Soon, the curl mailing lists will move from cool to lists

Hello, This is just an alert about a pending infrastructure change that I'm planning to execute soon. The curl related mailing lists are currently hosted and run on the server called cool.haxx.se. This server is being decommissioned after many years of hard and faithful service. All five

RE: Connection to file server disconnected while file transfer is in progress

On Thu, 26 Aug 2021, vaibhav.taksale--- via curl-library wrote: Regarding disconnection, here is code flow - 1. Authentication to server successful. 2. Opening data channel for File download from server 3. after 2 minutes, connection timed out. How does it "time out" ? What does it mean,

Re: relative performance

On Wed, 25 Aug 2021, XSLT2.0 via curl-library wrote: Summary : IMHO the important thing is to test on a "slow enough" machine, assuming the main measure you want is "elapsed". Slow enough for what? I agree that if we run the tests over an actual physical network, a system with a fast enough

Re: relative performance

On Tue, 24 Aug 2021, Ben Greear via curl-library wrote: What is your network-under-test in this case? Not sure. I hope to come up with a way where the network and exact server aren't terribly important as long as they perform roughly the same on repeated runs. It would need some

RE: Connection to file server disconnected while file transfer is in progress

On Wed, 25 Aug 2021, vaibhav.taksale--- via curl-library wrote: [Vaibhav] Libcurl version 7.58 Used on Embedded Linux platform on ar758x board. This should come as no surprise but of course my first recommendation will be to upgrade your libcurl to a recent release as whatever problem you

Re: Connection to file server disconnected while file transfer is in progress

On Tue, 24 Aug 2021, vaibhav.taksale--- via curl-library wrote: Connection to file server disconnected while file transfer is in progress CURL does not get this disconnection response and will continue to wait for file transfer. That's a bug then. Either in your code or in libcurl. Which

relative performance

Hi all, For a long time I've wanted to get something done that allows us to compare curl's relative performance. Ideally something we can run every once in a while to compare that nothing major has turned sour without us being aware of it. A first step would be a tool we can run that

RE: Assistance building curl 7.77.0 with OpenSSL 3.0

On Sat, 21 Aug 2021, Randall S. Becker wrote: The OpenSSL build is definitely 64 bit - I know because I did the build/install about 2 weeks ago. If I leave off the -Wlp64, the linker complains about mixing 64 (openssl) and 32 models (curl) during the configure phase claiming it can't find

Re: configure options for various libcurl builds

On Sat, 21 Aug 2021, Anmol Mishra via curl-library wrote: Could there be some guidance about a simple libcurl static build for For configure builds, both a shared and a static libcurl version are built. SMTP is enabled by default. -- / daniel.haxx.se | Commercial curl support up to 24x7

Re: Assistance building curl 7.77.0 with OpenSSL 3.0

On Fri, 20 Aug 2021, Randall S. Becker via curl-library wrote: My latest configure command for OpenSSL 3.0 is: CFLAGS="-c99" CPPFLAGS="-D_XOPEN_SOURCE_EXTENDED=1 -Wlp64 -WIEEE_float -I/usr/local-ssl3.0/openssl/include" LDFLAGS="-L/usr/local-ssl3.0/lib" conf_script_floss_cc

Re: CURLE_COULDNT_RESOLVE_HOST from CURLU API on https://www.google.com

On Fri, 20 Aug 2021, Samuel Marks via curl-library wrote: curl_easy_setopt(curl, CURLOPT_URL, urlp); From the CURLOPT_URL man page: Pass in a pointer to the URL to work with. The parameter should be a char * to a null-terminated string which must be URL-encoded You seem to have intended

Re: libcurl.a linker errors on XCode

On Thu, 19 Aug 2021, Anmol Mishra wrote: Using these flags allows for a build - -L/usr/local/Cellar/curl/7.78.0/lib -lcurl The problem is that -lcurl is probably bringing in the default system lib. And that is not something I want. When you build your application you use a linker. If that

Re: libcurl.a linker errors on XCode

On Thu, 19 Aug 2021, Anmol Mishra wrote: Intuitively, these extra dependencies seems wrong. If I build a static version of a lib, it should not depend on a shared lib. You build a static version of libcurl. That's static. You then need to make sure to use whatever you want from the

