curl/lib
Daniel Stenberg eff614fb02
vtls: refuse setting any SSL version
... previously they were supported if a TLS library would (unexpectedly)
still support them, but from this change they will be refused already in
curl_easy_setopt(). SSLv2 and SSLv3 have been known to be insecure for
many years now.

Closes #6773
2021-04-19 08:16:02 +02:00
..
vauth ntlm: fix negotiated flags usage 2021-04-09 09:40:56 +02:00
vquic ngtcp2: Use ALPN h3-29 for now 2021-04-13 14:22:32 +02:00
vssh libssh2: fix Value stored to 'sshp' is never read 2021-04-15 22:43:35 +02:00
vtls vtls: refuse setting any SSL version 2021-04-19 08:16:02 +02:00
.gitattributes
.gitignore
altsvc.c
altsvc.h
amigaos.c
amigaos.h
arpa_telnet.h
asyn-ares.c asyn-ares: use consistent resolve error message 2021-02-18 15:02:17 +01:00
asyn-thread.c asyn-ares: use consistent resolve error message 2021-02-18 15:02:17 +01:00
asyn.h hostip: remove conn->data from resolver functions 2021-01-22 08:25:09 +01:00
base64.c
c-hyper.c urldata: merge "struct DynamicStatic" into "struct UrlState" 2021-03-26 23:19:20 +01:00
c-hyper.h c-hyper: poll the tasks until end correctly 2021-01-05 15:33:47 +01:00
checksrc.pl
CMakeLists.txt copyright: update copyright year ranges to 2021 2021-03-27 23:00:14 +01:00
config-amigaos.h configure: remove use of RETSIGTYPE 2021-04-07 16:01:05 +02:00
config-dos.h configure: remove use of RETSIGTYPE 2021-04-07 16:01:05 +02:00
config-mac.h configure: remove use of RETSIGTYPE 2021-04-07 16:01:05 +02:00
config-os400.h configure: remove use of RETSIGTYPE 2021-04-07 16:01:05 +02:00
config-plan9.h configure: remove use of RETSIGTYPE 2021-04-07 16:01:05 +02:00
config-riscos.h configure: remove use of RETSIGTYPE 2021-04-07 16:01:05 +02:00
config-tpf.h configure: remove use of RETSIGTYPE 2021-04-07 16:01:05 +02:00
config-vxworks.h lib: remove unused HAVE_INET_NTOA_R* defines 2021-04-08 16:33:29 +02:00
config-win32.h configure: remove use of RETSIGTYPE 2021-04-07 16:01:05 +02:00
config-win32ce.h configure: remove use of RETSIGTYPE 2021-04-07 16:01:05 +02:00
conncache.c lib: remove 'conn->data' completely 2021-02-16 10:48:57 +01:00
conncache.h lib: more conn->data cleanups 2021-01-19 09:14:51 +01:00
connect.c Curl_timeleft: check both timeouts during connect 2021-03-17 00:28:44 +01:00
connect.h lib: use int type for more port variables 2021-02-09 02:53:31 -05:00
content_encoding.c lib: remove conn->data uses 2021-01-24 18:15:03 +01:00
content_encoding.h chunk/encoding: remove conn->data references 2021-01-21 13:19:58 +01:00
cookie.c urldata: merge "struct DynamicStatic" into "struct UrlState" 2021-03-26 23:19:20 +01:00
cookie.h cookies: Use named parameters in header prototypes 2021-02-23 22:00:02 +01:00
curl_addrinfo.c copyright: fix missing year (range) updates 2021-01-29 14:35:13 +01:00
curl_addrinfo.h
curl_base64.h
curl_config.h.cmake lib: remove unused HAVE_INET_NTOA_R* defines 2021-04-08 16:33:29 +02:00
curl_ctype.c
curl_ctype.h
curl_des.c
curl_des.h
curl_endian.c config: remove CURL_SIZEOF_CURL_OFF_T use only SIZEOF_CURL_OFF_T 2021-03-11 10:11:56 +01:00
curl_endian.h config: remove CURL_SIZEOF_CURL_OFF_T use only SIZEOF_CURL_OFF_T 2021-03-11 10:11:56 +01:00
curl_fnmatch.c
curl_fnmatch.h
curl_get_line.c
curl_get_line.h
curl_gethostname.c
curl_gethostname.h
curl_gssapi.c lib: pass in 'struct Curl_easy *' to most functions 2021-01-17 23:56:09 +01:00
curl_gssapi.h
curl_hmac.h
curl_krb5.h lib: remove conn->data uses 2021-01-26 15:19:41 +01:00
curl_ldap.h
curl_md4.h
