00
curl_rtmp.h
curl_sasl.c build: disable more code/data when built without proxy support 2020-05-30 23:18:16 +02:00
curl_sasl.h
curl_setup_once.h tool: support UTF-16 command line on Windows 2020-05-14 18:13:36 +02:00
curl_setup.h symbian: drop support 2020-09-22 15:14:12 +02:00
curl_sha256.h
curl_sspi.c win32: Add Curl_verify_windows_version() to curlx 2020-08-02 17:58:44 +02:00
curl_sspi.h
curl_threads.c curl_threads: make it 'struct Curl_actual_call' 2020-09-02 22:41:59 +02:00
curl_threads.h
curlx.h win32: Add Curl_verify_windows_version() to curlx 2020-08-02 17:58:44 +02:00
dict.c sendf: move the verbose-check into Curl_debug 2020-11-02 22:49:36 +01:00
dict.h
doh.c tls: add CURLOPT_SSL_EC_CURVES and --curves 2020-08-30 17:24:04 +02:00
doh.h source cleanup: remove all custom typedef structs 2020-05-15 08:54:42 +02:00
dotdot.c terminology: call them null-terminated strings 2020-06-28 00:31:24 +02:00
dotdot.h
dynbuf.c dynbuf: add Curl_dyn_vaddf 2020-09-23 15:13:46 +02:00
dynbuf.h imap: make imap_send use dynbuf for the send buffer management 2020-09-25 08:35:01 +02:00
easy.c hsts: add support for Strict-Transport-Security 2020-11-03 16:08:42 +01:00
easygetopt.c easygetopt: pass a valid enum to avoid compiler warning 2020-09-05 14:44:11 +02:00
easyif.h
easyoptions.c hsts: add support for Strict-Transport-Security 2020-11-03 16:08:42 +01:00
easyoptions.h easyoptions: provide debug function when DEBUGBUILD 2020-08-28 23:35:12 +02:00
escape.c escape: make the URL decode able to reject only %00 bytes 2020-06-25 09:57:18 +02:00
escape.h escape: make the URL decode able to reject only %00 bytes 2020-06-25 09:57:18 +02:00
file.c symbian: drop support 2020-09-22 15:14:12 +02:00
file.h
fileinfo.c
fileinfo.h llist: make it "struct Curl_llist" 2020-09-02 22:41:58 +02:00
firefox-db2pem.sh
formdata.c terminology: call them null-terminated strings 2020-06-28 00:31:24 +02:00
formdata.h source cleanup: remove all custom typedef structs 2020-05-15 08:54:42 +02:00
ftp.c checksrc: warn on empty line before open brace 2020-10-15 23:32:26 +02:00
ftp.h krb5: merged security.c and krb specific FTP functions in here 2020-09-21 23:31:39 +02:00
ftplistparser.c src: Consistently spell whitespace without whitespace 2020-09-30 21:10:14 +02:00
ftplistparser.h
getenv.c
getinfo.c CURLE_PROXY: new error code 2020-08-24 08:41:48 +02:00
getinfo.h
gopher.c sendf: move Curl_sendf to dict.c and make it static 2020-09-28 17:05:53 +02:00
gopher.h
hash.c hash: make it 'struct Curl_hash' 2020-09-02 22:41:58 +02:00
hash.h hash: make it 'struct Curl_hash' 2020-09-02 22:41:58 +02:00
hmac.c source cleanup: remove all custom typedef structs 2020-05-15 08:54:42 +02:00
hostasyn.c source cleanup: remove all custom typedef structs 2020-05-15 08:54:42 +02:00
hostcheck.c
hostcheck.h
hostip4.c source cleanup: remove all custom typedef structs 2020-05-15 08:54:42 +02:00
hostip6.c hostip: make Curl_printable_address not return anything 2020-05-19 08:11:46 +02:00
hostip.c hash: make it 'struct Curl_hash' 2020-09-02 22:41:58 +02:00
hostip.h hash: make it 'struct Curl_hash' 2020-09-02 22:41:58 +02:00
hostsyn.c
hsts.c hsts: add support for Strict-Transport-Security 2020-11-03 16:08:42 +01:00
hsts.h hsts: add support for Strict-Transport-Security 2020-11-03 16:08:42 +01:00
http2.c sendf: move the verbose-check into Curl_debug 2020-11-02 22:49:36 +01:00
http2.h
http_chunks.c trailers: switch h1-trailer logic to use dynbuf 2020-06-05 17:57:24 +02:00
http_chunks.h
http_digest.c http: move header storage to Curl_easy from connectdata 2020-06-15 22:56:25 +02:00
