← Commit list

7385610d0c

Daniel Stenberg

2020-11-03

FAILED Duration: 94s

Subject

hsts: add support for Strict-Transport-Security

Binary

No binary (build failed)

Architecture & Compiler Flags

Architecture: x86_64-linux-gnu Compiler: gcc (Ubuntu 11.4.0-1ubuntu1~22.04.3) 11.4.0

—

Build Log

$ git checkout -f 7385610d0c74c6a254fea5e4cd6e1d559d848c8c
Previous HEAD position was 2cfc4ed983 hsts: add read/write callbacks
HEAD is now at 7385610d0c hsts: add support for Strict-Transport-Security

$ git clean -fdx
Removing Makefile
Removing Makefile.in
Removing aclocal.m4
Removing autom4te.cache/
Removing compile
Removing config.guess
Removing config.log
Removing config.status
Removing config.sub
Removing configure
Removing curl-config
Removing depcomp
Removing docs/Makefile
Removing docs/Makefile.in
Removing docs/cmdline-opts/Makefile
Removing docs/cmdline-opts/Makefile.in
Removing docs/curl.1
Removing docs/examples/.deps/
Removing docs/examples/Makefile
Removing docs/examples/Makefile.in
Removing docs/libcurl/Makefile
Removing docs/libcurl/Makefile.in
Removing docs/libcurl/opts/Makefile
Removing docs/libcurl/opts/Makefile.in
Removing include/Makefile
Removing include/Makefile.in
Removing include/curl/Makefile
Removing include/curl/Makefile.in
Removing install-sh
Removing lib/.deps/
Removing lib/.dirstamp
Removing lib/.libs/
Removing lib/Makefile
Removing lib/Makefile.in
Removing lib/curl-curl_ctype.o
Removing lib/curl-curl_multibyte.o
Removing lib/curl-dynbuf.o
Removing lib/curl-nonblock.o
Removing lib/curl-strtoofft.o
Removing lib/curl-version_win32.o
Removing lib/curl-warnless.o
Removing lib/curl_config.h
Removing lib/curl_config.h.in
Removing lib/libcurl.la
Removing lib/libcurl.vers
Removing lib/libcurl_la-altsvc.lo
Removing lib/libcurl_la-altsvc.o
Removing lib/libcurl_la-amigaos.lo
Removing lib/libcurl_la-amigaos.o
Removing lib/libcurl_la-asyn-ares.lo
Removing lib/libcurl_la-asyn-ares.o
Removing lib/libcurl_la-asyn-thread.lo
Removing lib/libcurl_la-asyn-thread.o
Removing lib/libcurl_la-base64.lo
Removing lib/libcurl_la-base64.o
Removing lib/libcurl_la-conncache.lo
Removing lib/libcurl_la-conncache.o
Removing lib/libcurl_la-connect.lo
Removing lib/libcurl_la-connect.o
Removing lib/libcurl_la-content_encoding.lo
Removing lib/libcurl_la-content_encoding.o
Removing lib/libcurl_la-cookie.lo
Removing lib/libcurl_la-cookie.o
Removing lib/libcurl_la-curl_addrinfo.lo
Removing lib/libcurl_la-curl_addrinfo.o
Removing lib/libcurl_la-curl_ctype.lo
Removing lib/libcurl_la-curl_ctype.o
Removing lib/libcurl_la-curl_des.lo
Removing lib/libcurl_la-curl_des.o
Removing lib/libcurl_la-curl_endian.lo
Removing lib/libcurl_la-curl_endian.o
Removing lib/libcurl_la-curl_fnmatch.lo
Removing lib/libcurl_la-curl_fnmatch.o
Removing lib/libcurl_la-curl_get_line.lo
Removing lib/libcurl_la-curl_get_line.o
Removing lib/libcurl_la-curl_gethostname.lo
Removing lib/libcurl_la-curl_gethostname.o
Removing lib/libcurl_la-curl_gssapi.lo
Removing lib/libcurl_la-curl_gssapi.o
Removing lib/libcurl_la-curl_memrchr.lo
Removing lib/libcurl_la-curl_memrchr.o
Removing lib/libcurl_la-curl_multibyte.lo
Removing lib/libcurl_la-curl_multibyte.o
Removing lib/libcurl_la-curl_ntlm_core.lo
Removing lib/libcurl_la-curl_ntlm_core.o
Removing lib/libcurl_la-curl_ntlm_wb.lo
Removing lib/libcurl_la-curl_ntlm_wb.o
Removing lib/libcurl_la-curl_path.lo
Removing lib/libcurl_la-curl_path.o
Removing lib/libcurl_la-curl_range.lo
Removing lib/libcurl_la-curl_range.o
Removing lib/libcurl_la-curl_rtmp.lo
Removing lib/libcurl_la-curl_rtmp.o
Removing lib/libcurl_la-curl_sasl.lo
Removing lib/libcurl_la-curl_sasl.o
Removing lib/libcurl_la-curl_sspi.lo
Removing lib/libcurl_la-curl_sspi.o
Removing lib/libcurl_la-curl_threads.lo
Removing lib/libcurl_la-curl_threads.o
Removing lib/libcurl_la-dict.lo
Removing lib/libcurl_la-dict.o
Removing lib/libcurl_la-doh.lo
Removing lib/libcurl_la-doh.o
Removing lib/libcurl_la-dotdot.lo
Removing lib/libcurl_la-dotdot.o
Removing lib/libcurl_la-dynbuf.lo
Removing lib/libcurl_la-dynbuf.o
Removing lib/libcurl_la-easy.lo
Removing lib/libcurl_la-easy.o
Removing lib/libcurl_la-easygetopt.lo
Removing lib/libcurl_la-easygetopt.o
Removing lib/libcurl_la-easyoptions.lo
Removing lib/libcurl_la-easyoptions.o
Removing lib/libcurl_la-escape.lo
Removing lib/libcurl_la-escape.o
Removing lib/libcurl_la-file.lo
Removing lib/libcurl_la-file.o
Removing lib/libcurl_la-fileinfo.lo
Removing lib/libcurl_la-fileinfo.o
Removing lib/libcurl_la-formdata.lo
Removing lib/libcurl_la-formdata.o
Removing lib/libcurl_la-ftp.lo
Removing lib/libcurl_la-ftp.o
Removing lib/libcurl_la-ftplistparser.lo
Removing lib/libcurl_la-ftplistparser.o
Removing lib/libcurl_la-getenv.lo
Removing lib/libcurl_la-getenv.o
Removing lib/libcurl_la-getinfo.lo
Removing lib/libcurl_la-getinfo.o
Removing lib/libcurl_la-gopher.lo
Removing lib/libcurl_la-gopher.o
Removing lib/libcurl_la-hash.lo
Removing lib/libcurl_la-hash.o
Removing lib/libcurl_la-hmac.lo
Removing lib/libcurl_la-hmac.o
Removing lib/libcurl_la-hostasyn.lo
Removing lib/libcurl_la-hostasyn.o
Removing lib/libcurl_la-hostcheck.lo
Removing lib/libcurl_la-hostcheck.o
Removing lib/libcurl_la-hostip.lo
Removing lib/libcurl_la-hostip.o
Removing lib/libcurl_la-hostip4.lo
Removing lib/libcurl_la-hostip4.o
Removing lib/libcurl_la-hostip6.lo
Removing lib/libcurl_la-hostip6.o
Removing lib/libcurl_la-hostsyn.lo
Removing lib/libcurl_la-hostsyn.o
Removing lib/libcurl_la-hsts.lo
Removing lib/libcurl_la-hsts.o
Removing lib/libcurl_la-http.lo
Removing lib/libcurl_la-http.o
Removing lib/libcurl_la-http2.lo
Removing lib/libcurl_la-http2.o
Removing lib/libcurl_la-http_chunks.lo
Removing lib/libcurl_la-http_chunks.o
Removing lib/libcurl_la-http_digest.lo
Removing lib/libcurl_la-http_digest.o
Removing lib/libcurl_la-http_negotiate.lo
Removing lib/libcurl_la-http_negotiate.o
Removing lib/libcurl_la-http_ntlm.lo
Removing lib/libcurl_la-http_ntlm.o
Removing lib/libcurl_la-http_proxy.lo
Removing lib/libcurl_la-http_proxy.o
Removing lib/libcurl_la-idn_win32.lo
Removing lib/libcurl_la-idn_win32.o
Removing lib/libcurl_la-if2ip.lo
Removing lib/libcurl_la-if2ip.o
Removing lib/libcurl_la-imap.lo
Removing lib/libcurl_la-imap.o
Removing lib/libcurl_la-inet_ntop.lo
Removing lib/libcurl_la-inet_ntop.o
Removing lib/libcurl_la-inet_pton.lo
Removing lib/libcurl_la-inet_pton.o
Removing lib/libcurl_la-krb5.lo
Removing lib/libcurl_la-krb5.o
Removing lib/libcurl_la-ldap.lo
Removing lib/libcurl_la-ldap.o
Removing lib/libcurl_la-llist.lo
Removing lib/libcurl_la-llist.o
Removing lib/libcurl_la-md4.lo
Removing lib/libcurl_la-md4.o
Removing lib/libcurl_la-md5.lo
Removing lib/libcurl_la-md5.o
Removing lib/libcurl_la-memdebug.lo
Removing lib/libcurl_la-memdebug.o
Removing lib/libcurl_la-mime.lo
Removing lib/libcurl_la-mime.o
Removing lib/libcurl_la-mprintf.lo
Removing lib/libcurl_la-mprintf.o
Removing lib/libcurl_la-mqtt.lo
Removing lib/libcurl_la-mqtt.o
Removing lib/libcurl_la-multi.lo
Removing lib/libcurl_la-multi.o
Removing lib/libcurl_la-netrc.lo
Removing lib/libcurl_la-netrc.o
Removing lib/libcurl_la-non-ascii.lo
Removing lib/libcurl_la-non-ascii.o
Removing lib/libcurl_la-nonblock.lo
Removing lib/libcurl_la-nonblock.o
Removing lib/libcurl_la-openldap.lo
Removing lib/libcurl_la-openldap.o
Removing lib/libcurl_la-parsedate.lo
Removing lib/libcurl_la-parsedate.o
Removing lib/libcurl_la-pingpong.lo
Removing lib/libcurl_la-pingpong.o
Removing lib/libcurl_la-pop3.lo
Removing lib/libcurl_la-pop3.o
Removing lib/libcurl_la-progress.lo
Removing lib/libcurl_la-progress.o
Removing lib/libcurl_la-psl.lo
Removing lib/libcurl_la-psl.o
Removing lib/libcurl_la-rand.lo
Removing lib/libcurl_la-rand.o
Removing lib/libcurl_la-rename.lo
Removing lib/libcurl_la-rename.o
Removing lib/libcurl_la-rtsp.lo
Removing lib/libcurl_la-rtsp.o
Removing lib/libcurl_la-select.lo
Removing lib/libcurl_la-select.o
Removing lib/libcurl_la-sendf.lo
Removing lib/libcurl_la-sendf.o
Removing lib/libcurl_la-setopt.lo
Removing lib/libcurl_la-setopt.o
Removing lib/libcurl_la-sha256.lo
Removing lib/libcurl_la-sha256.o
Removing lib/libcurl_la-share.lo
Removing lib/libcurl_la-share.o
Removing lib/libcurl_la-slist.lo
Removing lib/libcurl_la-slist.o
Removing lib/libcurl_la-smb.lo
Removing lib/libcurl_la-smb.o
Removing lib/libcurl_la-smtp.lo
Removing lib/libcurl_la-smtp.o
Removing lib/libcurl_la-socketpair.lo
Removing lib/libcurl_la-socketpair.o
Removing lib/libcurl_la-socks.lo
Removing lib/libcurl_la-socks.o
Removing lib/libcurl_la-socks_gssapi.lo
Removing lib/libcurl_la-socks_gssapi.o
Removing lib/libcurl_la-socks_sspi.lo
Removing lib/libcurl_la-socks_sspi.o
Removing lib/libcurl_la-speedcheck.lo
Removing lib/libcurl_la-speedcheck.o
Removing lib/libcurl_la-splay.lo
Removing lib/libcurl_la-splay.o
Removing lib/libcurl_la-strcase.lo
Removing lib/libcurl_la-strcase.o
Removing lib/libcurl_la-strdup.lo
Removing lib/libcurl_la-strdup.o
Removing lib/libcurl_la-strerror.lo
Removing lib/libcurl_la-strerror.o
Removing lib/libcurl_la-strtok.lo
Removing lib/libcurl_la-strtok.o
Removing lib/libcurl_la-strtoofft.lo
Removing lib/libcurl_la-strtoofft.o
Removing lib/libcurl_la-system_win32.lo
Removing lib/libcurl_la-system_win32.o
Removing lib/libcurl_la-telnet.lo
Removing lib/libcurl_la-telnet.o
Removing lib/libcurl_la-tftp.lo
Removing lib/libcurl_la-tftp.o
Removing lib/libcurl_la-timeval.lo
Removing lib/libcurl_la-timeval.o
Removing lib/libcurl_la-transfer.lo
Removing lib/libcurl_la-transfer.o
Removing lib/libcurl_la-url.lo
Removing lib/libcurl_la-url.o
Removing lib/libcurl_la-urlapi.lo
Removing lib/libcurl_la-urlapi.o
Removing lib/libcurl_la-version.lo
Removing lib/libcurl_la-version.o
Removing lib/libcurl_la-version_win32.lo
Removing lib/libcurl_la-version_win32.o
Removing lib/libcurl_la-warnless.lo
Removing lib/libcurl_la-warnless.o
Removing lib/libcurl_la-wildcard.lo
Removing lib/libcurl_la-wildcard.o
Removing lib/libcurl_la-x509asn1.lo
Removing lib/libcurl_la-x509asn1.o
Removing lib/stamp-h1
Removing lib/vauth/.deps/
Removing lib/vauth/.dirstamp
Removing lib/vauth/libcurl_la-cleartext.lo
Removing lib/vauth/libcurl_la-cleartext.o
Removing lib/vauth/libcurl_la-cram.lo
Removing lib/vauth/libcurl_la-cram.o
Removing lib/vauth/libcurl_la-digest.lo
Removing lib/vauth/libcurl_la-digest.o
Removing lib/vauth/libcurl_la-digest_sspi.lo
Removing lib/vauth/libcurl_la-digest_sspi.o
Removing lib/vauth/libcurl_la-krb5_gssapi.lo
Removing lib/vauth/libcurl_la-krb5_gssapi.o
Removing lib/vauth/libcurl_la-krb5_sspi.lo
Removing lib/vauth/libcurl_la-krb5_sspi.o
Removing lib/vauth/libcurl_la-ntlm.lo
Removing lib/vauth/libcurl_la-ntlm.o
Removing lib/vauth/libcurl_la-ntlm_sspi.lo
Removing lib/vauth/libcurl_la-ntlm_sspi.o
Removing lib/vauth/libcurl_la-oauth2.lo
Removing lib/vauth/libcurl_la-oauth2.o
Removing lib/vauth/libcurl_la-spnego_gssapi.lo
Removing lib/vauth/libcurl_la-spnego_gssapi.o
Removing lib/vauth/libcurl_la-spnego_sspi.lo
Removing lib/vauth/libcurl_la-spnego_sspi.o
Removing lib/vauth/libcurl_la-vauth.lo
Removing lib/vauth/libcurl_la-vauth.o
Removing lib/vquic/.deps/
Removing lib/vquic/.dirstamp
Removing lib/vquic/libcurl_la-ngtcp2.lo
Removing lib/vquic/libcurl_la-ngtcp2.o
Removing lib/vquic/libcurl_la-quiche.lo
Removing lib/vquic/libcurl_la-quiche.o
Removing lib/vquic/libcurl_la-vquic.lo
Removing lib/vquic/libcurl_la-vquic.o
Removing lib/vssh/.deps/
Removing lib/vssh/.dirstamp
Removing lib/vssh/libcurl_la-libssh.lo
Removing lib/vssh/libcurl_la-libssh.o
Removing lib/vssh/libcurl_la-libssh2.lo
Removing lib/vssh/libcurl_la-libssh2.o
Removing lib/vssh/libcurl_la-wolfssh.lo
Removing lib/vssh/libcurl_la-wolfssh.o
Removing lib/vtls/.deps/
Removing lib/vtls/.dirstamp
Removing lib/vtls/libcurl_la-bearssl.lo
Removing lib/vtls/libcurl_la-bearssl.o
Removing lib/vtls/libcurl_la-gskit.lo
Removing lib/vtls/libcurl_la-gskit.o
Removing lib/vtls/libcurl_la-gtls.lo
Removing lib/vtls/libcurl_la-gtls.o
Removing lib/vtls/libcurl_la-keylog.lo
Removing lib/vtls/libcurl_la-keylog.o
Removing lib/vtls/libcurl_la-mbedtls.lo
Removing lib/vtls/libcurl_la-mbedtls.o
Removing lib/vtls/libcurl_la-mbedtls_threadlock.lo
Removing lib/vtls/libcurl_la-mbedtls_threadlock.o
Removing lib/vtls/libcurl_la-mesalink.lo
Removing lib/vtls/libcurl_la-mesalink.o
Removing lib/vtls/libcurl_la-nss.lo
Removing lib/vtls/libcurl_la-nss.o
Removing lib/vtls/libcurl_la-openssl.lo
Removing lib/vtls/libcurl_la-openssl.o
Removing lib/vtls/libcurl_la-schannel.lo
Removing lib/vtls/libcurl_la-schannel.o
Removing lib/vtls/libcurl_la-schannel_verify.lo
Removing lib/vtls/libcurl_la-schannel_verify.o
Removing lib/vtls/libcurl_la-sectransp.lo
Removing lib/vtls/libcurl_la-sectransp.o
Removing lib/vtls/libcurl_la-vtls.lo
Removing lib/vtls/libcurl_la-vtls.o
Removing lib/vtls/libcurl_la-wolfssl.lo
Removing lib/vtls/libcurl_la-wolfssl.o
Removing libcurl.pc
Removing libtool
Removing ltmain.sh
Removing m4/libtool.m4
Removing m4/ltoptions.m4
Removing m4/ltsugar.m4
Removing m4/ltversion.m4
Removing m4/lt~obsolete.m4
Removing missing
Removing packages/Makefile
Removing packages/Makefile.in
Removing packages/vms/Makefile
Removing packages/vms/Makefile.in
Removing scripts/Makefile
Removing scripts/Makefile.in
Removing src/.deps/
Removing src/.libs/
Removing src/Makefile
Removing src/Makefile.in
Removing src/curl
Removing src/curl-slist_wc.o
Removing src/curl-tool_binmode.o
Removing src/curl-tool_bname.o
Removing src/curl-tool_cb_dbg.o
Removing src/curl-tool_cb_hdr.o
Removing src/curl-tool_cb_prg.o
Removing src/curl-tool_cb_rea.o
Removing src/curl-tool_cb_see.o
Removing src/curl-tool_cb_wrt.o
Removing src/curl-tool_cfgable.o
Removing src/curl-tool_convert.o
Removing src/curl-tool_dirhie.o
Removing src/curl-tool_doswin.o
Removing src/curl-tool_easysrc.o
Removing src/curl-tool_filetime.o
Removing src/curl-tool_formparse.o
Removing src/curl-tool_getparam.o
Removing src/curl-tool_getpass.o
Removing src/curl-tool_help.o
Removing src/curl-tool_helpers.o
Removing src/curl-tool_homedir.o
Removing src/curl-tool_hugehelp.o
Removing src/curl-tool_libinfo.o
Removing src/curl-tool_main.o
Removing src/curl-tool_metalink.o
Removing src/curl-tool_msgs.o
Removing src/curl-tool_operate.o
Removing src/curl-tool_operhlp.o
Removing src/curl-tool_panykey.o
Removing src/curl-tool_paramhlp.o
Removing src/curl-tool_parsecfg.o
Removing src/curl-tool_progress.o
Removing src/curl-tool_setopt.o
Removing src/curl-tool_sleep.o
Removing src/curl-tool_strdup.o
Removing src/curl-tool_urlglob.o
Removing src/curl-tool_util.o
Removing src/curl-tool_vms.o
Removing src/curl-tool_writeout.o
Removing src/curl-tool_writeout_json.o
Removing src/curl-tool_xattr.o
Removing src/tool_hugehelp.c
Removing test-driver
Removing tests/Makefile
Removing tests/Makefile.in
Removing tests/certs/Makefile
Removing tests/certs/Makefile.in
Removing tests/certs/scripts/Makefile
Removing tests/certs/scripts/Makefile.in
Removing tests/configurehelp.pm
Removing tests/data/Makefile
Removing tests/data/Makefile.in
Removing tests/libtest/.deps/
Removing tests/libtest/Makefile
Removing tests/libtest/Makefile.in
Removing tests/server/.deps/
Removing tests/server/Makefile
Removing tests/server/Makefile.in
Removing tests/unit/.deps/
Removing tests/unit/Makefile
Removing tests/unit/Makefile.in

