Re: Is libcurl/curl affected by OpenSSL "DH small subgroups (CVE-2016-0701)"?

2016-02-06 Thread Ray Satiro via curl-library
On 2/6/2016 2:09 PM, Dana Burd wrote: On 1/29/2016 1:38 AM, Dana Burd wrote: There¹s a new ³high severity² vulnerability in OpenSSL 1.0.2: https://www.openssl.org/news/secadv/20160128.txt I¹m curious if curl-7.40.0 is affected at all. I poked around the source, but it¹s a bit over my head.

Re: Is libcurl/curl affected by OpenSSL "DH small subgroups (CVE-2016-0701)"?

2016-02-06 Thread Ray Satiro via curl-library
On 1/29/2016 1:38 AM, Dana Burd wrote: Wise curl folks, There’s a new “high severity” vulnerability in OpenSSL 1.0.2: https://www.openssl.org/news/secadv/20160128.txt I’m curious if curl-7.40.0 is affected at all. I poked around the source, but it’s a bit over my head. Any insights

Re: tool_operate: Don't sanitize --output path (Windows)

2016-02-02 Thread Ray Satiro via curl-library
On 2/2/2016 6:26 PM, Daniel Stenberg wrote: Hey Ray, In your commit 2b6dadc, you said: "This is a partial revert of 3017d8a until I write a proper fix." Do you have a time frame for that, or do you think we can release a patch release of curl already without that proper fix? I'd prefer to

Re: How to "PUT" http body to HTTP PUT in libcurl

2016-01-27 Thread Ray Satiro via curl-library
On 1/27/2016 11:58 AM, cnm marketing wrote: According to your instruction - "Changing the CURLOPT_POST to a CURLOPT_PUT ought to get you what you want". The result of "405 Method Not Allowed" makes me feel uncomfortable. Please advise As Dan said the server didn't like your request so you

Re: Is curl suitable for iOS/Android when http proxy is used

2016-01-15 Thread Ray Satiro via curl-library
On 1/15/2016 7:57 AM, Cédric Deltheil wrote: On Fri, Jan 15, 2016, at 01:25 PM, JOHAN LANTZ wrote: My doubt at this moment is how devices using a http proxy would work. I have not confirmed it but I would assume that if you use the native API’s from Apple, the proxy would be taken care of by

Re: Infinite loop

2016-01-15 Thread Ray Satiro via curl-library
On 1/14/2016 11:26 AM, Jakub Zakrzewski wrote: Thanks, Ray. I still didn't fgure out, why the timeout does not trigger but taking few more dumps (I'm just creating dumps using TaskManager) led me to a belief that it's either libssh2 or the interaction between libssh2 and libcurl. Just look at

Re: fail to `malloc` pointers after a call to curl_easy_perform.

2016-01-14 Thread Ray Satiro via curl-library
On 1/14/2016 1:47 PM, ataro wrote: I'm developing a GUI app on Microsoft Windows to make HTTP requests with libcurl. Because this is a GUI app, I need to initialize the curl easy handle from a separate thread in order to avoid the main window procedure from being blocked until

Re: [PATCHv2] mbedtls: Implement CURLOPT_PINNEDPUBLICKEY

2016-01-13 Thread Ray Satiro via curl-library
On 1/13/2016 1:06 AM, Thomas Glanzmann wrote: Manuel has answered: Ok, so I'll start with the easy things: we do support both ID-based (old-style) and ticket-based (RFC 5077) session resumption. From the client perspective, the API for both is exactly the same (the only difference being the

Re: Infinite loop

2016-01-12 Thread Ray Satiro via curl-library
On 1/12/2016 6:18 AM, Jakub Zakrzewski wrote: Hi All, I have a very weird problem and I'm having hard time trying to find the cause. My program makes frequent calls to a sftp server to get the list of files (like once a minute or so). The sftp server is quite slow and overloaded. Every once

Re: configure with ssl in non-standard location failing

2016-01-11 Thread Ray Satiro via curl-library
On 1/11/2016 3:01 PM, Dave Kennard wrote: My configure command is: ./configure --prefix=$HOME/apps/$CURL --with-ssl=$HOME/apps/openssl --with-nghttp2=$HOME/apps/$NGHTTP2 I've also tried prepending LDFLAGS="-L$HOME/apps/openssl/lib" but get the same result. In the configure output I get:

Re: help using Curl through Vagrant

2016-01-04 Thread Ray Satiro via curl-library
On 1/3/2016 7:23 PM, Barry wrote: I tried this using the old command prompt, and I got the following result: C:\>"c:\HashiCorp\Vagrant\embedded\bin\curl.exe" -v --cacert "c:\HashiCorp\Vagra nt\embedded\cacert.pem" "https://atlas.hashicorp.com/data-science-toolbox/dst; * Trying

Re: help using Curl through Vagrant

2016-01-02 Thread Ray Satiro via curl-library
On 1/2/2016 8:43 PM, Barry wrote: I couldn't get it to work exactly as you specified, but I managed to figure out the following commands: PS C:\HashiCorp\Vagrant\embedded\bin> curl -Verbose cmdlet Invoke-WebRequest at command pipeline position 1 Supply values for the following parameters: Uri:

Re: curlbuild.h: non-configure GCC fallback looks fishy

2016-01-01 Thread Ray Satiro via curl-library
On 1/1/2016 5:30 PM, Christian Weisgerber wrote: In curlbuild.h, the non-configure generic GCC fallback is dubious: # if defined(__ILP32__) || \ defined(__i386__) || defined(__ppc__) || defined(__arm__) || \ defined(__sparc__) || defined(__mips__) || defined(__sh__) ... # elif

Re: help using Curl through Vagrant

2016-01-01 Thread Ray Satiro via curl-library
On 1/1/2016 4:20 AM, Barry via curl-library wrote: My specs are as follows: AMD Athlon II 170u 2.00 gigahertz 2.75 gigabytes usable ram 370 gigabytes free hard drive space 802.11n WPA2-Personal 4GLTE Netgear WNDA3100v2 N600 Wireless Dual Band USB Adaptor (driver 5.100.68.48) Windows 8.1 pro

Re: BADCERT_NOT_TRUSTED error with mbedTLS

2015-12-29 Thread Ray Satiro via curl-library
On 12/29/2015 1:06 PM, Thomas Glanzmann wrote: Hello Ray, Does anyone have mbedTLS working in curl 7.46.0? when I build mbedTLS on Linux and try what you did, I notice the following: - --cacert Only accepts a single certificate not a file containing multiple certs. I

BADCERT_NOT_TRUSTED error with mbedTLS

2015-12-28 Thread Ray Satiro via curl-library
I recently built curl 7.46.0 with mbedTLS (--with-mbedtls): curl 7.46.0 (x86_64-pc-mingw32) libcurl/7.46.0 mbedTLS/2.2.0 zlib/1.2.8 Protocols: http https Features: Largefile SSL libz Any website I try to access via https I get BADCERT_NOT_TRUSTED. Take test.com for example: curl -Ss --cacert

Re: cCURL failed setting cipher list

2015-12-22 Thread Ray Satiro via curl-library
On 12/22/2015 4:09 AM, Indtiny S wrote: My openssl version which is configured to the curl is 1.0.1f . And that openssl has the cipher i mentioed i checked using the below command. . $openssl ciphers -v 'ALL:eNULL' Did you try what I suggested? curl --ciphers AES256-SHA256 If that gives

Re: curl command line option to ignore Subject validation

2015-12-17 Thread Ray Satiro via curl-library
pop3s rtsp smb smbs smtp smtps telnet tftp Features: IPv6 Largefile NTLM SSL libz *From:*curl-library [mailto:curl-library-boun...@cool.haxx.se] *On Behalf Of *Ray Satiro via curl-library *Sent:* Thursday, December 17, 2015 12:31 PM *To:* curl-library@cool.haxx.se *Subject:* Re: curl command line

Re: curl command line option to ignore Subject validation

2015-12-16 Thread Ray Satiro via curl-library
On 12/17/2015 12:25 AM, Gaurav Rastogi -X (garastog - ARICENT TECHNOLOGIES MAURIITIUS LIMITED at Cisco) wrote: Hi All, I ve upgraded CURL from 7.30 to 7.46. But here I’m facing one issue in one of the curl command line execution. In version 7.30 below command works fine for me: curl -s -k

Re: hostname matching failure with multiple SAN DNS names

2015-12-15 Thread Ray Satiro via curl-library
On 12/15/2015 8:18 AM, John T Kohl wrote: Yes, Roy's proposed change works fine for me. -- Thanks, landed in 6c2c019 [1]. [1] https://github.com/bagder/curl/commit/6c2c019 --- List admin:

Re: cCURL failed setting cipher list

2015-12-14 Thread Ray Satiro via curl-library
On 12/14/2015 9:12 PM, Indtiny S wrote: I need to configure the cCURL client to specifically use the cipher TLS_RSA_WITH_AES_256_CBC_SHA256. so I used the below curl option curl_easy_setopt(curl, CURLOPT_SSL_CIPHER_LIST, "TLS_RSA_WITH_AES_256_CBC_SHA256"); Code Compiles properly but I get

Re: hostname matching failure with multiple SAN DNS names

2015-12-14 Thread Ray Satiro via curl-library
On 12/14/2015 10:48 AM, John T Kohl wrote: I have a certificate with two subject alternative names (DNS names). Using a variant of curl that calls x509asn1.c:Curl_verifyhost() (such as one built using GSKit), the certificate validation fails because the code is returning early in the case

Re: HTTP GET method without body

2015-12-09 Thread Ray Satiro via curl-library
On 12/9/2015 12:01 PM, Boris Schrijver wrote: I was trying out a few things in qemu-img, a virtualisation utility which depends on libcurl. And with the signed-urls recently becoming more common, I stumbled upon the following issue. The signed-urls I will be talking about are for S3 [1]. A

Re: [Patch] guard name

2015-12-07 Thread Ray Satiro via curl-library
On 12/7/2015 9:33 AM, Gisle Vanem wrote: The name of the header guard in LwIP's has changed from '__LWIP_OPT_H__' to 'LWIP_HDR_OPT_H' (bug #35874 in May 2015). Hence libcurl should adapt. Thanks, this and the other lwIP patch you submitted earlier this morning 'USE_LWIPSOCK and MSVC' [1]

