← Commit list

78d6232f1f

Daniel Stenberg

2023-08-07

SUCCESS Duration: 85s

Subject

gskit: remove

Binary

Download Binary (832 KB)

Architecture & Compiler Flags

Architecture: x86_64-linux-gnu Compiler: gcc (Ubuntu 11.4.0-1ubuntu1~22.04.3) 11.4.0

—

Build Log

$ git checkout -f 78d6232f1f326b9ab4d6cdf9582d8fcc2207ffcb
Previous HEAD position was bec0c5bbf3 openssl: switch to modern init for LibreSSL 2.7.0+
HEAD is now at 78d6232f1f gskit: remove

$ git clean -fdx
Removing Makefile
Removing Makefile.in
Removing aclocal.m4
Removing autom4te.cache/
Removing compile
Removing config.guess
Removing config.log
Removing config.status
Removing config.sub
Removing configure
Removing curl-config
Removing depcomp
Removing docs/Makefile
Removing docs/Makefile.in
Removing docs/cmdline-opts/Makefile
Removing docs/cmdline-opts/Makefile.in
Removing docs/curl.1
Removing docs/examples/.deps/
Removing docs/examples/Makefile
Removing docs/examples/Makefile.in
Removing docs/libcurl/Makefile
Removing docs/libcurl/Makefile.in
Removing docs/libcurl/opts/Makefile
Removing docs/libcurl/opts/Makefile.in
Removing include/Makefile
Removing include/Makefile.in
Removing include/curl/Makefile
Removing include/curl/Makefile.in
Removing install-sh
Removing lib/.deps/
Removing lib/.dirstamp
Removing lib/.libs/
Removing lib/Makefile
Removing lib/Makefile.in
Removing lib/base64.o
Removing lib/curl_config.h
Removing lib/curl_config.h.in
Removing lib/curl_multibyte.o
Removing lib/dynbuf.o
Removing lib/libcurl.la
Removing lib/libcurl.plist
Removing lib/libcurl.vers
Removing lib/libcurl_la-altsvc.lo
Removing lib/libcurl_la-altsvc.o
Removing lib/libcurl_la-amigaos.lo
Removing lib/libcurl_la-amigaos.o
Removing lib/libcurl_la-asyn-ares.lo
Removing lib/libcurl_la-asyn-ares.o
Removing lib/libcurl_la-asyn-thread.lo
Removing lib/libcurl_la-asyn-thread.o
Removing lib/libcurl_la-base64.lo
Removing lib/libcurl_la-base64.o
Removing lib/libcurl_la-bufq.lo
Removing lib/libcurl_la-bufq.o
Removing lib/libcurl_la-bufref.lo
Removing lib/libcurl_la-bufref.o
Removing lib/libcurl_la-c-hyper.lo
Removing lib/libcurl_la-c-hyper.o
Removing lib/libcurl_la-cf-h1-proxy.lo
Removing lib/libcurl_la-cf-h1-proxy.o
Removing lib/libcurl_la-cf-h2-proxy.lo
Removing lib/libcurl_la-cf-h2-proxy.o
Removing lib/libcurl_la-cf-haproxy.lo
Removing lib/libcurl_la-cf-haproxy.o
Removing lib/libcurl_la-cf-https-connect.lo
Removing lib/libcurl_la-cf-https-connect.o
Removing lib/libcurl_la-cf-socket.lo
Removing lib/libcurl_la-cf-socket.o
Removing lib/libcurl_la-cfilters.lo
Removing lib/libcurl_la-cfilters.o
Removing lib/libcurl_la-conncache.lo
Removing lib/libcurl_la-conncache.o
Removing lib/libcurl_la-connect.lo
Removing lib/libcurl_la-connect.o
Removing lib/libcurl_la-content_encoding.lo
Removing lib/libcurl_la-content_encoding.o
Removing lib/libcurl_la-cookie.lo
Removing lib/libcurl_la-cookie.o
Removing lib/libcurl_la-curl_addrinfo.lo
Removing lib/libcurl_la-curl_addrinfo.o
Removing lib/libcurl_la-curl_des.lo
Removing lib/libcurl_la-curl_des.o
Removing lib/libcurl_la-curl_endian.lo
Removing lib/libcurl_la-curl_endian.o
Removing lib/libcurl_la-curl_fnmatch.lo
Removing lib/libcurl_la-curl_fnmatch.o
Removing lib/libcurl_la-curl_get_line.lo
Removing lib/libcurl_la-curl_get_line.o
Removing lib/libcurl_la-curl_gethostname.lo
Removing lib/libcurl_la-curl_gethostname.o
Removing lib/libcurl_la-curl_gssapi.lo
Removing lib/libcurl_la-curl_gssapi.o
Removing lib/libcurl_la-curl_memrchr.lo
Removing lib/libcurl_la-curl_memrchr.o
Removing lib/libcurl_la-curl_multibyte.lo
Removing lib/libcurl_la-curl_multibyte.o
Removing lib/libcurl_la-curl_ntlm_core.lo
Removing lib/libcurl_la-curl_ntlm_core.o
Removing lib/libcurl_la-curl_ntlm_wb.lo
Removing lib/libcurl_la-curl_ntlm_wb.o
Removing lib/libcurl_la-curl_path.lo
Removing lib/libcurl_la-curl_path.o
Removing lib/libcurl_la-curl_range.lo
Removing lib/libcurl_la-curl_range.o
Removing lib/libcurl_la-curl_rtmp.lo
Removing lib/libcurl_la-curl_rtmp.o
Removing lib/libcurl_la-curl_sasl.lo
Removing lib/libcurl_la-curl_sasl.o
Removing lib/libcurl_la-curl_sspi.lo
Removing lib/libcurl_la-curl_sspi.o
Removing lib/libcurl_la-curl_threads.lo
Removing lib/libcurl_la-curl_threads.o
Removing lib/libcurl_la-curl_trc.lo
Removing lib/libcurl_la-curl_trc.o
Removing lib/libcurl_la-dict.lo
Removing lib/libcurl_la-dict.o
Removing lib/libcurl_la-doh.lo
Removing lib/libcurl_la-doh.o
Removing lib/libcurl_la-dynbuf.lo
Removing lib/libcurl_la-dynbuf.o
Removing lib/libcurl_la-dynhds.lo
Removing lib/libcurl_la-dynhds.o
Removing lib/libcurl_la-easy.lo
Removing lib/libcurl_la-easy.o
Removing lib/libcurl_la-easygetopt.lo
Removing lib/libcurl_la-easygetopt.o
Removing lib/libcurl_la-easyoptions.lo
Removing lib/libcurl_la-easyoptions.o
Removing lib/libcurl_la-escape.lo
Removing lib/libcurl_la-escape.o
Removing lib/libcurl_la-file.lo
Removing lib/libcurl_la-file.o
Removing lib/libcurl_la-fileinfo.lo
Removing lib/libcurl_la-fileinfo.o
Removing lib/libcurl_la-fopen.lo
Removing lib/libcurl_la-fopen.o
Removing lib/libcurl_la-formdata.lo
Removing lib/libcurl_la-formdata.o
Removing lib/libcurl_la-ftp.lo
Removing lib/libcurl_la-ftp.o
Removing lib/libcurl_la-ftplistparser.lo
Removing lib/libcurl_la-ftplistparser.o
Removing lib/libcurl_la-getenv.lo
Removing lib/libcurl_la-getenv.o
Removing lib/libcurl_la-getinfo.lo
Removing lib/libcurl_la-getinfo.o
Removing lib/libcurl_la-gopher.lo
Removing lib/libcurl_la-gopher.o
Removing lib/libcurl_la-hash.lo
Removing lib/libcurl_la-hash.o
Removing lib/libcurl_la-headers.lo
Removing lib/libcurl_la-headers.o
Removing lib/libcurl_la-hmac.lo
Removing lib/libcurl_la-hmac.o
Removing lib/libcurl_la-hostasyn.lo
Removing lib/libcurl_la-hostasyn.o
Removing lib/libcurl_la-hostip.lo
Removing lib/libcurl_la-hostip.o
Removing lib/libcurl_la-hostip4.lo
Removing lib/libcurl_la-hostip4.o
Removing lib/libcurl_la-hostip6.lo
Removing lib/libcurl_la-hostip6.o
Removing lib/libcurl_la-hostsyn.lo
Removing lib/libcurl_la-hostsyn.o
Removing lib/libcurl_la-hsts.lo
Removing lib/libcurl_la-hsts.o
Removing lib/libcurl_la-http.lo
Removing lib/libcurl_la-http.o
Removing lib/libcurl_la-http1.lo
Removing lib/libcurl_la-http1.o
Removing lib/libcurl_la-http2.lo
Removing lib/libcurl_la-http2.o
Removing lib/libcurl_la-http_aws_sigv4.lo
Removing lib/libcurl_la-http_aws_sigv4.o
Removing lib/libcurl_la-http_chunks.lo
Removing lib/libcurl_la-http_chunks.o
Removing lib/libcurl_la-http_digest.lo
Removing lib/libcurl_la-http_digest.o
Removing lib/libcurl_la-http_negotiate.lo
Removing lib/libcurl_la-http_negotiate.o
Removing lib/libcurl_la-http_ntlm.lo
Removing lib/libcurl_la-http_ntlm.o
Removing lib/libcurl_la-http_proxy.lo
Removing lib/libcurl_la-http_proxy.o
Removing lib/libcurl_la-idn.lo
Removing lib/libcurl_la-idn.o
Removing lib/libcurl_la-if2ip.lo
Removing lib/libcurl_la-if2ip.o
Removing lib/libcurl_la-imap.lo
Removing lib/libcurl_la-imap.o
Removing lib/libcurl_la-inet_ntop.lo
Removing lib/libcurl_la-inet_ntop.o
Removing lib/libcurl_la-inet_pton.lo
Removing lib/libcurl_la-inet_pton.o
Removing lib/libcurl_la-krb5.lo
Removing lib/libcurl_la-krb5.o
Removing lib/libcurl_la-ldap.lo
Removing lib/libcurl_la-ldap.o
Removing lib/libcurl_la-llist.lo
Removing lib/libcurl_la-llist.o
Removing lib/libcurl_la-macos.lo
Removing lib/libcurl_la-macos.o
Removing lib/libcurl_la-md4.lo
Removing lib/libcurl_la-md4.o
Removing lib/libcurl_la-md5.lo
Removing lib/libcurl_la-md5.o
Removing lib/libcurl_la-memdebug.lo
Removing lib/libcurl_la-memdebug.o
Removing lib/libcurl_la-mime.lo
Removing lib/libcurl_la-mime.o
Removing lib/libcurl_la-mprintf.lo
Removing lib/libcurl_la-mprintf.o
Removing lib/libcurl_la-mqtt.lo
Removing lib/libcurl_la-mqtt.o
Removing lib/libcurl_la-multi.lo
Removing lib/libcurl_la-multi.o
Removing lib/libcurl_la-netrc.lo
Removing lib/libcurl_la-netrc.o
Removing lib/libcurl_la-nonblock.lo
Removing lib/libcurl_la-nonblock.o
Removing lib/libcurl_la-noproxy.lo
Removing lib/libcurl_la-noproxy.o
Removing lib/libcurl_la-openldap.lo
Removing lib/libcurl_la-openldap.o
Removing lib/libcurl_la-parsedate.lo
Removing lib/libcurl_la-parsedate.o
Removing lib/libcurl_la-pingpong.lo
Removing lib/libcurl_la-pingpong.o
Removing lib/libcurl_la-pop3.lo
Removing lib/libcurl_la-pop3.o
Removing lib/libcurl_la-progress.lo
Removing lib/libcurl_la-progress.o
Removing lib/libcurl_la-psl.lo
Removing lib/libcurl_la-psl.o
Removing lib/libcurl_la-rand.lo
Removing lib/libcurl_la-rand.o
Removing lib/libcurl_la-rename.lo
Removing lib/libcurl_la-rename.o
Removing lib/libcurl_la-rtsp.lo
Removing lib/libcurl_la-rtsp.o
Removing lib/libcurl_la-select.lo
Removing lib/libcurl_la-select.o
Removing lib/libcurl_la-sendf.lo
Removing lib/libcurl_la-sendf.o
Removing lib/libcurl_la-setopt.lo
Removing lib/libcurl_la-setopt.o
Removing lib/libcurl_la-sha256.lo
Removing lib/libcurl_la-sha256.o
Removing lib/libcurl_la-share.lo
Removing lib/libcurl_la-share.o
Removing lib/libcurl_la-slist.lo
Removing lib/libcurl_la-slist.o
Removing lib/libcurl_la-smb.lo
Removing lib/libcurl_la-smb.o
Removing lib/libcurl_la-smtp.lo
Removing lib/libcurl_la-smtp.o
Removing lib/libcurl_la-socketpair.lo
Removing lib/libcurl_la-socketpair.o
Removing lib/libcurl_la-socks.lo
Removing lib/libcurl_la-socks.o
Removing lib/libcurl_la-socks_gssapi.lo
Removing lib/libcurl_la-socks_gssapi.o
Removing lib/libcurl_la-socks_sspi.lo
Removing lib/libcurl_la-socks_sspi.o
Removing lib/libcurl_la-speedcheck.lo
Removing lib/libcurl_la-speedcheck.o
Removing lib/libcurl_la-splay.lo
Removing lib/libcurl_la-splay.o
Removing lib/libcurl_la-strcase.lo
Removing lib/libcurl_la-strcase.o
Removing lib/libcurl_la-strdup.lo
Removing lib/libcurl_la-strdup.o
Removing lib/libcurl_la-strerror.lo
Removing lib/libcurl_la-strerror.o
Removing lib/libcurl_la-strtok.lo
Removing lib/libcurl_la-strtok.o
Removing lib/libcurl_la-strtoofft.lo
Removing lib/libcurl_la-strtoofft.o
Removing lib/libcurl_la-system_win32.lo
Removing lib/libcurl_la-system_win32.o
Removing lib/libcurl_la-telnet.lo
Removing lib/libcurl_la-telnet.o
Removing lib/libcurl_la-tftp.lo
Removing lib/libcurl_la-tftp.o
Removing lib/libcurl_la-timediff.lo
Removing lib/libcurl_la-timediff.o
Removing lib/libcurl_la-timeval.lo
Removing lib/libcurl_la-timeval.o
Removing lib/libcurl_la-transfer.lo
Removing lib/libcurl_la-transfer.o
Removing lib/libcurl_la-url.lo
Removing lib/libcurl_la-url.o
Removing lib/libcurl_la-urlapi.lo
Removing lib/libcurl_la-urlapi.o
Removing lib/libcurl_la-version.lo
Removing lib/libcurl_la-version.o
Removing lib/libcurl_la-version_win32.lo
Removing lib/libcurl_la-version_win32.o
Removing lib/libcurl_la-warnless.lo
Removing lib/libcurl_la-warnless.o
Removing lib/libcurl_la-ws.lo
Removing lib/libcurl_la-ws.o
Removing lib/nonblock.o
Removing lib/stamp-h1
Removing lib/strtoofft.o
Removing lib/timediff.o
Removing lib/vauth/.deps/
Removing lib/vauth/.dirstamp
Removing lib/vauth/libcurl_la-cleartext.lo
Removing lib/vauth/libcurl_la-cleartext.o
Removing lib/vauth/libcurl_la-cram.lo
Removing lib/vauth/libcurl_la-cram.o
Removing lib/vauth/libcurl_la-digest.lo
Removing lib/vauth/libcurl_la-digest.o
Removing lib/vauth/libcurl_la-digest_sspi.lo
Removing lib/vauth/libcurl_la-digest_sspi.o
Removing lib/vauth/libcurl_la-gsasl.lo
Removing lib/vauth/libcurl_la-gsasl.o
Removing lib/vauth/libcurl_la-krb5_gssapi.lo
Removing lib/vauth/libcurl_la-krb5_gssapi.o
Removing lib/vauth/libcurl_la-krb5_sspi.lo
Removing lib/vauth/libcurl_la-krb5_sspi.o
Removing lib/vauth/libcurl_la-ntlm.lo
Removing lib/vauth/libcurl_la-ntlm.o
Removing lib/vauth/libcurl_la-ntlm_sspi.lo
Removing lib/vauth/libcurl_la-ntlm_sspi.o
Removing lib/vauth/libcurl_la-oauth2.lo
Removing lib/vauth/libcurl_la-oauth2.o
Removing lib/vauth/libcurl_la-spnego_gssapi.lo
Removing lib/vauth/libcurl_la-spnego_gssapi.o
Removing lib/vauth/libcurl_la-spnego_sspi.lo
Removing lib/vauth/libcurl_la-spnego_sspi.o
Removing lib/vauth/libcurl_la-vauth.lo
Removing lib/vauth/libcurl_la-vauth.o
Removing lib/version_win32.o
Removing lib/vquic/.deps/
Removing lib/vquic/.dirstamp
Removing lib/vquic/libcurl_la-curl_msh3.lo
Removing lib/vquic/libcurl_la-curl_msh3.o
Removing lib/vquic/libcurl_la-curl_ngtcp2.lo
Removing lib/vquic/libcurl_la-curl_ngtcp2.o
Removing lib/vquic/libcurl_la-curl_quiche.lo
Removing lib/vquic/libcurl_la-curl_quiche.o
Removing lib/vquic/libcurl_la-vquic.lo
Removing lib/vquic/libcurl_la-vquic.o
Removing lib/vssh/.deps/
Removing lib/vssh/.dirstamp
Removing lib/vssh/libcurl_la-libssh.lo
Removing lib/vssh/libcurl_la-libssh.o
Removing lib/vssh/libcurl_la-libssh2.lo
Removing lib/vssh/libcurl_la-libssh2.o
Removing lib/vssh/libcurl_la-wolfssh.lo
Removing lib/vssh/libcurl_la-wolfssh.o
Removing lib/vtls/.deps/
Removing lib/vtls/.dirstamp
Removing lib/vtls/libcurl_la-bearssl.lo
Removing lib/vtls/libcurl_la-bearssl.o
Removing lib/vtls/libcurl_la-gtls.lo
Removing lib/vtls/libcurl_la-gtls.o
Removing lib/vtls/libcurl_la-hostcheck.lo
Removing lib/vtls/libcurl_la-hostcheck.o
Removing lib/vtls/libcurl_la-keylog.lo
Removing lib/vtls/libcurl_la-keylog.o
Removing lib/vtls/libcurl_la-mbedtls.lo
Removing lib/vtls/libcurl_la-mbedtls.o
Removing lib/vtls/libcurl_la-mbedtls_threadlock.lo
Removing lib/vtls/libcurl_la-mbedtls_threadlock.o
Removing lib/vtls/libcurl_la-openssl.lo
Removing lib/vtls/libcurl_la-openssl.o
Removing lib/vtls/libcurl_la-rustls.lo
Removing lib/vtls/libcurl_la-rustls.o
Removing lib/vtls/libcurl_la-schannel.lo
Removing lib/vtls/libcurl_la-schannel.o
Removing lib/vtls/libcurl_la-schannel_verify.lo
Removing lib/vtls/libcurl_la-schannel_verify.o
Removing lib/vtls/libcurl_la-sectransp.lo
Removing lib/vtls/libcurl_la-sectransp.o
Removing lib/vtls/libcurl_la-vtls.lo
Removing lib/vtls/libcurl_la-vtls.o
Removing lib/vtls/libcurl_la-wolfssl.lo
Removing lib/vtls/libcurl_la-wolfssl.o
Removing lib/vtls/libcurl_la-x509asn1.lo
Removing lib/vtls/libcurl_la-x509asn1.o
Removing lib/warnless.o
Removing libcurl.pc
Removing libtool
Removing ltmain.sh
Removing m4/libtool.m4
Removing m4/ltoptions.m4
Removing m4/ltsugar.m4
Removing m4/ltversion.m4
Removing m4/lt~obsolete.m4
Removing missing
Removing packages/Makefile
Removing packages/Makefile.in
Removing packages/vms/Makefile
Removing packages/vms/Makefile.in
Removing scripts/Makefile
Removing scripts/Makefile.in
Removing src/.deps/
Removing src/.libs/
Removing src/Makefile
Removing src/Makefile.in
Removing src/curl
Removing src/slist_wc.o
Removing src/tool_binmode.o
Removing src/tool_bname.o
Removing src/tool_cb_dbg.o
Removing src/tool_cb_hdr.o
Removing src/tool_cb_prg.o
Removing src/tool_cb_rea.o
Removing src/tool_cb_see.o
Removing src/tool_cb_wrt.o
Removing src/tool_cfgable.o
Removing src/tool_dirhie.o
Removing src/tool_doswin.o
Removing src/tool_easysrc.o
Removing src/tool_filetime.o
Removing src/tool_findfile.o
Removing src/tool_formparse.o
Removing src/tool_getparam.o
Removing src/tool_getpass.o
Removing src/tool_help.o
Removing src/tool_helpers.o
Removing src/tool_hugehelp.c
Removing src/tool_hugehelp.o
Removing src/tool_libinfo.o
Removing src/tool_listhelp.o
Removing src/tool_main.o
Removing src/tool_msgs.o
Removing src/tool_operate.o
Removing src/tool_operhlp.o
Removing src/tool_paramhlp.o
Removing src/tool_parsecfg.o
Removing src/tool_progress.o
Removing src/tool_setopt.o
Removing src/tool_sleep.o
Removing src/tool_stderr.o
Removing src/tool_strdup.o
Removing src/tool_urlglob.o
Removing src/tool_util.o
Removing src/tool_vms.o
Removing src/tool_writeout.o
Removing src/tool_writeout_json.o
Removing src/tool_xattr.o
Removing src/var.o
Removing test-driver
Removing tests/Makefile
Removing tests/Makefile.in
Removing tests/certs/Makefile
Removing tests/certs/Makefile.in
Removing tests/certs/scripts/Makefile
Removing tests/certs/scripts/Makefile.in
Removing tests/config
Removing tests/configurehelp.pm
Removing tests/data/Makefile
Removing tests/data/Makefile.in
Removing tests/http/Makefile
Removing tests/http/Makefile.in
Removing tests/http/clients/.deps/
Removing tests/http/clients/Makefile
Removing tests/http/clients/Makefile.in
Removing tests/http/config.ini
Removing tests/libtest/.deps/
Removing tests/libtest/Makefile
Removing tests/libtest/Makefile.in
Removing tests/server/.deps/
Removing tests/server/Makefile
Removing tests/server/Makefile.in
Removing tests/unit/.deps/
Removing tests/unit/Makefile
Removing tests/unit/Makefile.in