$ autoreconf -fi
libtoolize: putting auxiliary files in '.'.
libtoolize: copying file './ltmain.sh'
libtoolize: putting macros in AC_CONFIG_MACRO_DIRS, 'm4'.
libtoolize: copying file 'm4/libtool.m4'
libtoolize: copying file 'm4/ltoptions.m4'
libtoolize: copying file 'm4/ltsugar.m4'
libtoolize: copying file 'm4/ltversion.m4'
libtoolize: copying file 'm4/lt~obsolete.m4'
libtoolize: Remember to add 'LT_INIT' to configure.ac.
configure.ac:44: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:44: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:147: CURL_CHECK_OPTION_DEBUG is expanded from...
configure.ac:44: the top level
configure.ac:45: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:45: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:181: CURL_CHECK_OPTION_OPTIMIZE is expanded from...
configure.ac:45: the top level
configure.ac:46: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:46: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:360: CURL_CHECK_OPTION_WARNINGS is expanded from...
configure.ac:46: the top level
configure.ac:47: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:47: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:394: CURL_CHECK_OPTION_WERROR is expanded from...
configure.ac:47: the top level
configure.ac:48: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:48: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:94: CURL_CHECK_OPTION_CURLDEBUG is expanded from...
configure.ac:48: the top level
configure.ac:49: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:49: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:237: CURL_CHECK_OPTION_SYMBOL_HIDING is expanded from...
configure.ac:49: the top level
configure.ac:50: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:50: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:58: CURL_CHECK_OPTION_ARES is expanded from...
configure.ac:50: the top level
configure.ac:51: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:51: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:328: CURL_CHECK_OPTION_RT is expanded from...
configure.ac:51: the top level
configure.ac:52: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:52: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:658: CURL_CHECK_OPTION_ECH is expanded from...
configure.ac:52: the top level
configure.ac:135: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:135: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-functions.m4:7304: CURL_COVERAGE is expanded from...
configure.ac:135: the top level
configure.ac:391: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:391: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:391: the top level
configure.ac:392: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:392: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:392: the top level
configure.ac:414: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:414: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:414: the top level
configure.ac:415: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:415: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:415: the top level
configure.ac:429: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:429: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:429: the top level
configure.ac:430: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:430: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:430: the top level
configure.ac:444: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:444: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:444: the top level
configure.ac:445: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:445: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:445: the top level
configure.ac:460: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:460: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:460: the top level
configure.ac:461: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:461: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:461: the top level
configure.ac:492: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:492: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:492: the top level
configure.ac:493: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:493: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:493: the top level
configure.ac:518: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:518: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:518: the top level
configure.ac:519: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:519: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:519: the top level
configure.ac:535: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:535: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:535: the top level
configure.ac:536: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:536: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:536: the top level
configure.ac:550: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:550: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:550: the top level
configure.ac:551: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:551: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:551: the top level
configure.ac:565: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:565: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:565: the top level
configure.ac:566: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:566: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:566: the top level
configure.ac:581: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:581: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:581: the top level
configure.ac:582: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:582: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:582: the top level
configure.ac:598: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:598: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:598: the top level
configure.ac:599: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:599: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:599: the top level
configure.ac:615: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:615: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:615: the top level
configure.ac:616: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:616: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:616: the top level
configure.ac:631: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:631: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:631: the top level
configure.ac:632: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:632: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:632: the top level
configure.ac:647: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:647: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:647: the top level
configure.ac:648: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:648: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:648: the top level
configure.ac:663: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:663: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:663: the top level
configure.ac:664: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:664: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:664: the top level
configure.ac:683: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:683: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:683: the top level
configure.ac:684: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:684: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:684: the top level
configure.ac:704: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:704: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:704: the top level
configure.ac:705: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:705: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:705: the top level
configure.ac:724: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:724: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:724: the top level
configure.ac:931: warning: The macro `AC_HEADER_TIME' is obsolete.
configure.ac:931: You should run autoupdate.
./lib/autoconf/headers.m4:743: AC_HEADER_TIME is expanded from...
acinclude.m4:1575: CURL_CHECK_FUNC_CLOCK_GETTIME_MONOTONIC is expanded from...
acinclude.m4:1618: CURL_CHECK_LIBS_CLOCK_GETTIME_MONOTONIC is expanded from...
configure.ac:931: the top level
configure.ac:952: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:952: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:952: the top level
configure.ac:953: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:953: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:953: the top level
configure.ac:1059: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1059: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1059: the top level
configure.ac:1060: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1060: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1060: the top level
configure.ac:1145: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1145: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1145: the top level
configure.ac:1146: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1146: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1146: the top level
configure.ac:1231: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1231: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1231: the top level
configure.ac:1236: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1236: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1236: the top level
configure.ac:1317: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1317: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1317: the top level
configure.ac:1318: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1318: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1318: the top level
configure.ac:1329: warning: The macro `AC_TRY_RUN' is obsolete.
configure.ac:1329: You should run autoupdate.
./lib/autoconf/general.m4:2997: AC_TRY_RUN is expanded from...
configure.ac:1329: the top level
configure.ac:1367: warning: The macro `AC_TRY_COMPILE' is obsolete.
configure.ac:1367: You should run autoupdate.
./lib/autoconf/general.m4:2847: AC_TRY_COMPILE is expanded from...
configure.ac:1367: the top level
configure.ac:1428: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1428: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1428: the top level
configure.ac:1435: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1435: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1435: the top level
configure.ac:1442: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1442: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1442: the top level
configure.ac:1608: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1608: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1608: the top level
configure.ac:1609: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1609: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1609: the top level
configure.ac:1635: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1635: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1635: the top level
configure.ac:1636: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1636: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1636: the top level
configure.ac:1640: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1640: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1640: the top level
configure.ac:1641: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1641: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1641: the top level
configure.ac:1670: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1670: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1670: the top level
configure.ac:1671: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1671: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1671: the top level
configure.ac:1675: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1675: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1675: the top level
configure.ac:1676: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1676: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1676: the top level
configure.ac:1700: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1700: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1700: the top level
configure.ac:1701: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1701: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1701: the top level
configure.ac:1736: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1736: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1736: the top level
configure.ac:1737: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1737: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1737: the top level
configure.ac:1755: warning: The macro `AC_TRY_LINK' is obsolete.
configure.ac:1755: You should run autoupdate.
./lib/autoconf/general.m4:2920: AC_TRY_LINK is expanded from...
configure.ac:1755: the top level
configure.ac:1841: warning: The macro `AC_TRY_LINK' is obsolete.
configure.ac:1841: You should run autoupdate.
./lib/autoconf/general.m4:2920: AC_TRY_LINK is expanded from...
lib/m4sugar/m4sh.m4:692: _AS_IF_ELSE is expanded from...
lib/m4sugar/m4sh.m4:699: AS_IF is expanded from...
./lib/autoconf/libs.m4:100: AC_CHECK_LIB is expanded from...
lib/m4sugar/m4sh.m4:692: _AS_IF_ELSE is expanded from...
lib/m4sugar/m4sh.m4:699: AS_IF is expanded from...
./lib/autoconf/libs.m4:100: AC_CHECK_LIB is expanded from...
configure.ac:1841: the top level
configure.ac:1841: warning: The macro `AC_TRY_LINK' is obsolete.
configure.ac:1841: You should run autoupdate.
./lib/autoconf/general.m4:2920: AC_TRY_LINK is expanded from...
lib/m4sugar/m4sh.m4:692: _AS_IF_ELSE is expanded from...
lib/m4sugar/m4sh.m4:699: AS_IF is expanded from...
./lib/autoconf/general.m4:2894: _AC_LINK_IFELSE is expanded from...
./lib/autoconf/general.m4:2911: AC_LINK_IFELSE is expanded from...
./lib/autoconf/general.m4:2920: AC_TRY_LINK is expanded from...
lib/m4sugar/m4sh.m4:692: _AS_IF_ELSE is expanded from...
lib/m4sugar/m4sh.m4:699: AS_IF is expanded from...
./lib/autoconf/libs.m4:100: AC_CHECK_LIB is expanded from...
lib/m4sugar/m4sh.m4:692: _AS_IF_ELSE is expanded from...
lib/m4sugar/m4sh.m4:699: AS_IF is expanded from...
./lib/autoconf/libs.m4:100: AC_CHECK_LIB is expanded from...
configure.ac:1841: the top level
configure.ac:2057: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2057: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2057: the top level
configure.ac:2068: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2068: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2068: the top level
configure.ac:2103: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2103: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2103: the top level
configure.ac:2104: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2104: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2104: the top level
configure.ac:2120: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2120: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2120: the top level
configure.ac:2121: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2121: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2121: the top level
configure.ac:2281: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2281: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2281: the top level
configure.ac:2282: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2282: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2282: the top level
configure.ac:2375: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2375: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2375: the top level
configure.ac:2376: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2376: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2376: the top level
configure.ac:2535: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2535: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2535: the top level
configure.ac:2536: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2536: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2536: the top level
configure.ac:2626: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2626: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2626: the top level
configure.ac:2627: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2627: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2627: the top level
configure.ac:2717: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2717: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2717: the top level
configure.ac:2718: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2718: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2718: the top level
configure.ac:2883: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2883: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
acinclude.m4:2163: CURL_CHECK_CA_BUNDLE is expanded from...
configure.ac:2883: the top level
configure.ac:2914: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2914: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2914: the top level
configure.ac:2915: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2915: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2915: the top level
configure.ac:3008: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3008: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3008: the top level
configure.ac:3009: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3009: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3009: the top level
configure.ac:3015: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3015: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3015: the top level
configure.ac:3016: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3016: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3016: the top level
configure.ac:3021: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3021: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3021: the top level
configure.ac:3022: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3022: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3022: the top level
configure.ac:3203: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3203: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3203: the top level
configure.ac:3204: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3204: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3204: the top level
configure.ac:3282: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3282: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3282: the top level
configure.ac:3283: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3283: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3283: the top level
configure.ac:3334: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3334: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3334: the top level
configure.ac:3335: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3335: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3335: the top level
configure.ac:3412: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3412: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3412: the top level
configure.ac:3413: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3413: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3413: the top level
configure.ac:3547: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3547: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3547: the top level
configure.ac:3548: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3548: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3548: the top level
configure.ac:3634: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3634: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3634: the top level
configure.ac:3635: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3635: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3635: the top level
configure.ac:3833: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3833: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3833: the top level
configure.ac:3834: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3834: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3834: the top level
configure.ac:3924: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3924: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3924: the top level
configure.ac:3925: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3925: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3925: the top level
configure.ac:4008: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4008: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4008: the top level
configure.ac:4009: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4009: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4009: the top level
configure.ac:4033: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4033: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4033: the top level
configure.ac:4034: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4034: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4034: the top level
configure.ac:4062: warning: The macro `AC_HEADER_STDC' is obsolete.
configure.ac:4062: You should run autoupdate.
./lib/autoconf/headers.m4:704: AC_HEADER_STDC is expanded from...
configure.ac:4062: the top level
configure.ac:4149: warning: The macro `AC_HEADER_TIME' is obsolete.
configure.ac:4149: You should run autoupdate.
./lib/autoconf/headers.m4:743: AC_HEADER_TIME is expanded from...
configure.ac:4149: the top level
configure.ac:4264: warning: The macro `AC_TYPE_SIGNAL' is obsolete.
configure.ac:4264: You should run autoupdate.
./lib/autoconf/types.m4:776: AC_TYPE_SIGNAL is expanded from...
configure.ac:4264: the top level
configure.ac:4444: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4444: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:32: CURL_CHECK_OPTION_THREADED_RESOLVER is expanded from...
configure.ac:4444: the top level
configure.ac:4452: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4452: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4452: the top level
configure.ac:4454: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4454: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4454: the top level
configure.ac:4553: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4553: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4553: the top level
configure.ac:4554: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4554: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4554: the top level
configure.ac:4572: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4572: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4572: the top level
configure.ac:4573: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4573: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4573: the top level
configure.ac:4608: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4608: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4608: the top level
configure.ac:4609: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4609: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4609: the top level
configure.ac:4622: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4622: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:599: CURL_CHECK_OPTION_NTLM_WB is expanded from...
configure.ac:4622: the top level
configure.ac:4631: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4631: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4631: the top level
configure.ac:4632: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4632: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4632: the top level
configure.ac:4657: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4657: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4657: the top level
configure.ac:4658: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4658: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4658: the top level
configure.ac:4690: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4690: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4690: the top level
configure.ac:4691: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4691: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4691: the top level
configure.ac:4708: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4708: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4708: the top level
configure.ac:4709: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4709: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4709: the top level
configure.ac:4726: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4726: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4726: the top level
configure.ac:4727: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4727: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4727: the top level
configure.ac:4744: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4744: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4744: the top level
configure.ac:4745: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4745: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4745: the top level
configure.ac:4762: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4762: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4762: the top level
configure.ac:4763: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4763: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4763: the top level
configure.ac:4780: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4780: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4780: the top level
configure.ac:4781: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4781: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4781: the top level
configure.ac:4798: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4798: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4798: the top level
configure.ac:4799: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4799: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4799: the top level
configure.ac:4816: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4816: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4816: the top level
configure.ac:4817: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4817: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4817: the top level
configure.ac:4834: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4834: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4834: the top level
configure.ac:4835: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4835: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4835: the top level
configure.ac:4852: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4852: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4852: the top level
configure.ac:4853: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4853: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4853: the top level
configure.ac:4870: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4870: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4870: the top level
configure.ac:4871: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4871: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4871: the top level
configure.ac:4891: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4891: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4891: the top level
configure.ac:4892: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4892: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4892: the top level
configure.ac:132: installing './compile'
configure.ac:195: installing './config.guess'
configure.ac:195: installing './config.sub'
configure.ac:132: installing './install-sh'
configure.ac:137: installing './missing'
docs/examples/Makefile.am: installing './depcomp'
parallel-tests: installing './test-driver'