Re: libcurl.a linker errors on XCode

On Thu, 19 Aug 2021, Anmol Mishra via curl-library wrote: That makes sense. Is there a list of dependencies somewhere ? It depends entirely on your specific build. "sh curl-config --libs" should list them after a build. -- / daniel.haxx.se | Commercial curl support up to 24x7 is

Re: libcurl.a linker errors on XCode

On Thu, 19 Aug 2021, Anmol Mishra via curl-library wrote: I built a homebrew libcurl in a custom dir. The project is linking against this custom lib. I am getting 200+ linker errors. As far as I know, I followed the FAQ. I'm missing something very basic. It looks like you're building and

7.79.0 feature freeze starts now

Hi friends! Starting now, we no longer merge new features into the master branch until we lift the freeze again, which hopefully happens the Monday following the next release. The pending release is planned to ship on September 15th, 2021. -- / daniel.haxx.se | Commercial curl support up

Re: No curl_*_strerror() for CURLUcode

On Fri, 13 Aug 2021, Gleb Ivanovsky wrote: It is my first time contributing to libcurl. Are there additional steps required or do I just create a pull request? Nothing special, no. A pull-request is perfect and we take it from there. Perhaps eye through this first:

Re: No curl_*_strerror() for CURLUcode

On Fri, 13 Aug 2021, Gleb Ivanovsky via curl-library wrote: Would be nice to have something like: const char *curl_url_strerror(CURLUcode errornum); I agree. It would be consistent with how the API works generally. Do you want to work on it and make it happen? -- / daniel.haxx.se |

Re: External WS library?

On Thu, 12 Aug 2021, Felipe Gasper via curl-library wrote: Regarding the plan to add WebSocket to curl, would it be useful to consider, instead of writing a new implementation, incorporating an existing library? Yes, I think that's a very sensible way to imlement the discussed API and

Re: Question on CURLINFO_SPEED_DOWN/UPLOAD when paused/resumed

On Fri, 6 Aug 2021, Joshua Harlow via curl-library wrote: When pausing and resuming I was noticing that CURLINFO_SPEED_UPLOAD and CURLINFO_SPEED_DOWNLOAD and its counters/timers don't seem to reset (which may just be how it is) and from looking at the progress.c code I think this is what is

RE: more WebSockets

On Thu, 12 Aug 2021, Daniel Stenberg via curl-library wrote: Should we just impose our own maximum size and have applications raise it when needed? Answering myself. =) Ok, I'm convinced we should make the API able to provide full messages. I'll adjust acccording. -- / daniel.haxx.se

Re: more WebSockets

On Thu, 12 Aug 2021, Weston Schmidt wrote: I'd like to add a flag to CURLOPT_WS_OPTIONS that tells curl if it should negotiate compression or not for easy & multi. I like the automatic response to pings & pongs by default. Perhaps another CURLOPT_WS_OPTIONS flag might disable the automatic

RE: more WebSockets

On Wed, 11 Aug 2021, Dmitry Karpov via curl-library wrote: Thanks for the feedback, this is very helpful! From a brief look at the document, it looks like Curl will provide only WebSocket frame level of communication, so the client will have to implement full message assembling itself. If

Re: more WebSockets

On Wed, 11 Aug 2021, Felipe Gasper wrote: When a single frame can be 61 bits large? (Of course I meant 63...) And thanks for this. As you know I'm a WebSockets rookie so I need and appricate pointers like this! I believe most implementations enforce a maximum message length. Mojolicious

Re: more WebSockets

On Wed, 11 Aug 2021, Felipe Gasper wrote: Why frame by frame? JS’s API only does full messages, and I think the RFC actually stipulates that. When a single frame can be 61 bits large? -- / daniel.haxx.se | Commercial curl support up to 24x7 is available! | Private help, bug fixes,

more WebSockets

Hi, I've refreshed the wiki page a bit using input from the discussion so far. See https://github.com/curl/curl/wiki/WebSockets A few things I realized and tried to reflect in the page: A single fragment can be 61 bits large and a message consists of multiple such fragments: we must have an