$ autoreconf -fi
libtoolize: putting auxiliary files in '.'.
libtoolize: copying file './ltmain.sh'
libtoolize: putting macros in AC_CONFIG_MACRO_DIRS, 'm4'.
libtoolize: copying file 'm4/libtool.m4'
libtoolize: copying file 'm4/ltoptions.m4'
libtoolize: copying file 'm4/ltsugar.m4'
libtoolize: copying file 'm4/ltversion.m4'
libtoolize: copying file 'm4/lt~obsolete.m4'
libtoolize: Remember to add 'LT_INIT' to configure.ac.
configure.ac:123: installing './compile'
configure.ac:424: installing './config.guess'
configure.ac:424: installing './config.sub'
configure.ac:123: installing './install-sh'
configure.ac:129: installing './missing'
docs/examples/Makefile.am: installing './depcomp'
parallel-tests: installing './test-driver'

$ bash -c find . -name config.guess -exec cp /usr/share/misc/config.guess {} \;

$ bash -c find . -name config.sub -exec cp /usr/share/misc/config.sub {} \;

$ chmod +x configure

$ ./configure --disable-shared --without-ssl --disable-docs
checking whether to enable maintainer-specific portions of Makefiles... no
checking whether make supports nested variables... yes
checking whether to enable debug build options... no
checking whether to enable compiler optimizer... (assumed) yes
checking whether to enable strict compiler warnings... no
checking whether to enable compiler warnings as errors... no
checking whether to enable curl debug memory tracking... no
checking whether to enable hiding of library internal symbols... yes
checking whether to enable c-ares for DNS lookups... no
checking whether to disable dependency on -lrt... (assumed no)
checking whether to enable ECH support... no
checking for path separator... :
checking for sed... /usr/bin/sed
checking for grep... /usr/bin/grep
checking that grep -E works... yes
checking for ar... /usr/bin/ar
checking for a BSD-compatible install... /usr/bin/install -c
checking for gcc... ccache gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether the compiler supports GNU C... yes
checking whether ccache gcc accepts -g... yes
checking for ccache gcc option to enable C11 features... none needed
checking whether ccache gcc understands -c and -o together... yes
checking how to run the C preprocessor... ccache gcc -E
checking for stdio.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for strings.h... yes
checking for sys/stat.h... yes
checking for sys/types.h... yes
checking for unistd.h... yes
checking for stdatomic.h... yes
checking if _Atomic is available... yes
checking for a sed that does not truncate output... (cached) /usr/bin/sed
checking for code coverage support... no
checking whether build environment is sane... yes
checking for a race-free mkdir -p... /usr/bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking whether make supports the include directive... yes (GNU style)
checking dependency style of ccache gcc... gcc3
checking curl version... 8.3.0-DEV
checking for httpd... no
checking for apache2... no
checking for apachectl... no
checking for apxs... no
configure: httpd/apache2 not in PATH, http tests disabled
configure: apxs not in PATH, http tests disabled
checking for nghttpx... no
checking for caddy... no
checking build system type... x86_64-pc-linux-gnu
checking host system type... x86_64-pc-linux-gnu
checking for grep that handles long lines and -e... (cached) /usr/bin/grep
checking for egrep... /usr/bin/grep -E
checking if OS is AIX (to define _ALL_SOURCE)... no
checking if _THREAD_SAFE is already defined... no
checking if _THREAD_SAFE is actually needed... no
checking if _THREAD_SAFE is onwards defined... no
checking if _REENTRANT is already defined... no
checking if _REENTRANT is actually needed... no
checking if _REENTRANT is onwards defined... no
checking for special C compiler options needed for large files... no
checking for _FILE_OFFSET_BITS value needed for large files... no
checking how to print strings... printf
checking for a sed that does not truncate output... (cached) /usr/bin/sed
checking for fgrep... /usr/bin/grep -F
checking for ld used by ccache gcc... /usr/bin/ld
checking if the linker (/usr/bin/ld) is GNU ld... yes
checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B
checking the name lister (/usr/bin/nm -B) interface... BSD nm
checking whether ln -s works... yes
checking the maximum length of command line arguments... 1572864
checking how to convert x86_64-pc-linux-gnu file names to x86_64-pc-linux-gnu format... func_convert_file_noop
checking how to convert x86_64-pc-linux-gnu file names to toolchain format... func_convert_file_noop
checking for /usr/bin/ld option to reload object files... -r
checking for objdump... objdump
checking how to recognize dependent libraries... pass_all
checking for dlltool... no
checking how to associate runtime and link libraries... printf %s\n
checking for archiver @FILE support... @
checking for strip... strip
checking for ranlib... ranlib
checking command to parse /usr/bin/nm -B output from ccache gcc object... ok
checking for sysroot... no
checking for a working dd... /usr/bin/dd
checking how to truncate binary pipes... /usr/bin/dd bs=4096 count=1
checking for mt... mt
checking if mt is a manifest tool... no
checking for dlfcn.h... yes
checking for objdir... .libs
checking if ccache gcc supports -fno-rtti -fno-exceptions... no
checking for ccache gcc option to produce PIC... -fPIC -DPIC
checking if ccache gcc PIC flag -fPIC -DPIC works... yes
checking if ccache gcc static flag -static works... yes
checking if ccache gcc supports -c -o file.o... yes
checking if ccache gcc supports -c -o file.o... (cached) yes
checking whether the ccache gcc linker (/usr/bin/ld -m elf_x86_64) supports shared libraries... yes
checking dynamic linker characteristics... GNU/Linux ld.so
checking how to hardcode library paths into programs... immediate
checking whether stripping libraries is possible... yes
checking if libtool supports shared libraries... yes
checking whether to build shared libraries... no
checking whether to build static libraries... yes
checking whether to build shared libraries with -version-info... yes
checking whether to build shared libraries with -no-undefined... no
checking whether to build shared libraries with -mimpure-text... no
checking whether to build shared libraries with PIC... yes
checking whether to build static libraries with PIC... yes
checking whether to build shared libraries only... no
checking whether to build static libraries only... yes
checking for windres... no
checking for inline... inline
checking if cpp -P is needed... yes
checking if cpp -P works... yes
checking if compiler is DEC/Compaq/HP C... no
checking if compiler is HP-UX C... no
checking if compiler is IBM C... no
checking if compiler is Intel C... no
checking if compiler is clang... no
checking if compiler is GNU C... yes
checking if compiler is LCC... no
checking if compiler is SGI MIPSpro C... no
checking if compiler is SGI MIPS C... no
checking if compiler is SunPro C... no
checking if compiler is Tiny C... no
checking if compiler accepts some basic options... yes
configure: compiler options added: -Werror-implicit-function-declaration
checking if compiler optimizer assumed setting might be used... yes
checking if compiler accepts optimizer enabling options... yes
configure: compiler options added: -O2
checking if compiler accepts strict warning options... yes
configure: compiler options added: -Wno-system-headers
checking if compiler halts on compilation errors... yes
checking if compiler halts on negative sized arrays... yes
checking if compiler halts on function prototype mismatch... yes
checking if compiler supports hiding library internal symbols... yes
checking for windows.h... no
checking whether build target is a native Windows one... no
checking whether build target supports WIN32 file API... no
checking whether build target supports WIN32 crypto API... no
checking for good-to-use Darwin CFLAGS... no
checking whether to link macOS CoreFoundation and SystemConfiguration framework... no
checking to see if the compiler supports __builtin_available()... no
checking whether to support http... yes
checking whether to support ftp... yes
checking whether to support file... yes
checking whether to support ldap... yes
checking whether to support ldaps... yes
checking whether to support rtsp... yes
checking whether to support proxies... yes
checking whether to support dict... yes
checking whether to support telnet... yes
checking whether to support tftp... yes
checking whether to support pop3... yes
checking whether to support imap... yes
checking whether to support smb... yes
checking whether to support smtp... yes
checking whether to support gopher... yes
checking whether to support mqtt... no
checking whether to provide built-in manual... yes
checking whether to enable generation of C code... yes
checking whether to use libgcc... no
checking if X/Open network library is required... no
checking for gethostbyname... yes
checking for windows.h... (cached) no
checking for winsock2.h... (cached) no
checking for proto/bsdsocket.h... no
checking for connect in libraries... yes
checking for sys/types.h... (cached) yes
checking for sys/time.h... yes
checking for monotonic clock_gettime... yes
checking for clock_gettime in libraries... no additional lib required
checking if monotonic clock_gettime works... yes
checking for sys/types.h... (cached) yes
checking for sys/time.h... (cached) yes
checking for raw monotonic clock_gettime... yes
checking for pkg-config... /usr/bin/pkg-config
checking for zlib options with pkg-config... found
checking for zlib.h... yes
configure: found both libz and libz.h header
checking for BrotliDecoderDecompress in -lbrotlidec... no
checking for brotli/decode.h... no
checking for ZSTD_createDStream in -lzstd... no
checking for zstd.h... no
checking for lber.h... no
checking for ldap.h... no
checking for ldap_ssl.h... no
checking for LDAP libraries... cannot find LDAP libraries
checking whether to enable IPv6... yes
checking if struct sockaddr_in6 has sin6_scope_id member... yes
checking if argv can be written to... yes
checking if GSS-API support is requested... no
checking whether to enable Windows native SSL/TLS... no
checking whether to enable Secure Transport... no
checking whether to enable Amiga native SSL/TLS (AmiSSL v5)... no
checking for library containing psl_builtin... -lpsl
checking for library containing gsasl_init... no
checking for RTMP_Init in -lrtmp... no
checking whether versioned symbols are wanted... no
checking whether to enable Windows native IDN (Windows native builds only)... no
checking whether to build with libidn2... (assumed) yes
checking for pkg-config... (cached) /usr/bin/pkg-config
checking for libidn2 options with pkg-config... no
configure: IDN_LIBS: "-lidn2"
configure: IDN_LDFLAGS: ""
configure: IDN_CPPFLAGS: ""
configure: IDN_DIR: ""
checking if idn2_lookup_ul can be linked... no
checking for idn2.h... no
checking for pkg-config... (cached) /usr/bin/pkg-config
checking for libnghttp2 options with pkg-config... no
checking for nghttp2_session_get_stream_local_window_size in -lnghttp2... no
checking for pkg-config... (cached) /usr/bin/pkg-config
checking for fish options with pkg-config... no
checking for sys/types.h... (cached) yes
checking for sys/time.h... (cached) yes
checking for sys/select.h... yes
checking for sys/socket.h... yes
checking for sys/ioctl.h... yes
checking for sys/uio.h... yes
checking for unistd.h... (cached) yes
checking for stdlib.h... (cached) yes
checking for arpa/inet.h... yes
checking for net/if.h... yes
checking for netinet/in.h... yes
checking for netinet/in6.h... no
checking for sys/un.h... yes
checking for linux/tcp.h... yes
checking for netinet/tcp.h... yes
checking for netinet/udp.h... yes
checking for netdb.h... yes
checking for sys/sockio.h... no
checking for sys/stat.h... (cached) yes
checking for sys/param.h... yes
checking for termios.h... yes
checking for termio.h... yes
checking for fcntl.h... yes
checking for io.h... no
checking for pwd.h... yes
checking for utime.h... yes
checking for sys/utime.h... no
checking for sys/poll.h... yes
checking for poll.h... yes
checking for socket.h... no
checking for sys/resource.h... yes
checking for libgen.h... yes
checking for locale.h... yes
checking for stdbool.h... yes
checking for arpa/tftp.h... yes
checking for sys/filio.h... no
checking for sys/wait.h... yes
checking for setjmp.h... yes
checking for an ANSI C-conforming const... yes
checking for compiler support of C99 variadic macro style... yes
checking for compiler support of old gcc variadic macro style... yes
checking for size_t... yes
checking for sys/types.h... (cached) yes
checking for sys/time.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for struct timeval... yes
checking run-time libs availability... fine
checking size of size_t... 8
checking size of long... 8
checking size of int... 4
checking size of time_t... 8
checking size of off_t... 8
checking size of curl_off_t... 8
checking size of curl_socket_t... 4
checking for long long... yes
checking for ssize_t... yes
checking for bool... yes
checking for sa_family_t... yes
checking for suseconds_t... yes
checking if time_t is unsigned... no
checking for sys/types.h... (cached) yes
checking for poll.h... (cached) yes
checking for sys/poll.h... (cached) yes
checking for in_addr_t... yes
checking for struct sockaddr_storage... yes
checking for sys/select.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for select... yes
checking for sys/types.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for recv... yes
checking for sys/types.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for send... yes