$ bash -c find . -name config.guess -exec cp /usr/share/misc/config.guess {} \;

$ bash -c find . -name config.sub -exec cp /usr/share/misc/config.sub {} \;

$ chmod +x configure

$ ./configure --disable-shared --without-ssl --disable-docs
checking whether to enable maintainer-specific portions of Makefiles... no
checking whether make supports nested variables... yes
checking whether to enable debug build options... no
checking whether to enable compiler optimizer... (assumed) yes
checking whether to enable strict compiler warnings... no
checking whether to enable compiler warnings as errors... no
checking whether to enable curl debug memory tracking... no
checking whether to enable hiding of library internal symbols... yes
checking whether to enable c-ares for DNS lookups... no
checking whether to disable dependency on -lrt... (assumed no)
checking whether to enable ECH support... no
checking for path separator... :
checking for sed... /usr/bin/sed
checking for grep... /usr/bin/grep
checking for egrep... /usr/bin/grep -E
checking for ar... /usr/bin/ar
checking for a BSD-compatible install... /usr/bin/install -c
checking for gcc... ccache gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables... 
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether the compiler supports GNU C... yes
checking whether ccache gcc accepts -g... yes
checking for ccache gcc option to enable C11 features... none needed
checking whether ccache gcc understands -c and -o together... yes
checking how to run the C preprocessor... ccache gcc -E
checking for a sed that does not truncate output... (cached) /usr/bin/sed
checking for code coverage support... no
checking whether build environment is sane... yes
checking for a race-free mkdir -p... /usr/bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking whether make supports the include directive... yes (GNU style)
checking dependency style of ccache gcc... gcc3
checking curl version... 7.73.1-DEV
checking build system type... x86_64-pc-linux-gnu
checking host system type... x86_64-pc-linux-gnu
checking for grep that handles long lines and -e... (cached) /usr/bin/grep
checking for egrep... /usr/bin/grep -E
checking if OS is AIX (to define _ALL_SOURCE)... no
checking if _THREAD_SAFE is already defined... no
checking if _THREAD_SAFE is actually needed... no
checking if _THREAD_SAFE is onwards defined... no
checking if _REENTRANT is already defined... no
checking if _REENTRANT is actually needed... no
checking if _REENTRANT is onwards defined... no
checking for special C compiler options needed for large files... no
checking for _FILE_OFFSET_BITS value needed for large files... no
checking how to print strings... printf
checking for a sed that does not truncate output... (cached) /usr/bin/sed
checking for fgrep... /usr/bin/grep -F
checking for ld used by ccache gcc... /usr/bin/ld
checking if the linker (/usr/bin/ld) is GNU ld... yes
checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B
checking the name lister (/usr/bin/nm -B) interface... BSD nm
checking whether ln -s works... yes
checking the maximum length of command line arguments... 1572864
checking how to convert x86_64-pc-linux-gnu file names to x86_64-pc-linux-gnu format... func_convert_file_noop
checking how to convert x86_64-pc-linux-gnu file names to toolchain format... func_convert_file_noop
checking for /usr/bin/ld option to reload object files... -r
checking for objdump... objdump
checking how to recognize dependent libraries... pass_all
checking for dlltool... no
checking how to associate runtime and link libraries... printf %s\n
checking for archiver @FILE support... @
checking for strip... strip
checking for ranlib... ranlib
checking command to parse /usr/bin/nm -B output from ccache gcc object... ok
checking for sysroot... no
checking for a working dd... /usr/bin/dd
checking how to truncate binary pipes... /usr/bin/dd bs=4096 count=1
checking for mt... mt
checking if mt is a manifest tool... no
checking for stdio.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for strings.h... yes
checking for sys/stat.h... yes
checking for sys/types.h... yes
checking for unistd.h... yes
checking for sys/time.h... yes
checking for dlfcn.h... yes
checking for objdir... .libs
checking if ccache gcc supports -fno-rtti -fno-exceptions... no
checking for ccache gcc option to produce PIC... -fPIC -DPIC
checking if ccache gcc PIC flag -fPIC -DPIC works... yes
checking if ccache gcc static flag -static works... yes
checking if ccache gcc supports -c -o file.o... yes
checking if ccache gcc supports -c -o file.o... (cached) yes
checking whether the ccache gcc linker (/usr/bin/ld -m elf_x86_64) supports shared libraries... yes
checking dynamic linker characteristics... GNU/Linux ld.so
checking how to hardcode library paths into programs... immediate
checking whether stripping libraries is possible... yes
checking if libtool supports shared libraries... yes
checking whether to build shared libraries... no
checking whether to build static libraries... yes
checking whether to build shared libraries with -version-info... yes
checking whether to build shared libraries with -no-undefined... no
checking whether to build shared libraries with -mimpure-text... no
checking whether to build shared libraries with PIC... yes
checking whether to build static libraries with PIC... yes
checking whether to build shared libraries only... no
checking whether to build static libraries only... yes
checking for inline... inline
checking if cpp -P is needed... yes
checking if cpp -P works... yes
checking if compiler is DEC/Compaq/HP C... no
checking if compiler is HP-UX C... no
checking if compiler is IBM C... no
checking if compiler is Intel C... no
checking if compiler is clang... no
checking if compiler is GNU C... yes
checking if compiler is LCC... no
checking if compiler is SGI MIPSpro C... no
checking if compiler is SGI MIPS C... no
checking if compiler is SunPro C... no
checking if compiler is Tiny C... no
checking if compiler is Watcom C... no
checking if compiler accepts some basic options... yes
configure: compiler options added: -Werror-implicit-function-declaration 
checking if compiler accepts debug disabling options... yes
configure: compiler options added: 
checking if compiler optimizer assumed setting might be used... yes
checking if compiler accepts optimizer enabling options... yes
configure: compiler options added: -O2
checking if compiler accepts strict warning options... yes
configure: compiler options added: -Wno-system-headers -Wenum-conversion 
checking if compiler halts on compilation errors... yes
checking if compiler halts on negative sized arrays... yes
checking if compiler halts on function prototype mismatch... yes
checking if compiler supports hiding library internal symbols... yes
checking for windows.h... no
checking whether build target is a native Windows one... no
checking whether build target supports WIN32 file API... no
checking for good-to-use Mac CFLAGS... no
checking to see if the compiler supports __builtin_available()... no
checking whether to support http... yes
checking whether to support ftp... yes
checking whether to support file... yes
checking whether to support ldap... yes
checking whether to support ldaps... yes
checking whether to support rtsp... yes
checking whether to support proxies... yes
checking whether to support dict... yes
checking whether to support telnet... yes
checking whether to support tftp... yes
checking whether to support pop3... yes
checking whether to support imap... yes
checking whether to support smb... yes
checking whether to support smtp... yes
checking whether to support gopher... yes
checking whether to support mqtt... no
checking whether to provide built-in manual... yes
checking whether to enable generation of C code... yes
checking whether to use libgcc... no
checking if X/Open network library is required... no
checking for gethostbyname... yes
checking for windows.h... (cached) no
checking for winsock.h... (cached) no
checking for winsock2.h... (cached) no
checking for proto/bsdsocket.h... no
checking for connect in libraries... yes
checking for sys/types.h... (cached) yes
checking for sys/time.h... (cached) yes
checking for time.h... yes
checking for monotonic clock_gettime... yes
checking for clock_gettime in libraries... no additional lib required
checking if monotonic clock_gettime works... yes
checking for pkg-config... /usr/bin/pkg-config
checking for zlib options with pkg-config... found
checking for zlib.h... yes
configure: found both libz and libz.h header
checking for BrotliDecoderDecompress in -lbrotlidec... no
checking for brotli/decode.h... no
checking for ZSTD_createDStream in -lzstd... no
checking for zstd.h... no
checking for lber.h... no
checking for ldap.h... no
checking for ldapssl.h... no
checking for ldap_ssl.h... no
checking for LDAP libraries... cannot find LDAP libraries
checking whether to enable IPv6... yes
checking if struct sockaddr_in6 has sin6_scope_id member... yes
checking if argv can be written to... yes
checking if GSS-API support is requested... no
checking whether to enable Windows native SSL/TLS (Windows native builds only)... no
checking whether to enable Secure Transport... no
checking whether to enable Amiga native SSL/TLS (AmiSSL)... no
checking for library containing psl_builtin... -lpsl
checking for RTMP_Init in -lrtmp... no
checking whether versioned symbols are wanted... no
checking whether to enable Windows native IDN (Windows native builds only)... no
checking whether to build with libidn2... (assumed) yes
checking for pkg-config... (cached) /usr/bin/pkg-config
checking for libidn2 options with pkg-config... no
configure: IDN_LIBS: "-lidn2"
configure: IDN_LDFLAGS: ""
configure: IDN_CPPFLAGS: ""
configure: IDN_DIR: ""
checking if idn2_lookup_ul can be linked... no
checking for idn2.h... no
checking for pkg-config... (cached) /usr/bin/pkg-config
checking for libnghttp2 options with pkg-config... no
checking for pkg-config... (cached) /usr/bin/pkg-config
checking for libngtcp2 options with pkg-config... no
checking for pkg-config... (cached) /usr/bin/pkg-config
checking for quiche options with pkg-config... no
checking for pkg-config... (cached) /usr/bin/pkg-config
checking for fish options with pkg-config... no
checking for egrep... (cached) /usr/bin/grep -E
checking for malloc.h... yes
checking for memory.h... no
checking for sys/types.h... (cached) yes
checking for sys/time.h... (cached) yes
checking for sys/select.h... yes
checking for sys/socket.h... yes
checking for sys/ioctl.h... yes
checking for sys/uio.h... yes
checking for assert.h... yes
checking for unistd.h... (cached) yes
checking for stdlib.h... (cached) yes
checking for arpa/inet.h... yes
checking for net/if.h... yes
checking for netinet/in.h... yes
checking for netinet/in6.h... no
checking for sys/un.h... yes
checking for linux/tcp.h... yes
checking for netinet/tcp.h... yes
checking for netdb.h... yes
checking for sys/sockio.h... no
checking for sys/stat.h... (cached) yes
checking for sys/param.h... yes
checking for termios.h... yes
checking for termio.h... yes
checking for sgtty.h... yes
checking for fcntl.h... yes
checking for alloca.h... yes
checking for time.h... (cached) yes
checking for io.h... no
checking for pwd.h... yes
checking for utime.h... yes
checking for sys/utime.h... no
checking for sys/poll.h... yes
checking for poll.h... yes
checking for socket.h... no
checking for sys/resource.h... yes
checking for libgen.h... yes
checking for locale.h... yes
checking for errno.h... yes
checking for stdbool.h... yes
checking for arpa/tftp.h... yes
checking for sys/filio.h... no
checking for sys/wait.h... yes
checking for setjmp.h... yes
checking for an ANSI C-conforming const... yes
checking for compiler support of C99 variadic macro style... yes
checking for compiler support of old gcc variadic macro style... yes
checking for size_t... yes
checking for sys/types.h... (cached) yes
checking for sys/time.h... (cached) yes
checking for time.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for struct timeval... yes
checking run-time libs availability... fine
checking size of size_t... 8
checking size of long... 8
checking size of int... 4
checking size of short... 2
checking size of time_t... 8
checking size of off_t... 8
checking size of curl_off_t... 8
checking for long long... yes
checking if numberLL works... yes
checking for ssize_t... yes
checking for bool... yes
checking for sa_family_t... yes
checking for suseconds_t... yes
checking if time_t is unsigned... no
checking for sys/types.h... (cached) yes
checking for poll.h... (cached) yes
checking for sys/poll.h... (cached) yes
checking for in_addr_t... yes
checking for struct sockaddr_storage... yes
checking for signal.h... yes
checking for sig_atomic_t... yes
checking if sig_atomic_t is already defined as volatile... no
checking return type of signal handlers... void
checking for sys/select.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for select... yes
checking types of args and return type for select... int,fd_set *,struct timeval *,int
checking for sys/types.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for recv... yes
checking types of args and return type for recv... int,void *,size_t,int,ssize_t
checking for sys/types.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for send... yes
checking types of args and return type for send... int,const void *,size_t,int,ssize_t
checking for sys/types.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for MSG_NOSIGNAL... yes
checking for sys/types.h... (cached) yes
checking for unistd.h... (cached) yes
checking if alarm can be linked... yes
checking if alarm is prototyped... yes
checking if alarm is compilable... yes
checking if alarm usage allowed... yes
checking if alarm might be used... yes
checking for sys/types.h... (cached) yes
checking for string.h... (cached) yes
checking for strings.h... (cached) yes
checking for sys/types.h... (cached) yes
checking for libgen.h... (cached) yes
checking if basename can be linked... yes
checking if basename is prototyped... yes
checking if basename is compilable... yes
checking if basename usage allowed... yes
checking if basename might be used... yes
checking for sys/types.h... (cached) yes
checking for socket.h... (cached) no
checking if closesocket can be linked... no
checking if closesocket might be used... no
checking for sys/types.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking if CloseSocket can be linked... no
checking if CloseSocket might be used... no
checking if connect can be linked... yes
checking if connect is prototyped... yes
checking if connect is compilable... yes
checking if connect usage allowed... yes
checking if connect might be used... yes
checking for sys/types.h... (cached) yes
checking for unistd.h... (cached) yes
checking for fcntl.h... (cached) yes
checking if fcntl can be linked... yes
checking if fcntl is prototyped... yes
checking if fcntl is compilable... yes
checking if fcntl usage allowed... yes
checking if fcntl might be used... yes
checking if fcntl O_NONBLOCK is compilable... yes
checking if fcntl O_NONBLOCK usage allowed... yes
checking if fcntl O_NONBLOCK might be used... yes
checking for windows.h... (cached) no
checking for winsock2.h... (cached) no
checking for ws2tcpip.h... (cached) no
checking for sys/types.h... (cached) yes
checking for netdb.h... (cached) yes
checking if freeaddrinfo can be linked... yes
checking if freeaddrinfo is prototyped... yes
checking if freeaddrinfo is compilable... yes
checking if freeaddrinfo usage allowed... yes
checking if freeaddrinfo might be used... yes
checking for sys/types.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for netinet/in.h... (cached) yes
checking for ifaddrs.h... yes
checking if freeifaddrs can be linked... yes
checking if freeifaddrs is prototyped... yes
checking if freeifaddrs is compilable... yes
checking if freeifaddrs usage allowed... yes
checking if freeifaddrs might be used... yes
checking for sys/types.h... (cached) yes
checking for sys/xattr.h... yes
checking if fsetxattr can be linked... yes
checking if fsetxattr is prototyped... yes
checking if fsetxattr takes 5 args.... yes
checking if fsetxattr is compilable... yes
checking if fsetxattr usage allowed... yes
checking if fsetxattr might be used... yes
checking if ftruncate can be linked... yes
checking if ftruncate is prototyped... yes
checking if ftruncate is compilable... yes
checking if ftruncate usage allowed... yes
checking if ftruncate might be used... yes
checking for sys/types.h... (cached) yes
checking for stdlib.h... (cached) yes
checking if getaddrinfo can be linked... yes
checking if getaddrinfo is prototyped... yes
checking if getaddrinfo is compilable... yes
checking if getaddrinfo seems to work... yes
checking if getaddrinfo usage allowed... yes
checking if getaddrinfo might be used... yes
checking if getaddrinfo is threadsafe... yes
checking if gai_strerror can be linked... yes
checking if gai_strerror is prototyped... yes
checking if gai_strerror is compilable... yes
checking if gai_strerror usage allowed... yes
checking if gai_strerror might be used... yes
checking if gethostbyaddr can be linked... yes
checking if gethostbyaddr is prototyped... yes
checking if gethostbyaddr is compilable... yes
checking if gethostbyaddr usage allowed... yes
checking if gethostbyaddr might be used... yes
checking if gethostbyaddr_r can be linked... yes
checking if gethostbyaddr_r is prototyped... yes
checking if gethostbyaddr_r takes 5 args.... no
checking if gethostbyaddr_r takes 7 args.... no
checking if gethostbyaddr_r takes 8 args.... yes
checking if gethostbyaddr_r is compilable... yes
checking if gethostbyaddr_r usage allowed... yes
checking if gethostbyaddr_r might be used... yes
checking if gethostbyname can be linked... yes
checking if gethostbyname is prototyped... yes
checking if gethostbyname is compilable... yes
checking if gethostbyname usage allowed... yes
checking if gethostbyname might be used... yes
checking if gethostbyname_r can be linked... yes
checking if gethostbyname_r is prototyped... yes
checking if gethostbyname_r takes 3 args.... no
checking if gethostbyname_r takes 5 args.... no
checking if gethostbyname_r takes 6 args.... yes
checking if gethostbyname_r is compilable... yes
checking if gethostbyname_r usage allowed... yes
checking if gethostbyname_r might be used... yes
checking if gethostname can be linked... yes
checking if gethostname is prototyped... yes
checking if gethostname is compilable... yes
checking for gethostname arg 2 data type... size_t
checking if gethostname usage allowed... yes
checking if gethostname might be used... yes
checking if getpeername can be linked... yes
checking if getpeername is prototyped... yes
checking if getpeername is compilable... yes
checking if getpeername usage allowed... yes
checking if getpeername might be used... yes
checking if getsockname can be linked... yes
checking if getsockname is prototyped... yes
checking if getsockname is compilable... yes
checking if getsockname usage allowed... yes
checking if getsockname might be used... yes
checking for net/if.h... (cached) yes
checking if if_nametoindex can be linked... yes
checking if if_nametoindex is prototyped... yes
checking if if_nametoindex is compilable... yes
checking if if_nametoindex usage allowed... yes
checking if if_nametoindex might be used... yes
checking if getifaddrs can be linked... yes
checking if getifaddrs is prototyped... yes
checking if getifaddrs is compilable... yes
checking if getifaddrs seems to work... yes
checking if getifaddrs usage allowed... yes
checking if getifaddrs might be used... yes
checking if getservbyport_r can be linked... yes
checking if getservbyport_r is prototyped... yes
checking if getservbyport_r takes 4 args.... no
checking if getservbyport_r takes 5 args.... no
checking if getservbyport_r takes 6 args.... yes
checking if getservbyport_r is compilable... yes
checking if getservbyport_r usage allowed... yes
checking if getservbyport_r might be used... yes
checking for sys/types.h... (cached) yes
checking for sys/time.h... (cached) yes
checking for time.h... (cached) yes
checking if gmtime_r can be linked... yes
checking if gmtime_r is prototyped... yes
checking if gmtime_r is compilable... yes
checking if gmtime_r seems to work... yes
checking if gmtime_r usage allowed... yes
checking if gmtime_r might be used... yes
checking for sys/types.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for netinet/in.h... (cached) yes
checking for arpa/inet.h... (cached) yes
checking if inet_ntoa_r can be linked... no
checking if inet_ntoa_r might be used... no
checking if inet_ntop can be linked... yes
checking if inet_ntop is prototyped... yes
checking if inet_ntop is compilable... yes
checking if inet_ntop seems to work... yes
checking if inet_ntop usage allowed... yes
checking if inet_ntop might be used... yes
checking if inet_pton can be linked... yes
checking if inet_pton is prototyped... yes
checking if inet_pton is compilable... yes
checking if inet_pton seems to work... yes
checking if inet_pton usage allowed... yes
checking if inet_pton might be used... yes
checking for sys/types.h... (cached) yes
checking for unistd.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for sys/ioctl.h... (cached) yes
checking for stropts.h... no
checking if ioctl can be linked... yes
checking if ioctl is prototyped... yes
checking if ioctl is compilable... yes
checking if ioctl usage allowed... yes
checking if ioctl might be used... yes
checking if ioctl FIONBIO is compilable... yes
checking if ioctl FIONBIO usage allowed... yes
checking if ioctl FIONBIO might be used... yes
checking if ioctl SIOCGIFADDR is compilable... yes
checking if ioctl SIOCGIFADDR usage allowed... yes
checking if ioctl SIOCGIFADDR might be used... yes
checking if ioctlsocket can be linked... no
checking if ioctlsocket might be used... no
checking if IoctlSocket can be linked... no
checking if IoctlSocket might be used... no
checking if localtime_r can be linked... yes
checking if localtime_r is prototyped... yes
checking if localtime_r is compilable... yes
checking if localtime_r seems to work... yes
checking if localtime_r usage allowed... yes
checking if localtime_r might be used... yes
checking if memrchr can be linked... yes
checking if memrchr is prototyped... no
checking if memrchr might be used... no
checking if poll can be linked... yes
checking if poll is prototyped... yes
checking if poll is compilable... yes
checking if poll seems to work... yes
checking if poll usage allowed... yes
checking if poll might be used... yes
checking if setsockopt can be linked... yes
checking if setsockopt is prototyped... yes
checking if setsockopt is compilable... yes
checking if setsockopt usage allowed... yes
checking if setsockopt might be used... yes
checking if setsockopt SO_NONBLOCK is compilable... no
checking if setsockopt SO_NONBLOCK might be used... no
checking for sys/types.h... (cached) yes
checking for signal.h... (cached) yes
checking if sigaction can be linked... yes
checking if sigaction is prototyped... yes
checking if sigaction is compilable... yes
checking if sigaction usage allowed... yes
checking if sigaction might be used... yes
checking if siginterrupt can be linked... yes
checking if siginterrupt is prototyped... yes
checking if siginterrupt is compilable... yes
checking if siginterrupt usage allowed... yes
checking if siginterrupt might be used... yes
checking if signal can be linked... yes
checking if signal is prototyped... yes
checking if signal is compilable... yes
checking if signal usage allowed... yes
checking if signal might be used... yes
checking for sys/types.h... (cached) yes
checking for setjmp.h... (cached) yes
checking if sigsetjmp can be linked... no
checking if sigsetjmp seems a macro... yes
checking if sigsetjmp is compilable... yes
checking if sigsetjmp usage allowed... yes
checking if sigsetjmp might be used... yes
checking if socket can be linked... yes
checking if socket is prototyped... yes
checking if socket is compilable... yes
checking if socket usage allowed... yes
checking if socket might be used... yes
checking if socketpair can be linked... yes
checking if socketpair is prototyped... yes
checking if socketpair is compilable... yes
checking if socketpair usage allowed... yes
checking if socketpair might be used... yes
checking if strcasecmp can be linked... yes
checking if strcasecmp is prototyped... yes
checking if strcasecmp is compilable... yes
checking if strcasecmp usage allowed... yes
checking if strcasecmp might be used... yes
checking if strcmpi can be linked... no
checking if strcmpi might be used... no
checking if strdup can be linked... yes
checking if strdup is prototyped... yes
checking if strdup is compilable... yes
checking if strdup usage allowed... yes
checking if strdup might be used... yes
checking if strerror_r can be linked... yes
checking if strerror_r is prototyped... yes
checking if strerror_r is compilable... yes
checking if strerror_r is glibc like... no
checking if strerror_r is POSIX like... yes
checking if strerror_r seems to work... yes
checking if strerror_r usage allowed... yes
checking if strerror_r might be used... yes
checking if stricmp can be linked... no
checking if stricmp might be used... no
checking if strncasecmp can be linked... yes
checking if strncasecmp is prototyped... yes
checking if strncasecmp is compilable... yes
checking if strncasecmp usage allowed... yes
checking if strncasecmp might be used... yes
checking if strncmpi can be linked... no
checking if strncmpi might be used... no
checking if strnicmp can be linked... no
checking if strnicmp might be used... no
checking if strstr can be linked... yes
checking if strstr is prototyped... yes
checking if strstr is compilable... yes
checking if strstr usage allowed... yes
checking if strstr might be used... yes
checking if strtok_r can be linked... yes
checking if strtok_r is prototyped... yes
checking if strtok_r is compilable... yes
checking if strtok_r usage allowed... yes
checking if strtok_r might be used... yes
checking if strtoll can be linked... yes
checking if strtoll is prototyped... yes
checking if strtoll is compilable... yes
checking if strtoll usage allowed... yes
checking if strtoll might be used... yes
checking for sys/types.h... (cached) yes
checking for sys/uio.h... (cached) yes
checking if writev can be linked... yes
checking if writev is prototyped... yes
checking if writev is compilable... yes
checking if writev usage allowed... yes
checking if writev might be used... yes
checking for ccache gcc options needed to detect all undeclared functions... none needed
checking whether getpwuid_r is declared... yes
checking for fnmatch... yes
checking for geteuid... yes
checking for getpass_r... no
checking deeper for getpass_r... but still no
checking for getppid... yes
checking for getpwuid... yes
checking for getpwuid_r... yes
checking for getrlimit... yes
checking for gettimeofday... yes
checking for if_nametoindex... yes
checking for mach_absolute_time... no
checking deeper for mach_absolute_time... but still no
checking for pipe... yes
checking for setlocale... yes
checking for setmode... no
checking deeper for setmode... but still no
checking for setrlimit... yes
checking for usleep... yes
checking for utime... yes
checking for utimes... yes
checking how to set a socket into non-blocking mode... fcntl O_NONBLOCK
checking for perl... /usr/bin/perl
checking for gnroff... no
checking for nroff... /usr/bin/nroff
checking how to use *nroff to get plain text from man pages... -man
checking whether to enable the threaded resolver... yes
checking whether to use POSIX threads for threaded resolver... auto
checking for pthread.h... yes
checking for pthread_create... yes
checking convert -I options to -isystem... yes
checking whether to enable verbose strings... yes
checking whether to enable SSPI support (Windows native builds only)... no
checking whether to enable cryptographic authentication methods... yes
checking whether to enable NTLM delegation to winbind's helper... no
checking whether to enable TLS-SRP authentication... yes
checking whether to enable Unix domain sockets... auto
checking for struct sockaddr_un.sun_path... yes
checking whether to support cookies... yes
checking whether to support socketpair... yes
checking whether to support HTTP authentication... yes
checking whether to support DoH... yes
checking whether to support the MIME API... yes
checking whether to support date parsing... yes
checking whether to support netrc parsing... yes
checking whether to support progress-meter... yes
checking whether to support DNS shuffling... yes
checking whether to support curl_easy_option*... yes
checking whether to support alt-svc... no
checking whether to support HSTS... no
checking whether hiding of library internal symbols will actually happen... yes
checking that generated files are newer than configure... done
configure: creating ./config.status
config.status: creating Makefile
config.status: creating docs/Makefile
config.status: creating docs/examples/Makefile
config.status: creating docs/libcurl/Makefile
config.status: creating docs/libcurl/opts/Makefile
config.status: creating docs/cmdline-opts/Makefile
config.status: creating include/Makefile
config.status: creating include/curl/Makefile
config.status: creating src/Makefile
config.status: creating lib/Makefile
config.status: creating scripts/Makefile
config.status: creating lib/libcurl.vers
config.status: creating tests/Makefile
config.status: creating tests/certs/Makefile
config.status: creating tests/certs/scripts/Makefile
config.status: creating tests/data/Makefile
config.status: creating tests/server/Makefile
config.status: creating tests/libtest/Makefile
config.status: creating tests/unit/Makefile
config.status: creating packages/Makefile
config.status: creating packages/vms/Makefile
config.status: creating curl-config
config.status: creating libcurl.pc
config.status: creating lib/curl_config.h
config.status: executing depfiles commands
config.status: executing libtool commands
configure: amending lib/Makefile
configure: amending src/Makefile
configure: amending tests/unit/Makefile
configure: amending tests/server/Makefile
configure: amending tests/libtest/Makefile
configure: amending docs/examples/Makefile
configure: Configured to build curl/libcurl:

  Host setup:       x86_64-pc-linux-gnu
  Install prefix:   /usr/local
  Compiler:         ccache gcc
   CFLAGS:          -Werror-implicit-function-declaration -O2 -Wno-system-headers -Wenum-conversion
   CPPFLAGS:        
   LDFLAGS:         
   LIBS:            -lpsl -lz

  curl version:     7.73.1-DEV
  SSL:              no      (--with-{ssl,gnutls,nss,mbedtls,wolfssl,schannel,secure-transport,mesalink,amissl,bearssl} )
  SSH:              no      (--with-{libssh,libssh2})
  zlib:             enabled
  brotli:           no      (--with-brotli)
  zstd:             no      (--with-zstd)
  GSS-API:          no      (--with-gssapi)
  TLS-SRP:          no      (--enable-tls-srp)
  resolver:         POSIX threaded
  IPv6:             enabled
  Unix sockets:     enabled
  IDN:              no      (--with-{libidn2,winidn})
  Build libcurl:    Shared=no, Static=yes
  Built-in manual:  enabled
  --libcurl option: enabled (--disable-libcurl-option)
  Verbose errors:   enabled (--disable-verbose)
  Code coverage:    disabled
  SSPI:             no      (--enable-sspi)
  ca cert bundle:   no
  ca cert path:     
  ca fallback:      
  LDAP:             no      (--enable-ldap / --with-ldap-lib / --with-lber-lib)
  LDAPS:            no      (--enable-ldaps)
  RTSP:             enabled
  RTMP:             no      (--with-librtmp)
  Metalink:         no      (--with-libmetalink)
  PSL:              enabled
  Alt-svc:          enabled
  HTTP2:            no      (--with-nghttp2)
  HTTP3:            no      (--with-ngtcp2, --with-quiche)
  ECH:              no      (--enable-ech)
  Protocols:        DICT FILE FTP GOPHER HTTP IMAP MQTT POP3 RTSP SMTP TELNET TFTP
  Features:         AsynchDNS IPv6 PSL UnixSockets alt-svc libz

configure: WARNING: Cannot find libraries for LDAP support: LDAP disabled
configure: WARNING: SSL disabled, you will not be able to use HTTPS, FTPS, NTLM and more.
configure: WARNING: Use --with-ssl, --with-gnutls, --with-wolfssl, --with-mbedtls, --with-nss, --with-schannel, --with-secure-transport, --with-mesalink, --with-amissl or --with-bearssl to address this.
configure: WARNING: Cannot find libraries for IDN support: IDN disabled