Re: [PATCH] docs: correct symbols-in-versions & doc mismatch for 7.16.4

On Fri, 30 Jul 2021, Ævar Arnfjörð Bjarmason via curl-library wrote: These options introduced in 7.17.0 were documented in 9f44a9552 (Renamed several libcurl error codes[...], 2007-08-30) as being introduced in version 7.16.4, but as looking at the 7.16.4 tag and tarball[1] reveals they

Re: How to handle _wcsdup() memory allocation

On Thu, 29 Jul 2021, Jeff Mears via curl-library wrote: Another answer would be for libcurl to implement its own wcsdup, because it's just wcslen + Curl_cmalloc + memcpy. Not being a Windows guy at all, this seems like the most reasonable way that doesn't introduce a new API and make things

Feature window OPEN

Hi, We've opened the feature window again. It will remain open until August 18th. -- / daniel.haxx.se | Commercial curl support up to 24x7 is available! | Private help, bug fixes, support, ports, new features | https://www.wolfssl.com/contact/

Re: 7.78.0: configure: tweak nghttp2 library name fix

On Wed, 21 Jul 2021, Christian Weisgerber via curl-library wrote: Similar variable manipulation elsewhere in configure.ac uses sed, so I suggest to use the same idiom here: Thanks, I made a PR out of your patch: https://github.com/curl/curl/pull/7472 -- / daniel.haxx.se | Commercial curl

[SECURITY ADVISORY] curl: CURLOPT_SSLCERT mixup with Secure Transport

posted on July 21, 2021. CREDITS --- This issue was reported by Harry Sintonen. Patched by Daniel Stenberg. Thanks a lot! -- / daniel.haxx.se | Commercial curl support up to 24x7 is available! | Private help, bug fixes, support, ports, new features | https://www.wolfssl.com/c

[SECURITY ADVISORY] curl: TELNET stack contents disclosure again

TELNET stack contents disclosure again == Project curl Security Advisory, July 21st 2021 - [Permalink](https://curl.se/docs/CVE-2021-22925.html) VULNERABILITY - curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in

[SECURITY ADVISORY] curl: Bad connection reuse due to flawed path name checks

ported to the curl project on June 11, 2021. This advisory was posted on July 21, 2021. CREDITS --- This issue was reported by Harry Sintonen. Patched by Daniel Stenberg. Thanks a lot! -- / daniel.haxx.se | Commercial curl support up to 24x7 is available! | Private help, bug fixes, support,

[SECURITY ADVISORY] curl: Metalink download sends credentials

ersion 7.78.0 B - Make sure you do not use metalink with curl C - Disable metalink in your build TIMELINE This issue was reported to the curl project on May 30, 2021. This advisory was posted on Jul 21, 2021. CREDITS --- This issue was reported by Harry Sintonen. Patched by

[SECURITY ADVISORY] curl: Wrong content via metalink not discarded

you do not use metalink with curl C - Disable metalink in your build TIMELINE This issue was reported to the curl project on May 30, 2021. This advisory was posted on Jul 21, 2021. CREDITS --- This issue was reported by Harry Sintonen. Patched by Daniel Stenberg. Thanks

[RELEASE] curl 7.78.0

sander Mazur, Alexis Vachette, Alex Xu, Andrea Pappacoda, Andrei Rybak, Bachue Zhou, Bastian Krause, Bin Lan, Bin Meng, Christian Weisgerber, Christoph M. Becker, civodul on github, Dan Fandrich, Daniel Gustafsson, Daniel Stenberg, David Hu, dEajL3kA on github, Dmitry Karpov, Dmitry Kostj

RE: How to authenticate when using “CURLOPT_CONNECT_ONLY” so I can use non-blocking curl_easy_send() and curl_easy_recv()

On Mon, 19 Jul 2021, Venkat Maddisetti via curl-library wrote: Before coming here I realized curl_easy_setopt has no effect setting username and password CURLOPT_USERPWD, CURLOPT_USERNAME and CURLOPT_PASSWORD included ? "POST /emp/ HTTP/1.1 If you want HTTP, then using CONNECT_ONLY +

Re: Can I use curl_easy_setopt during curl_easy_perform.