checking for sys/types.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for MSG_NOSIGNAL... yes
checking for sys/types.h... (cached) yes
checking for unistd.h... (cached) yes
checking if alarm can be linked... yes
checking if alarm is prototyped... yes
checking if alarm is compilable... yes
checking if alarm usage allowed... yes
checking if alarm might be used... yes
checking for sys/types.h... (cached) yes
checking for string.h... (cached) yes
checking for strings.h... (cached) yes
checking for sys/types.h... (cached) yes
checking for libgen.h... (cached) yes
checking if basename can be linked... yes
checking if basename is prototyped... yes
checking if basename is compilable... yes
checking if basename usage allowed... yes
checking if basename might be used... yes
checking for sys/types.h... (cached) yes
checking for socket.h... (cached) no
checking if closesocket can be linked... no
checking if closesocket might be used... no
checking for sys/types.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking if CloseSocket can be linked... no
checking if CloseSocket might be used... no
checking if connect can be linked... yes
checking if connect is prototyped... yes
checking if connect is compilable... yes
checking if connect usage allowed... yes
checking if connect might be used... yes
checking for sys/types.h... (cached) yes
checking for unistd.h... (cached) yes
checking for fcntl.h... (cached) yes
checking if fcntl can be linked... yes
checking if fcntl is prototyped... yes
checking if fcntl is compilable... yes
checking if fcntl usage allowed... yes
checking if fcntl might be used... yes
checking if fcntl O_NONBLOCK is compilable... yes
checking if fcntl O_NONBLOCK usage allowed... yes
checking if fcntl O_NONBLOCK might be used... yes
checking for windows.h... (cached) no
checking for winsock2.h... (cached) no
checking for ws2tcpip.h... (cached) no
checking for sys/types.h... (cached) yes
checking for netdb.h... (cached) yes
checking if freeaddrinfo can be linked... yes
checking if freeaddrinfo is prototyped... yes
checking if freeaddrinfo is compilable... yes
checking if freeaddrinfo usage allowed... yes
checking if freeaddrinfo might be used... yes
checking for sys/types.h... (cached) yes
checking for sys/xattr.h... yes
checking if fsetxattr can be linked... yes
checking if fsetxattr is prototyped... yes
checking if fsetxattr takes 5 args.... yes
checking if fsetxattr is compilable... yes
checking if fsetxattr usage allowed... yes
checking if fsetxattr might be used... yes
checking if ftruncate can be linked... yes
checking if ftruncate is prototyped... yes
checking if ftruncate is compilable... yes
checking if ftruncate usage allowed... yes
checking if ftruncate might be used... yes
checking for sys/types.h... (cached) yes
checking for stdlib.h... (cached) yes
checking if getaddrinfo can be linked... yes
checking if getaddrinfo is prototyped... yes
checking if getaddrinfo is compilable... yes
checking if getaddrinfo seems to work... yes
checking if getaddrinfo usage allowed... yes
checking if getaddrinfo might be used... yes
checking if getaddrinfo is threadsafe... yes
checking if gethostbyname can be linked... yes
checking if gethostbyname is prototyped... yes
checking if gethostbyname is compilable... yes
checking if gethostbyname usage allowed... yes
checking if gethostbyname might be used... yes
checking if gethostbyname_r can be linked... yes
checking if gethostbyname_r is prototyped... yes
checking if gethostbyname_r takes 3 args.... no
checking if gethostbyname_r takes 5 args.... no
checking if gethostbyname_r takes 6 args.... yes
checking if gethostbyname_r is compilable... yes
checking if gethostbyname_r usage allowed... yes
checking if gethostbyname_r might be used... yes
checking if gethostname can be linked... yes
checking if gethostname is prototyped... yes
checking if gethostname is compilable... yes
checking for gethostname arg 2 data type... size_t
checking if gethostname usage allowed... yes
checking if gethostname might be used... yes
checking if getpeername can be linked... yes
checking if getpeername is prototyped... yes
checking if getpeername is compilable... yes
checking if getpeername usage allowed... yes
checking if getpeername might be used... yes
checking if getsockname can be linked... yes
checking if getsockname is prototyped... yes
checking if getsockname is compilable... yes
checking if getsockname usage allowed... yes
checking if getsockname might be used... yes
checking for net/if.h... (cached) yes
checking if if_nametoindex can be linked... yes
checking if if_nametoindex is prototyped... yes
checking if if_nametoindex is compilable... yes
checking if if_nametoindex usage allowed... yes
checking if if_nametoindex might be used... yes
checking for sys/types.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for netinet/in.h... (cached) yes
checking for ifaddrs.h... yes
checking if getifaddrs can be linked... yes
checking if getifaddrs is prototyped... yes
checking if getifaddrs is compilable... yes
checking if getifaddrs seems to work... yes
checking if getifaddrs usage allowed... yes
checking if getifaddrs might be used... yes
checking for sys/types.h... (cached) yes
checking for sys/time.h... (cached) yes
checking if gmtime_r can be linked... yes
checking if gmtime_r is prototyped... yes
checking if gmtime_r is compilable... yes
checking if gmtime_r seems to work... yes
checking if gmtime_r usage allowed... yes
checking if gmtime_r might be used... yes
checking for sys/types.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for netinet/in.h... (cached) yes
checking for arpa/inet.h... (cached) yes
checking if inet_ntop can be linked... yes
checking if inet_ntop is prototyped... yes
checking if inet_ntop is compilable... yes
checking if inet_ntop seems to work... yes
checking if inet_ntop usage allowed... yes
checking if inet_ntop might be used... yes
checking if inet_pton can be linked... yes
checking if inet_pton is prototyped... yes
checking if inet_pton is compilable... yes
checking if inet_pton seems to work... yes
checking if inet_pton usage allowed... yes
checking if inet_pton might be used... yes
checking if ioctlsocket can be linked... no
checking if ioctlsocket might be used... no
checking if IoctlSocket can be linked... no
checking if IoctlSocket might be used... no
checking if memrchr can be linked... yes
checking if memrchr is prototyped... no
checking if memrchr might be used... no
checking if poll can be linked... yes
checking if poll is prototyped... yes
checking if poll is compilable... yes
checking if poll seems to work... yes
checking if poll usage allowed... yes
checking if poll might be used... yes
checking for sys/types.h... (cached) yes
checking for signal.h... yes
checking if sigaction can be linked... yes
checking if sigaction is prototyped... yes
checking if sigaction is compilable... yes
checking if sigaction usage allowed... yes
checking if sigaction might be used... yes
checking if siginterrupt can be linked... yes
checking if siginterrupt is prototyped... yes
checking if siginterrupt is compilable... yes
checking if siginterrupt usage allowed... yes
checking if siginterrupt might be used... yes
checking if signal can be linked... yes
checking if signal is prototyped... yes
checking if signal is compilable... yes
checking if signal usage allowed... yes
checking if signal might be used... yes
checking for sys/types.h... (cached) yes
checking for setjmp.h... (cached) yes
checking if sigsetjmp can be linked... no
checking if sigsetjmp seems a macro... yes
checking if sigsetjmp is compilable... yes
checking if sigsetjmp usage allowed... yes
checking if sigsetjmp might be used... yes
checking if socket can be linked... yes
checking if socket is prototyped... yes
checking if socket is compilable... yes
checking if socket usage allowed... yes
checking if socket might be used... yes
checking if socketpair can be linked... yes
checking if socketpair is prototyped... yes
checking if socketpair is compilable... yes
checking if socketpair usage allowed... yes
checking if socketpair might be used... yes
checking if strcasecmp can be linked... yes
checking if strcasecmp is prototyped... yes
checking if strcasecmp is compilable... yes
checking if strcasecmp usage allowed... yes
checking if strcasecmp might be used... yes
checking if strcmpi can be linked... no
checking if strcmpi might be used... no
checking if strdup can be linked... yes
checking if strdup is prototyped... yes
checking if strdup is compilable... yes
checking if strdup usage allowed... yes
checking if strdup might be used... yes
checking if strerror_r can be linked... yes
checking if strerror_r is prototyped... yes
checking if strerror_r is compilable... yes
checking if strerror_r is glibc like... no
checking if strerror_r is POSIX like... yes
checking if strerror_r seems to work... yes
checking if strerror_r usage allowed... yes
checking if strerror_r might be used... yes
checking if stricmp can be linked... no
checking if stricmp might be used... no
checking if strtok_r can be linked... yes
checking if strtok_r is prototyped... yes
checking if strtok_r is compilable... yes
checking if strtok_r usage allowed... yes
checking if strtok_r might be used... yes
checking if strtoll can be linked... yes
checking if strtoll is prototyped... yes
checking if strtoll is compilable... yes
checking if strtoll usage allowed... yes
checking if strtoll might be used... yes
checking for ccache gcc options needed to detect all undeclared functions... none needed
checking whether getpwuid_r is declared... yes
checking for fnmatch... yes
checking for fchmod... yes
checking for fork... yes
checking for geteuid... yes
checking for getpass_r... no
checking deeper for getpass_r... but still no
checking for getppid... yes
checking for getpwuid... yes
checking for getpwuid_r... yes
checking for getrlimit... yes
checking for gettimeofday... yes
checking for if_nametoindex... yes
checking for mach_absolute_time... no
checking deeper for mach_absolute_time... but still no
checking for pipe... yes
checking for sched_yield... yes
checking for sendmsg... yes
checking for setlocale... yes
checking for setmode... no
checking deeper for setmode... but still no
checking for setrlimit... yes
checking for snprintf... yes
checking for utime... yes
checking for utimes... yes
checking for arc4random... no
checking deeper for arc4random... but still no
checking how to set a socket into non-blocking mode... fcntl O_NONBLOCK
checking for perl... /usr/bin/perl
checking for gnroff... no
checking for nroff... /usr/bin/nroff
checking how to use *nroff to get plain text from man pages... -man
checking whether to enable the threaded resolver... yes
checking whether to use POSIX threads for threaded resolver... auto
checking for pthread.h... yes
checking for pthread_create... yes
checking convert -I options to -isystem... yes
checking whether to enable verbose strings... yes
checking whether to enable SSPI support (Windows native builds only)... no
checking whether to enable cryptographic authentication methods... yes
checking whether to support NTLM... yes
checking whether to enable NTLM delegation to winbind's helper... no
checking whether to enable TLS-SRP authentication... yes
checking whether to enable Unix domain sockets... auto
checking for struct sockaddr_un.sun_path... yes
checking whether to support cookies... yes
checking whether to support socketpair... yes
checking whether to support HTTP authentication... yes
checking whether to support DoH... yes
checking whether to support the MIME API... yes
checking whether to support the form API... yes
checking whether to support date parsing... yes
checking whether to support netrc parsing... yes
checking whether to support progress-meter... yes
checking whether to support DNS shuffling... yes
checking whether to support curl_easy_option*... yes
checking whether to support alt-svc... yes
checking whether to support headers-api... yes
configure: disables HSTS due to lack of SSL
checking whether to support WebSockets... no
checking whether hiding of library internal symbols will actually happen... yes
checking that generated files are newer than configure... done
configure: creating ./config.status
config.status: creating Makefile
config.status: creating docs/Makefile
config.status: creating docs/examples/Makefile
config.status: creating docs/libcurl/Makefile
config.status: creating docs/libcurl/opts/Makefile
config.status: creating docs/cmdline-opts/Makefile
config.status: creating include/Makefile
config.status: creating include/curl/Makefile
config.status: creating src/Makefile
config.status: creating lib/Makefile
config.status: creating scripts/Makefile
config.status: creating lib/libcurl.vers
config.status: creating lib/libcurl.plist
config.status: creating tests/Makefile
config.status: creating tests/config
config.status: creating tests/certs/Makefile
config.status: creating tests/certs/scripts/Makefile
config.status: creating tests/data/Makefile
config.status: creating tests/server/Makefile
config.status: creating tests/libtest/Makefile
config.status: creating tests/unit/Makefile
config.status: creating tests/http/config.ini
config.status: creating tests/http/Makefile
config.status: creating tests/http/clients/Makefile
config.status: creating packages/Makefile
config.status: creating packages/vms/Makefile
config.status: creating curl-config
config.status: creating libcurl.pc
config.status: creating lib/curl_config.h
config.status: executing depfiles commands
config.status: executing libtool commands
configure: Configured to build curl/libcurl:

Host setup: x86_64-pc-linux-gnu
Install prefix: /usr/local
Compiler: ccache gcc
CFLAGS: -Werror-implicit-function-declaration -O2 -Wno-system-headers
CPPFLAGS:
LDFLAGS:
LIBS: -lpsl -lz

curl version: 8.3.0-DEV
SSL: no (--with-{openssl,gnutls,mbedtls,wolfssl,schannel,secure-transport,amissl,bearssl,rustls} )
SSH: no (--with-{libssh,libssh2})
zlib: enabled
brotli: no (--with-brotli)
zstd: no (--with-zstd)
GSS-API: no (--with-gssapi)
GSASL: no (libgsasl not found)
TLS-SRP: no (--enable-tls-srp)
resolver: POSIX threaded
IPv6: enabled
Unix sockets: enabled
IDN: no (--with-{libidn2,winidn})
Build libcurl: Shared=no, Static=yes
Built-in manual: enabled
--libcurl option: enabled (--disable-libcurl-option)
Verbose errors: enabled (--disable-verbose)
Code coverage: disabled
SSPI: no (--enable-sspi)
ca cert bundle: no
ca cert path:
ca fallback:
LDAP: no (--enable-ldap / --with-ldap-lib / --with-lber-lib)
LDAPS: no (--enable-ldaps)
RTSP: enabled
RTMP: no (--with-librtmp)
PSL: enabled
Alt-svc: enabled (--disable-alt-svc)
Headers API: enabled (--disable-headers-api)
HSTS: no (--enable-hsts)
HTTP1: enabled (internal)
HTTP2: no (--with-nghttp2, --with-hyper)
HTTP3: no (--with-ngtcp2 --with-nghttp3, --with-quiche, --with-msh3)
ECH: no (--enable-ech)
WebSockets: no (--enable-websockets)
Protocols: DICT FILE FTP GOPHER HTTP IMAP MQTT POP3 RTSP SMTP TELNET TFTP
Features: AsynchDNS IPv6 Largefile PSL UnixSockets alt-svc libz threadsafe

configure: WARNING: unrecognized options: --disable-docs
configure: WARNING: Cannot find libraries for LDAP support: LDAP disabled
configure: WARNING: libgsasl was not found
configure: WARNING: Cannot find libraries for IDN support: IDN disabled
configure: WARNING: unrecognized options: --disable-docs

$ make -j3
Making all in lib
make[1]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0/lib'
make all-am
make[2]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0/lib'
CC libcurl_la-altsvc.lo
CC libcurl_la-amigaos.lo
CC libcurl_la-asyn-ares.lo
CC libcurl_la-asyn-thread.lo
CC libcurl_la-base64.lo
CC libcurl_la-bufq.lo
CC libcurl_la-bufref.lo
CC libcurl_la-c-hyper.lo
CC libcurl_la-cf-h1-proxy.lo
CC libcurl_la-cf-h2-proxy.lo
CC libcurl_la-cf-haproxy.lo
CC libcurl_la-cf-https-connect.lo
CC libcurl_la-cf-socket.lo
CC libcurl_la-cfilters.lo
CC libcurl_la-conncache.lo
CC libcurl_la-connect.lo
CC libcurl_la-content_encoding.lo
CC libcurl_la-cookie.lo
CC libcurl_la-curl_addrinfo.lo
CC libcurl_la-curl_des.lo
CC libcurl_la-curl_endian.lo
CC libcurl_la-curl_fnmatch.lo
CC libcurl_la-curl_gethostname.lo
CC libcurl_la-curl_get_line.lo
CC libcurl_la-curl_gssapi.lo
CC libcurl_la-curl_memrchr.lo
CC libcurl_la-curl_multibyte.lo
CC libcurl_la-curl_ntlm_core.lo
CC libcurl_la-curl_ntlm_wb.lo
CC libcurl_la-curl_path.lo
CC libcurl_la-curl_range.lo
CC libcurl_la-curl_rtmp.lo
CC libcurl_la-curl_sasl.lo
CC libcurl_la-curl_sspi.lo
CC libcurl_la-curl_threads.lo
CC libcurl_la-curl_trc.lo
CC libcurl_la-dict.lo
CC libcurl_la-doh.lo
CC libcurl_la-dynbuf.lo
CC libcurl_la-dynhds.lo
CC libcurl_la-easy.lo
CC libcurl_la-easygetopt.lo
CC libcurl_la-easyoptions.lo
CC libcurl_la-escape.lo
CC libcurl_la-file.lo
CC libcurl_la-fileinfo.lo
CC libcurl_la-fopen.lo
CC libcurl_la-formdata.lo
CC libcurl_la-ftp.lo
CC libcurl_la-ftplistparser.lo
CC libcurl_la-getenv.lo
CC libcurl_la-getinfo.lo
CC libcurl_la-gopher.lo
CC libcurl_la-hash.lo
CC libcurl_la-headers.lo
CC libcurl_la-hmac.lo
CC libcurl_la-hostasyn.lo
CC libcurl_la-hostip.lo
CC libcurl_la-hostip4.lo
CC libcurl_la-hostip6.lo
CC libcurl_la-hostsyn.lo
CC libcurl_la-hsts.lo
CC libcurl_la-http.lo
CC libcurl_la-http1.lo
CC libcurl_la-http2.lo
CC libcurl_la-http_chunks.lo
CC libcurl_la-http_digest.lo
CC libcurl_la-http_negotiate.lo
CC libcurl_la-http_ntlm.lo
CC libcurl_la-http_proxy.lo
CC libcurl_la-http_aws_sigv4.lo
CC libcurl_la-idn.lo
CC libcurl_la-if2ip.lo
CC libcurl_la-imap.lo
CC libcurl_la-inet_ntop.lo
CC libcurl_la-inet_pton.lo
CC libcurl_la-krb5.lo
CC libcurl_la-ldap.lo
CC libcurl_la-llist.lo
CC libcurl_la-macos.lo
CC libcurl_la-md4.lo
CC libcurl_la-md5.lo
CC libcurl_la-memdebug.lo
CC libcurl_la-mime.lo
CC libcurl_la-mprintf.lo
CC libcurl_la-mqtt.lo
CC libcurl_la-multi.lo
CC libcurl_la-netrc.lo
CC libcurl_la-nonblock.lo
CC libcurl_la-noproxy.lo
CC libcurl_la-openldap.lo
CC libcurl_la-parsedate.lo
CC libcurl_la-pingpong.lo
CC libcurl_la-pop3.lo
CC libcurl_la-progress.lo
CC libcurl_la-psl.lo
CC libcurl_la-rand.lo
CC libcurl_la-rename.lo
CC libcurl_la-rtsp.lo
CC libcurl_la-select.lo
CC libcurl_la-sendf.lo
CC libcurl_la-setopt.lo
CC libcurl_la-sha256.lo
CC libcurl_la-share.lo
CC libcurl_la-slist.lo
CC libcurl_la-smb.lo
CC libcurl_la-smtp.lo
CC libcurl_la-socketpair.lo
CC libcurl_la-socks.lo
CC libcurl_la-socks_gssapi.lo
CC libcurl_la-socks_sspi.lo
CC libcurl_la-speedcheck.lo
CC libcurl_la-splay.lo
CC libcurl_la-strcase.lo
CC libcurl_la-strdup.lo
CC libcurl_la-strerror.lo
CC libcurl_la-strtok.lo
CC libcurl_la-strtoofft.lo
CC libcurl_la-system_win32.lo
CC libcurl_la-telnet.lo
CC libcurl_la-tftp.lo
CC libcurl_la-timediff.lo
CC libcurl_la-timeval.lo
CC libcurl_la-transfer.lo
CC libcurl_la-url.lo
CC libcurl_la-urlapi.lo
CC libcurl_la-version.lo
CC libcurl_la-version_win32.lo
CC libcurl_la-ws.lo
CC libcurl_la-warnless.lo
CC vauth/libcurl_la-cleartext.lo
CC vauth/libcurl_la-cram.lo
CC vauth/libcurl_la-digest.lo
CC vauth/libcurl_la-digest_sspi.lo
CC vauth/libcurl_la-gsasl.lo
CC vauth/libcurl_la-krb5_gssapi.lo
CC vauth/libcurl_la-krb5_sspi.lo
CC vauth/libcurl_la-ntlm.lo
CC vauth/libcurl_la-ntlm_sspi.lo
CC vauth/libcurl_la-oauth2.lo
CC vauth/libcurl_la-spnego_gssapi.lo
CC vauth/libcurl_la-spnego_sspi.lo
CC vauth/libcurl_la-vauth.lo
CC vtls/libcurl_la-gtls.lo
CC vtls/libcurl_la-bearssl.lo
CC vtls/libcurl_la-hostcheck.lo
CC vtls/libcurl_la-keylog.lo
CC vtls/libcurl_la-mbedtls.lo
CC vtls/libcurl_la-mbedtls_threadlock.lo
CC vtls/libcurl_la-openssl.lo
CC vtls/libcurl_la-rustls.lo
CC vtls/libcurl_la-schannel.lo
CC vtls/libcurl_la-schannel_verify.lo
CC vtls/libcurl_la-sectransp.lo
CC vtls/libcurl_la-wolfssl.lo
CC vtls/libcurl_la-vtls.lo
CC vtls/libcurl_la-x509asn1.lo
CC vquic/libcurl_la-curl_msh3.lo
CC vquic/libcurl_la-curl_ngtcp2.lo
CC vquic/libcurl_la-curl_quiche.lo
CC vquic/libcurl_la-vquic.lo
CC vssh/libcurl_la-libssh.lo
CC vssh/libcurl_la-libssh2.lo
CC vssh/libcurl_la-wolfssh.lo
CCLD libcurl.la
make[2]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0/lib'
make[1]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0/lib'
Making all in src
make[1]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0/src'
Making all in ../docs
make[2]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0/docs'
Making all in .
make[3]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0/docs'
if test "..x" != "..x" -a -e "./curl.1"; then \
/usr/bin/install -c -m 644 "./curl.1" /root/asi_db/builds/curl/_worktrees/w0/docs/curl.1; fi
cd cmdline-opts && make
make[4]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0/docs/cmdline-opts'
GENERATE ../../docs/curl.1
make[4]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0/docs/cmdline-opts'
make[3]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0/docs'
Making all in cmdline-opts
make[3]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0/docs/cmdline-opts'
make[3]: Nothing to be done for 'all'.
make[3]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0/docs/cmdline-opts'
make[2]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0/docs'
make[2]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0/src'
CC tool_bname.o
CC slist_wc.o
CC tool_binmode.o
CC tool_cb_dbg.o
CC tool_cb_hdr.o
CC tool_cb_prg.o
CC tool_cb_rea.o
CC tool_cb_see.o
CC tool_cb_wrt.o
CC tool_cfgable.o
CC tool_dirhie.o
CC tool_doswin.o
CC tool_easysrc.o
CC tool_filetime.o
CC tool_findfile.o
CC tool_formparse.o
CC tool_getparam.o
CC tool_getpass.o
CC tool_help.o
CC tool_helpers.o
HUGE tool_hugehelp.c
CC tool_libinfo.o
CC tool_listhelp.o
CC tool_main.o
CC tool_msgs.o
CC tool_operate.o
CC tool_operhlp.o
CC tool_paramhlp.o
CC tool_parsecfg.o
CC tool_progress.o
CC tool_stderr.o
CC tool_strdup.o
CC tool_setopt.o
CC tool_sleep.o
CC tool_urlglob.o
CC tool_util.o
CC tool_vms.o
CC tool_writeout.o
CC tool_writeout_json.o
CC tool_xattr.o
CC var.o
CC ../lib/base64.o
CC ../lib/curl_multibyte.o
CC ../lib/nonblock.o
CC ../lib/dynbuf.o
CC ../lib/strtoofft.o
CC ../lib/timediff.o
CC ../lib/version_win32.o
CC ../lib/warnless.o
CC tool_hugehelp.o
CCLD curl
make[2]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0/src'
make[1]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0/src'
make[1]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0'
make[1]: Nothing to be done for 'all-am'.
make[1]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0'