$ make -j3
Making all in lib
make[1]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0/lib'
make  all-am
make[2]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0/lib'
  CC       libcurl_la-amigaos.lo
  CC       libcurl_la-altsvc.lo
  CC       libcurl_la-asyn-ares.lo
  CC       libcurl_la-asyn-thread.lo
  CC       libcurl_la-base64.lo
  CC       libcurl_la-conncache.lo
  CC       libcurl_la-connect.lo
  CC       libcurl_la-content_encoding.lo
  CC       libcurl_la-cookie.lo
  CC       libcurl_la-curl_addrinfo.lo
  CC       libcurl_la-curl_ctype.lo
  CC       libcurl_la-curl_des.lo
  CC       libcurl_la-curl_endian.lo
  CC       libcurl_la-curl_fnmatch.lo
  CC       libcurl_la-curl_get_line.lo
  CC       libcurl_la-curl_gethostname.lo
  CC       libcurl_la-curl_gssapi.lo
  CC       libcurl_la-curl_memrchr.lo
make[2]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0/lib'
make[1]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0/lib'
curl_get_line.c:25:68: error: missing '(' in expression
   25 | #if !defined(CURL_DISABLE_COOKIES) || !defined(CURL_DISABLE_ALTSVC)) || \
      |                                                                    ^
make[2]: *** [Makefile:1784: libcurl_la-curl_get_line.lo] Error 1
make[2]: *** Waiting for unfinished jobs....
make[1]: *** [Makefile:1086: all] Error 2
make: *** [Makefile:1003: all-recursive] Error 1

Commit Diff GitHub →

configure.ac +28 -0 docs/EXPERIMENTAL.md +2 -0 docs/HSTS.md +44 -0 docs/Makefile.am +1 -0 docs/cmdline-opts/Makefile.inc +1 -0 docs/cmdline-opts/hsts.d +18 -0 docs/cmdline-opts/version.d +2 -0 docs/libcurl/curl_easy_setopt.3 +4 -0 docs/libcurl/curl_version_info.3 +3 -0 docs/libcurl/opts/CURLOPT_HSTS.3 +66 -0 docs/libcurl/opts/CURLOPT_HSTS_CTRL.3 +73 -0 docs/libcurl/opts/Makefile.inc +2 -0 docs/libcurl/symbols-in-versions +5 -0 docs/options-in-versions +1 -0 include/curl/curl.h +10 -0 lib/Makefile.inc +2 -2 lib/curl_get_line.c +2 -1 lib/easy.c +11 -0 lib/easyoptions.c +3 -1 lib/hsts.c +430 -0 lib/hsts.h +60 -0 lib/http.c +18 -0 lib/setopt.c +28 -0 lib/url.c +15 -6 lib/urldata.h +4 -10 lib/version.c +3 -0 src/tool_cfgable.c +1 -0 src/tool_cfgable.h +1 -0 src/tool_getparam.c +7 -0 src/tool_help.c +4 -0 src/tool_operate.c +3 -0 src/tool_setopt.c +5 -0 src/tool_setopt.h +2 -0 tests/data/Makefile.inc +1 -0 tests/data/test1660 +81 -0 tests/runtests.pl +5 -0 tests/unit/Makefile.inc +4 -1 tests/unit/unit1660.c +172 -0

configure.ac+28 -0

@@ -4882,6 +4882,31 @@ AC_HELP_STRING([--disable-alt-svc],[Disable alt-svc support]),
	AC_MSG_RESULT(no)
	)

+	dnl ************************************************************
+	dnl switch on/off hsts
+	dnl
+	curl_hsts_msg="no (--enable-hsts)";
+	AC_MSG_CHECKING([whether to support HSTS])
+	AC_ARG_ENABLE(hsts,
+	AC_HELP_STRING([--enable-hsts],[Enable HSTS support])
+	AC_HELP_STRING([--disable-hsts],[Disable HSTS support]),
+	[ case "$enableval" in
+	no)
+	AC_MSG_RESULT(no)
+	;;
+	*) AC_MSG_RESULT(yes)
+	curl_hsts_msg="enabled";
+	enable_hsts="yes"
+	;;
+	esac ],
+	AC_MSG_RESULT(no)
+	)
+
+	if test "$enable_hsts" = "yes"; then
+	AC_DEFINE(USE_HSTS, 1, [to enable HSTS])
+	experimental="$experimental HSTS"
+	fi
+
	dnl *************************************************************
	dnl check whether ECH support, if desired, is actually available
	dnl
@@ -4998,6 +5023,9 @@ fi
	if test "x$enable_altsvc" = "xyes"; then
	SUPPORT_FEATURES="$SUPPORT_FEATURES alt-svc"
	fi
+	if test "x$enable_hsts" = "xyes"; then
+	SUPPORT_FEATURES="$SUPPORT_FEATURES HSTS"
+	fi

	if test "x$CURL_DISABLE_CRYPTO_AUTH" != "x1" -a \
	$ "x$HAVE_GSSAPI" = "x1" -o "x$USE_WINDOWS_SSPI" = "x1" $; then

docs/EXPERIMENTAL.md+2 -0

@@ -20,3 +20,5 @@ Experimental support in curl means:

	- HTTP/3 support and options
	- CURLSSLOPT_NATIVE_CA (No configure option, feature built in when supported)
+	- HSTS support and options
+

docs/HSTS.md+44 -0

@@ -0,0 +1,44 @@
+	# HSTS support
+
+	curl features EXPERIMENTAL support for the Strict-Transport-Security: HTTP
+	header. Added in curl 7.74.0
+
+	## Standard
+
+	[HTTP Strict Transport Security](https://tools.ietf.org/html/rfc6797)
+
+	## Behavior
+
+	libcurl features an in-memory cache for HSTS hosts, so that subsequent
+	HTTP-only requests to a host name present in the cache will get internally
+	"redirected" to the HTTPS version.
+
+	## `curl_easy_setopt()` options:
+
+	- `CURLOPT_HSTS_CTRL` - enable HSTS for this easy handle
+	- `CURLOPT_HSTS` - specify file name where to store the HSTS cache on close
+	(and possibly read from at startup)
+
+	## curl cmdline options
+
+	- `--hsts [filename]` - enable HSTS, use the file as HSTS cache. If filename
+	is `""` (no length) then no file will be used, only in-memory cache.
+
+	## HSTS cache file format
+
+	Lines starting with `#` are ignored.
+
+	For each hsts entry:
+
+	[host name] "YYYYMMDD HH:MM:SS"
+
+	The `[host name]` is dot-prefixed if it is a includeSubDomain.
+
+	The time stamp is when the entry expires.
+
+	I considered using wget's file format for the HSTS cache. However, they store the time stamp as the epoch (number of seconds since 1970) and I strongly disagree with using that format. Instead I opted to use a format similar to the curl alt-svc cache file format.
+
+	## Possible future additions
+
+	- `CURLOPT_HSTS_PRELOAD` - provide a set of preloaded HSTS host names
+	- ability to save to something else than a file

docs/Makefile.am+1 -0

@@ -63,6 +63,7 @@ EXTRA_DIST = \
	GOVERNANCE.md \
	HELP-US.md \
	HISTORY.md \
+	HSTS.md \
	HTTP-COOKIES.md \
	HTTP2.md \
	HTTP3.md \

docs/cmdline-opts/Makefile.inc+1 -0

@@ -85,6 +85,7 @@ DPAGES = \
	head.d header.d \
	help.d \
	hostpubmd5.d \
+	hsts.d \
	http0.9.d \
	http1.0.d \
	http1.1.d http2.d \

docs/cmdline-opts/hsts.d+18 -0

@@ -0,0 +1,18 @@
+	Long: hsts
+	Arg: <file name>
+	Protocols: HTTPS
+	Help: Enable HSTS with this cache file
+	Added: 7.74.0
+	Category: http
+	---
+	WARNING: this option is experimental. Do not use in production.
+
+	This option enables HSTS for the transfer. If the file name points to an
+	existing HSTS cache file, that will be used. After a completed transfer, the
+	cache will be saved to the file name again if it has been modified.
+
+	Specify a "" file name (zero length) to avoid loading/saving and make curl
+	just handle HSTS in memory.
+
+	If this option is used several times, curl will load contents from all the
+	files but the last one will be used for saving.

docs/cmdline-opts/version.d+2 -0

@@ -28,6 +28,8 @@ This curl uses a libcurl built with Debug. This enables more error-tracking
	and memory debugging etc. For curl-developers only!
	.IP "GSS-API"
	GSS-API is supported.
+	.IP "HSTS"
+	HSTS support is present.
	.IP "HTTP2"
	HTTP/2 support has been built-in.
	.IP "HTTP3"

docs/libcurl/curl_easy_setopt.3+4 -0

@@ -319,6 +319,10 @@ Add or control cookies. See \fICURLOPT_COOKIELIST(3)\fP
	Specify the Alt-Svc: cache file name. See \fICURLOPT_ALTSVC(3)\fP
	.IP CURLOPT_ALTSVC_CTRL
	Enable and configure Alt-Svc: treatment. See \fICURLOPT_ALTSVC_CTRL(3)\fP
+	.IP CURLOPT_HSTS
+	Set HSTS cache file. See \fICURLOPT_HSTS(3)\fP
+	.IP CURLOPT_HSTS_CTRL
+	Enable HSTS. See \fICURLOPT_HSTS_CTRL(3)\fP
	.IP CURLOPT_HTTPGET
	Do an HTTP GET request. See \fICURLOPT_HTTPGET(3)\fP
	.IP CURLOPT_REQUEST_TARGET

docs/libcurl/curl_version_info.3+3 -0

@@ -143,6 +143,9 @@ to use the current user credentials without the app having to pass them on.
	(Added in 7.38.0)
	.IP CURL_VERSION_GSSNEGOTIATE
	supports HTTP GSS-Negotiate (added in 7.10.6)
+	.IP CURL_VERSION_HSTS
+	libcurl was built with support for HSTS (HTTP Strict Transport Security)
+	(Added in 7.74.0)
	.IP CURL_VERSION_HTTPS_PROXY
	libcurl was built with support for HTTPS-proxy.
	(Added in 7.52.0)

docs/libcurl/opts/CURLOPT_HSTS.3+66 -0

@@ -0,0 +1,66 @@
+	.\" **************************************************************************
+	.\" * _ _ ____ _
+	.\" * Project ___\| \| \| \| _ \\| \|
+	.\" * / __\| \| \| \| \|_) \| \|
+	.\" * \| (__\| \|_\| \| _ <\| \|___
+	.\" * \___\|\___/\|_\| \_\_____\|
+	.\" *
+	.\" * Copyright (C) 2020, Daniel Stenberg, <[email protected]>, et al.
+	.\" *
+	.\" * This software is licensed as described in the file COPYING, which
+	.\" * you should have received as part of this distribution. The terms
+	.\" * are also available at https://curl.haxx.se/docs/copyright.html.
+	.\" *
+	.\" * You may opt to use, copy, modify, merge, publish, distribute and/or sell
+	.\" * copies of the Software, and permit persons to whom the Software is
+	.\" * furnished to do so, under the terms of the COPYING file.
+	.\" *
+	.\" * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
+	.\" * KIND, either express or implied.
+	.\" *
+	.\" **************************************************************************
+	.\"
+	.TH CURLOPT_HSTS 3 "5 Feb 2019" "libcurl 7.74.0" "curl_easy_setopt options"
+	.SH NAME
+	CURLOPT_HSTS \- set HSTS cache file name
+	.SH SYNOPSIS
+	.nf
+	#include <curl/curl.h>
+
+	CURLcode curl_easy_setopt(CURL handle, CURLOPT_HSTS, char filename);
+	.fi
+	.SH EXPERIMENTAL
+	Warning: this feature is early code and is marked as experimental. It can only
+	be enabled by explicitly telling configure with \fB--enable-hsts\fP. You are
+	advised to not ship this in production before the experimental label is
+	removed.
+	.SH DESCRIPTION
+	Make the \fIfilename\fP point to a file name to load an existing HSTS cache
+	from, and to store the cache in when the easy handle is closed. Setting a file
+	name with this option will also enable HSTS for this handle (the equivalent of
+	setting \fICURLHSTS_ENABLE\fP with \fICURLOPT_HSTS_CTRL(3)\fP).
+
+	If the given file does not exist or contains no HSTS entries at startup, the
+	HSTS cache will simply start empty. Setting the file name to NULL or "" will
+	only enable HSTS without reading from or writing to any file.
+
+	If this option is set multiple times, libcurl will load cache entries from
+	each given file but will only store the last used name for later writing.
+	.SH DEFAULT
+	NULL, no file name
+	.SH PROTOCOLS
+	HTTPS and HTTP
+	.SH EXAMPLE
+	.nf
+	CURL *curl = curl_easy_init();
+	if(curl) {
+	curl_easy_setopt(curl, CURLOPT_HSTS, "/home/user/.hsts-cache");
+	curl_easy_perform(curl);
+	}
+	.fi
+	.SH AVAILABILITY
+	Added in 7.74.0
+	.SH RETURN VALUE
+	Returns CURLE_OK if the option is supported, and CURLE_UNKNOWN_OPTION if not.
+	.SH "SEE ALSO"
+	.BR CURLOPT_HSTS_CTRL "(3), " CURLOPT_ALTSVC "(3), " CURLOPT_RESOLVE "(3), "

docs/libcurl/opts/CURLOPT_HSTS_CTRL.3+73 -0

@@ -0,0 +1,73 @@
+	.\" **************************************************************************
+	.\" * _ _ ____ _
+	.\" * Project ___\| \| \| \| _ \\| \|
+	.\" * / __\| \| \| \| \|_) \| \|
+	.\" * \| (__\| \|_\| \| _ <\| \|___
+	.\" * \___\|\___/\|_\| \_\_____\|
+	.\" *
+	.\" * Copyright (C) 2020, Daniel Stenberg, <[email protected]>, et al.
+	.\" *
+	.\" * This software is licensed as described in the file COPYING, which
+	.\" * you should have received as part of this distribution. The terms
+	.\" * are also available at https://curl.haxx.se/docs/copyright.html.
+	.\" *
+	.\" * You may opt to use, copy, modify, merge, publish, distribute and/or sell
+	.\" * copies of the Software, and permit persons to whom the Software is
+	.\" * furnished to do so, under the terms of the COPYING file.
+	.\" *
+	.\" * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
+	.\" * KIND, either express or implied.
+	.\" *
+	.\" **************************************************************************
+	.\"
+	.TH CURLOPT_HSTS_CTRL 3 "4 Sep 2020" "libcurl 7.74.0" "curl_easy_setopt options"
+	.SH NAME
+	CURLOPT_HSTS_CTRL \- control HSTS behavior
+	.SH SYNOPSIS
+	.nf
+	#include <curl/curl.h>
+
+	#define CURLHSTS_ENABLE (1<<0)
+	#define CURLHSTS_READONLYFILE (1<<1)
+
+	CURLcode curl_easy_setopt(CURL *handle, CURLOPT_HSTS_CTRL, long bitmask);
+	.fi
+	.SH EXPERIMENTAL
+	Warning: this feature is early code and is marked as experimental. It can only
+	be enabled by explicitly telling configure with \fB--enable-hsts\fP. You are
+	advised to not ship this in production before the experimental label is
+	removed.
+	.SH DESCRIPTION
+	HSTS (HTTP Strict Transport Security) means that an HTTPS server can instruct
+	the client to not contact it again over clear-text HTTP for a certain period
+	into the future. libcurl will then automatically redirect HTTP attempts to
+	such hosts to instead use HTTPS. This is done by libcurl retaining this
+	knowledge in an in-memory cache.
+
+	Populate the long \fIbitmask\fP with the correct set of features to instruct
+	libcurl how to handle HSTS for the transfers using this handle.
+	.SH BITS
+	.IP "CURLHSTS_ENABLE"
+	Enable the in-memory HSTS cache for this handle.
+	.IP "CURLHSTS_READONLYFILE"
+	Make the HSTS file (if specified) read-only - makes libcurl not save the cache
+	to the file when closing the handle.
+	.SH DEFAULT
+	0. HSTS is disabled by default.
+	.SH PROTOCOLS
+	HTTPS and HTTP
+	.SH EXAMPLE
+	.nf
+	CURL *curl = curl_easy_init();
+	if(curl) {
+	curl_easy_setopt(curl, CURLOPT_HSTS_CTRL, CURLHSTS_ENABLE);
+	curl_easy_perform(curl);
+	}
+	.fi
+	.SH AVAILABILITY
+	Added in 7.74.0
+	.SH RETURN VALUE
+	Returns CURLE_OK if the option is supported, and CURLE_UNKNOWN_OPTION if not.
+	.SH "SEE ALSO"
+	.BR CURLOPT_HSTS "(3), " CURLOPT_CONNECT_TO "(3), " CURLOPT_RESOLVE "(3), "
+	.BR CURLOPT_ALTSVC "(3), "