On Mon, 12 Jul 2021, Wu Yuanshou via curl-library wrote: Shall I call curl_easy_setopt() during curl_easy_perform() ? It seems like we should not do this according to the document I can find.Instead , I shall quit from the curl_easy_perform() function , apply the setting via

Re: [PATCH] Revert "ftp: Expression 'ftpc->wait_data_conn' is always false"

On Wed, 7 Jul 2021, Jonathan Wernberg via curl-library wrote: I could not make a GitHub pull request at this point in time, I hope it is acceptable to send the patch this way instead. Thanks! I made a PR out of it: https://github.com/curl/curl/pull/7362 -- / daniel.haxx.se | Commercial

Re: curl websockets

On Fri, 2 Jul 2021, Felipe Gasper wrote: Or perhaps with the type and flags just made as a single bitmask. This will make it impossible to specify a continuation frame rather than a data frame. (Context: when a message is fragmented, the message’s first frame is text/binary, and the latter

Re: curl websockets

On Fri, 2 Jul 2021, Weston Schmidt wrote: I'm not sure who might be using that & yes it's 8 years old in a draft state. I mentioned it because it's one of the more extreme looking use cases. If we can support that type of extension via a planned interface then we've probably got a good API.

Re: curl websockets

On Fri, 2 Jul 2021, Felipe Gasper wrote: Thanks! The send interface could look much like curl_easy_send(): curl_ws_send( easy, buffer, buflen, , enum curl_ws_message_type type, enum curl_ws_flags flags ) Or perhaps with the type and flags just made as a single bitmask. Most WS libraries

Re: curl websockets

On Thu, 1 Jul 2021, Weston Schmidt wrote: I like the simplicity of the CURLOPT_CONNECT_ONLY=2L + ws:// or wss:// plan. If libcurl stops at the _The WebSocket Connection is Established_ point (https://datatracker.ietf.org/doc/html/rfc6455#page-20) when CURLOPT_CONNECT_ONLY=2L, then by

curl download mirrors no more

Hello friends! When curl started to become popular, we setup a system to provide curl downloads via a system of mirrors run and hosted by volunteers. It really helped us to deliver curl everywhere at high speeds and with great stability. Today however, with the website infrastructure being

Re: curl websockets

On Wed, 30 Jun 2021, Weston Schmidt wrote: Maybe this is a misunderstanding on my part, but I think (and my testing seems to confirm) that CURLOPT_CONNECT_ONLY will stop at the first connection to the first server encountered. If you have some other http redirector in front of the ultimate

Re: curl websockets

On Thu, 24 Jun 2021, Weston Schmidt via curl-library wrote: This has been good feedback, thank you all. I'm going to work on writing up what has been covered into a proposal here: https://github.com/schmidtw/curl-websocket-proposal I created a "home" for the WebSockets brain-storming in

Re: Access gmail with pycurl.

On Sat, 26 Jun 2021, Hongyi Zhao via curl-library wrote: I noticed that libcurl, hence pycurl supports IMAP and IMAPS, so I want to know if I can use it to retrieve/remove emails from my Gmail account? Yes you can. Jay once wrote ShowGmailFolders.c for example:

Re: Multi Threaded Resolver Hanging on Application Shutdown

On Thu, 24 Jun 2021, Tanner, Matt via curl-library wrote: We have a multi-threaded embedded linux application that uses curl 7.76.1 for https client requests with easy handles and the multi threaded resolver (AsynchDNS feature). We're seeing intermittent hangs in curl during application

Re: curl websockets

On Wed, 23 Jun 2021, Weston Schmidt via curl-library wrote: You bring up an interesting point that I don't have a good answer for - how should the easy interface work? I struggled with it when working on the curlws code & decided to avoid it in favor of the multi api. If there is a good