Re: [Patch] guard name

2015-12-07 Thread Ray Satiro via curl-library
On 12/7/2015 3:08 PM, Gisle Vanem wrote: Ray Satiro wrote: I did have a reject in socket.c with this second patch Which socket.c? I'm not sure what reject this is. Oops, I meant the socket macro in memdebug.h. This was the problem: --- a/lib/memdebug.h 2015-12-07 12:59:31 +++ b/lib

Re: curl_easy_perform can't download huge file

2015-12-02 Thread Ray Satiro via curl-library
On 12/2/2015 9:27 PM, Sino wrote: I am using libcurl 7.35.0 on ubuntu 14.04 x86-64 platform. What I want to do is to download one huge file greater than 200M by using curl_easy_perform. It always downloads partial file, for example, one 433M file, it always ends at the size of 190M or so.

Re: Libcurl comet connection

2015-11-23 Thread Ray Satiro via curl-library
On 11/23/2015 10:04 AM, john wrote: Using libcurl, is it possible to maintain a streaming HTTP (Comet) connection to a web server? Reading the Curl-Library archive, *curl.haxx.se/mail/lib-2007-10/0194.html * indicates this is not supported. Has anything changed since this 2007 posting?

Re: Enabling threaded resolver on Windows

2015-11-12 Thread Ray Satiro via curl-library
On 11/12/2015 12:20 PM, Ahmed, Najeeb wrote: I trying to build curl on Windows to enable threaded resolver but I am not sure how to do it and I couldn't find any info about it on the web. Below is my "nmake" command that I am using, can someone please let me know what needs to be added to this

Re: Data retrieval is fragmented using Multi CURL Lib

2015-11-07 Thread Ray Satiro via curl-library
On 11/7/2015 7:26 AM, doa379 wrote: I am using multi libcurl to download data from various sources. It's all working except for the issue that the data retrieved from the various sources is fragmented and jumbled. For example if you have this JSON data in any order: {{ JSON1 }, { JSON2 }, {

Re: Data retrieval is fragmented using Multi CURL Lib

2015-11-06 Thread Ray Satiro via curl-library
On 11/6/2015 7:22 PM, doa379 wrote: I am using multi libcurl to download data from various sources. It's all working except for the issue that the data retrieved from the various sources is fragmented and jumbled. For example if you have this JSON data in any order: {{ JSON1 }, { JSON2 }, {

Re: curl_multi_info_read() returning result of CURLE_RECV_ERROR

2015-11-04 Thread Ray Satiro via curl-library
On 11/4/2015 6:54 AM, KS Lee wrote: ​ Thank you, Ray, for the reply.​ gmane.comp.web.curl.library by Ray Satiro via curl-library / 2h // keep unread // hide // preview That you have the same issue with WinSSL as you do OpenSSL leads me to believe this isn't a problem

Re: Trouble with libcurl vs. old/incomplete TFTP servers

2015-11-04 Thread Ray Satiro via curl-library
On 11/4/2015 8:11 AM, Michael König wrote: Hi everyone! Ray Satiro via curl-library <curl-library@cool.haxx.se> hat am 24. August 2015 um 06:52 geschrieben: On 8/21/2015 10:16 AM, Michael König wrote: Daniel Stenberg <dan...@haxx.se> hat am 20. August 2015 um 23:20 geschrieben:

Does anyone use TLS-PSK and want to see support for it in libcurl?

2015-11-03 Thread Ray Satiro via curl-library
For those of you not watching the repo Isaac Boukris has a pull request to add support for TLS-PSK in libcurl for the OpenSSL backend [1]. It has been open for two months but hasn't received much feedback. If you are familiar with TLS-PSK or that is a feature you want in libcurl please give

Re: curl_multi_info_read() returning result of CURLE_RECV_ERROR

2015-11-03 Thread Ray Satiro via curl-library
On 10/27/2015 2:09 AM, KS Lee wrote: schannel: Curl_read_plain returned CURLE_RECV_ERROR That you have the same issue with WinSSL as you do OpenSSL leads me to believe this isn't a problem with either. You don't have this problem without SSL? I apologize if this was answered already but I

Re: CURLINFO_TLS_SESSION with OPENSSL returns SSL_CTX instead of SSL

2015-10-29 Thread Ray Satiro via curl-library
On 10/7/2015 9:10 AM, Daniel Stenberg wrote: On Wed, 7 Oct 2015, Rich Gray wrote: For what it's worth, CURLINFO_TLS_SSL_PTR seems more meaningful to me than CURLINFO_TLS_SESSION_V2. For maximum clarity, maybe CURLINFO_TLS_CTX_PTR could be added as an alias for CURLINFO_TLS_SESSION and the

Re: Compiling libcurl for https

2015-10-26 Thread Ray Satiro via curl-library
On 10/25/2015 6:05 PM, Andrew Williams wrote: The console app I copied and most of the other examples I've been able to find for downloading files all seem to pre-define the output file name even when the download file name is provided as part of the URL. Are there any parts of libcul that