curl_md5.h
curl_memory.h
curl_memrchr.c
curl_memrchr.h
curl_multibyte.c copyright: update copyright year ranges to 2021 2021-03-27 23:00:14 +01:00
curl_multibyte.h copyright: update copyright year ranges to 2021 2021-03-27 23:00:14 +01:00
curl_ntlm_core.c ntlm: support version 2 on 32-bit platforms 2021-04-09 09:40:49 +02:00
curl_ntlm_core.h ntlm: support version 2 on 32-bit platforms 2021-04-09 09:40:49 +02:00
curl_ntlm_wb.c lib: remove conn->data uses 2021-01-24 18:15:03 +01:00
curl_ntlm_wb.h lib: remove conn->data uses 2021-01-24 18:15:03 +01:00
curl_path.c curl_path: remove conn->data use 2021-01-19 17:08:49 +01:00
curl_path.h curl_path: remove conn->data use 2021-01-19 17:08:49 +01:00
curl_printf.h
curl_range.c curl_range: remove conn->data 2021-01-20 14:59:11 +01:00
curl_range.h curl_range: remove conn->data 2021-01-20 14:59:11 +01:00
curl_rtmp.c urldata: merge "struct DynamicStatic" into "struct UrlState" 2021-03-26 23:19:20 +01:00
curl_rtmp.h
curl_sasl.c curl_sasl: fix compiler error with --disable-crypto-auth 2021-03-28 23:03:15 +02:00
curl_sasl.h sasl: support SCRAM-SHA-1 and SCRAM-SHA-256 via libgsasl 2021-02-09 10:53:25 +01:00
curl_setup_once.h configure: include <time.h> unconditionally 2021-04-07 16:08:01 +02:00
curl_setup.h define: remove CURL_DISABLE_NTLM ifdefs 2021-03-29 14:43:54 +02:00
curl_sha256.h http: add hmac support for sha256 2020-12-21 15:26:41 +01:00
curl_sspi.c
curl_sspi.h
curl_threads.c
curl_threads.h
curlx.h
dict.c lib: pass in 'struct Curl_easy *' to most functions 2021-01-17 23:56:09 +01:00
dict.h
doh.c docs: Explain DOH transfers inherit some SSL settings 2021-03-17 18:12:45 -04:00
doh.h hostip: remove conn->data from resolver functions 2021-01-22 08:25:09 +01:00
dotdot.c
dotdot.h
dynbuf.c
dynbuf.h dynbuf: bump the max HTTP request to 1MB 2021-03-06 22:48:35 +01:00
easy.c urldata: merge "struct DynamicStatic" into "struct UrlState" 2021-03-26 23:19:20 +01:00
easygetopt.c
easyif.h
easyoptions.c doh: add options to disable ssl verification 2021-02-14 18:20:48 -05:00
easyoptions.h
escape.c
escape.h
file.c file: support GETing directories again 2021-04-05 12:22:07 +02:00
file.h
fileinfo.c
fileinfo.h
firefox-db2pem.sh
formdata.c
formdata.h copyright: fix missing year (range) updates 2021-01-29 14:35:13 +01:00
ftp.c ftp: fix memory leak in ftp_done 2021-03-12 19:53:05 +01:00
ftp.h lib: save a bit of space with some structure packing 2021-01-20 22:52:34 -05:00
ftplistparser.c lib: remove redundant code 2021-02-10 16:47:27 +01:00
ftplistparser.h
getenv.c
getinfo.c urldata: merge "struct DynamicStatic" into "struct UrlState" 2021-03-26 23:19:20 +01:00
getinfo.h
gopher.c vtls: reduce conn->data use 2021-01-19 09:14:40 +01:00
gopher.h gopher: Implement secure gopher protocol. 2020-12-15 12:58:12 +01:00
hash.c misc: assorted typo fixes 2020-12-26 23:54:25 +01:00
hash.h
hmac.c
hostasyn.c hostip: remove conn->data from resolver functions 2021-01-22 08:25:09 +01:00
hostcheck.c
hostcheck.h
hostip4.c hostip: remove conn->data from resolver functions 2021-01-22 08:25:09 +01:00
hostip6.c hostip: remove conn->data from resolver functions 2021-01-22 08:25:09 +01:00
hostip.c configure: remove use of RETSIGTYPE 2021-04-07 16:01:05 +02:00
hostip.h asyn-ares: use consistent resolve error message 2021-02-18 15:02:17 +01:00
hostsyn.c
hsts.c hsts: remove unused defines 2021-03-14 23:18:27 +01:00
hsts.h
http2.c urldata: merge "struct DynamicStatic" into "struct UrlState" 2021-03-26 23:19:20 +01:00