Re: curl websockets

On Tue, 22 Jun 2021, Weston Schmidt via curl-library wrote: I'm interested in feedback or suggestions for what/how to define a good websocket API that complements libcurl. My very simple idea on how it could be added to the API: 1. We add another value to set CURLOPT_CONNECT_ONLY to (2). If

Re: libcurl hangs in curl_multi_cleanup

On Wed, 23 Jun 2021, firefo...@interia.pl wrote: So, since 215db086e0 test660 ensures wrong behavior of libcurl. Since we try to have tests for *everything* curl can do, so the fact that we verify bugs is what is *supposed* to happen. Until we realize it is a bug, it isn't a bug and then it

feature freeze for 7.78.0

Hello friends! The door is now officially closed for new features for the next release. Now we just merge bug-fixes until July 21 when we intend to ship the next curl release. Happy hunting! -- / daniel.haxx.se | Commercial curl support up to 24x7 is available! | Private help, bug

Re: libcurl hangs in curl_multi_cleanup

On Tue, 22 Jun 2021, FirefoxOS via curl-library wrote: Thanks for creating a test case. I've now made a PR that I believe fixes this issue: https://github.com/curl/curl/pull/7288 ... and the test 677 is included there and reproduces the bug before this fix. -- / daniel.haxx.se |

"curl: 25 years and 200 releases later"

Hiya, I visited the GitHub ReadME podcast and talked curl a while ago and today it was published: https://github.com/readme/curl-25-years -- / daniel.haxx.se | Commercial curl support up to 24x7 is available! | Private help, bug fixes, support, ports, new features |

Re: Feature request: new callback to report http chunks boundaries

On Sun, 20 Jun 2021, Daniel Stenberg via curl-library wrote: I think that would encourage really bad applications. This all said, you can disable decoding it with CURLOPT_HTTP_TRANSFER_DECODING and then you get to decode the chunked encoding yourself, which then allows you to find

Re: Feature request: new callback to report http chunks boundaries

On Sun, 20 Jun 2021, Daniel F via curl-library wrote: I think of two possible callbacks: one called before first part of a chunk is delivered to the app (it may have chunk size as a param), and another called after last part of chunk is delivered to the app. Any of them would be fine for me.

Re: libcurl hangs in curl_multi_cleanup

On Fri, 18 Jun 2021, Firefox OS via curl-library wrote: Do you mean imap://...? Yes, it does. And the callstack looks the same. I cannot reproduce. I converted "curl_imap_teardown_issue.c" into test case 677 in this commit:

Re: How to separate connection from request

On Thu, 17 Jun 2021, 6dsovh35--- via curl-library wrote: I'm trying to build a transport service that will maintain open connections to various services and send requests off as I receive them. I would like to build a curl session and connect it (including openssl handling) in my parent

Re: libcurl hangs in curl_multi_cleanup

On Thu, 17 Jun 2021, FirefoxOS via curl-library wrote: Can you help me understand what does test660 actually check? The issue is easily reproducible using curl_imap_teardown_issue.c Then clearly test660 doesn't run the same sequence. Does the curl_imap_teardown_issue.c code also cause a

webinar: common libcurl mistakes

Hello friends! This is just a quick mention that I'll do a free-to-attend webinar this Tursday titled as the subject says: common libcurl mistakes. With a following Q of course. Sign up here: https://www.wolfssl.com/upcoming-wolfssl-webinar-common-libcurl-mistakes/ See you Thursday! --

Re: building curl on macos

On Thu, 10 Jun 2021, Dave via curl-library wrote: Am I right in assuming that $PREFIX_OPENSSL would be set by this? ./configure --with-ssl=$openssldir/builds/osx/release Yes. And that should be the prefix to where you installed OpenSSL. And note that we prefer --with-openssl now instead

Re: libcurl hangs in curl_multi_cleanup

On Thu, 10 Jun 2021, Firefox OS wrote: The story is the same as 2 years ago You perceive it as the same, I do not. The previous issue was reproduced with and then verified with test 660 and that test case still runs fine today. -- / daniel.haxx.se | Commercial curl support up to 24x7 is