Re: segfault in curl_easy_perform

2015-10-23 Thread Ray Satiro via curl-library
On 10/23/2015 3:27 PM, Dave S wrote: Silly question -- after 1075 ./buildconf 1076 ./configure --disable-shared --enable-debug 1077 make where do I find the built library? (7.45.0 stable source) src/curl --- List

Re: curl_multi_info_read() returning result of CURLE_RECV_ERROR

2015-10-22 Thread Ray Satiro via curl-library
On 10/22/2015 12:02 AM, KS Lee wrote: Yes, but until we find the reason for the problem I think its really hard to tell why the proxy makes things differently. ​Our thinking is that the web site operator may have changed their firewall setting to reset long-lived HTTP

Re: [Patch] lib/Makefile.dj

2015-10-22 Thread Ray Satiro via curl-library
On 10/22/2015 8:15 AM, Gisle Vanem wrote: "Ray Satiro via curl-library" <curl-library@cool.haxx.se> wrote: Thanks, landed in https://github.com/bagder/curl/commit/c238d4d In the future can you attach a patch? In Thunderbird the leading whitespace is stripped and I can'

Re: [Patch] lib/Makefile.dj

2015-10-21 Thread Ray Satiro via curl-library
On 10/21/2015 7:45 AM, Gisle Vanem wrote: The end result (i.e. curl) still works fine except for some details in the lib/Makefile.dj. A changelog + patch: Add a VPATH-statement for the vtls/*.c files. Due to 'vtls/*.c', remove that subdir part from $(OBJECTS). Thanks, landed in

Re: Compiling libcurl for https

2015-10-21 Thread Ray Satiro via curl-library
On 10/20/2015 9:08 PM, Andrew Williams wrote: Folks, First post and a novice developer although I have spent the best part of 25 years hacking at various languages. I'm using VS Community 2015 as an IDE. I'm trying to evaluate libcurl as a library for use in another desktop application. I

Re: CURLINFO_TLS_SESSION with OPENSSL returns SSL_CTX instead of SSL

2015-10-06 Thread Ray Satiro via curl-library
On 10/6/2015 6:21 AM, Frank Meier wrote: Hi Here is another idea, piggyback on CURLINFO_TLS_SESSION instead. CURLINFO_TLS_SESSION_V2 returns OpenSSL SSL * but is otherwise the same as CURLINFO_TLS_SESSION: https://github.com/jay/curl/compare/master...jay:curlinfo_tls_session_v2?expand=1

Re: CURLINFO_TLS_SESSION with OPENSSL returns SSL_CTX instead of SSL

2015-10-02 Thread Ray Satiro via curl-library
On 10/2/2015 3:39 AM, Michael König wrote: Ray Satiro via curl-library <curl-library@cool.haxx.se> hat am 1. Oktober 2015 um 21:03 geschrieben: Here is another idea, piggyback on CURLINFO_TLS_SESSION instead. CURLINFO_TLS_SESSION_V2 returns OpenSSL SSL * but is otherwise th

Re: CURLINFO_TLS_SESSION with OPENSSL returns SSL_CTX instead of SSL

2015-10-01 Thread Ray Satiro via curl-library
On 9/30/2015 8:15 PM, Ray Satiro wrote: I started a draft [2] of CURLINFO_TLS_SSL_PTR to get the active SSL object for all SSL backends. In the case of DarwinSSL and WinSSL it appears the CTX is the SSL object, please correct me if this is wrong. Just written not built, I could use some

Re: CURLINFO_TLS_SESSION with OPENSSL returns SSL_CTX instead of SSL

2015-09-30 Thread Ray Satiro via curl-library
On 9/29/2015 12:13 PM, Michael König wrote: Hi everyone, I got into a situation where i want to check what protocol version and cipher was used for an SSL connection. (HTTPS) I found CURLINFO_TLS_SESSION and it looked like it might give me access to the information i need, but it does not.

Re: CURLINFO_TLS_SESSION with OPENSSL returns SSL_CTX instead of SSL

2015-09-30 Thread Ray Satiro via curl-library
On 9/30/2015 6:32 AM, Daniel Stenberg wrote: On Wed, 30 Sep 2015, Ray Satiro via curl-library wrote: I don't know why the SSL object isn't exposed. It's been proposed before, I don't remember what happened. (Not that I think it really matters WHY we did things the way we did in the past

Re: Multithreaded use of libcurl

2015-09-20 Thread Ray Satiro via curl-library
On 18/09/15 05:53, Ray Satiro via curl-library wrote: > > That doesn't sound right. I think your solution is possibly covering up > a problem with the design of your program. > --- > List admin: http://cool.hax

Re: Unhandled exception in VC++ 2010 with curl_easy

2015-09-16 Thread Ray Satiro via curl-library
On 9/15/2015 5:16 PM, David Chapman wrote: https://msdn.microsoft.com/en-us/library/ms235460.aspx It says CRT (C runtime) objects are valid only for the copy of the CRT library where they are allocated or set. If the DLL uses a different copy of the CRT library than the application, then