docs/libcurl/opts/Makefile.inc+2 -0

@@ -180,6 +180,8 @@ man_MANS = \
	CURLOPT_HEADERDATA.3 \
	CURLOPT_HEADERFUNCTION.3 \
	CURLOPT_HEADEROPT.3 \
+	CURLOPT_HSTS.3 \
+	CURLOPT_HSTS_CTRL.3 \
	CURLOPT_HTTP09_ALLOWED.3 \
	CURLOPT_HTTP200ALIASES.3 \
	CURLOPT_HTTPAUTH.3 \

docs/libcurl/symbols-in-versions+5 -0

@@ -213,6 +213,8 @@ CURLGSSAPI_DELEGATION_NONE 7.22.0
	CURLGSSAPI_DELEGATION_POLICY_FLAG 7.22.0
	CURLHEADER_SEPARATE 7.37.0
	CURLHEADER_UNIFIED 7.37.0
+	CURLHSTS_ENABLE 7.74.0
+	CURLHSTS_READONLYFILE 7.74.0
	CURLINFO_ACTIVESOCKET 7.45.0
	CURLINFO_APPCONNECT_TIME 7.19.0
	CURLINFO_APPCONNECT_TIME_T 7.61.0
@@ -443,6 +445,8 @@ CURLOPT_HEADER 7.1
	CURLOPT_HEADERDATA 7.10
	CURLOPT_HEADERFUNCTION 7.7.2
	CURLOPT_HEADEROPT 7.37.0
+	CURLOPT_HSTS 7.74.0
+	CURLOPT_HSTS_CTRL 7.74.0
	CURLOPT_HTTP09_ALLOWED 7.64.0
	CURLOPT_HTTP200ALIASES 7.10.3
	CURLOPT_HTTPAUTH 7.10.6
@@ -1001,6 +1005,7 @@ CURL_VERSION_CURLDEBUG 7.19.6
	CURL_VERSION_DEBUG 7.10.6
	CURL_VERSION_GSSAPI 7.38.0
	CURL_VERSION_GSSNEGOTIATE 7.10.6 7.38.0
+	CURL_VERSION_HSTS 7.74.0
	CURL_VERSION_HTTP2 7.33.0
	CURL_VERSION_HTTP3 7.66.0
	CURL_VERSION_HTTPS_PROXY 7.52.0

docs/options-in-versions+1 -0

@@ -79,6 +79,7 @@
	--header (-H) 5.0
	--help (-h) 4.0
	--hostpubmd5 7.17.1
+	--hsts 7.74.0
	--http0.9 7.64.0
	--http1.0 (-0) 7.9.1
	--http1.1 7.33.0

include/curl/curl.h+10 -0

@@ -954,6 +954,10 @@ typedef enum {
	#define CURLALTSVC_H2 (1<<4)
	#define CURLALTSVC_H3 (1<<5)

+	/* CURLHSTS_* are bits for the CURLOPT_HSTS option */
+	#define CURLHSTS_ENABLE (long)(1<<0)
+	#define CURLHSTS_READONLYFILE (long)(1<<1)
+
	/* CURLPROTO_ defines are for the CURLOPT_PROTOCOLS options /
	#define CURLPROTO_HTTP (1<<0)
	#define CURLPROTO_HTTPS (1<<1)
@@ -2029,6 +2033,11 @@ typedef enum {
	*/
	CURLOPT(CURLOPT_SSL_EC_CURVES, CURLOPTTYPE_STRINGPOINT, 298),

+	/* HSTS bitmask */
+	CURLOPT(CURLOPT_HSTS_CTRL, CURLOPTTYPE_LONG, 299),
+	/* HSTS file name */
+	CURLOPT(CURLOPT_HSTS, CURLOPTTYPE_STRINGPOINT, 300),
+
	CURLOPT_LASTENTRY /* the last unused */
	} CURLoption;

@@ -2900,6 +2909,7 @@ typedef struct curl_version_info_data curl_version_info_data;
	#define CURL_VERSION_HTTP3 (1<<25) /* HTTP3 support built-in */
	#define CURL_VERSION_ZSTD (1<<26) /* zstd features are present */
	#define CURL_VERSION_UNICODE (1<<27) /* Unicode support on Windows */
+	#define CURL_VERSION_HSTS (1<<28) /* HSTS is supported */

	/*
	* NAME curl_version_info()

lib/Makefile.inc+2 -2

@@ -61,7 +61,7 @@ LIB_CFILES = altsvc.c amigaos.c asyn-ares.c asyn-thread.c base64.c \
	socks_gssapi.c socks_sspi.c speedcheck.c splay.c strcase.c strdup.c \
	strerror.c strtok.c strtoofft.c system_win32.c telnet.c tftp.c timeval.c \
	transfer.c urlapi.c version.c warnless.c wildcard.c x509asn1.c dynbuf.c \
-	version_win32.c easyoptions.c easygetopt.c
+	version_win32.c easyoptions.c easygetopt.c hsts.c

	LIB_HFILES = altsvc.h amigaos.h arpa_telnet.h asyn.h conncache.h connect.h \
	content_encoding.h cookie.h curl_addrinfo.h curl_base64.h curl_ctype.h \
@@ -80,7 +80,7 @@ LIB_HFILES = altsvc.h amigaos.h arpa_telnet.h asyn.h conncache.h connect.h \
	smb.h smtp.h sockaddr.h socketpair.h socks.h speedcheck.h splay.h strcase.h \
	strdup.h strerror.h strtok.h strtoofft.h system_win32.h telnet.h tftp.h \
	timeval.h transfer.h urlapi-int.h urldata.h warnless.h wildcard.h \
-	x509asn1.h dynbuf.h version_win32.h easyoptions.h
+	x509asn1.h dynbuf.h version_win32.h easyoptions.h hsts.h

	LIB_RCFILES = libcurl.rc

lib/curl_get_line.c+2 -1

@@ -22,7 +22,8 @@

	#include "curl_setup.h"

-	#if !defined(CURL_DISABLE_COOKIES) \|\| !defined(CURL_DISABLE_ALTSVC)
+	#if !defined(CURL_DISABLE_COOKIES) \|\| !defined(CURL_DISABLE_ALTSVC)) \|\| \
+	defined(USE_HSTS)

	#include "curl_get_line.h"
	#include "curl_memory.h"

lib/easy.c+11 -0

@@ -79,6 +79,7 @@
	#include "http2.h"
	#include "dynbuf.h"
	#include "altsvc.h"
+	#include "hsts.h"

	/* The last 3 #include files should be in this order */
	#include "curl_printf.h"
@@ -880,6 +881,15 @@ struct Curl_easy curl_easy_duphandle(struct Curl_easy data)
	if(outcurl->set.str[STRING_ALTSVC])
	(void)Curl_altsvc_load(outcurl->asi, outcurl->set.str[STRING_ALTSVC]);
	}
+	#endif
+	#ifdef USE_HSTS
+	if(data->hsts) {
+	outcurl->hsts = Curl_hsts_init();
+	if(!outcurl->hsts)
+	goto fail;
+	if(outcurl->set.str[STRING_HSTS])
+	(void)Curl_hsts_load(outcurl->hsts, outcurl->set.str[STRING_HSTS]);
+	}
	#endif
	/* Clone the resolver handle, if present, for the new handle */
	if(Curl_resolver_duphandle(outcurl,
@@ -929,6 +939,7 @@ struct Curl_easy curl_easy_duphandle(struct Curl_easy data)
	Curl_safefree(outcurl->change.url);
	Curl_safefree(outcurl->change.referer);
	Curl_altsvc_cleanup(&outcurl->asi);
+	Curl_hsts_cleanup(&outcurl->hsts);
	Curl_freeset(outcurl);
	free(outcurl);
	}

lib/easyoptions.c+3 -1

@@ -115,6 +115,8 @@ struct curl_easyoption Curl_easyopts[] = {
	{"HEADERDATA", CURLOPT_HEADERDATA, CURLOT_CBPTR, 0},
	{"HEADERFUNCTION", CURLOPT_HEADERFUNCTION, CURLOT_FUNCTION, 0},
	{"HEADEROPT", CURLOPT_HEADEROPT, CURLOT_VALUES, 0},
+	{"HSTS", CURLOPT_HSTS, CURLOT_STRING, 0},
+	{"HSTS_CTRL", CURLOPT_HSTS_CTRL, CURLOT_LONG, 0},
	{"HTTP09_ALLOWED", CURLOPT_HTTP09_ALLOWED, CURLOT_LONG, 0},
	{"HTTP200ALIASES", CURLOPT_HTTP200ALIASES, CURLOT_SLIST, 0},
	{"HTTPAUTH", CURLOPT_HTTPAUTH, CURLOT_VALUES, 0},
@@ -342,6 +344,6 @@ struct curl_easyoption Curl_easyopts[] = {
	*/
	int Curl_easyopts_check(void)
	{
-	return (CURLOPT_LASTENTRY != (298 + 1));
+	return (CURLOPT_LASTENTRY != (300 + 1));
	}
	#endif

lib/hsts.c+430 -0

@@ -0,0 +1,430 @@
+	/***************************************************************************
+	* _ _ ____ _
+	* Project ___\| \| \| \| _ \\| \|
+	* / __\| \| \| \| \|_) \| \|
+	* \| (__\| \|_\| \| _ <\| \|___
+	* \___\|\___/\|_\| \_\_____\|
+	*
+	* Copyright (C) 2020, Daniel Stenberg, <[email protected]>, et al.
+	*
+	* This software is licensed as described in the file COPYING, which
+	* you should have received as part of this distribution. The terms
+	* are also available at https://curl.haxx.se/docs/copyright.html.
+	*
+	* You may opt to use, copy, modify, merge, publish, distribute and/or sell
+	* copies of the Software, and permit persons to whom the Software is
+	* furnished to do so, under the terms of the COPYING file.
+	*
+	* This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
+	* KIND, either express or implied.
+	*
+	***************************************************************************/
+	/*
+	* The Strict-Transport-Security header is defined in RFC 6797:
+	* https://tools.ietf.org/html/rfc6797
+	*/
+	#include "curl_setup.h"
+
+	#if !defined(CURL_DISABLE_HTTP) && defined(USE_HSTS)
+	#include <curl/curl.h>
+	#include "urldata.h"
+	#include "llist.h"
+	#include "hsts.h"
+	#include "curl_get_line.h"
+	#include "strcase.h"
+	#include "sendf.h"
+	#include "strtoofft.h"
+	#include "parsedate.h"
+	#include "rand.h"
+	#include "rename.h"
+
+	/* The last 3 #include files should be in this order */
+	#include "curl_printf.h"
+	#include "curl_memory.h"
+	#include "memdebug.h"
+
+	#define MAX_HSTS_LINE 4095
+	#define MAX_HSTS_HOSTLEN 256
+	#define MAX_HSTS_HOSTLENSTR "256"
+	#define MAX_HSTS_SUBLEN 4
+	#define MAX_HSTS_SUBLENSTR "4"
+	#define MAX_HSTS_DATELEN 64
+	#define MAX_HSTS_DATELENSTR "64"
+
+	#ifdef DEBUGBUILD
+	/* to play well with debug builds, we can set a fixed time this will
+	return */
+	time_t deltatime; /* allow for "adjustments" for unit test purposes */
+	static time_t debugtime(void *unused)
+	{
+	char *timestr = getenv("CURL_TIME");
+	(void)unused;
+	if(timestr) {
+	unsigned long val = strtol(timestr, NULL, 10) + deltatime;
+	return (time_t)val;
+	}
+	return time(NULL);
+	}
+	#define time(x) debugtime(x)
+	#endif
+
+	struct hsts *Curl_hsts_init(void)
+	{
+	struct hsts *h = calloc(sizeof(struct hsts), 1);
+	if(h) {
+	Curl_llist_init(&h->list, NULL);
+	}
+	return h;
+	}
+
+	static void hsts_free(struct stsentry *e)
+	{
+	free((char *)e->host);
+	free(e);
+	}
+
+	void Curl_hsts_cleanup(struct hsts **hp)
+	{
+	struct hsts h = hp;
+	if(h) {
+	struct Curl_llist_element *e;
+	struct Curl_llist_element *n;
+	for(e = h->list.head; e; e = n) {
+	struct stsentry *sts = e->ptr;
+	n = e->next;
+	hsts_free(sts);
+	}
+	free(h->filename);
+	free(h);
+	*hp = NULL;
+	}
+	}
+
+	static struct stsentry *hsts_entry(void)
+	{
+	return calloc(sizeof(struct stsentry), 1);
+	}
+
+	static CURLcode hsts_create(struct hsts *h,
+	const char *hostname,
+	bool subdomains,
+	curl_off_t expires)
+	{
+	struct stsentry *sts = hsts_entry();
+	if(!sts)
+	return CURLE_OUT_OF_MEMORY;
+
+	sts->expires = expires;
+	sts->includeSubDomains = subdomains;
+	sts->host = strdup(hostname);
+	if(!sts->host) {
+	free(sts);
+	return CURLE_OUT_OF_MEMORY;
+	}
+	fprintf(stderr, "*** Add %s %s %d\n", hostname,
+	subdomains?"SUB":"-", (int)expires);
+	Curl_llist_insert_next(&h->list, h->list.tail, sts, &sts->node);
+	return CURLE_OK;
+	}
+
+	CURLcode Curl_hsts_parse(struct hsts h, const char hostname,
+	const char *header)
+	{
+	const char *p = header;
+	curl_off_t expires = 0;
+	bool gotma = FALSE;
+	bool gotinc = FALSE;
+	bool subdomains = FALSE;
+	struct stsentry *sts;
+	time_t now = time(NULL);
+
+	do {
+	while(p && ISSPACE(p))
+	p++;
+	if(Curl_strncasecompare("max-age=", p, 8)) {
+	bool quoted = FALSE;
+	CURLofft offt;
+	char *endp;
+
+	if(gotma)
+	return CURLE_BAD_FUNCTION_ARGUMENT;
+
+	p += 8;
+	while(p && ISSPACE(p))
+	p++;
+	if(*p == '\"') {
+	p++;
+	quoted = TRUE;
+	}
+	offt = curlx_strtoofft(p, &endp, 10, &expires);
+	if(offt == CURL_OFFT_FLOW)
+	expires = CURL_OFF_T_MAX;
+	else if(offt)
+	/* invalid max-age */
+	return CURLE_BAD_FUNCTION_ARGUMENT;
+	p = endp;
+	if(quoted) {
+	if(*p != '\"')
+	return CURLE_BAD_FUNCTION_ARGUMENT;
+	p++;
+	}
+	gotma = TRUE;
+	}
+	else if(Curl_strncasecompare("includesubdomains", p, 17)) {
+	if(gotinc)
+	return CURLE_BAD_FUNCTION_ARGUMENT;
+	subdomains = TRUE;
+	p += 17;
+	gotinc = TRUE;
+	}
+	else {
+	/* unknown directive, do a lame attempt to skip */
+	while(p && (p != ';'))
+	p++;
+	}
+
+	while(p && ISSPACE(p))
+	p++;
+	if(*p == ';')
+	p++;
+	} while (*p);
+
+	if(!gotma)
+	/* max-age is mandatory */
+	return CURLE_BAD_FUNCTION_ARGUMENT;
+
+	if(!expires) {
+	/* remove the entry if present verbatim (without subdomain match) */
+	sts = Curl_hsts(h, hostname, FALSE);
+	if(sts) {
+	Curl_llist_remove(&h->list, &sts->node, NULL);
+	hsts_free(sts);
+	}
+	return CURLE_OK;
+	}
+
+	if(CURL_OFF_T_MAX - now < expires)
+	/* would overflow, use maximum value */
+	expires = CURL_OFF_T_MAX;
+	else
+	expires += now;
+
+	/* check if it already exists */
+	sts = Curl_hsts(h, hostname, FALSE);
+	if(sts) {
+	/* just update these fields */
+	sts->expires = expires;
+	sts->includeSubDomains = subdomains;
+	}
+	else
+	return hsts_create(h, hostname, subdomains, expires);
+
+	return CURLE_OK;
+	}
+
+	/*
+	* Return TRUE if the given host name is currently an HSTS one.
+	*
+	* The 'subdomain' argument tells the function if subdomain matching should be
+	* attempted.
+	*/
+	struct stsentry Curl_hsts(struct hsts h, const char *hostname,
+	bool subdomain)
+	{
+	if(h) {
+	time_t now = time(NULL);
+	size_t hlen = strlen(hostname);
+	struct Curl_llist_element *e;
+	struct Curl_llist_element *n;
+	for(e = h->list.head; e; e = n) {
+	struct stsentry *sts = e->ptr;
+	n = e->next;
+	if(sts->expires <= now) {
+	/* remove expired entries */
+	Curl_llist_remove(&h->list, &sts->node, NULL);
+	hsts_free(sts);
+	continue;
+	}
+	if(subdomain && sts->includeSubDomains) {
+	size_t ntail = strlen(sts->host);
+	if(ntail < hlen) {
+	size_t offs = hlen - ntail;
+	if((hostname[offs-1] == '.') &&
+	Curl_strncasecompare(&hostname[offs], sts->host, ntail))
+	return sts;
+	}
+	}
+	if(Curl_strcasecompare(hostname, sts->host))
+	return sts;
+	}
+	}
+	return NULL; /* no match */
+	}
+
+	/*
+	* Write this single hsts entry to a single output line
+	*/
+	static CURLcode hsts_out(struct stsentry sts, FILE fp)
+	{
+	struct tm stamp;
+	CURLcode result = Curl_gmtime(sts->expires, &stamp);
+	if(result)
+	return result;
+
+	fprintf(fp, "%s%s \"%d%02d%02d %02d:%02d:%02d\"\n",
+	sts->includeSubDomains ? ".": "", sts->host,
+	stamp.tm_year + 1900, stamp.tm_mon + 1, stamp.tm_mday,
+	stamp.tm_hour, stamp.tm_min, stamp.tm_sec);
+	return CURLE_OK;
+	}
+
+
+	/*
+	* Curl_https_save() writes the HSTS cache to a file.
+	*/
+	CURLcode Curl_hsts_save(struct Curl_easy data, struct hsts h,
+	const char *file)
+	{
+	struct Curl_llist_element *e;
+	struct Curl_llist_element *n;
+	CURLcode result = CURLE_OK;
+	FILE *out;
+	char *tempstore;
+	unsigned char randsuffix[9];
+
+	if(!h)
+	/* no cache activated */
+	return CURLE_OK;
+
+	/* if not new name is given, use the one we stored from the load */
+	if(!file && h->filename)
+	file = h->filename;
+
+	if((h->flags & CURLHSTS_READONLYFILE) \|\| !file \|\| !file[0])
+	/* marked as read-only, no file or zero length file name */
+	return CURLE_OK;
+
+	if(Curl_rand_hex(data, randsuffix, sizeof(randsuffix)))
+	return CURLE_FAILED_INIT;
+
+	tempstore = aprintf("%s.%s.tmp", file, randsuffix);
+	if(!tempstore)
+	return CURLE_OUT_OF_MEMORY;
+
+	out = fopen(tempstore, FOPEN_WRITETEXT);
+	if(!out)
+	result = CURLE_WRITE_ERROR;
+	else {
+	fputs("# Your HSTS cache. https://curl.haxx.se/docs/hsts.html\n"
+	"# This file was generated by libcurl! Edit at your own risk.\n",
+	out);
+	for(e = h->list.head; e; e = n) {
+	struct stsentry *sts = e->ptr;
+	n = e->next;
+	result = hsts_out(sts, out);
+	if(result)
+	break;
+	}
+	fclose(out);
+	if(!result && Curl_rename(tempstore, file))
+	result = CURLE_WRITE_ERROR;
+
+	if(result)
+	unlink(tempstore);
+	}
+	free(tempstore);
+	return result;
+	}
+
+	/* only returns SERIOUS errors */
+	static CURLcode hsts_add(struct hsts h, char line)
+	{
+	/* Example lines:
+	example.com "20191231 10:00:00"
+	.example.net "20191231 10:00:00"
+	*/
+	char host[MAX_HSTS_HOSTLEN + 1];
+	char date[MAX_HSTS_DATELEN + 1];
+	int rc;
+
+	rc = sscanf(line,
+	"%" MAX_HSTS_HOSTLENSTR "s \"%" MAX_HSTS_DATELENSTR "[^\"]\"",
+	host, date);
+	if(2 == rc) {
+	time_t expires = Curl_getdate_capped(date);
+	CURLcode result;
+	char *p = host;
+	bool subdomain = FALSE;
+	if(p[0] == '.') {
+	p++;
+	subdomain = TRUE;
+	}
+	result = hsts_create(h, p, subdomain, expires);
+	if(result)
+	return result;
+	}
+
+	return CURLE_OK;
+	}
+
+	/*
+	* Load the HSTS cache from the given file. The text based line-oriented file
+	* format is documented here:
+	* https://github.com/curl/curl/wiki/HSTS
+	*
+	* This function only returns error on major problems that prevents hsts
+	* handling to work completely. It will ignore individual syntactical errors
+	* etc.
+	*/
+	static CURLcode hsts_load(struct hsts h, const char file)
+	{
+	CURLcode result = CURLE_OK;
+	char *line = NULL;
+	FILE *fp;
+
+	/* we need a private copy of the file name so that the hsts cache file
+	name survives an easy handle reset */
+	free(h->filename);
+	h->filename = strdup(file);
+	if(!h->filename)
+	return CURLE_OUT_OF_MEMORY;
+
+	fp = fopen(file, FOPEN_READTEXT);
+	if(fp) {
+	line = malloc(MAX_HSTS_LINE);
+	if(!line)
+	goto fail;
+	while(Curl_get_line(line, MAX_HSTS_LINE, fp)) {
+	char *lineptr = line;
+	while(lineptr && ISBLANK(lineptr))
+	lineptr++;
+	if(*lineptr == '#')
+	/* skip commented lines */
+	continue;
+
+	hsts_add(h, lineptr);
+	}
+	free(line); /* free the line buffer */
+	fclose(fp);
+	}
+	return result;
+
+	fail:
+	Curl_safefree(h->filename);
+	free(line);
+	fclose(fp);
+	return CURLE_OUT_OF_MEMORY;
+	}
+
+	/*
+	* Curl_hsts_load() loads HSTS from file.
+	*/
+	CURLcode Curl_hsts_load(struct hsts h, const char file)
+	{
+	CURLcode result;
+	DEBUGASSERT(h);
+	result = hsts_load(h, file);
+	return result;
+	}
+
+	#endif /* CURL_DISABLE_HTTP \|\| USE_HSTS */