Commit Diff GitHub →

docs/CIPHERS.md +0 -65 docs/DEPRECATE.md +2 -12 docs/FAQ +3 -3 docs/INTERNALS.md +0 -1 docs/cmdline-opts/page-footer +2 -3 docs/cmdline-opts/pinnedpubkey.d +1 -1 docs/cmdline-opts/write-out.d +2 -2 docs/libcurl/curl_global_sslset.3 +1 -1 docs/libcurl/libcurl-env.3 +1 -1 docs/libcurl/opts/CURLINFO_CERTINFO.3 +1 -1 docs/libcurl/opts/CURLINFO_TLS_SESSION.3 +2 -2 docs/libcurl/opts/CURLINFO_TLS_SSL_PTR.3 +3 -6 docs/libcurl/opts/CURLOPT_CERTINFO.3 +1 -1 docs/libcurl/opts/CURLOPT_PINNEDPUBLICKEY.3 +0 -2 docs/libcurl/opts/CURLOPT_PROXY_PINNEDPUBLICKEY.3 +1 -1 include/curl/curl.h +3 -3 lib/Makefile.inc +0 -2 lib/config-os400.h +0 -3 lib/curl_setup.h +1 -1 lib/rand.c +1 -1 lib/rand.h +0 -14 lib/setup-os400.h +0 -88 lib/vtls/gskit.c +0 -1329 lib/vtls/gskit.h +0 -40 lib/vtls/hostcheck.c +2 -3 lib/vtls/vtls.c +0 -5 lib/vtls/vtls_int.h +0 -1 lib/vtls/x509asn1.c +4 -11 lib/vtls/x509asn1.h +2 -3 packages/OS400/README.OS400 +0 -16 packages/OS400/os400sys.c +0 -370 tests/unit/unit1397.c +1 -1 tests/unit/unit1651.c +1 -2

docs/CIPHERS.md+0 -65

@@ -165,71 +165,6 @@ When specifying multiple cipher names, separate them with colon (`:`).
	`TLS_AES_128_CCM_8_SHA256`
	`TLS_AES_128_CCM_SHA256`

-	## GSKit
-
-	Ciphers are internally defined as [numeric
-	codes](https://www.ibm.com/support/knowledgecenter/ssw_ibm_i_73/apis/gsk_attribute_set_buffer.htm). libcurl
-	maps them to the following case-insensitive names.
-
-	### SSL2 cipher suites (insecure: disabled by default)
-
-	`rc2-md5`
-	`rc4-md5`
-	`exp-rc2-md5`
-	`exp-rc4-md5`
-	`des-cbc-md5`
-	`des-cbc3-md5`
-
-	### SSL3 cipher suites
-
-	`null-md5`
-	`null-sha`
-	`rc4-md5`
-	`rc4-sha`
-	`exp-rc2-cbc-md5`
-	`exp-rc4-md5`
-	`exp-des-cbc-sha`
-	`des-cbc3-sha`
-
-	### TLS v1.0 cipher suites
-
-	`null-md5`
-	`null-sha`
-	`rc4-md5`
-	`rc4-sha`
-	`exp-rc2-cbc-md5`
-	`exp-rc4-md5`
-	`exp-des-cbc-sha`
-	`des-cbc3-sha`
-	`aes128-sha`
-	`aes256-sha`
-
-	### TLS v1.1 cipher suites
-
-	`null-md5`
-	`null-sha`
-	`rc4-md5`
-	`rc4-sha`
-	`exp-des-cbc-sha`
-	`des-cbc3-sha`
-	`aes128-sha`
-	`aes256-sha`
-
-	### TLS v1.2 cipher suites
-
-	`null-md5`
-	`null-sha`
-	`null-sha256`
-	`rc4-md5`
-	`rc4-sha`
-	`des-cbc3-sha`
-	`aes128-sha`
-	`aes256-sha`
-	`aes128-sha256`
-	`aes256-sha256`
-	`aes128-gcm-sha256`
-	`aes256-gcm-sha384`
-
	## WolfSSL

	`RC4-SHA`,

docs/DEPRECATE.md+2 -12

@@ -6,18 +6,6 @@ email the
	as soon as possible and explain to us why this is a problem for you and
	how your use case cannot be satisfied properly using a workaround.

-	## gskit
-
-	We remove support for building curl with the gskit TLS library in August 2023.
-
-	- This is a niche TLS library, only running on some IBM systems
-	- no regular curl contributors use this backend
-	- no CI builds use or verify this backend
-	- gskit, or the curl adaption for it, lacks many modern TLS features making it
-	an inferior solution
-	- build breakages in this code take weeks or more to get detected
-	- fixing gskit code is mostly done "flying blind"
-
	## mingw v1

	We remove support for building curl with the original legacy mingw version 1
@@ -57,3 +45,5 @@ curl will remove the support for space-separated names in July 2024.
	- NPN
	- Support for systems without 64 bit data types
	- NSS
+	- gskit
+

docs/FAQ+3 -3

@@ -423,9 +423,9 @@ FAQ

	curl can be built to use one of the following SSL alternatives: OpenSSL,
	libressl, BoringSSL, AWS-LC, GnuTLS, wolfSSL, mbedTLS, Secure Transport
-	(native iOS/OS X), Schannel (native Windows), GSKit (native IBM i), BearSSL,
-	or Rustls. They all have their pros and cons, and we try to maintain a
-	comparison of them here: https://curl.se/docs/ssl-compared.html
+	(native iOS/OS X), Schannel (native Windows), BearSSL or Rustls. They all
+	have their pros and cons, and we try to maintain a comparison of them here:
+	https://curl.se/docs/ssl-compared.html

	2.4 Does curl support SOCKS (RFC 1928) ?

docs/INTERNALS.md+0 -1

@@ -27,7 +27,6 @@ versions of libs and build tools.
	- wolfSSL 2.0.0
	- OpenLDAP 2.0
	- MIT Kerberos 1.2.4
-	- GSKit V5R3M0
	- Heimdal ?
	- nghttp2 1.15.0
	- WinSock 2.2 (on Windows 95+ and Windows CE .NET 4.1+)

docs/cmdline-opts/page-footer+2 -3

@@ -60,9 +60,8 @@ the case insensitive name of the particular backend to use when curl is
	invoked. Setting a name that is not a built-in alternative will make curl
	stay with the default.

-	SSL backend names (case-insensitive): bearssl, gnutls, gskit,
-	mbedtls, openssl, rustls, schannel, secure-transport,
-	wolfssl
+	SSL backend names (case-insensitive): bearssl, gnutls, mbedtls,
+	openssl, rustls, schannel, secure-transport, wolfssl
	.IP "HOME <dir>"
	If set, this is used to find the home directory when that is needed. Like when
	looking for the default .curlrc. CURL_HOME and XDG_CONFIG_HOME

docs/cmdline-opts/pinnedpubkey.d+1 -1

@@ -23,7 +23,7 @@ abort the connection before sending or receiving any data.

	PEM/DER support:

-	7.39.0: OpenSSL, GnuTLS and GSKit
+	7.39.0: OpenSSL and GnuTLS

	7.43.0: wolfSSL

docs/cmdline-opts/write-out.d+2 -2

@@ -49,7 +49,7 @@ The variables available are:
	.TP 15
	certs
	Output the certificate chain with details. Supported only by the OpenSSL,
-	GnuTLS, Schannel, GSKit and Secure Transport backends. (Added in 7.88.0)
+	GnuTLS, Schannel and Secure Transport backends. (Added in 7.88.0)
	.TP
	content_type
	The Content-Type of the requested document, if there was any.
@@ -105,7 +105,7 @@ The http method used in the most recent HTTP request. (Added in 7.72.0)
	.TP
	num_certs
	Number of server certificates received in the TLS handshake. Supported only by
-	the OpenSSL, GnuTLS, Schannel, GSKit and Secure Transport backends. (Added
+	the OpenSSL, GnuTLS, Schannel and Secure Transport backends. (Added
	in 7.88.0)
	.TP
	num_connects

docs/libcurl/curl_global_sslset.3+1 -1

@@ -38,7 +38,7 @@ typedef enum {
	CURLSSLBACKEND_OPENSSL = 1, /* or one of its forks */
	CURLSSLBACKEND_GNUTLS = 2,
	CURLSSLBACKEND_NSS = 3,
-	CURLSSLBACKEND_GSKIT = 5,
+	CURLSSLBACKEND_GSKIT = 5, /* deprecated */
	CURLSSLBACKEND_POLARSSL = 6, /* deprecated */
	CURLSSLBACKEND_WOLFSSL = 7,
	CURLSSLBACKEND_SCHANNEL = 8,

docs/libcurl/libcurl-env.3+1 -1

@@ -50,7 +50,7 @@ specific backend at first use. If no selection is done by the program using
	libcurl, this variable's selection will be used. Setting a name that is not a
	built-in alternative will make libcurl stay with the default.

-	SSL backend names (case-insensitive): BearSSL, GnuTLS, gskit, mbedTLS,
+	SSL backend names (case-insensitive): BearSSL, GnuTLS, mbedTLS,
	nss, OpenSSL, rustls, Schannel, Secure-Transport, wolfSSL
	.IP HOME
	When the netrc feature is used (\fICURLOPT_NETRC(3)\fP), this variable is

docs/libcurl/opts/CURLINFO_CERTINFO.3+1 -1

@@ -75,7 +75,7 @@ if(curl) {
	}
	.fi
	.SH AVAILABILITY
-	This option is only working in libcurl built with OpenSSL, Schannel, GSKit or
+	This option is only working in libcurl built with OpenSSL, Schannel or
	Secure Transport support. Schannel support added in 7.50.0. Secure Transport
	support added in 7.79.0.

docs/libcurl/opts/CURLINFO_TLS_SESSION.3+2 -2

@@ -63,8 +63,8 @@ if(curl) {
	}
	.fi
	.SH AVAILABILITY
-	Added in 7.34.0. Deprecated since 7.48.0 and supported OpenSSL, GnuTLS,
-	NSS and gskit only up until this version was released.
+	Added in 7.34.0. Deprecated since 7.48.0 and supported OpenSSL, GnuTLS, and
+	NSS only up until this version was released.
	.SH RETURN VALUE
	Returns CURLE_OK if the option is supported, and CURLE_UNKNOWN_OPTION if not.
	.SH "SEE ALSO"

docs/libcurl/opts/CURLINFO_TLS_SSL_PTR.3+3 -6

@@ -57,18 +57,15 @@ struct curl_tlssessioninfo {
	The \fIbackend\fP struct member is one of the defines in the CURLSSLBACKEND_*
	series: CURLSSLBACKEND_NONE (when built without TLS support),
	CURLSSLBACKEND_WOLFSSL, CURLSSLBACKEND_SECURETRANSPORT, CURLSSLBACKEND_GNUTLS,
-	CURLSSLBACKEND_GSKIT, CURLSSLBACKEND_MBEDTLS, CURLSSLBACKEND_NSS,
-	CURLSSLBACKEND_OPENSSL, CURLSSLBACKEND_SCHANNEL or
-	CURLSSLBACKEND_MESALINK. (Note that the OpenSSL forks are all reported as just
-	OpenSSL here.)
+	CURLSSLBACKEND_MBEDTLS, CURLSSLBACKEND_NSS, CURLSSLBACKEND_OPENSSL,
+	CURLSSLBACKEND_SCHANNEL or CURLSSLBACKEND_MESALINK. (Note that the OpenSSL
+	forks are all reported as just OpenSSL here.)

