RE: [RELEASE] curl 7.65.0

2019-05-22 Thread Marcel Raad via curl-library
> -Original Message- > From: Daniel Stenberg > Sent: Mittwoch, 22. Mai 2019 14:21 > To: Marcel Raad > Cc: libcurl development > Subject: RE: [RELEASE] curl 7.65.0 > > If you want a blunt tool to figure out which option curl sets that libcurl > doesn't like, here's a debug patch to get

Re: Edit cookies easily?

2019-05-22 Thread Scott Ellentuch via curl-library
On Wed, May 22, 2019 at 5:43 AM Rainer Canavan wrote: > On Tue, May 21, 2019 at 10:45 PM Scott Ellentuch via curl-library > wrote: > > > > Hi, > > > > Using PHP and curl_init/curl_setopt/curl_exec/curl_close. > > > > My need is that I contact A.example.com, perform a login transaction > there,

RE: [RELEASE] curl 7.65.0

2019-05-22 Thread Daniel Stenberg via curl-library
On Wed, 22 May 2019, Daniel Stenberg via curl-library wrote: I suspect one of these options --disable-proxy, --disable-crypto-auth and --disable-cookies is what makes curl set an option that now returns an error instead of being silently accepted and ignored. I could add that since neither

RE: [RELEASE] curl 7.65.0

2019-05-22 Thread Daniel Stenberg via curl-library
On Wed, 22 May 2019, Marcel Raad wrote: I agree. My HTTP-only OpenSSL autobuild ( https://curl.haxx.se/dev/log.cgi?id=20190522044629-2216) is also broken because of " curl: (48) An unknown option was passed in to libcurl", but I haven't had time to take a closer look yet. I suspect one of

RE: [RELEASE] curl 7.65.0

2019-05-22 Thread Marcel Raad via curl-library
> -Original Message- > From: curl-library On Behalf Of Daniel > Stenberg via curl-library > Sent: Mittwoch, 22. Mai 2019 13:34 > To: Daniel Stenberg via curl-library > Cc: Daniel Stenberg > Subject: Re: [RELEASE] curl 7.65.0 > > I think we should consider doing a follow-up patch

Re: create rpm for libcurl

2019-05-22 Thread Kamil Dudka via curl-library
On Wednesday, May 22, 2019 1:20:01 PM CEST surya chandrika wrote: > On Mon, May 20, 2019 at 3:55 PM Kamil Dudka wrote: > > On Monday, May 20, 2019 12:15:32 PM CEST surya chandrika wrote: > > > On Wed, May 15, 2019 at 5:49 PM Kamil Dudka wrote: > > > > Why do not you use the %configure macro as

Re: [RELEASE] curl 7.65.0

2019-05-22 Thread Daniel Stenberg via curl-library
Hi, We've already seen a few bugs and pull-requests popping in to fix quirks in the 7.65.0 release. Due to this, I think we should consider doing a follow-up patch release within a week or so where these are addressed. This shouldn't warrant any need to move any other release dates or

Re: create rpm for libcurl

2019-05-22 Thread surya chandrika via curl-library
On Mon, May 20, 2019 at 3:55 PM Kamil Dudka wrote: > On Monday, May 20, 2019 12:15:32 PM CEST surya chandrika wrote: > > On Wed, May 15, 2019 at 5:49 PM Kamil Dudka wrote: > > > Why do not you use the %configure macro as in the mentioned spec file? > > > It should take care of setting all the

Re: SIZEOF_LONG undefined when cross-compiling for iOS

2019-05-22 Thread Jonas Vautherin via curl-library
Wait, that's actually exactly what ${SIZEOF_LONG_CODE} does! So instead of using #cmakedefine, I think we could just switch everything to ${VARIABLE_CODE} and that would simply support that! I'm gonna give it a shot! On Wed, May 22, 2019 at 12:17 PM Jonas Vautherin wrote: > Thanks a lot for

Re: SIZEOF_LONG undefined when cross-compiling for iOS

2019-05-22 Thread Jonas Vautherin via curl-library
Thanks a lot for the answer, that was helpful! It turns out that the toolchain is actually setting multiple OSX architectures, and CMake is behaving as per the doc [1], i.e.: > The variable “${VARIABLE}” may be “0” when CMAKE_OSX_ARCHITECTURES has multiple architectures for building OS X

Re: Edit cookies easily?

2019-05-22 Thread Rainer Canavan via curl-library
On Tue, May 21, 2019 at 10:45 PM Scott Ellentuch via curl-library wrote: > > Hi, > > Using PHP and curl_init/curl_setopt/curl_exec/curl_close. > > My need is that I contact A.example.com, perform a login transaction there, > and then use the cookies returned for contacting B.anotherexample.com

RE: use 'first hash' instead of password to do digest auth

2019-05-22 Thread Erik Janssen via curl-library
Hi Nicolas, >> Maybe this is not a curl question, and it is my lack of knowledge about >> storage of credentials getting in the way. > It is not really a curl question, I agree. Even though, I’ll try to give you > some advice. Thanks for the direction. I realize now these days a low-overhead

[SECURITY ADVISORY] curl: TFTP receive buffer overflow

2019-05-22 Thread Daniel Stenberg via curl-library
TFTP receive buffer overflow Project curl Security Advisory, May 22nd 2019 - [Permalink](https://curl.haxx.se/docs/CVE-2019-5436.html) VULNERABILITY - libcurl contains a heap buffer overflow in the function (`tftp_receive_packet()`) that recevives data

[SECURITY ADVISORY] curl: Integer overflows in curl_url_set

2019-05-22 Thread Daniel Stenberg via curl-library
Integer overflows in `curl_url_set()` = Project curl Security Advisory, May 22nd 2019 - [Permalink](https://curl.haxx.se/docs/CVE-2019-5435.html) VULNERABILITY - libcurl contains two integer overflows in the `curl_url_set()` function that if

[RELEASE] curl 7.65.0

2019-05-22 Thread Daniel Stenberg via curl-library
Hi team! I'm proud to announce that we have yet again managed to put together a curl release for you! We call it 7.65.0. It contains a few changes, two security fixes and over a hundred bug-fixes. I think you'll like it! You can download it as usual from: http://curl.haxx.se/ curl and

Re: use 'first hash' instead of password to do digest auth

2019-05-22 Thread Nicolas Roeser via curl-library
Hi Erik! Erik Janssen wrote on 2019-05-21T16:13:18+00:00 via curl-library: Maybe this is not a curl question, and it is my lack of knowledge about storage of credentials getting in the way. It is not really a curl question, I agree. Even though, I’ll try to give you some advice. Reading