Re: Build environment for C++ .net

2015-09-14 Thread Ray Satiro via curl-library
On 9/13/2015 4:26 PM, Jon wrote: Hi All, I’m starting to write an application in Microsoft Visual Studio 2012 using C++ and .net. I attempted to compile and build with my prior libcurl.lib libarary/dependency that I was using in the same VS 2012 but for C++ only (without .net) but I’m

Re: Adding Option To Happy Eyeballs

2015-09-03 Thread Ray Satiro via curl-library
On 9/3/2015 12:14 PM, Alan Cronin (alcronin) wrote: We will want to use IPv6 in the product but we have a US federal requirement (DoD UCR available online) to provide a happy eyeballs solution where preference is given to IPv4 addresses rather than IPv6. This will be provided via configuration

Re: CURL custom POST commands

2015-08-28 Thread Ray Satiro via curl-library
On 8/28/2015 2:32 PM, Fitzgerald, Kevin wrote: **HTTP/1.1 200 OK Cache-Control: private, max-age=0 Content-Type: text/xml; charset=utf-8 Content-Encoding: gzip Vary: Accept-Encoding Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie:

Re: Static build without LIBCMT

2015-08-27 Thread Ray Satiro via curl-library
On 8/26/2015 10:07 AM, Miroslav Lazic wrote: Ok, but I would like to get libcurl linked against msvcrt, if it's possible, as that is how it is linked in the project. Adding libcmt on IgnoreDefaultLibs in my VS project is a workaround, but I would like to go that way it if I don't have to.

Re: My first post for verification

2015-08-27 Thread Ray Satiro via curl-library
On 8/26/2015 7:12 AM, Ken Alverson wrote: I am currently trying to integrate curl-library into a small program that will ftp a small program to an iSeries system, run it, then ftp the file results back to the same local PC program for display. My choice of using curl library for this was to

Re: Trouble with libcurl vs. old/incomplete TFTP servers

2015-08-23 Thread Ray Satiro via curl-library
On 8/21/2015 10:16 AM, Michael König wrote: Daniel Stenberg dan...@haxx.se hat am 20. August 2015 um 23:20 geschrieben: On Wed, 19 Aug 2015, Michael König wrote: If you think you can get something like that written into the documentation for this new option as well, my objections are squashed

Re: CURL custom POST commands

2015-08-14 Thread Ray Satiro via curl-library
On 8/14/2015 4:21 PM, Fitzgerald, Kevin wrote: Hello again, I have decided to try a different tack and I am using the sendrecv example from the site. Everything seems to work as I need it to, but I am getting an Internal Server Error back from the server. ?xml version=1.0

Re: segfaulting in Curl_num_addresses on OS X and Ubuntu

2015-08-13 Thread Ray Satiro via curl-library
On 8/9/2015 5:21 PM, Eric Ridge wrote: On Thu, Aug 6, 2015 at 2:15 AM Ray Satiro via curl-library curl-library@cool.haxx.se mailto:curl-library@cool.haxx.se wrote: How about this: If you are using libcurl from multiple threads or libcurl was built with the threaded resolver

Re: libcurl not opened from thunderbird extension

2015-08-05 Thread Ray Satiro via curl-library
On 8/4/2015 3:12 AM, Libor Bubik wrote: I use your libcurl library in my dll library. When I use my dll from my application everything is ok and curl works fine. But I need to write thunderbird extension which is using my dll library. I connect dll to thunderbird using js-ctypes

Re: segfaulting in Curl_num_addresses on OS X and Ubuntu

2015-08-01 Thread Ray Satiro via curl-library
On 7/31/2015 10:44 PM, Eric Ridge wrote: On Jul 31, 2015, at 9:41 PM, Ray Satiro via curl-library curl-library@cool.haxx.se wrote: Would you find this easier to understand: *If you are using libcurl from multiple threads or libcurl was built with the threaded resolver option (the default

Re: segfaulting in Curl_num_addresses on OS X and Ubuntu

2015-07-31 Thread Ray Satiro via curl-library
On 7/31/2015 12:47 PM, Eric Ridge wrote: On Jul 31, 2015, at 2:59 AM, Ray Satiro via curl-library curl-library@cool.haxx.se wrote: On 7/31/2015 12:27 AM, Eric Ridge wrote: Now that I know it's possible for libcurl to create threads, it's stunningly obvious why this happens, and I've since

Re: segfaulting in Curl_num_addresses on OS X and Ubuntu

2015-07-31 Thread Ray Satiro via curl-library
On 7/31/2015 12:27 AM, Eric Ridge wrote: On Jul 29, 2015, at 5:35 PM, Eric Ridge eeb...@gmail.com wrote: It's probably worth mentioning that I'm also using curl_global_init_mem() to set a custom allocator (this is inside Postgres, so I trust their alloc functions) and that the process is not

Re: Send Remote Source in JSON body

2015-07-28 Thread Ray Satiro via curl-library
On 7/28/2015 4:12 PM, Aaron Meriwether wrote: On Jul 28, 2015, at 12:45 PM, Robert Hudspeth hudsp...@bigml.com mailto:hudsp...@bigml.com wrote: I have a remote .csv file that I need to POST to our REST API in a JSON body, yet the code I have doesn't quite work. I believe what's happening