lib/hsts.h+60 -0

@@ -0,0 +1,60 @@
+	#ifndef HEADER_CURL_HSTS_H
+	#define HEADER_CURL_HSTS_H
+	/***************************************************************************
+	* _ _ ____ _
+	* Project ___\| \| \| \| _ \\| \|
+	* / __\| \| \| \| \|_) \| \|
+	* \| (__\| \|_\| \| _ <\| \|___
+	* \___\|\___/\|_\| \_\_____\|
+	*
+	* Copyright (C) 2020, Daniel Stenberg, <[email protected]>, et al.
+	*
+	* This software is licensed as described in the file COPYING, which
+	* you should have received as part of this distribution. The terms
+	* are also available at https://curl.haxx.se/docs/copyright.html.
+	*
+	* You may opt to use, copy, modify, merge, publish, distribute and/or sell
+	* copies of the Software, and permit persons to whom the Software is
+	* furnished to do so, under the terms of the COPYING file.
+	*
+	* This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
+	* KIND, either express or implied.
+	*
+	***************************************************************************/
+	#include "curl_setup.h"
+
+	#if !defined(CURL_DISABLE_HTTP) && defined(USE_HSTS)
+	#include <curl/curl.h>
+	#include "llist.h"
+
+	#ifdef DEBUGBUILD
+	extern time_t deltatime;
+	#endif
+
+	struct stsentry {
+	struct Curl_llist_element node;
+	const char *host;
+	bool includeSubDomains;
+	time_t expires; /* the timestamp of this entry's expiry */
+	};
+
+	/* The HSTS cache. Needs to be able to tailmatch host names. */
+	struct hsts {
+	struct Curl_llist list;
+	char *filename;
+	unsigned int flags;
+	};
+
+	struct hsts *Curl_hsts_init(void);
+	void Curl_hsts_cleanup(struct hsts **hp);
+	CURLcode Curl_hsts_parse(struct hsts h, const char hostname,
+	const char *sts);
+	struct stsentry Curl_hsts(struct hsts h, const char *hostname,
+	bool subdomain);
+	CURLcode Curl_hsts_save(struct Curl_easy data, struct hsts h,
+	const char *file);
+	CURLcode Curl_hsts_load(struct hsts h, const char file);
+	#else
+	#define Curl_hsts_cleanup(x)
+	#endif /* CURL_DISABLE_HTTP \|\| USE_HSTS */
+	#endif /* HEADER_CURL_HSTS_H */

lib/http.c+18 -0

@@ -77,6 +77,7 @@
	#include "connect.h"
	#include "strdup.h"
	#include "altsvc.h"
+	#include "hsts.h"

	/* The last 3 #include files should be in this order */
	#include "curl_printf.h"
@@ -3990,6 +3991,23 @@ CURLcode Curl_http_readwrite_headers(struct Curl_easy *data,
	}
	}
	}
+
+	#ifdef USE_HSTS
+	/* If enabled, the header is incoming and this is over HTTPS */
+	else if(data->hsts && checkprefix("Strict-Transport-Security:", headp) &&
+	(conn->handler->flags & PROTOPT_SSL)) {
+	CURLcode check =
+	Curl_hsts_parse(data->hsts, data->state.up.hostname,
+	&headp[ sizeof("Strict-Transport-Security:") -1 ]);
+	if(check)
+	infof(data, "Illegal STS header skipped\n");
+	#ifdef DEBUGBUILD
+	else
+	infof(data, "Parsed STS header fine (%d entries)\n",
+	data->hsts->list.size);
+	#endif
+	}
+	#endif
	#ifndef CURL_DISABLE_ALTSVC
	/* If enabled, the header is incoming and this is over HTTPS */
	else if(data->asi && checkprefix("Alt-Svc:", headp) &&

lib/setopt.c+28 -0

@@ -45,6 +45,7 @@
	#include "setopt.h"
	#include "multiif.h"
	#include "altsvc.h"
+	#include "hsts.h"

	/* The last 3 #include files should be in this order */
	#include "curl_printf.h"
@@ -2839,6 +2840,33 @@ CURLcode Curl_vsetopt(struct Curl_easy *data, CURLoption option, va_list param)
	data->set.trailer_data = va_arg(param, void *);
	#endif
	break;
+	#ifdef USE_HSTS
+	case CURLOPT_HSTS:
+	if(!data->hsts) {
+	data->hsts = Curl_hsts_init();
+	if(!data->hsts)
+	return CURLE_OUT_OF_MEMORY;
+	}
+	argptr = va_arg(param, char *);
+	result = Curl_setstropt(&data->set.str[STRING_HSTS], argptr);
+	if(result)
+	return result;
+	if(argptr)
+	(void)Curl_hsts_load(data->hsts, argptr);
+	break;
+	case CURLOPT_HSTS_CTRL:
+	arg = va_arg(param, long);
+	if(arg & CURLHSTS_ENABLE) {
+	if(!data->hsts) {
+	data->hsts = Curl_hsts_init();
+	if(!data->hsts)
+	return CURLE_OUT_OF_MEMORY;
+	}
+	}
+	else
+	Curl_hsts_cleanup(&data->hsts);
+	break;
+	#endif
	#ifndef CURL_DISABLE_ALTSVC
	case CURLOPT_ALTSVC:
	if(!data->asi) {

lib/url.c+15 -6

@@ -96,6 +96,7 @@ bool curl_win32_idn_to_ascii(const char in, char *out);
	#include "getinfo.h"
	#include "urlapi-int.h"
	#include "system_win32.h"
+	#include "hsts.h"

	/* And now for the protocols */
	#include "ftp.h"
@@ -411,6 +412,7 @@ CURLcode Curl_close(struct Curl_easy **datap)
	Curl_flush_cookies(data, TRUE);
	Curl_altsvc_save(data, data->asi, data->set.str[STRING_ALTSVC]);
	Curl_altsvc_cleanup(&data->asi);
+	Curl_hsts_cleanup(&data->hsts);
	#if !defined(CURL_DISABLE_HTTP) && !defined(CURL_DISABLE_CRYPTO_AUTH)
	Curl_http_auth_cleanup_digest(data);
	#endif
@@ -1911,6 +1913,19 @@ static CURLcode parseurlandfillconn(struct Curl_easy *data,
	if(uc)
	return Curl_uc_to_curlcode(uc);

+	uc = curl_url_get(uh, CURLUPART_HOST, &data->state.up.hostname, 0);
+	if(uc) {
+	if(!strcasecompare("file", data->state.up.scheme))
+	return CURLE_OUT_OF_MEMORY;
+	}
+
+	#ifdef USE_HSTS
+	if(data->hsts && strcasecompare("http", data->state.up.scheme)) {
+	if(Curl_hsts(data->hsts, data->state.up.hostname, TRUE))
+	infof(data, "Switch from HTTP to HTTPS due to HSTS!\n");
+	}
+	#endif
+
	result = findprotocol(data, conn, data->state.up.scheme);
	if(result)
	return result;
@@ -1956,12 +1971,6 @@ static CURLcode parseurlandfillconn(struct Curl_easy *data,
	else if(uc != CURLUE_NO_OPTIONS)
	return Curl_uc_to_curlcode(uc);

-	uc = curl_url_get(uh, CURLUPART_HOST, &data->state.up.hostname, 0);
-	if(uc) {
-	if(!strcasecompare("file", data->state.up.scheme))
-	return CURLE_OUT_OF_MEMORY;
-	}
-
	uc = curl_url_get(uh, CURLUPART_PATH, &data->state.up.path, 0);
	if(uc)
	return Curl_uc_to_curlcode(uc);

lib/urldata.h+4 -10

@@ -1531,35 +1531,26 @@ enum dupstring {
	STRING_RTSP_SESSION_ID, /* Session ID to use */
	STRING_RTSP_STREAM_URI, /* Stream URI for this request */
	STRING_RTSP_TRANSPORT, /* Transport for this session */
-
	STRING_SSH_PRIVATE_KEY, /* path to the private key file for auth */
	STRING_SSH_PUBLIC_KEY, /* path to the public key file for auth */
	STRING_SSH_HOST_PUBLIC_KEY_MD5, /* md5 of host public key in ascii hex */
	STRING_SSH_KNOWNHOSTS, /* file name of knownhosts file */
-
	STRING_PROXY_SERVICE_NAME, /* Proxy service name */
	STRING_SERVICE_NAME, /* Service name */
	STRING_MAIL_FROM,
	STRING_MAIL_AUTH,
-
	STRING_TLSAUTH_USERNAME_ORIG, /* TLS auth <username> */
	STRING_TLSAUTH_USERNAME_PROXY, /* TLS auth <username> */
	STRING_TLSAUTH_PASSWORD_ORIG, /* TLS auth <password> */
	STRING_TLSAUTH_PASSWORD_PROXY, /* TLS auth <password> */
-
	STRING_BEARER, /* <bearer>, if used */
-
	STRING_UNIX_SOCKET_PATH, /* path to Unix socket, if used */
-
	STRING_TARGET, /* CURLOPT_REQUEST_TARGET */
	STRING_DOH, /* CURLOPT_DOH_URL */
-
	STRING_ALTSVC, /* CURLOPT_ALTSVC */
-
+	STRING_HSTS, /* CURLOPT_HSTS */
	STRING_SASL_AUTHZID, /* CURLOPT_SASL_AUTHZID */
-
	STRING_TEMP_URL, /* temp URL storage for proxy use */
-
	STRING_DNS_SERVERS,
	STRING_DNS_INTERFACE,
	STRING_DNS_LOCAL_IP4,
@@ -1899,6 +1890,9 @@ struct Curl_easy {
	NOTE that the 'cookie' field in the
	UserDefined struct defines if the "engine"
	is to be used or not. */
+	#ifdef USE_HSTS
+	struct hsts *hsts;
+	#endif
	#ifndef CURL_DISABLE_ALTSVC
	struct altsvcinfo asi; / the alt-svc cache */
	#endif

lib/version.c+3 -0

@@ -417,6 +417,9 @@ static curl_version_info_data version_info = {
	#endif
	#ifndef CURL_DISABLE_ALTSVC
	\| CURL_VERSION_ALTSVC
+	#endif
+	#if defined(USE_HSTS)
+	\| CURL_VERSION_HSTS
	#endif
	,
	NULL, /* ssl_version */

src/tool_cfgable.c+1 -0

@@ -54,6 +54,7 @@ static void free_config_fields(struct OperationConfig *config)
	Curl_safefree(config->egd_file);
	Curl_safefree(config->useragent);
	Curl_safefree(config->altsvc);
+	Curl_safefree(config->hsts);
	Curl_safefree(config->cookie);
	Curl_safefree(config->cookiejar);
	Curl_safefree(config->cookiefile);