http2.h h2: allow 100 streams by default 2021-04-05 22:47:34 +02:00
http_aws_sigv4.c http: use credentials from transfer, not connection 2021-02-13 22:36:15 +01:00
http_aws_sigv4.h lib: remove conn->data uses 2021-01-24 18:15:03 +01:00
http_chunks.c Curl_chunker: shrink the struct 2021-01-27 08:48:08 +01:00
http_chunks.h Curl_chunker: shrink the struct 2021-01-27 08:48:08 +01:00
http_digest.c http: use credentials from transfer, not connection 2021-02-13 22:36:15 +01:00
http_digest.h http: use credentials from transfer, not connection 2021-02-13 22:36:15 +01:00
http_negotiate.c lib: remove conn->data uses 2021-01-24 18:15:03 +01:00
http_negotiate.h lib: remove conn->data uses 2021-01-24 18:15:03 +01:00
http_ntlm.c http: use credentials from transfer, not connection 2021-02-13 22:36:15 +01:00
http_ntlm.h lib: more conn->data cleanups 2021-01-19 09:14:51 +01:00
http_proxy.c http_proxy: only loop on 407 + close if we have credentials 2021-04-05 22:49:07 +02:00
http_proxy.h hostip/proxy: remove conn->data use 2021-01-26 10:04:47 +01:00
http.c send_speed: simplify the checks for if a speed limit is set 2021-03-27 12:38:28 +01:00
http.h http: cap body data amount during send speed limiting 2021-03-27 12:38:15 +01:00
idn_win32.c
if2ip.c
if2ip.h
imap.c pingpong: rename the curl_pp_transfer enum to use PP prefix 2021-02-04 23:06:03 +01:00
imap.h
inet_ntop.c
inet_ntop.h
inet_pton.c
inet_pton.h
krb5.c lib: remove conn->data uses 2021-01-26 15:19:41 +01:00
ldap.c urldata: merge "struct DynamicStatic" into "struct UrlState" 2021-03-26 23:19:20 +01:00
libcurl.plist
libcurl.rc
libcurl.vers.in
llist.c
llist.h
Makefile.am
makefile.amiga
makefile.dj copyright: fix missing year (range) updates 2021-01-29 14:35:13 +01:00
Makefile.inc vtls: initial implementation of rustls backend 2021-02-09 11:06:18 +01:00
Makefile.m32 copyright: update copyright year ranges to 2021 2021-03-27 23:00:14 +01:00
Makefile.netware configure: remove use of RETSIGTYPE 2021-04-07 16:01:05 +02:00
Makefile.vxworks
md4.c gnutls: assume nettle crypto support 2021-02-18 23:06:47 +01:00
md5.c gnutls: assume nettle crypto support 2021-02-18 23:06:47 +01:00
memdebug.c copyright: update copyright year ranges to 2021 2021-03-27 23:00:14 +01:00
memdebug.h
mime.c mime: make sure setting MIMEPOST to NULL resets properly 2021-01-15 08:33:27 +01:00
mime.h copyright: fix missing year (range) updates 2021-01-29 14:35:13 +01:00
mk-ca-bundle.pl copyright: fix missing year (range) updates 2021-01-29 14:35:13 +01:00
mk-ca-bundle.vbs
mprintf.c
mqtt.c lib: pass in 'struct Curl_easy *' to most functions 2021-01-17 23:56:09 +01:00
mqtt.h
multi.c send_speed: simplify the checks for if a speed limit is set 2021-03-27 12:38:28 +01:00
multihandle.h build: remove all traces of USE_BLOCKING_SOCKETS 2021-02-25 16:41:35 +01:00
multiif.h lib: pass in 'struct Curl_easy *' to most functions 2021-01-17 23:56:09 +01:00
netrc.c
netrc.h
non-ascii.c
non-ascii.h
nonblock.c build: remove all traces of USE_BLOCKING_SOCKETS 2021-02-25 16:41:35 +01:00
nonblock.h
nwlib.c
nwos.c
openldap.c openldap: protect SSL-specific code with proper #ifdef 2021-04-15 23:31:41 +02:00
optiontable.pl
parsedate.c
parsedate.h
pingpong.c pingpong: remove the 'conn' struct member 2021-01-26 10:12:59 +01:00
pingpong.h pingpong: rename the curl_pp_transfer enum to use PP prefix 2021-02-04 23:06:03 +01:00
pop3.c ftp: add 'list_only' to the transfer state struct 2021-02-09 14:06:28 +01:00
pop3.h lib: save a bit of space with some structure packing 2021-01-20 22:52:34 -05:00