Re: Option to disable certificate revocation checks broke builds

2015-07-25 Thread Ray Satiro via curl-library
On 7/25/2015 8:40 AM, Dan Fandrich wrote: Many autobuilds have been broken since commit 172b2beb was submitted a week ago; it looks like all non-SSL builds are affected. Tests are returning error 48 CURLE_UNKNOWN_OPTION in these cases, even tests that have nothing to do with SSL (e.g. 19, 20,

Re: CURL custom POST commands

2015-07-17 Thread Ray Satiro via curl-library
On 7/17/2015 2:40 PM, Fitzgerald, Kevin wrote: Thank you for the example. But I think I am not going about this correctly. What I actually need to be able to do is connect to a web service (which it appears I am able to do), and send it a POST request. Below is an example of the request that

Re: [PATCH] ntlm_wb_response: fix theoretical memory leak

2015-07-16 Thread Ray Satiro via curl-library
On 7/16/2015 6:59 AM, David Woodhouse wrote: Static analysis indicated that my commit 9008f3d564 (ntlm_wb: Fix hard-coded limit on NTLM auth packet size) introduced a potential memory leak on an error path, because we forget to free the buffer before returning an error. Fix this. Thanks,

Re: CURL custom POST commands

2015-07-14 Thread Ray Satiro via curl-library
On 7/14/2015 2:10 PM, Fitzgerald, Kevin wrote: I have to connect to a web service that requires a username and password and as a result I cannot use the basic CURL POST logic. Does anyone have a program or example of how to use CURL to set up a custom POST? I need to send a request and then

Re: VMS - VAX and 64 bit fixes for master to build.

2015-07-13 Thread Ray Satiro via curl-library
On 7/8/2015 6:16 PM, John E. Malmberg wrote: On 7/1/2015 9:19 PM, John E. Malmberg wrote: This includes the fixes for getting curl 7.43 to build on VAX/VMS 7.3 and the changes needed to get master to build on OpenVMS 8.3+ and VAX/VMS 7.3. Just wanted to make sure that these did not get

Re: CURL handle re-use with different query parameters

2015-07-13 Thread Ray Satiro via curl-library
On 7/13/2015 5:56 AM, Rajalakshmi Iyer wrote: In my application, there are several HTTP GET requests to the same external server but with different query parameters in each request. As a result, for every request, I need to do a curl_easy_setopt for the CURLOPT_URL. Would having a single

Re: AW: AW: Difference between CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER?

2015-07-13 Thread Ray Satiro via curl-library
On 7/13/2015 3:33 AM, Dr. Roger Cuypers wrote: Does libcurl implement the former part via SSL_get_verify_result? -Ursprüngliche Nachricht- Von: curl-library [mailto:curl-library-boun...@cool.haxx.se] Im Auftrag von Daniel Stenberg Gesendet: Freitag, 10. Juli 2015 11:29 An: libcurl

Re: CURL multi handle with easy handles from different threads

2015-07-10 Thread Ray Satiro via curl-library
On 7/10/2015 2:06 AM, Rajalakshmi Iyer wrote: Thanks for getting back. Here is some background to the application in its current state - The application has X worker threads that receives 1000s of concurrent requests per second. As part of handling these incoming requests, the X worker

Re: [SECURITY NOTICE] libidn with bad UTF8 input

2015-07-10 Thread Ray Satiro via curl-library
On 7/7/2015 6:33 PM, Daniel Hardman wrote: 1. The pull request is from my private fork to Ray's check_utf8_before_libidn branch; it doesn't yet target master. This is because I'd like at least Ray and Daniel's feedback, first. 2. I'm a bit unhappy about the lack of error propagation. Right

Re: Custom verification of server side certs

2015-07-10 Thread Ray Satiro via curl-library
On 7/10/2015 7:24 AM, Alex Bligh wrote: We have a situation where we have a custom CA that has signed server and client certificates. The server certificates have CNs (like server-abcde) which are unrelated to the URL used to access them e.g. https://192.168.100.2:8443/; I think I need to

Re: CURL multi handle with easy handles from different threads

2015-07-09 Thread Ray Satiro via curl-library
On 7/9/2015 5:19 PM, Rajalakshmi Iyer wrote: Is it appropriate to have a global CURL multi handle to which easy handles are added by different threads in an application? It's possible but I don't know whether it's appropriate for you. I'm thinking back to what you posted on the list a few

Re: [SECURITY NOTICE] libidn with bad UTF8 input

2015-07-02 Thread Ray Satiro via curl-library
On 7/2/2015 10:51 AM, Daniel Hardman wrote: I will post a proposed patch demonstrating validation. This issue is discussed on github bagder/curl as well [1], you should check that. I added a branch check_utf8_before_libidn [2] and it has a new function utf8len that will error if the utf-8 is

Re: Adding CURL handles to running CURLM

2015-06-26 Thread Ray Satiro via curl-library
On 6/1/2015 6:45 AM, vincas.ra...@bentley.com wrote: That is usually a sign that you haven't provided the (correct) size of the data you are to upload. All size fields have 400 correctly set and logs indicate that everything was read to CURL. Below is sample code that I brought together

Re: SSL host endpoint

2015-06-26 Thread Ray Satiro via curl-library
On 6/26/2015 3:38 PM, bch wrote: Hi. I want to know if there's something I can do to get this effect: curleasy_setopt_url http://192.168.1.99:443 curleasy_setopt_effectivesslhostname www.fqdn.com -- I want the endpoint cert to think this is how it was connected to. ... What I can do now is

Re: Wildcard certificate problems (or incomplete certificate chain?)