http_digest.h http: move header storage to Curl_easy from connectdata 2020-06-15 22:56:25 +02:00
http_negotiate.c http: move header storage to Curl_easy from connectdata 2020-06-15 22:56:25 +02:00
http_negotiate.h
http_ntlm.c http: move header storage to Curl_easy from connectdata 2020-06-15 22:56:25 +02:00
http_ntlm.h
http_proxy.c sendf: move the verbose-check into Curl_debug 2020-11-02 22:49:36 +01:00
http_proxy.h
http.c hsts: add support for Strict-Transport-Security 2020-11-03 16:08:42 +01:00
http.h h2: repair trailer handling 2020-08-03 23:43:24 +02:00
idn_win32.c
if2ip.c Curl_inet_ntop: always check the return code 2020-06-24 16:04:54 +02:00
if2ip.h
imap.c imap: make imap_send use dynbuf for the send buffer management 2020-09-25 08:35:01 +02:00
imap.h imap: make imap_send use dynbuf for the send buffer management 2020-09-25 08:35:01 +02:00
inet_ntop.c
inet_ntop.h
inet_pton.c checksrc: warn on space after exclamation mark 2020-10-02 16:35:53 +02:00
inet_pton.h
krb5.c sendf: move the verbose-check into Curl_debug 2020-11-02 22:49:36 +01:00
ldap.c ldap: reduce the amount of #ifdefs needed 2020-10-03 22:49:39 +02:00
libcurl.plist
libcurl.rc
libcurl.vers.in
llist.c llist: make it "struct Curl_llist" 2020-09-02 22:41:58 +02:00
llist.h llist: make it "struct Curl_llist" 2020-09-02 22:41:58 +02:00
Makefile.am symbian: drop support 2020-09-22 15:14:12 +02:00
makefile.amiga
makefile.dj
Makefile.inc hsts: add support for Strict-Transport-Security 2020-11-03 16:08:42 +01:00
Makefile.m32 Makefile.m32: add support for HTTP/3 via ngtcp2+nghttp3 2020-10-16 07:15:19 +00:00
Makefile.netware
Makefile.vxworks
md4.c md(4|5): don't use deprecated macOS functions 2020-07-19 10:34:52 +02:00
md5.c md(4|5): don't use deprecated macOS functions 2020-07-19 10:34:52 +02:00
memdebug.c memdebug: remove 9 year old unused debug function 2020-09-28 22:15:21 +02:00
memdebug.h curl: improve the existing file check with -J 2020-07-28 23:28:40 +02:00
mime.c terminology: call them null-terminated strings 2020-06-28 00:31:24 +02:00
mime.h source cleanup: remove all custom typedef structs 2020-05-15 08:54:42 +02:00
mk-ca-bundle.pl
mk-ca-bundle.vbs
mprintf.c checksrc: warn on space after exclamation mark 2020-10-02 16:35:53 +02:00
mqtt.c sendf: move the verbose-check into Curl_debug 2020-11-02 22:49:36 +01:00
mqtt.h mqtt: enable by default 2020-08-31 09:45:09 +02:00
multi.c checksrc: warn on empty line before open brace 2020-10-15 23:32:26 +02:00
multihandle.h hash: make it 'struct Curl_hash' 2020-09-02 22:41:58 +02:00
multiif.h url: make sure pushed streams get an allocated download buffer 2020-06-23 15:13:27 +02:00
netrc.c
netrc.h
non-ascii.c
non-ascii.h
nonblock.c
nonblock.h
nwlib.c source cleanup: remove all custom typedef structs 2020-05-15 08:54:42 +02:00
nwos.c
openldap.c Curl_handler: add 'family' to each protocol 2020-09-21 23:30:16 +02:00
optiontable.pl lib: fix -Wassign-enum warnings 2020-09-08 13:53:02 +02:00
parsedate.c parsedate: tune the date to epoch conversion 2020-09-21 16:46:41 +02:00
parsedate.h
pingpong.c sendf: move the verbose-check into Curl_debug 2020-11-02 22:49:36 +01:00
pingpong.h pingpong: use a dynbuf for the *_pp_sendf() function 2020-09-23 15:14:09 +02:00
pop3.c pingpong: use a dynbuf for the *_pp_sendf() function 2020-09-23 15:14:09 +02:00
pop3.h
progress.c Curl_pgrsTime - return new time to avoid timeout integer overflow 2020-08-28 14:16:41 +02:00
progress.h Curl_pgrsTime - return new time to avoid timeout integer overflow 2020-08-28 14:16:41 +02:00
psl.c
psl.h
quic.h http3: fix two build errors, silence warnings 2020-10-16 07:15:48 +00:00