src/tool_cfgable.h+1 -0

@@ -58,6 +58,7 @@ struct OperationConfig {
	char cookiejar; / write to this file */
	char cookiefile; / read from this file */
	char altsvc; / alt-svc cache file name */
+	char hsts; / HSTS cache file name */
	bool cookiesession; /* new session? */
	bool encoding; /* Accept-Encoding please */
	bool tr_encoding; /* Transfer-Encoding please */

src/tool_getparam.c+7 -0

@@ -219,6 +219,7 @@ static const struct LongShort aliases[]= {
	{"A", "user-agent", ARG_STRING},
	{"b", "cookie", ARG_STRING},
	{"ba", "alt-svc", ARG_STRING},
+	{"bb", "hsts", ARG_STRING},
	{"B", "use-ascii", ARG_BOOL},
	{"c", "cookie-jar", ARG_STRING},
	{"C", "continue-at", ARG_STRING},
@@ -1291,6 +1292,12 @@ ParameterError getparameter(const char flag, / f or -long-flag */
	else
	return PARAM_LIBCURL_DOESNT_SUPPORT;
	break;
+	case 'b': /* --hsts */
+	if(curlinfo->features & CURL_VERSION_HSTS)
+	GetStr(&config->hsts, nextarg);
+	else
+	return PARAM_LIBCURL_DOESNT_SUPPORT;
+	break;
	default: /* --cookie string coming up: */
	if(nextarg[0] == '@') {
	nextarg++;

src/tool_help.c+4 -0

@@ -328,6 +328,9 @@ static const struct helptxt helptext[] = {
	{" --hostpubmd5 <md5>",
	"Acceptable MD5 hash of the host public key",
	CURLHELP_SFTP \| CURLHELP_SCP},
+	{" --hsts <file name>",
+	"Enable HSTS with this cache file",
+	CURLHELP_HTTP},
	{" --http0.9",
	"Allow HTTP 0.9 responses",
	CURLHELP_HTTP},
@@ -862,6 +865,7 @@ static const struct feat feats[] = {
	{"MultiSSL", CURL_VERSION_MULTI_SSL},
	{"PSL", CURL_VERSION_PSL},
	{"alt-svc", CURL_VERSION_ALTSVC},
+	{"HSTS", CURL_VERSION_HSTS},
	};

	static void print_category(curlhelp_t category)

src/tool_operate.c+3 -0

@@ -2072,6 +2072,9 @@ static CURLcode single_transfer(struct GlobalConfig *global,
	if(config->altsvc)
	my_setopt_str(curl, CURLOPT_ALTSVC, config->altsvc);

+	if(config->hsts)
+	my_setopt_bitmask(curl, CURLOPT_HSTS_CTRL, CURLHSTS_ENABLE);
+
	#ifdef USE_METALINK
	if(!metalink && config->use_metalink) {
	outs->metalink_parser = metalink_parser_context_new();

src/tool_setopt.c+5 -0

@@ -62,6 +62,11 @@ const struct NameValue setopt_nv_CURL_SOCKS_PROXY[] = {
	NVEND,
	};

+	const struct NameValueUnsigned setopt_nv_CURLHSTS[] = {
+	NV(CURLHSTS_ENABLE),
+	NVEND,
+	};
+
	const struct NameValueUnsigned setopt_nv_CURLAUTH[] = {
	NV(CURLAUTH_ANY), /* combination */
	NV(CURLAUTH_ANYSAFE), /* combination */

src/tool_setopt.h+2 -0

@@ -64,8 +64,10 @@ extern const struct NameValueUnsigned setopt_nv_CURLSSLOPT[];
	extern const struct NameValue setopt_nv_CURL_NETRC[];
	extern const struct NameValue setopt_nv_CURLPROTO[];
	extern const struct NameValueUnsigned setopt_nv_CURLAUTH[];
+	extern const struct NameValueUnsigned setopt_nv_CURLHSTS[];

	/* Map options to NameValue sets */
+	#define setopt_nv_CURLOPT_HSTS_CTRL setopt_nv_CURLHSTS
	#define setopt_nv_CURLOPT_HTTP_VERSION setopt_nv_CURL_HTTP_VERSION
	#define setopt_nv_CURLOPT_HTTPAUTH setopt_nv_CURLAUTH
	#define setopt_nv_CURLOPT_SSLVERSION setopt_nv_CURL_SSLVERSION

tests/data/Makefile.inc+1 -0

@@ -197,6 +197,7 @@ test1620 test1621 \
	test1630 test1631 test1632 test1633 \
	\
	test1650 test1651 test1652 test1653 test1654 test1655 \
+	test1660 \
	\
	test1700 test1701 test1702 \
	\

tests/data/test1660+81 -0

@@ -0,0 +1,81 @@
+	<testcase>
+	<info>
+	<keywords>
+	unittest
+	HSTS
+	</keywords>
+	</info>
+
+	<client>
+	<server>
+	none
+	</server>
+	<features>
+	unittest
+	HSTS
+	</features>
+
+	<file name="log/input1660">
+	# Your HSTS cache. https://curl.haxx.se/docs/hsts.html
+	# This file was generated by libcurl! Edit at your own risk.
+	.readfrom.example "20211001 04:47:41"
+	.old.example "20161001 04:47:41"
+	</file>
+
+	# This date is exactly "20190124 22:34:21" UTC
+	<setenv>
+	CURL_TIME=1548369261
+	</setenv>
+	<name>
+	HSTS
+	</name>
+	<command>
+	-
+	</command>
+	</client>
+
+	<verify>
+	<stdout>
+	readfrom.example [readfrom.example]: 1633063661 includeSubDomains
+	'old.example' is not HSTS
+	'readfrom.example' is not HSTS
+	example.com [example.com]: 1579905261
+	example.com [example.com]: 1569905261
+	example.com [example.com]: 1569905261
+	example.com [example.com]: 1569905261 includeSubDomains
+	example.org [example.org]: 1579905261
+	Input 8: error 43
+	Input 9: error 43
+	this.example [this.example]: 1548400797
+	'this.example' is not HSTS
+	Input 12: error 43
+	Input 13: error 43
+	Input 14: error 43
+	3.example.com [example.com]: 1569905261 includeSubDomains
+	3.example.com [example.com]: 1569905261 includeSubDomains
+	foo.example.com [example.com]: 1569905261 includeSubDomains
+	'foo.xample.com' is not HSTS
+	'forexample.net' is not HSTS
+	'forexample.net' is not HSTS
+	'example.net' is not HSTS
+	expire.example [expire.example]: 1548369268
+	Number of entries: 3
+	expire.example [expire.example]: 1548369268
+	expire.example [expire.example]: 1548369268
+	expire.example [expire.example]: 1548369268
+	expire.example [expire.example]: 1548369268
+	expire.example [expire.example]: 1548369268
+	expire.example [expire.example]: 1548369268
+	expire.example [expire.example]: 1548369268
+	'expire.example' is not HSTS
+	'expire.example' is not HSTS
+	'expire.example' is not HSTS
+	</stdout>
+	<file name="log/hsts1660">
+	# Your HSTS cache. https://curl.haxx.se/docs/hsts.html
+	# This file was generated by libcurl! Edit at your own risk.
+	.example.com "20191001 04:47:41"
+	example.org "20200124 22:34:21"
+	</file>
+	</verify>
+	</testcase>

tests/runtests.pl+5 -0

@@ -256,6 +256,7 @@ my $has_cares; # set if built with c-ares
	my $has_threadedres;# set if built with threaded resolver
	my $has_psl; # set if libcurl is built with PSL support
	my $has_altsvc; # set if libcurl is built with alt-svc support
+	my $has_hsts; # set if libcurl is built with HSTS support
	my $has_ldpreload; # set if curl is built for systems supporting LD_PRELOAD
	my $has_multissl; # set if curl is build with MultiSSL support
	my $has_manual; # set if curl is built with built-in manual
@@ -2762,6 +2763,7 @@ sub compare {

	sub setupfeatures {
	$feature{"alt-svc"} = $has_altsvc;
+	$feature{"HSTS"} = $has_hsts;
	$feature{"brotli"} = $has_brotli;
	$feature{"crypto"} = $has_crypto;
	$feature{"debug"} = $debug_build;
@@ -3035,6 +3037,9 @@ sub checksystem {
	# alt-svc enabled
	$has_altsvc=1;
	}
+	if($feat =~ /HSTS/i) {
+	$has_hsts=1;
+	}
	if($feat =~ /AsynchDNS/i) {
	if(!$has_cares) {
	# this means threaded resolver

tests/unit/Makefile.inc+4 -1

@@ -34,7 +34,8 @@ UNITPROGS = unit1300 unit1301 unit1302 unit1303 unit1304 unit1305 unit1307 \
	unit1600 unit1601 unit1602 unit1603 unit1604 unit1605 unit1606 unit1607 \
	unit1608 unit1609 unit1610 unit1611 unit1612 \
	unit1620 unit1621 \
-	unit1650 unit1651 unit1652 unit1653 unit1654 unit1655
+	unit1650 unit1651 unit1652 unit1653 unit1654 unit1655 \
+	unit1660

	unit1300_SOURCES = unit1300.c $(UNITFILES)
	unit1300_CPPFLAGS = $(AM_CPPFLAGS)
@@ -154,3 +155,5 @@ unit1654_CPPFLAGS = $(AM_CPPFLAGS)
	unit1655_SOURCES = unit1655.c $(UNITFILES)
	unit1655_CPPFLAGS = $(AM_CPPFLAGS)

+	unit1660_SOURCES = unit1660.c $(UNITFILES)
+	unit1660_CPPFLAGS = $(AM_CPPFLAGS)

tests/unit/unit1660.c+172 -0

@@ -0,0 +1,172 @@
+	/***************************************************************************
+	* _ _ ____ _
+	* Project ___\| \| \| \| _ \\| \|
+	* / __\| \| \| \| \|_) \| \|
+	* \| (__\| \|_\| \| _ <\| \|___
+	* \___\|\___/\|_\| \_\_____\|
+	*
+	* Copyright (C) 2020, Daniel Stenberg, <[email protected]>, et al.
+	*
+	* This software is licensed as described in the file COPYING, which
+	* you should have received as part of this distribution. The terms
+	* are also available at https://curl.haxx.se/docs/copyright.html.
+	*
+	* You may opt to use, copy, modify, merge, publish, distribute and/or sell
+	* copies of the Software, and permit persons to whom the Software is
+	* furnished to do so, under the terms of the COPYING file.
+	*
+	* This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
+	* KIND, either express or implied.
+	*
+	***************************************************************************/
+	#include "curlcheck.h"
+
+	#include "urldata.h"
+	#include "hsts.h"
+
+	static CURLcode
+	unit_setup(void)
+	{
+	return CURLE_OK;
+	}
+
+	static void
+	unit_stop(void)
+	{
+	curl_global_cleanup();
+	}
+
+	#if defined(CURL_DISABLE_HTTP) \|\| !defined(USE_HSTS)
+	UNITTEST_START
+	{
+	return 0; /* nothing to do when HTTP or HSTS are disabled */
+	}
+	UNITTEST_STOP
+	#else
+
+	struct testit {
+	const char *host;
+	const char chost; / if non-NULL, use to lookup with */
+	const char hdr; / if NULL, just do the lookup */
+	const CURLcode result; /* parse result */
+	};
+
+	static const struct testit headers[] = {
+	/* two entries read from disk cache, verify first */
+	{ "-", "readfrom.example", NULL, CURLE_OK},
+	{ "-", "old.example", NULL, CURLE_OK},
+	/* delete the remaining one read from disk */
+	{ "readfrom.example", NULL, "max-age=\"0\"", CURLE_OK},
+
+	{ "example.com", NULL, "max-age=\"31536000\"\r\n", CURLE_OK },
+	{ "example.com", NULL, "max-age=\"21536000\"\r\n", CURLE_OK },
+	{ "example.com", NULL, "max-age=\"21536000\"; \r\n", CURLE_OK },
+	{ "example.com", NULL, "max-age=\"21536000\"; includeSubDomains\r\n",
+	CURLE_OK },
+	{ "example.org", NULL, "max-age=\"31536000\"\r\n", CURLE_OK },
+	{ "this.example", NULL, "max=\"31536\";", CURLE_BAD_FUNCTION_ARGUMENT },
+	{ "this.example", NULL, "max-age=\"31536", CURLE_BAD_FUNCTION_ARGUMENT },
+	{ "this.example", NULL, "max-age=31536\"", CURLE_OK },
+	/* max-age=0 removes the entry */
+	{ "this.example", NULL, "max-age=0", CURLE_OK },
+	{ "another.example", NULL, "includeSubDomains; ",
+	CURLE_BAD_FUNCTION_ARGUMENT },
+
+	/* Two max-age is illegal */
+	{ "example.com", NULL,
+	"max-age=\"21536000\"; includeSubDomains; max-age=\"3\";",
+	CURLE_BAD_FUNCTION_ARGUMENT },
+	/* Two includeSubDomains is illegal */
+	{ "2.example.com", NULL,
+	"max-age=\"21536000\"; includeSubDomains; includeSubDomains;",
+	CURLE_BAD_FUNCTION_ARGUMENT },
+	/* use a unknown directive "include" that should be ignored */
+	{ "3.example.com", NULL, "max-age=\"21536000\"; include; includeSubDomains;",
+	CURLE_OK },
+	/* remove the "3.example.com" one, should still match the example.com */
+	{ "3.example.com", NULL, "max-age=\"0\"; includeSubDomains;",
+	CURLE_OK },
+	{ "-", "foo.example.com", NULL, CURLE_OK},
+	{ "-", "foo.xample.com", NULL, CURLE_OK},
+
+	/* should not match */
+	{ "example.net", "forexample.net", "max-age=\"31536000\"\r\n", CURLE_OK },
+
+	/* should not match either, since forexample.net is not in the example.net
+	domain */
+	{ "example.net", "forexample.net",
+	"max-age=\"31536000\"; includeSubDomains\r\n", CURLE_OK },
+	/* remove example.net again */
+	{ "example.net", NULL, "max-age=\"0\"; includeSubDomains\r\n", CURLE_OK },
+
+	/* make this live for 7 seconds */
+	{ "expire.example", NULL, "max-age=\"7\"\r\n", CURLE_OK },
+	{ NULL, NULL, NULL, 0 }
+	};
+
+	static void showsts(struct stsentry e, const char chost)
+	{
+	if(!e)
+	printf("'%s' is not HSTS\n", chost);
+	else {
+	printf("%s [%s]: %" CURL_FORMAT_CURL_OFF_T "%s\n",
+	chost, e->host, e->expires,
+	e->includeSubDomains ? " includeSubDomains" : "");
+	}
+	}
+
+	UNITTEST_START
+	{
+	CURLcode result;
+	struct stsentry *e;
+	struct hsts *h = Curl_hsts_init();
+	int i;
+	const char *chost;
+	CURL *easy;
+	if(!h)
+	return 1;
+
+	Curl_hsts_load(h, "log/input1660");
+
+	for(i = 0; headers[i].host ; i++) {
+	if(headers[i].hdr) {
+	result = Curl_hsts_parse(h, headers[i].host, headers[i].hdr);
+
+	if(result != headers[i].result) {
+	fprintf(stderr, "Curl_hsts_parse(%s) failed: %d\n",
+	headers[i].hdr, result);
+	unitfail++;
+	continue;
+	}
+	else if(result) {
+	printf("Input %u: error %d\n", i, (int) result);
+	continue;
+	}
+	}
+
+	chost = headers[i].chost ? headers[i].chost : headers[i].host;
+	e = Curl_hsts(h, chost, TRUE);
+	showsts(e, chost);
+	}
+
+	printf("Number of entries: %d\n", h->list.size);
+
+	/* verify that it is exists for 7 seconds */
+	chost = "expire.example";
+	for(i = 100; i < 110; i++) {
+	e = Curl_hsts(h, chost, TRUE);
+	showsts(e, chost);
+	deltatime++; /* another second passed */
+	}
+
+	easy = curl_easy_init();
+	if(easy) {
+	(void)Curl_hsts_save(easy, h, "log/hsts1660");
+	curl_easy_cleanup(easy);
+	}
+
+	Curl_hsts_cleanup(&h);
+	return unitfail;
+	}
+	UNITTEST_STOP
+	#endif