2015-06-23 Thread Ray Satiro via curl-library
On 6/23/2015 5:30 PM, Dan Fandrich wrote: Thanks to a bug report from Stefan Kanthak about the download page robot failing to find some updated curl version, I stumbled onto a problem in how curl handles wildcard certificates (maybe). Stefan reported that curl using SChannel validates the

Re: Poor HTTP POST upload performance

2015-06-22 Thread Ray Satiro via curl-library
On 6/22/2015 11:12 AM, Bryan Christ wrote: You are correct about the JS uploader chopping the file into chunks. For the purposes of my test, I disabled that behavior. You can go to Account Settings - Upload Options and turn off the Flash and HTML uploaders. This is the only way to get

Re: Poor HTTP POST upload performance

2015-06-22 Thread Ray Satiro via curl-library
On 5/20/2015 11:35 AM, Bryan Christ wrote: Ray, Here is a sample program that illustrates the problem. I tested the performance with an 11MB file. This sample program consistently takes 11-17 seconds to complete. If I upload the same file through Firefox, it takes about 4.5 seconds.

Re: TLS certificate verification

2015-06-21 Thread Ray Satiro via curl-library
On 6/20/2015 7:28 PM, (( \/\/|||'/')) ((\ )) (( ))\\ wrote: 1. I have found conditions on custom IMAP command to get thousands of envelopes in one FETCH where callback function tried to allocate huge amounts of memory, more than response size, making Callback return -1, and

Re: TLS certificate verification

2015-06-20 Thread Ray Satiro via curl-library
On 6/20/2015 3:51 PM, Daniel Stenberg wrote: On Sat, 20 Jun 2015, (( \/\/|||'/')) ((\ )) (( ))\\ wrote: and forgive me if I'm wrong, but it looks like the only original functionality libcurl has is to verify certificates (which doesn't work that well either... try verifying yahoo's

Re: CURLOPT_WRITEFUNCTION function getting called multiple time even the complete http response body is only 2155 bytes

2015-06-19 Thread Ray Satiro via curl-library
On 6/19/2015 7:04 AM, Ganesh Nikam wrote: The problem I am facing with curl is that, my write_callback is getting called multiple times for single http response. As per the documentation this callback can be called multiple times in some cases. My query is in what scenarios it will be called

Re: New to CURL - HTTP POST to web service and response

2015-06-18 Thread Ray Satiro via curl-library
On 6/17/2015 3:12 PM, Fitzgerald, Kevin wrote: Hello, I am very new to CURL and I am trying to figure out the best/correct way to use CURL to perform the functions that I need to perform. I have written a C program running on an HP/UX box. I need to perform an HTTP POST to a web service and

Re: [PATCH] schannel: Add support for optional client certificates

2015-06-11 Thread Ray Satiro via curl-library
On 6/5/2015 4:53 PM, Joel DePooter wrote: I've made the attached patch, which allows curl with schannel to connect to servers which request a client certificate, but do not require it. With this change, when a server requests a client certificate, curl will now continue the handshake without

Re: multi_perform blocks and never returns when built with schannel WinIDN

2015-06-10 Thread Ray Satiro via curl-library
On 6/9/2015 12:39 PM, Pär Björklund wrote: I noticed it was a bad url for testing as it went dead. You can use this one instead

Re: the new site layout went live

2015-06-10 Thread Ray Satiro via curl-library
On 6/10/2015 5:26 AM, Daniel Stenberg wrote: I expect to have landed a couple of mistakes in the process so if you find problems after a day or two, please let me know since then it is probably something I haven't seen myself. As someone who often uses 1920x1080 I must admit I liked the old

Re: multi_perform blocks and never returns when built with schannel WinIDN

2015-06-08 Thread Ray Satiro via curl-library
On 6/8/2015 12:40 PM, Pär Björklund wrote: I have a new draft of schannel_recv up, can you try https://github.com/jay/curl/commit/bdc2166 Sorry about the radio silence, been a busy week. I've only tested with curl command line but issue remains, nothing other than CURLE_OK is returned.