Re: 7.77.0: tests/server/sws overflows stack

On Tue, 8 Jun 2021, Christian Weisgerber via curl-library wrote: Maybe such oversized allocations should use malloc() instead of local variables? Here's a patch to this effect: Thanks! (proves we should have openbsd CI jobs...) Converted to a pull-request:

Re: building curl on macos

On Thu, 10 Jun 2021, Dave via curl-library wrote: configure: error: [redacted, $openssldir]/builds/osx/debug is a bad --with-openssl prefix! This means $PREFIX_OPENSSL/include/openssl/ssl.h is missing. If I create a debug library for OpenSSL and place it in that folder it does succeed. My

Re: libcurl hangs in curl_multi_cleanup

On Thu, 10 Jun 2021, Firefox OS via curl-library wrote: Unfortunately the bug is there again. At least in 7.76.1 and 7.70.0. Particularly, curl_multi_cleanup() hangs for exactly 2 minutes. Please tell us the whole story. What do you do and when does it hang? We want to be able to reproduce.

Re: libcurl options for --create-dirs -O --output-dir

On Tue, 8 Jun 2021, Anmol Mishra via curl-library wrote: However, I cannot see the equivalent options inside libcurl. Is the --output-dir option only available in the curl CLI ? Yes, since libcurl doesn't really save content to files/directories. It delivers the content to a callback. --

Re: Libcurl reports 'Error in the HTTP2 framing layer' (16) for outgoing request.

On Mon, 7 Jun 2021, Jeroen Ooms wrote: I'm curious to know if this was followed up on? R users have been reporting random HTTP2 framing layer errors for multiplexed connections to google servers/apis for a long time, but I have never succeeded to narrow down the exact problem.

RE: Connection takes too long in dual-stack if IPv6 starting family is not available or blocked and has multiple addresses.

On Fri, 4 Jun 2021, Dmitry Karpov wrote: (I've put the CC back to the libcurl list to allow everyone to participate) Initially, I also had the same idea to use happy eyeballs timeout to cover cases of connection socket errors, but with host resolutions having multiple IPv6 addresses, it was

Re: configure script does not handle --with-darwinssl correctly?

On Sun, 6 Jun 2021, Vadim Grinshpun wrote: Shouldn't the configure script fail if --with-darwinssl is provided? Or does that option have a different meaning? It should! I've amended the PR just now with that fix as well. -- / daniel.haxx.se | Commercial curl support up to 24x7 is

Re: configure script does not handle --with-darwinssl correctly?

On Sun, 6 Jun 2021, Vadim Grinshpun via curl-library wrote: The docs seem to indicate that --with-darwinssl and --with-secure-transport should be equivalent, however the above message disagrees. Correct, --with-secure-transport is the only name of the flag

Re: Connection takes too long in dual-stack if IPv6 starting family is not available or blocked and has multiple addresses.

On Thu, 3 Jun 2021, Dmitry Karpov via curl-library wrote: I am not sure if this is the right fix, but it helped to improve the connection phase time for such cases very dramatically and make it close to pure IPv4 connection times. My tests also didn't reveal any bad side effects of this

Re: Happy Eyeballs mechanism may start from IPv4 family if c-ares resolver reply for IPv6 comes first.

On Thu, 3 Jun 2021, Dmitry Karpov via curl-library wrote: Here is the proposed fix for c-ares resolver that helped to mitigate the problem: Thanks! Any chance you can make a pull-request out of this and submit it at https://github.com/curl/curl/pulls ? If not, I can do it for you. --

Re: Libcurl reports 'Error in the HTTP2 framing layer' (16) for outgoing request.

On Thu, 3 Jun 2021, Shikha Sharma wrote: Proposed solution: Ah, yes that looks interesting - especially since it fixes the problem for you! Are you able to make a pull-request out of that and submit, or would you like me to do it for you? Thanks! -- / daniel.haxx.se | Commercial curl

removing metalink support for security

Hi all. In the curl security-team we agree that the only sensible way out of a very troublesome security situation is to completely remove support for metalink from curl already in the next release. See details here: https://github.com/curl/curl/pull/7176 -- / daniel.haxx.se |

The curl user survey 2021 (fwd)

Hi friends, Just a quick reminder that the survey is still up in case you haven't filled it in yet! -- Forwarded message -- I've just launched the curl user survey 2021. Please consider donating some of your precious time and head over there and fill in your views on curl:

Feture window: OPEN

Hi team, We've had no alarming bug reports or regressions filed since the previous release which means we open the feature window today: https://curl.se/dev/feature-window.html It will be open until June 23. -- / daniel.haxx.se | Commercial curl support up to 24x7 is available! |

Travis isn't our friend anymore?