	The \fIinternals\fP struct member will point to a TLS library specific pointer
	for the active ("in use") SSL connection, with the following underlying types:
	.RS
	.IP GnuTLS
	\fBgnutls_session_t\fP
-	.IP gskit
-	\fBgsk_handle\fP
	.IP NSS
	\fBPRFileDesc *\fP
	.IP OpenSSL

docs/libcurl/opts/CURLOPT_CERTINFO.3+1 -1

@@ -74,7 +74,7 @@ if(curl) {
	}
	.fi
	.SH AVAILABILITY
-	This option is supported by the OpenSSL, GnuTLS, Schannel, GSKit and Secure
+	This option is supported by the OpenSSL, GnuTLS, Schannel and Secure
	Transport backends. Schannel support added in 7.50.0. Secure Transport support
	added in 7.79.0.
	.SH RETURN VALUE

docs/libcurl/opts/CURLOPT_PINNEDPUBLICKEY.3+0 -2

@@ -102,8 +102,6 @@ PEM/DER support:

	7.39.0: OpenSSL, GnuTLS

-	7.39.0-7.48.0,7.58.1+: GSKit
-
	7.43.0: wolfSSL

	7.47.0: mbedTLS

docs/libcurl/opts/CURLOPT_PROXY_PINNEDPUBLICKEY.3+1 -1

@@ -98,7 +98,7 @@ footer:
	.SH AVAILABILITY
	PEM/DER support:

-	7.52.0: GSKit, GnuTLS, OpenSSL, mbedTLS, wolfSSL
+	7.52.0: GnuTLS, OpenSSL, mbedTLS, wolfSSL

	sha256 support:

include/curl/curl.h+3 -3

@@ -161,7 +161,7 @@ typedef enum {
	CURLSSLBACKEND_GNUTLS = 2,
	CURLSSLBACKEND_NSS = 3,
	CURLSSLBACKEND_OBSOLETE4 = 4, /* Was QSOSSL. */
-	CURLSSLBACKEND_GSKIT = 5,
+	CURLSSLBACKEND_GSKIT CURL_DEPRECATED(8.3.0, "") = 5,
	CURLSSLBACKEND_POLARSSL CURL_DEPRECATED(7.69.0, "") = 6,
	CURLSSLBACKEND_WOLFSSL = 7,
	CURLSSLBACKEND_SCHANNEL = 8,
@@ -2824,8 +2824,8 @@ CURL_EXTERN void curl_slist_free_all(struct curl_slist *list);
	*/
	CURL_EXTERN time_t curl_getdate(const char p, const time_t unused);

-	/* info about the certificate chain, only for OpenSSL, GnuTLS, Schannel, NSS
-	and GSKit builds. Asked for with CURLOPT_CERTINFO / CURLINFO_CERTINFO */
+	/* info about the certificate chain, only for OpenSSL, GnuTLS, Schannel and
+	NSS builds. Asked for with CURLOPT_CERTINFO / CURLINFO_CERTINFO */
	struct curl_certinfo {
	int num_of_certs; /* number of certificates with information */
	struct curl_slist *certinfo; / for each index in this array, there's a

lib/Makefile.inc+0 -2

@@ -44,7 +44,6 @@ LIB_VAUTH_HFILES = \

	LIB_VTLS_CFILES = \
	vtls/bearssl.c \
-	vtls/gskit.c \
	vtls/gtls.c \
	vtls/hostcheck.c \
	vtls/keylog.c \
@@ -61,7 +60,6 @@ LIB_VTLS_CFILES = \

	LIB_VTLS_HFILES = \
	vtls/bearssl.h \
-	vtls/gskit.h \
	vtls/gtls.h \
	vtls/hostcheck.h \
	vtls/keylog.h \

lib/config-os400.h+0 -3

@@ -338,9 +338,6 @@
	/* Define to the function return type for send. */
	#define SEND_TYPE_RETV int

-	/* Define to use the GSKit package. */
-	#define USE_GSKIT
-
	/* Define to use the OS/400 crypto library. */
	#define USE_OS400CRYPTO

lib/curl_setup.h+1 -1

@@ -647,7 +647,7 @@

	#if defined(USE_GNUTLS) \|\| defined(USE_OPENSSL) \|\| defined(USE_MBEDTLS) \|\| \
	defined(USE_WOLFSSL) \|\| defined(USE_SCHANNEL) \|\| defined(USE_SECTRANSP) \|\| \
-	defined(USE_GSKIT) \|\| defined(USE_BEARSSL) \|\| defined(USE_RUSTLS)
+	defined(USE_BEARSSL) \|\| defined(USE_RUSTLS)
	#define USE_SSL /* SSL support has been enabled */
	#endif

lib/rand.c+1 -1

@@ -188,7 +188,7 @@ static CURLcode randit(struct Curl_easy data, unsigned int rnd)
	* 'rnd' points to.
	*
	* If libcurl is built without TLS support or with a TLS backend that lacks a
-	* proper random API (rustls, Gskit or mbedTLS), this function will use "weak"
+	* proper random API (rustls or mbedTLS), this function will use "weak"
	* random.
	*
	* When built with TLS support and a backend that offers strong random, it

lib/rand.h+0 -14

@@ -24,20 +24,6 @@
	*
	***************************************************************************/

-	/*
-	* Curl_rand() stores 'num' number of random unsigned characters in the buffer
-	* 'rnd' points to.
-	*
-	* If libcurl is built without TLS support or with a TLS backend that lacks a
-	* proper random API (Gskit or mbedTLS), this function will use "weak" random.
-	*
-	* When built with TLS support and a backend that offers strong random, it
-	* will return error if it cannot provide strong random values.
-	*
-	* NOTE: 'data' may be passed in as NULL when coming from external API without
-	* easy handle!
-	*
-	*/
	CURLcode Curl_rand(struct Curl_easy data, unsigned char rnd, size_t num);

	/*

lib/setup-os400.h+0 -88

@@ -57,94 +57,6 @@ extern int Curl_getnameinfo_a(const struct sockaddr *sa,
	int flags);
	#define getnameinfo Curl_getnameinfo_a

-
-	/* GSKit wrappers. */
-
-	extern int Curl_gsk_environment_open(gsk_handle * my_env_handle);
-	#define gsk_environment_open Curl_gsk_environment_open
-
-	extern int Curl_gsk_secure_soc_open(gsk_handle my_env_handle,
-	gsk_handle * my_session_handle);
-	#define gsk_secure_soc_open Curl_gsk_secure_soc_open
-
-	extern int Curl_gsk_environment_close(gsk_handle * my_env_handle);
-	#define gsk_environment_close Curl_gsk_environment_close
-
-	extern int Curl_gsk_secure_soc_close(gsk_handle * my_session_handle);
-	#define gsk_secure_soc_close Curl_gsk_secure_soc_close
-
-	extern int Curl_gsk_environment_init(gsk_handle my_env_handle);
-	#define gsk_environment_init Curl_gsk_environment_init
-
-	extern int Curl_gsk_secure_soc_init(gsk_handle my_session_handle);
-	#define gsk_secure_soc_init Curl_gsk_secure_soc_init
-
-	extern int Curl_gsk_attribute_set_buffer_a(gsk_handle my_gsk_handle,
-	GSK_BUF_ID bufID,
-	const char *buffer,
-	int bufSize);
-	#define gsk_attribute_set_buffer Curl_gsk_attribute_set_buffer_a
-
-	extern int Curl_gsk_attribute_set_enum(gsk_handle my_gsk_handle,
-	GSK_ENUM_ID enumID,
-	GSK_ENUM_VALUE enumValue);
-	#define gsk_attribute_set_enum Curl_gsk_attribute_set_enum
-
-	extern int Curl_gsk_attribute_set_numeric_value(gsk_handle my_gsk_handle,
-	GSK_NUM_ID numID,
-	int numValue);
-	#define gsk_attribute_set_numeric_value Curl_gsk_attribute_set_numeric_value
-
-	extern int Curl_gsk_attribute_set_callback(gsk_handle my_gsk_handle,
-	GSK_CALLBACK_ID callBackID,
-	void *callBackAreaPtr);
-	#define gsk_attribute_set_callback Curl_gsk_attribute_set_callback
-
-	extern int Curl_gsk_attribute_get_buffer_a(gsk_handle my_gsk_handle,
-	GSK_BUF_ID bufID,
-	const char **buffer,
-	int *bufSize);
-	#define gsk_attribute_get_buffer Curl_gsk_attribute_get_buffer_a
-
-	extern int Curl_gsk_attribute_get_enum(gsk_handle my_gsk_handle,
-	GSK_ENUM_ID enumID,
-	GSK_ENUM_VALUE *enumValue);
-	#define gsk_attribute_get_enum Curl_gsk_attribute_get_enum
-
-	extern int Curl_gsk_attribute_get_numeric_value(gsk_handle my_gsk_handle,
-	GSK_NUM_ID numID,
-	int *numValue);
-	#define gsk_attribute_get_numeric_value Curl_gsk_attribute_get_numeric_value
-
-	extern int Curl_gsk_attribute_get_cert_info(gsk_handle my_gsk_handle,
-	GSK_CERT_ID certID,
-	const gsk_cert_data_elem **certDataElem,
-	int *certDataElementCount);
-	#define gsk_attribute_get_cert_info Curl_gsk_attribute_get_cert_info
-
-	extern int Curl_gsk_secure_soc_misc(gsk_handle my_session_handle,
-	GSK_MISC_ID miscID);
-	#define gsk_secure_soc_misc Curl_gsk_secure_soc_misc
-
-	extern int Curl_gsk_secure_soc_read(gsk_handle my_session_handle,
-	char *readBuffer,
-	int readBufSize, int *amtRead);
-	#define gsk_secure_soc_read Curl_gsk_secure_soc_read
-
-	extern int Curl_gsk_secure_soc_write(gsk_handle my_session_handle,
-	char *writeBuffer,
-	int writeBufSize, int *amtWritten);
-	#define gsk_secure_soc_write Curl_gsk_secure_soc_write
-
-	extern const char * Curl_gsk_strerror_a(int gsk_return_value);
-	#define gsk_strerror Curl_gsk_strerror_a
-
-	extern int Curl_gsk_secure_soc_startInit(gsk_handle my_session_handle,
-	int IOCompletionPort,
-	Qso_OverlappedIO_t * communicationsArea);
-	#define gsk_secure_soc_startInit Curl_gsk_secure_soc_startInit
-
-
	/* GSSAPI wrappers. */