Re: multi_perform blocks and never returns when built with schannel WinIDN

2015-06-03 Thread Ray Satiro via curl-library
On 6/1/2015 12:10 PM, Pär Björklund wrote: Can you dig a little deeper and make sure schannel_recv() returns CURLE_AGAIN in the 'err' field when there's nothing more to read? Testing with a 100mb download it never returned anything else than CURLE_OK from schannel_recv or Curl_read There is

Re: multi_perform blocks and never returns when built with schannel WinIDN

2015-06-01 Thread Ray Satiro via curl-library
On 5/31/2015 6:13 PM, Daniel Stenberg wrote: On Sun, 31 May 2015, Pär Björklund wrote: I don't run any machine with schannel myself so I can't help much to debug this for real, but I can chime in with some observations. I've narrowed it down to the loop in in readwrite_data, data_pending is

Re: Support for openssl trusted_first flag

2015-05-29 Thread Ray Satiro via curl-library
On 5/29/2015 12:58 AM, Ray Satiro wrote: On 5/28/2015 5:28 AM, Daniel Stenberg wrote: On Tue, 26 May 2015, Ryan Schmidt wrote: Some time ago the idea was brought up to use openssl's new -trusted_first / X509_V_FLAG_TRUSTED_FIRST mode; a patch was provided: http://curl.haxx.se/mail/lib-2011

Re: Support for openssl trusted_first flag

2015-05-28 Thread Ray Satiro via curl-library
On 5/28/2015 5:28 AM, Daniel Stenberg wrote: On Tue, 26 May 2015, Ryan Schmidt wrote: Some time ago the idea was brought up to use openssl's new -trusted_first / X509_V_FLAG_TRUSTED_FIRST mode; a patch was provided: http://curl.haxx.se/mail/lib-2011-12/0223.html I basically only have one

Re: Adding CURL handles to running CURLM

2015-05-28 Thread Ray Satiro via curl-library
On 5/25/2015 11:52 AM, vincas.ra...@bentley.com wrote: I don't know. Can you show us a recipe on how to reproduce this problem? Your description hasn't been detailed enough for me to understand. I tried reproducing this problem with pure CURL and our server. What I found is that returning

Re: Question regarding multiple IMAP operations

2015-05-27 Thread Ray Satiro via curl-library
On 5/26/2015 9:31 AM, Adam wrote: What is the proper way to send multiple IMAP commands? For example, first I'd like to get a listing of all the folder names, then I want to list the unread files in the folder names. I've tried using the same CURL* curl handle, sometimes it crashes on

Re: Question regarding multiple IMAP operations

2015-05-27 Thread Ray Satiro via curl-library
On 5/27/2015 3:09 PM, Adam wrote: Ray, I've actually written C89 code to parse IMAP responses. libcurl IMAP is indeed garbage, because the only thing it does for you that a straight socket doesn't is encryption (which is well documented w/tons of code samples anyway). So as soon as I remove

Re: Happy eyeballs and custom DNS

2015-05-27 Thread Ray Satiro via curl-library
On 5/27/2015 6:51 PM, Anders Bakken via curl-library wrote: How much work do you think it would be? (and could you point me in the general right direction for it?) I worked on it a while ago. Stefan had some changes to add address remove capability that I thought pre-empted mine so his were

Re: libcurl does not update cookie

2015-05-24 Thread Ray Satiro via curl-library
On 5/24/2015 2:07 PM, Daniel Stenberg wrote: On Sun, 24 May 2015, Alexander Dyagilev wrote: Cookie: test_cookie_2=value2; test_cookie_2=base_value2 Ah, I suspect this happens because... curl_easy_setopt (m_curl, CURLOPT_COOKIELIST, Set-Cookie: test_cookie_2=base_value2); Doesn't specify

Re: Login with cURL and Token don't work

2015-05-19 Thread Ray Satiro via curl-library
On 5/19/2015 6:48 AM, avr...@fantasymail.de wrote: Can somebody help me please, to realise a cURL-Login to the WebRadio-Site www.Phonostar.de ? At first i create a cookie and get the token: $token = curl -s -k -c cookie.txt https://www.phonostar.de/radio/radioaufnehmen/radiocloud/login | grep

Re: version number helper macros?

2015-05-16 Thread Ray Satiro via curl-library
On 5/14/2015 5:37 PM, Daniel Stenberg wrote: It would make it possible to check version at run-time like this: curl_version_info_data *d = curl_version_info(CURLVERSION_NOW); if(d-version_num = CURL_VERSION_BITS(7,33,0) ) { /* this is libcurl 7.33.0 or later */ printf(Succcess\n);

Re: Curl ES 60: Invalid certificate chain on MacOS 10.10.3 (Yosemite)

2015-05-08 Thread Ray Satiro via curl-library
On 5/8/2015 11:28 AM, Volker Schmid wrote: Hello, not sure if this answer is correctly assigned. Sorry. Hi, This snippet from CURLOPT_CAPATH doc might be relevant: If libcurl is built against OpenSSL, the certificate directory must be prepared using the openssl c_rehash utility. HTH,

Re: DL curl 7.35 mingw32

2015-05-08 Thread Ray Satiro via curl-library
On 5/8/2015 8:46 AM, Adam wrote: Disagree or not, IMAP is on 7.40, 7.33, 7.27 (mingw32 builds) is *NOT* working. In fact, I can't find a single build on windows where IMAP *IS* working, and after asking this exact question on stackoverflow yesterday

Re: DL curl 7.35 mingw32

2015-05-07 Thread Ray Satiro via curl-library
On 5/7/2015 8:29 PM, Adam wrote: Can someone please give me a download link to curl-7.35.0-devel-mingw32 (or any other version with confirmed IMAP working) ? Adam go to the download page http://curl.haxx.se/download.html#Win32 You probably want the curl-7.x.x-devel-mingw32.zip in 'Win32

<    1   2   3   4   5   6   7   >