Hi all, Travis is shutting down their .org domain and pushes everyone over to their services on their .com domain. There's a new pricing model there. As an open source project we can apply to get into the free OSS tier. However, the requirements to get accepted include for example that we

Re: Libcurl reports 'Error in the HTTP2 framing layer' (16) for outgoing request.

On Thu, 27 May 2021, Shikha Sharma via curl-library wrote: HTTP2 connection with prior knowledge initiated by curl, No TLS. Server sends GoAway frame after processing each request. I suspect the problem/bug here is that the request that reads the trailing GOAWAY isn't properly considered as

Re: WIN - Command Prompt - Curl: (77) error setting certificate verify locations

On Thu, 27 May 2021, Arantxa Esparza via curl-library wrote: Please show error messages as text, not as images. Some of us still read emails using text only. I'm getting this error once and again and I don't know how to deal with it. Curl: (77) error setting certificate verify locations: ..

Re: Libcurl reports 'Error in the HTTP2 framing layer' (16) for outgoing request.

On Thu, 27 May 2021, Shikha Sharma via curl-library wrote: I am facing an issue where curls responds with error "'Error in the HTTP2 framing layer' (16)" to the application. Curl version: libcurl-7.74.0 Scenario: Sending multiple outgoing HTTP2 requests to an external HTTP server. I'm

Re: libcurl with custom malloc and SSL

On Thu, 27 May 2021, Ville Likitalo wrote: it was a build/linking related one instead. Great, glad you found it and that it wasn't a curl bug! =) -- / daniel.haxx.se | Commercial curl support up to 24x7 is available! | Private help, bug fixes, support, ports, new features |

[SECURITY ADVISORY] curl: TLS session caching disaster

posted on May 26, 2021. CREDITS --- This issue was reported by Harry Sintonen. Patched by Harry Sintonen and Daniel Stenberg. Help and research by Brad Spencer. Thanks a lot! -- / daniel.haxx.se | Commercial curl support up to 24x7 is available! | Private help, bug fixes, support, por

[SECURITY ADVISORY] curl: TELNET stack contents disclosure

TELNET stack contents disclosure Project curl Security Advisory, May 26th 2021 - [Permalink](https://curl.se/docs/CVE-2021-22898.html) VULNERABILITY - curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl. This

[SECURITY ADVISORY] curl: schannel cipher selection surprise

y Harry Sintonen. Patch by Daniel Stenberg. Thanks a lot! -- / daniel.haxx.se | Commercial curl support up to 24x7 is available! | Private help, bug fixes, support, ports, new features | https://www.wolfssl.com/contact/ --- Un

[RELEASE] curl 7.77.0

eron Cawley, Dan Fandrich, Daniel Carpenter, Daniel Gustafsson, Daniel Stenberg, David Cook, Denis Goleshchikhin, Dmitry Karpov, Dmitry Kostjuchenko, ebejan on github, Emil Engler, Georeth Zhou, Gergely Nagy, Gilles Vollant, Harry Sintonen, Howard Chu, Ikko Ashimine, Illarion Taev, Jacob

Re: Valgrind Suppress error, in test cases. Warning on new testcases.