	extern OM_uint32 Curl_gss_import_name_a(OM_uint32 * minor_status,

lib/vtls/gskit.c+0 -1329

@@ -1,1329 +0,0 @@
-	/***************************************************************************
-	* _ _ ____ _
-	* Project ___\| \| \| \| _ \\| \|
-	* / __\| \| \| \| \|_) \| \|
-	* \| (__\| \|_\| \| _ <\| \|___
-	* \___\|\___/\|_\| \_\_____\|
-	*
-	* Copyright (C) Daniel Stenberg, <[email protected]>, et al.
-	*
-	* This software is licensed as described in the file COPYING, which
-	* you should have received as part of this distribution. The terms
-	* are also available at https://curl.se/docs/copyright.html.
-	*
-	* You may opt to use, copy, modify, merge, publish, distribute and/or sell
-	* copies of the Software, and permit persons to whom the Software is
-	* furnished to do so, under the terms of the COPYING file.
-	*
-	* This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
-	* KIND, either express or implied.
-	*
-	* SPDX-License-Identifier: curl
-	*
-	***************************************************************************/
-
-	#include "curl_setup.h"
-
-	#ifdef USE_GSKIT
-
-	#include <gskssl.h>
-	#include <qsoasync.h>
-	#undef HAVE_SOCKETPAIR /* because the native one isn't good enough */
-	#include "socketpair.h"
-	#include "strerror.h"
-
-	/* Some symbols are undefined/unsupported on OS400 versions < V7R1. */
-	#ifndef GSK_SSL_EXTN_SERVERNAME_REQUEST
-	#define GSK_SSL_EXTN_SERVERNAME_REQUEST 230
-	#endif
-
-	#ifndef GSK_TLSV10_CIPHER_SPECS
-	#define GSK_TLSV10_CIPHER_SPECS 236
-	#endif
-
-	#ifndef GSK_TLSV11_CIPHER_SPECS
-	#define GSK_TLSV11_CIPHER_SPECS 237
-	#endif
-
-	#ifndef GSK_TLSV12_CIPHER_SPECS
-	#define GSK_TLSV12_CIPHER_SPECS 238
-	#endif
-
-	#ifndef GSK_PROTOCOL_TLSV11
-	#define GSK_PROTOCOL_TLSV11 437
-	#endif
-
-	#ifndef GSK_PROTOCOL_TLSV12
-	#define GSK_PROTOCOL_TLSV12 438
-	#endif
-
-	#ifndef GSK_FALSE
-	#define GSK_FALSE 0
-	#endif
-
-	#ifndef GSK_TRUE
-	#define GSK_TRUE 1
-	#endif
-
-
-	#include <limits.h>
-
-	#include <curl/curl.h>
-	#include "urldata.h"
-	#include "sendf.h"
-	#include "gskit.h"
-	#include "vtls.h"
-	#include "vtls_int.h"
-	#include "connect.h" /* for the connect timeout */
-	#include "select.h"
-	#include "strcase.h"
-	#include "timediff.h"
-	#include "x509asn1.h"
-	#include "curl_printf.h"
-
-	#include "curl_memory.h"
-	/* The last #include file should be: */
-	#include "memdebug.h"
-
-
-	/* Directions. */
-	#define SOS_READ 0x01
-	#define SOS_WRITE 0x02
-
-	/* SSL version flags. */
-	#define CURL_GSKPROTO_SSLV2 0
-	#define CURL_GSKPROTO_SSLV2_MASK (1 << CURL_GSKPROTO_SSLV2)
-	#define CURL_GSKPROTO_SSLV3 1
-	#define CURL_GSKPROTO_SSLV3_MASK (1 << CURL_GSKPROTO_SSLV3)
-	#define CURL_GSKPROTO_TLSV10 2
-	#define CURL_GSKPROTO_TLSV10_MASK (1 << CURL_GSKPROTO_TLSV10)
-	#define CURL_GSKPROTO_TLSV11 3
-	#define CURL_GSKPROTO_TLSV11_MASK (1 << CURL_GSKPROTO_TLSV11)
-	#define CURL_GSKPROTO_TLSV12 4
-	#define CURL_GSKPROTO_TLSV12_MASK (1 << CURL_GSKPROTO_TLSV12)
-	#define CURL_GSKPROTO_LAST 5
-
-	struct gskit_ssl_backend_data {
-	gsk_handle handle;
-	int iocport;
-	int localfd;
-	int remotefd;
-	};
-
-	#define BACKEND ((struct gskit_ssl_backend_data *)connssl->backend)
-
-	/* Supported ciphers. */
-	struct gskit_cipher {
-	const char name; / Cipher name. */
-	const char gsktoken; / Corresponding token for GSKit String. */
-	unsigned int versions; /* SSL version flags. */
-	};
-
-	static const struct gskit_cipher ciphertable[] = {
-	{ "null-md5", "01",
-	CURL_GSKPROTO_SSLV3_MASK \| CURL_GSKPROTO_TLSV10_MASK \|
-	CURL_GSKPROTO_TLSV11_MASK \| CURL_GSKPROTO_TLSV12_MASK },
-	{ "null-sha", "02",
-	CURL_GSKPROTO_SSLV3_MASK \| CURL_GSKPROTO_TLSV10_MASK \|
-	CURL_GSKPROTO_TLSV11_MASK \| CURL_GSKPROTO_TLSV12_MASK },
-	{ "exp-rc4-md5", "03",
-	CURL_GSKPROTO_SSLV3_MASK \| CURL_GSKPROTO_TLSV10_MASK },
-	{ "rc4-md5", "04",
-	CURL_GSKPROTO_SSLV3_MASK \| CURL_GSKPROTO_TLSV10_MASK \|
-	CURL_GSKPROTO_TLSV11_MASK \| CURL_GSKPROTO_TLSV12_MASK },
-	{ "rc4-sha", "05",
-	CURL_GSKPROTO_SSLV3_MASK \| CURL_GSKPROTO_TLSV10_MASK \|
-	CURL_GSKPROTO_TLSV11_MASK \| CURL_GSKPROTO_TLSV12_MASK },
-	{ "exp-rc2-cbc-md5", "06",
-	CURL_GSKPROTO_SSLV3_MASK \| CURL_GSKPROTO_TLSV10_MASK },
-	{ "exp-des-cbc-sha", "09",
-	CURL_GSKPROTO_SSLV3_MASK \| CURL_GSKPROTO_TLSV10_MASK \|
-	CURL_GSKPROTO_TLSV11_MASK },
-	{ "des-cbc3-sha", "0A",
-	CURL_GSKPROTO_SSLV3_MASK \| CURL_GSKPROTO_TLSV10_MASK \|
-	CURL_GSKPROTO_TLSV11_MASK \| CURL_GSKPROTO_TLSV12_MASK },
-	{ "aes128-sha", "2F",
-	CURL_GSKPROTO_TLSV10_MASK \| CURL_GSKPROTO_TLSV11_MASK \|
-	CURL_GSKPROTO_TLSV12_MASK },
-	{ "aes256-sha", "35",
-	CURL_GSKPROTO_TLSV10_MASK \| CURL_GSKPROTO_TLSV11_MASK \|
-	CURL_GSKPROTO_TLSV12_MASK },
-	{ "null-sha256", "3B", CURL_GSKPROTO_TLSV12_MASK },
-	{ "aes128-sha256", "3C", CURL_GSKPROTO_TLSV12_MASK },
-	{ "aes256-sha256", "3D", CURL_GSKPROTO_TLSV12_MASK },
-	{ "aes128-gcm-sha256",
-	"9C", CURL_GSKPROTO_TLSV12_MASK },
-	{ "aes256-gcm-sha384",
-	"9D", CURL_GSKPROTO_TLSV12_MASK },
-	{ "rc4-md5", "1", CURL_GSKPROTO_SSLV2_MASK },
-	{ "exp-rc4-md5", "2", CURL_GSKPROTO_SSLV2_MASK },
-	{ "rc2-md5", "3", CURL_GSKPROTO_SSLV2_MASK },
-	{ "exp-rc2-md5", "4", CURL_GSKPROTO_SSLV2_MASK },
-	{ "des-cbc-md5", "6", CURL_GSKPROTO_SSLV2_MASK },
-	{ "des-cbc3-md5", "7", CURL_GSKPROTO_SSLV2_MASK },
-	{ (const char ) NULL, (const char ) NULL, 0 }
-	};
-
-
-	static bool is_separator(char c)
-	{
-	/* Return whether character is a cipher list separator. */
-	switch(c) {
-	case ' ':
-	case '\t':
-	case ':':
-	case ',':
-	case ';':
-	return true;
-	}
-	return false;
-	}
-
-
-	static CURLcode gskit_status(struct Curl_easy *data, int rc,
-	const char *procname, CURLcode defcode)
-	{
-	char buffer[STRERROR_LEN];
-	/* Process GSKit status and map it to a CURLcode. */
-	switch(rc) {
-	case GSK_OK:
-	case GSK_OS400_ASYNCHRONOUS_SOC_INIT:
-	return CURLE_OK;
-	case GSK_KEYRING_OPEN_ERROR:
-	case GSK_OS400_ERROR_NO_ACCESS:
-	return CURLE_SSL_CACERT_BADFILE;
-	case GSK_INSUFFICIENT_STORAGE:
-	return CURLE_OUT_OF_MEMORY;
-	case GSK_ERROR_BAD_V2_CIPHER:
-	case GSK_ERROR_BAD_V3_CIPHER:
-	case GSK_ERROR_NO_CIPHERS:
-	return CURLE_SSL_CIPHER;
-	case GSK_OS400_ERROR_NOT_TRUSTED_ROOT:
-	case GSK_ERROR_CERT_VALIDATION:
-	return CURLE_PEER_FAILED_VERIFICATION;
-	case GSK_OS400_ERROR_TIMED_OUT:
-	return CURLE_OPERATION_TIMEDOUT;
-	case GSK_WOULD_BLOCK:
-	return CURLE_AGAIN;
-	case GSK_OS400_ERROR_NOT_REGISTERED:
-	break;
-	case GSK_ERROR_IO:
-	switch(errno) {
-	case ENOMEM:
-	return CURLE_OUT_OF_MEMORY;
-	default:
-	failf(data, "%s I/O error: %s", procname,
-	Curl_strerror(errno, buffer, sizeof(buffer)));
-	break;
-	}
-	break;
-	default:
-	failf(data, "%s: %s", procname, gsk_strerror(rc));
-	break;
-	}
-	return defcode;
-	}
-
-
-	static CURLcode set_enum(struct Curl_easy *data, gsk_handle h,
-	GSK_ENUM_ID id, GSK_ENUM_VALUE value, bool unsupported_ok)
-	{
-	char buffer[STRERROR_LEN];
-	int rc = gsk_attribute_set_enum(h, id, value);
-
-	switch(rc) {
-	case GSK_OK:
-	return CURLE_OK;
-	case GSK_ERROR_IO:
-	failf(data, "gsk_attribute_set_enum() I/O error: %s",
-	Curl_strerror(errno, buffer, sizeof(buffer)));
-	break;
-	case GSK_ATTRIBUTE_INVALID_ID:
-	if(unsupported_ok)
-	return CURLE_UNSUPPORTED_PROTOCOL;
-	default:
-	failf(data, "gsk_attribute_set_enum(): %s", gsk_strerror(rc));
-	break;
-	}
-	return CURLE_SSL_CONNECT_ERROR;
-	}
-
-
-	static CURLcode set_buffer(struct Curl_easy *data, gsk_handle h,
-	GSK_BUF_ID id, const char *buf, bool unsupported_ok)
-	{
-	char buffer[STRERROR_LEN];
-	int rc = gsk_attribute_set_buffer(h, id, buf, 0);
-
-	switch(rc) {
-	case GSK_OK:
-	return CURLE_OK;
-	case GSK_ERROR_IO:
-	failf(data, "gsk_attribute_set_buffer() I/O error: %s",
-	Curl_strerror(errno, buffer, sizeof(buffer)));
-	break;
-	case GSK_ATTRIBUTE_INVALID_ID:
-	if(unsupported_ok)
-	return CURLE_UNSUPPORTED_PROTOCOL;
-	default:
-	failf(data, "gsk_attribute_set_buffer(): %s", gsk_strerror(rc));
-	break;
-	}
-	return CURLE_SSL_CONNECT_ERROR;
-	}
-
-
-	static CURLcode set_numeric(struct Curl_easy *data,
-	gsk_handle h, GSK_NUM_ID id, int value)
-	{
-	char buffer[STRERROR_LEN];
-	int rc = gsk_attribute_set_numeric_value(h, id, value);
-
-	switch(rc) {
-	case GSK_OK:
-	return CURLE_OK;
-	case GSK_ERROR_IO:
-	failf(data, "gsk_attribute_set_numeric_value() I/O error: %s",
-	Curl_strerror(errno, buffer, sizeof(buffer)));
-	break;
-	default:
-	failf(data, "gsk_attribute_set_numeric_value(): %s", gsk_strerror(rc));
-	break;
-	}
-	return CURLE_SSL_CONNECT_ERROR;
-	}
-
-
-	static CURLcode set_ciphers(struct Curl_cfilter cf, struct Curl_easy data,
-	gsk_handle h, unsigned int *protoflags)
-	{
-	struct ssl_primary_config *conn_config = Curl_ssl_cf_get_primary_config(cf);
-	struct connectdata *conn = data->conn;
-	const char *cipherlist = conn_config->cipher_list;
-	const char *clp;
-	const struct gskit_cipher *ctp;
-	int i;
-	int l;
-	bool unsupported;
-	CURLcode result;
-	struct {
-	char *buf;
-	char *ptr;
-	} ciphers[CURL_GSKPROTO_LAST];
-
-	/* Compile cipher list into GSKit-compatible cipher lists. */
-
-	if(!cipherlist)
-	return CURLE_OK;
-	while(is_separator(cipherlist)) / Skip initial separators. */
-	cipherlist++;
-	if(!*cipherlist)
-	return CURLE_OK;
-
-	/* We allocate GSKit buffers of the same size as the input string: since
-	GSKit tokens are always shorter than their cipher names, allocated buffers
-	will always be large enough to accommodate the result. */
-	l = strlen(cipherlist) + 1;
-	memset(ciphers, 0, sizeof(ciphers));
-	for(i = 0; i < CURL_GSKPROTO_LAST; i++) {
-	ciphers[i].buf = malloc(l);
-	if(!ciphers[i].buf) {
-	while(i--)
-	free(ciphers[i].buf);
-	return CURLE_OUT_OF_MEMORY;
-	}
-	ciphers[i].ptr = ciphers[i].buf;
-	*ciphers[i].ptr = '\0';
-	}
-
-	/* Process each cipher in input string. */
-	unsupported = FALSE;
-	result = CURLE_OK;
-	for(;;) {
-	for(clp = cipherlist; cipherlist && !is_separator(cipherlist);)
-	cipherlist++;
-	l = cipherlist - clp;
-	if(!l)
-	break;
-	/* Search the cipher in our table. */
-	for(ctp = ciphertable; ctp->name; ctp++)
-	if(strncasecompare(ctp->name, clp, l) && !ctp->name[l])
-	break;
-	if(!ctp->name) {
-	failf(data, "Unknown cipher %.*s", l, clp);
-	result = CURLE_SSL_CIPHER;
-	}
-	else {
-	unsupported \|= !(ctp->versions & (CURL_GSKPROTO_SSLV2_MASK \|
-	CURL_GSKPROTO_SSLV3_MASK \| CURL_GSKPROTO_TLSV10_MASK));
-	for(i = 0; i < CURL_GSKPROTO_LAST; i++) {
-	if(ctp->versions & (1 << i)) {
-	strcpy(ciphers[i].ptr, ctp->gsktoken);
-	ciphers[i].ptr += strlen(ctp->gsktoken);
-	}
-	}
-	}
-
-	/* Advance to next cipher name or end of string. */
-	while(is_separator(*cipherlist))
-	cipherlist++;
-	}
-
-	/* Disable protocols with empty cipher lists. */
-	for(i = 0; i < CURL_GSKPROTO_LAST; i++) {
-	if(!(*protoflags & (1 << i)) \|\| !ciphers[i].buf[0]) {
-	*protoflags &= ~(1 << i);
-	ciphers[i].buf[0] = '\0';
-	}
-	}
-
-	/* Try to set-up TLSv1.1 and TLSv2.1 ciphers. */
-	if(*protoflags & CURL_GSKPROTO_TLSV11_MASK) {
-	result = set_buffer(data, h, GSK_TLSV11_CIPHER_SPECS,
-	ciphers[CURL_GSKPROTO_TLSV11].buf, TRUE);
-	if(result == CURLE_UNSUPPORTED_PROTOCOL) {
-	result = CURLE_OK;
-	if(unsupported) {
-	failf(data, "TLSv1.1-only ciphers are not yet supported");
-	result = CURLE_SSL_CIPHER;
-	}
-	}
-	}
-	if(!result && (*protoflags & CURL_GSKPROTO_TLSV12_MASK)) {
-	result = set_buffer(data, h, GSK_TLSV12_CIPHER_SPECS,
-	ciphers[CURL_GSKPROTO_TLSV12].buf, TRUE);
-	if(result == CURLE_UNSUPPORTED_PROTOCOL) {
-	result = CURLE_OK;
-	if(unsupported) {
-	failf(data, "TLSv1.2-only ciphers are not yet supported");
-	result = CURLE_SSL_CIPHER;
-	}
-	}
-	}
-
-	/* Try to set-up TLSv1.0 ciphers. If not successful, concatenate them to
-	the SSLv3 ciphers. OS/400 prior to version 7.1 will understand it. */
-	if(!result && (*protoflags & CURL_GSKPROTO_TLSV10_MASK)) {
-	result = set_buffer(data, h, GSK_TLSV10_CIPHER_SPECS,