progress.c send_speed: simplify the checks for if a speed limit is set 2021-03-27 12:38:28 +01:00
progress.h lib: more conn->data cleanups 2021-01-19 09:14:51 +01:00
psl.c
psl.h
quic.h quic: remove conn->data use 2021-01-19 16:56:35 +01:00
rand.c
rand.h
rename.c
rename.h
rtsp.c urldata: merge "struct DynamicStatic" into "struct UrlState" 2021-03-26 23:19:20 +01:00
rtsp.h lib: remove conn->data uses 2021-01-24 18:15:03 +01:00
select.c select: convert Curl_select() to private static function 2021-01-27 09:05:31 +01:00
select.h select: convert Curl_select() to private static function 2021-01-27 09:05:31 +01:00
sendf.c lib: remove redundant code 2021-02-10 16:47:27 +01:00
sendf.h lib: pass in 'struct Curl_easy *' to most functions 2021-01-17 23:56:09 +01:00
setopt.c vtls: refuse setting any SSL version 2021-04-19 08:16:02 +02:00
setopt.h
setup-os400.h
setup-vms.h
setup-win32.h
sha256.c gnutls: assume nettle crypto support 2021-02-18 23:06:47 +01:00
share.c urldata: make magic be the first struct field 2021-01-20 08:51:01 +01:00
share.h urldata: make magic be the first struct field 2021-01-20 08:51:01 +01:00
sigpipe.h
slist.c
slist.h
smb.c config: remove CURL_SIZEOF_CURL_OFF_T use only SIZEOF_CURL_OFF_T 2021-03-11 10:11:56 +01:00
smb.h config: remove CURL_SIZEOF_CURL_OFF_T use only SIZEOF_CURL_OFF_T 2021-03-11 10:11:56 +01:00
smtp.c pingpong: rename the curl_pp_transfer enum to use PP prefix 2021-02-04 23:06:03 +01:00
smtp.h lib: save a bit of space with some structure packing 2021-01-20 22:52:34 -05:00
sockaddr.h
socketpair.c
socketpair.h copyright: update copyright year ranges to 2021 2021-03-27 23:00:14 +01:00
socks_gssapi.c lib: more conn->data cleanups 2021-01-19 09:14:51 +01:00
socks_sspi.c lib: more conn->data cleanups 2021-01-19 09:14:51 +01:00
socks.c hostip/proxy: remove conn->data use 2021-01-26 10:04:47 +01:00
socks.h lib: more conn->data cleanups 2021-01-19 09:14:51 +01:00
speedcheck.c speedcheck: exclude paused transfers 2020-12-22 13:51:07 +01:00
speedcheck.h
splay.c
splay.h
strcase.c
strcase.h
strdup.c
strdup.h
strerror.c copyright: fix missing year (range) updates 2021-01-29 14:35:13 +01:00
strerror.h
strtok.c
strtok.h
strtoofft.c
strtoofft.h
system_win32.c misc: assorted typo fixes 2020-12-26 23:54:25 +01:00
system_win32.h
telnet.c lib: save a bit of space with some structure packing 2021-01-20 22:52:34 -05:00
telnet.h
tftp.c tftp: remove unused struct fields 2021-03-23 13:37:10 +01:00
tftp.h
timeval.c
timeval.h
transfer.c transfer: clear 'referer' in declaration 2021-03-29 09:45:53 +02:00
transfer.h transfer: remove conn->data use 2021-01-19 17:07:02 +01:00
url.c urldata: merge "struct DynamicStatic" into "struct UrlState" 2021-03-26 23:19:20 +01:00
url.h url: reduce conn->data references 2021-01-26 10:00:59 +01:00
urlapi-int.h
urlapi.c misc: fix "warning: empty expression statement has no effect" 2020-12-26 23:44:17 +01:00
urldata.h urldata: merge "struct DynamicStatic" into "struct UrlState" 2021-03-26 23:19:20 +01:00
version_win32.c
version_win32.h
version.c config: remove CURL_SIZEOF_CURL_OFF_T use only SIZEOF_CURL_OFF_T 2021-03-11 10:11:56 +01:00
warnless.c warnless: remove curlx_ultosi 2021-01-26 16:30:29 +01:00
warnless.h warnless.h: remove the prototype for curlx_ultosi 2021-01-26 16:32:27 +01:00
wildcard.c
wildcard.h
x509asn1.c lib: pass in 'struct Curl_easy *' to most functions 2021-01-17 23:56:09 +01:00
x509asn1.h lib: pass in 'struct Curl_easy *' to most functions 2021-01-17 23:56:09 +01:00