On Tue, 25 May 2021, Gealber Morales via curl-library wrote: Here I attached the file *valgrind1196 *which correspond to this test case. I think the problem is with the *Curl_rand_hex *function, that Valgrind goes crazy with it. Maybe I'm not doing it correctly, so any correction is good to

Re: libcurl with custom malloc and SSL

On Tue, 25 May 2021, Ville Likitalo via curl-library wrote: The only interesting bit in the stack trace is that the pointer which gets passed to libc free(void*) is one that has been allocated with the private malloc libcurl has been set up with. Now, I could

The curl user survey 2021

Hi friends! I've just launched the curl user survey 2021. Please consider donating some of your precious time and head over there and fill in your views on curl: https://forms.gle/Z1ugr7tAGoiPyNTJ9 This survey will be up for 14 days. Please tell all your curl-using friends about it and

Re: PR #7117 failing, help

On Sun, 23 May 2021, Gealber Morales via curl-library wrote: mqtt.c:200:3: error: implicit declaration of function 'bzero' [-Wimplicit-function-declaration] 200 | bzero(packet, packetlen); You musn't use bzero() because it isn't portable enough. Use memset() instead and there won't be

#curl switches IRC network to libera.chat

Hi team! Due to turbulence on Freenode [1][2], we follow our friends and we are setting up our new camp on the https://libera.chat/ network. The same channel name (#curl), same rules, mostly the same people. Follow along, talk curl and related topics in a relaxed atmosphere. As much as you

Re: curl error messages in mail

On Mon, 17 May 2021, R C via curl-library wrote: I receive messages in  the root mail account (a deamon running as root) like: curl_easy_perform() failed: Failure when receiving data from the peer curl_easy_perform() failed: Failure when receiving data from the peer or other error/warning

Re: curl w/OpenSSL - OCSP_CERTID hash choice

On Sun, 16 May 2021, igorr+curl--- via curl-library wrote: Am I missing something here? If not, imvho, the "fix" in this particular case is somewhat involved -- for every OCSP_CERTID (#1) available in the stapled response, curl should construct its own OCSP_CERTID (#2) corresponding to the

Re: curl_multi_remove_handle callbacks - debug mode?

On Wed, 12 May 2021, Felipe Gasper via curl-library wrote: On a couple of occasions now I’ve chased down segfaults that it turned out were happening because a callback was freeing the multi. Is there any kind of “debug mode” in libcurl available that would warn, assert, or otherwise

Re: localhost to be truly local?

On Mon, 10 May 2021, Geoff Beier wrote: If this is the main goal, it seems useful to test all resolved addresses to see if they're loopback addresses, and flag them as a "secure context" if they are. That would both make sure the address returned when localhost is resolved is really local and

localhost to be truly local?

Hi, I've created PR #7039 that makes "localhost" resolve to 127.0.0.1 and ::1 without using the resolver [1]. The point of this is to make sure localhost is the local host for sure. With this, we should be able to consider transfers from localhost to be using a "secure context" as per web

Re: scan-build-11 warnings

On Sat, 8 May 2021, Patrick Monnerat via curl-library wrote: IMHO, this is not only a false positive, but a scan-build bug. Mabe you can silent it by rephrasing the code. In example: I tried a whole bunch of variations like that without success. Until I moved the entire speed calc logic

Re: scan-build-11 warnings

On Sat, 8 May 2021, Daniel Stenberg via curl-library wrote: For all I can tell, these are false positives. Can *you* find an actual problem and fix? The warnings go away when I move the speed logic into a sub function, which also makes the code a little nicer: https://github.com/curl/curl

scan-build-11 warnings

Hi friends! I ran scan-build-11 against the current git master curl code and it generates two warnings that I just cannot understand and at the same time I cannot easily silence. We use scan-build in the CI (travis), but that runs an older version that doesn't seem to warn for these issues.

Re: Crash libCurl 7.76.1 32-bit build in H3 transfers

On Thu, 6 May 2021, Dmitry Karpov via curl-library wrote: So "size_t datalen" in libCurl is different from "uint64_t datalen" in the ngtcp2 library. Fix pending: https://github.com/curl/curl/pull/7027 The crash was so obvious, so it was a bit surprising how it was able to escape pre-release

Reminder: curl up 2021 on May 9th

Hello! This is just a quick reminder that we meet on Sunday May 9th at 13:00 CEST (11:00 UTC) for curl up 2021 [*] We will run the meeting over Zoom, and you generally get the best experience by using a dedicated installed client but it is also possible to join with just a web browser.

  1   2   3   4   5   6   7   8   9   10   >