rand.c
rand.h
rename.c alt-svc: enable by default 2020-10-25 23:08:54 +01:00
rename.h
rtsp.c Curl_handler: add 'family' to each protocol 2020-09-21 23:30:16 +02:00
rtsp.h
select.c select: align poll emulation to return all relevant events 2020-09-02 16:26:20 +02:00
select.h select.h: make socket validation macros test for INVALID_SOCKET 2020-08-25 11:17:06 +02:00
sendf.c sendf: move the verbose-check into Curl_debug 2020-11-02 22:49:36 +01:00
sendf.h sendf: move Curl_sendf to dict.c and make it static 2020-09-28 17:05:53 +02:00
setopt.c hsts: add support for Strict-Transport-Security 2020-11-03 16:08:42 +01:00
setopt.h setopt: support certificate options in memory with struct curl_blob 2020-05-15 13:03:59 +02:00
setup-os400.h
setup-vms.h copyright: updated year ranges out of sync 2020-05-24 00:02:33 +02:00
setup-win32.h win32: drop support for WinSock version 1, require version 2 2020-09-02 16:30:39 +02:00
sha256.c sha256: move assign to the declaration line 2020-05-19 08:52:38 +02:00
share.c vtls: make it 'struct Curl_ssl_session' 2020-09-02 22:41:59 +02:00
share.h vtls: make it 'struct Curl_ssl_session' 2020-09-02 22:41:59 +02:00
sigpipe.h
slist.c
slist.h
smb.c Curl_handler: add 'family' to each protocol 2020-09-21 23:30:16 +02:00
smb.h ntlm: fix condition for curl_ntlm_core usage 2020-08-29 10:08:32 +02:00
smtp.c pingpong: use a dynbuf for the *_pp_sendf() function 2020-09-23 15:14:09 +02:00
smtp.h
sockaddr.h
socketpair.c socketpair: allow CURL_DISABLE_SOCKETPAIR 2020-08-26 22:58:21 +02:00
socketpair.h
socks_gssapi.c all: fix codespell errors 2020-05-25 19:44:04 +00:00
socks_sspi.c all: fix codespell errors 2020-05-25 19:44:04 +00:00
socks.c CURLE_PROXY: new error code 2020-08-24 08:41:48 +02:00
socks.h CURLE_PROXY: new error code 2020-08-24 08:41:48 +02:00
speedcheck.c
speedcheck.h
splay.c
splay.h
strcase.c
strcase.h
strdup.c strdup: remove the odd strlen check 2020-07-18 12:37:25 +02:00
strdup.h
strerror.c strerror: use 'const' as the string should never be modified 2020-10-15 15:43:32 +02:00
strerror.h
strtok.c terminology: call them null-terminated strings 2020-06-28 00:31:24 +02:00
strtok.h
strtoofft.c
strtoofft.h
system_win32.c win32: drop support for WinSock version 1, require version 2 2020-09-02 16:30:39 +02:00
system_win32.h copyright: update/correct the year range on a few files 2020-08-14 10:20:27 +02:00
telnet.c Curl_handler: add 'family' to each protocol 2020-09-21 23:30:16 +02:00
telnet.h
tftp.c Curl_handler: add 'family' to each protocol 2020-09-21 23:30:16 +02:00
tftp.h
timeval.c
timeval.h
transfer.c sendf: move the verbose-check into Curl_debug 2020-11-02 22:49:36 +01:00
transfer.h
url.c hsts: add support for Strict-Transport-Security 2020-11-03 16:08:42 +01:00
url.h build: disable more code/data when built without proxy support 2020-05-30 23:18:16 +02:00
urlapi-int.h
urlapi.c urlapi: URL encode a '+' in the query part 2020-10-15 23:21:53 +02:00
urldata.h hsts: add support for Strict-Transport-Security 2020-11-03 16:08:42 +01:00
version_win32.c win32: Add Curl_verify_windows_version() to curlx 2020-08-02 17:58:44 +02:00
version_win32.h copyright: update/correct the year range on a few files 2020-08-14 10:20:27 +02:00
version.c hsts: add support for Strict-Transport-Security 2020-11-03 16:08:42 +01:00
warnless.c
warnless.h
wildcard.c
wildcard.h wildcard: strip "curl_" prefix from private symbols 2020-09-02 22:41:59 +02:00
x509asn1.c source cleanup: remove all custom typedef structs 2020-05-15 08:54:42 +02:00
x509asn1.h source cleanup: remove all custom typedef structs 2020-05-15 08:54:42 +02:00