-	ciphers[CURL_GSKPROTO_TLSV10].buf, TRUE);
-	if(result == CURLE_UNSUPPORTED_PROTOCOL) {
-	result = CURLE_OK;
-	strcpy(ciphers[CURL_GSKPROTO_SSLV3].ptr,
-	ciphers[CURL_GSKPROTO_TLSV10].ptr);
-	}
-	}
-
-	/* Set-up other ciphers. */
-	if(!result && (*protoflags & CURL_GSKPROTO_SSLV3_MASK))
-	result = set_buffer(data, h, GSK_V3_CIPHER_SPECS,
-	ciphers[CURL_GSKPROTO_SSLV3].buf, FALSE);
-	if(!result && (*protoflags & CURL_GSKPROTO_SSLV2_MASK))
-	result = set_buffer(data, h, GSK_V2_CIPHER_SPECS,
-	ciphers[CURL_GSKPROTO_SSLV2].buf, FALSE);
-
-	/* Clean-up. */
-	for(i = 0; i < CURL_GSKPROTO_LAST; i++)
-	free(ciphers[i].buf);
-
-	return result;
-	}
-
-
-	static int gskit_init(void)
-	{
-	/* No initialization needed. */
-	return 1;
-	}
-
-
-	static void gskit_cleanup(void)
-	{
-	/* Nothing to do. */
-	}
-
-
-	static CURLcode init_environment(struct Curl_easy *data,
-	gsk_handle envir, const char appid,
-	const char file, const char label,
-	const char *password)
-	{
-	int rc;
-	CURLcode result;
-	gsk_handle h;
-
-	/* Creates the GSKit environment. */
-
-	rc = gsk_environment_open(&h);
-	switch(rc) {
-	case GSK_OK:
-	break;
-	case GSK_INSUFFICIENT_STORAGE:
-	return CURLE_OUT_OF_MEMORY;
-	default:
-	failf(data, "gsk_environment_open(): %s", gsk_strerror(rc));
-	return CURLE_SSL_CONNECT_ERROR;
-	}
-
-	result = set_enum(data, h, GSK_SESSION_TYPE, GSK_CLIENT_SESSION, FALSE);
-	if(!result && appid)
-	result = set_buffer(data, h, GSK_OS400_APPLICATION_ID, appid, FALSE);
-	if(!result && file)
-	result = set_buffer(data, h, GSK_KEYRING_FILE, file, FALSE);
-	if(!result && label)
-	result = set_buffer(data, h, GSK_KEYRING_LABEL, label, FALSE);
-	if(!result && password)
-	result = set_buffer(data, h, GSK_KEYRING_PW, password, FALSE);
-
-	if(!result) {
-	/* Locate CAs, Client certificate and key according to our settings.
-	Note: this call may be blocking for some tenths of seconds. */
-	result = gskit_status(data, gsk_environment_init(h),
-	"gsk_environment_init()", CURLE_SSL_CERTPROBLEM);
-	if(!result) {
-	*envir = h;
-	return result;
-	}
-	}
-	/* Error: rollback. */
-	gsk_environment_close(&h);
-	return result;
-	}
-
-
-	static void cancel_async_handshake(struct Curl_cfilter *cf,
-	struct Curl_easy *data)
-	{
-	struct ssl_connect_data *connssl = cf->ctx;
-	Qso_OverlappedIO_t cstat;
-
-	(void)data;
-	DEBUGASSERT(BACKEND);
-
-	if(QsoCancelOperation(Curl_conn_cf_get_socket(cf, data), 0) > 0)
-	QsoWaitForIOCompletion(BACKEND->iocport, &cstat, (struct timeval *) NULL);
-	}
-
-
-	static void close_async_handshake(struct ssl_connect_data *connssl)
-	{
-	DEBUGASSERT(BACKEND);
-	QsoDestroyIOCompletionPort(BACKEND->iocport);
-	BACKEND->iocport = -1;
-	}
-
-	static int pipe_ssloverssl(struct Curl_cfilter cf, struct Curl_easy data,
-	int directions)
-	{
-	struct ssl_connect_data *connssl = cf->ctx;
-	struct Curl_cfilter *cf_ssl_next = Curl_ssl_cf_get_ssl(cf->next);
-	struct ssl_connect_data *connssl_next = cf_ssl_next?
-	cf_ssl_next->ctx : NULL;
-	struct gskit_ssl_backend_data *backend_next;
-	struct pollfd fds[2];
-	int n;
-	int m;
-	int i;
-	int ret = 0;
-	char buf[CURL_MAX_WRITE_SIZE];
-
-	DEBUGASSERT(BACKEND);
-
-	if(!connssl_next)
-	return 0; /* No SSL over SSL: OK. */
-
-	DEBUGASSERT(connssl_next->backend);
-	backend_next = (struct gskit_ssl_backend_data *)connssl_next->backend;
-
-	n = 1;
-	fds[0].fd = BACKEND->remotefd;
-	fds[1].fd = Curl_conn_cf_get_socket(cf, data);
-
-	if(directions & SOS_READ) {
-	fds[0].events \|= POLLOUT;
-	}
-	if(directions & SOS_WRITE) {
-	n = 2;
-	fds[0].events \|= POLLIN;
-	fds[1].events \|= POLLOUT;
-	}
-	i = Curl_poll(fds, n, 0);
-	if(i < 0)
-	return -1; /* Select error. */
-
-	if(fds[0].revents & POLLOUT) {
-	/* Try getting data from HTTPS proxy and pipe it upstream. */
-	n = 0;
-	i = gsk_secure_soc_read(backend_next->handle, buf, sizeof(buf), &n);
-	switch(i) {
-	case GSK_OK:
-	if(n) {
-	i = write(BACKEND->remotefd, buf, n);
-	if(i < 0)
-	return -1;
-	ret = 1;
-	}
-	break;
-	case GSK_OS400_ERROR_TIMED_OUT:
-	case GSK_WOULD_BLOCK:
-	break;
-	default:
-	return -1;
-	}
-	}
-
-	if((fds[0].revents & POLLIN) && (fds[1].revents & POLLOUT)) {
-	/* Pipe data to HTTPS proxy. */
-	n = read(BACKEND->remotefd, buf, sizeof(buf));
-	if(n < 0)
-	return -1;
-	if(n) {
-	i = gsk_secure_soc_write(backend_next->handle, buf, n, &m);
-	if(i != GSK_OK \|\| n != m)
-	return -1;
-	ret = 1;
-	}
-	}
-
-	return ret; /* OK */
-	}
-
-
-	static void close_one(struct Curl_cfilter cf, struct Curl_easy data)
-	{
-	struct ssl_connect_data *connssl = cf->ctx;
-
-	DEBUGASSERT(BACKEND);
-	if(BACKEND->handle) {
-	gskit_status(data, gsk_secure_soc_close(&BACKEND->handle),
-	"gsk_secure_soc_close()", 0);
-	/* Last chance to drain output. */
-	while(pipe_ssloverssl(cf, data, SOS_WRITE) > 0)
-	;
-	BACKEND->handle = (gsk_handle) NULL;
-	if(BACKEND->localfd >= 0) {
-	close(BACKEND->localfd);
-	BACKEND->localfd = -1;
-	}
-	if(BACKEND->remotefd >= 0) {
-	close(BACKEND->remotefd);
-	BACKEND->remotefd = -1;
-	}
-	}
-	if(BACKEND->iocport >= 0)
-	close_async_handshake(connssl);
-	}
-
-
-	static ssize_t gskit_send(struct Curl_cfilter cf, struct Curl_easy data,
-	const void mem, size_t len, CURLcode curlcode)
-	{
-	struct connectdata *conn = cf->conn;
-	struct ssl_connect_data *connssl = cf->ctx;
-	CURLcode cc = CURLE_SEND_ERROR;
-	int written;
-
-	DEBUGASSERT(BACKEND);
-
-	if(pipe_ssloverssl(cf, data, SOS_WRITE) >= 0) {
-	cc = gskit_status(data,
-	gsk_secure_soc_write(BACKEND->handle,
-	(char *) mem, (int) len, &written),
-	"gsk_secure_soc_write()", CURLE_SEND_ERROR);
-	if(cc == CURLE_OK)
-	if(pipe_ssloverssl(cf, data, SOS_WRITE) < 0)
-	cc = CURLE_SEND_ERROR;
-	}
-	if(cc != CURLE_OK) {
-	*curlcode = cc;
-	written = -1;
-	}
-	return (ssize_t) written; /* number of bytes */
-	}
-
-
-	static ssize_t gskit_recv(struct Curl_cfilter cf, struct Curl_easy data,
-	char buf, size_t buffersize, CURLcode curlcode)
-	{
-	struct connectdata *conn = cf->conn;
-	struct ssl_connect_data *connssl = cf->ctx;
-	int nread;
-	CURLcode cc = CURLE_RECV_ERROR;
-
-	(void)data;
-	DEBUGASSERT(BACKEND);
-
-	if(pipe_ssloverssl(cf, data, SOS_READ) >= 0) {
-	int buffsize = buffersize > (size_t) INT_MAX? INT_MAX: (int) buffersize;
-	cc = gskit_status(data, gsk_secure_soc_read(BACKEND->handle,
-	buf, buffsize, &nread),
-	"gsk_secure_soc_read()", CURLE_RECV_ERROR);
-	}
-	switch(cc) {
-	case CURLE_OK:
-	break;
-	case CURLE_OPERATION_TIMEDOUT:
-	cc = CURLE_AGAIN;
-	default:
-	*curlcode = cc;
-	nread = -1;
-	break;
-	}
-	return (ssize_t) nread;
-	}
-
-	static CURLcode
-	set_ssl_version_min_max(unsigned int *protoflags,
-	struct Curl_cfilter *cf,
-	struct Curl_easy *data)
-	{
-	struct ssl_primary_config *conn_config = Curl_ssl_cf_get_primary_config(cf);
-	struct connectdata *conn = data->conn;
-	long ssl_version = conn_config->version;
-	long ssl_version_max = conn_config->version_max;
-	long i = ssl_version;
-	switch(ssl_version_max) {
-	case CURL_SSLVERSION_MAX_NONE:
-	case CURL_SSLVERSION_MAX_DEFAULT:
-	ssl_version_max = CURL_SSLVERSION_TLSv1_2;
-	break;
-	}
-	for(; i <= (ssl_version_max >> 16); ++i) {
-	switch(i) {
-	case CURL_SSLVERSION_TLSv1_0:
-	*protoflags \|= CURL_GSKPROTO_TLSV10_MASK;
-	break;
-	case CURL_SSLVERSION_TLSv1_1:
-	*protoflags \|= CURL_GSKPROTO_TLSV11_MASK;
-	break;
-	case CURL_SSLVERSION_TLSv1_2:
-	*protoflags \|= CURL_GSKPROTO_TLSV11_MASK;
-	break;
-	case CURL_SSLVERSION_TLSv1_3:
-	failf(data, "GSKit: TLS 1.3 is not yet supported");
-	return CURLE_SSL_CONNECT_ERROR;
-	}
-	}
-
-	return CURLE_OK;
-	}
-
-	static CURLcode gskit_connect_step1(struct Curl_cfilter *cf,
-	struct Curl_easy *data)
-	{
-	struct ssl_connect_data *connssl = cf->ctx;
-	struct ssl_primary_config *conn_config = Curl_ssl_cf_get_primary_config(cf);
-	struct ssl_config_data *ssl_config = Curl_ssl_cf_get_config(cf, data);
-	struct Curl_cfilter *cf_ssl_next = Curl_ssl_cf_get_ssl(cf->next);
-	struct ssl_connect_data *connssl_next = cf_ssl_next?
-	cf_ssl_next->ctx : NULL;
-	gsk_handle envir;
-	CURLcode result;
-	const char * const keyringfile = conn_config->CAfile;
-	const char * const keyringpwd = ssl_config->key_passwd;
-	const char * const keyringlabel = ssl_config->primary.clientcert;
-	const long int ssl_version = conn_config->version;
-	const bool verifypeer = conn_config->verifypeer;
-	const char *hostname = connssl->hostname;
-	const char *sni;
-	unsigned int protoflags = 0;
-	Qso_OverlappedIO_t commarea;
-	int sockpair[2];
-	static const int sobufsize = CURL_MAX_WRITE_SIZE;
-
-	/* Create SSL environment, start (preferably asynchronous) handshake. */
-	DEBUGASSERT(BACKEND);
-
-	BACKEND->handle = (gsk_handle) NULL;
-	BACKEND->iocport = -1;
-	BACKEND->localfd = -1;
-	BACKEND->remotefd = -1;
-
-	/* GSKit supports two ways of specifying an SSL context: either by
-	* application identifier (that should have been defined at the system
-	* level) or by keyring file, password and certificate label.
-	* Local certificate name (CURLOPT_SSLCERT) is used to hold either the
-	* application identifier of the certificate label.
-	* Key password (CURLOPT_KEYPASSWD) holds the keyring password.
-	* It is not possible to have different keyrings for the CAs and the
-	* local certificate. We thus use the CA file (CURLOPT_CAINFO) to identify
-	* the keyring file.
-	* If no key password is given and the keyring is the system keyring,
-	* application identifier mode is tried first, as recommended in IBM doc.
-	*/
-
-	envir = (gsk_handle) NULL;
-
-	if(keyringlabel && *keyringlabel && !keyringpwd &&
-	!strcmp(keyringfile, CURL_CA_BUNDLE)) {
-	/* Try application identifier mode. */
-	init_environment(data, &envir, keyringlabel, (const char *) NULL,
-	(const char ) NULL, (const char ) NULL);
-	}
-
-	if(!envir) {
-	/* Use keyring mode. */
-	result = init_environment(data, &envir, (const char *) NULL,
-	keyringfile, keyringlabel, keyringpwd);
-	if(result)
-	return result;
-	}
-
-	/* Create secure session. */
-	result = gskit_status(data, gsk_secure_soc_open(envir, &BACKEND->handle),
-	"gsk_secure_soc_open()", CURLE_SSL_CONNECT_ERROR);
-	gsk_environment_close(&envir);
-	if(result)
-	return result;
-
-	/* Establish a pipelining socket pair for SSL over SSL. */
-	if(connssl_next) {
-	if(Curl_socketpair(0, 0, 0, sockpair))
-	return CURLE_SSL_CONNECT_ERROR;
-	BACKEND->localfd = sockpair[0];
-	BACKEND->remotefd = sockpair[1];
-	setsockopt(BACKEND->localfd, SOL_SOCKET, SO_RCVBUF,
-	(void *) &sobufsize, sizeof(sobufsize));
-	setsockopt(BACKEND->remotefd, SOL_SOCKET, SO_RCVBUF,
-	(void *) &sobufsize, sizeof(sobufsize));
-	setsockopt(BACKEND->localfd, SOL_SOCKET, SO_SNDBUF,
-	(void *) &sobufsize, sizeof(sobufsize));
-	setsockopt(BACKEND->remotefd, SOL_SOCKET, SO_SNDBUF,
-	(void *) &sobufsize, sizeof(sobufsize));
-	curlx_nonblock(BACKEND->localfd, TRUE);
-	curlx_nonblock(BACKEND->remotefd, TRUE);
-	}
-
-	/* Determine which SSL/TLS version should be enabled. */
-	sni = hostname;
-	switch(ssl_version) {
-	case CURL_SSLVERSION_SSLv2:
-	protoflags = CURL_GSKPROTO_SSLV2_MASK;
-	sni = NULL;
-	break;
-	case CURL_SSLVERSION_SSLv3:
-	protoflags = CURL_GSKPROTO_SSLV3_MASK;
-	sni = NULL;
-	break;
-	case CURL_SSLVERSION_DEFAULT:
-	case CURL_SSLVERSION_TLSv1:
-	protoflags = CURL_GSKPROTO_TLSV10_MASK \|
-	CURL_GSKPROTO_TLSV11_MASK \| CURL_GSKPROTO_TLSV12_MASK;
-	break;
-	case CURL_SSLVERSION_TLSv1_0:
-	case CURL_SSLVERSION_TLSv1_1:
-	case CURL_SSLVERSION_TLSv1_2:
-	case CURL_SSLVERSION_TLSv1_3:
-	result = set_ssl_version_min_max(&protoflags, cf, data);
-	if(result != CURLE_OK)
-	return result;
-	break;
-	default:
-	failf(data, "Unrecognized parameter passed via CURLOPT_SSLVERSION");
-	return CURLE_SSL_CONNECT_ERROR;
-	}
-
-	/* Process SNI. Ignore if not supported (on OS400 < V7R1). */
-	if(sni) {
-	char *snihost = Curl_ssl_snihost(data, sni, NULL);
-	if(!snihost) {
-	failf(data, "Failed to set SNI");
-	return CURLE_SSL_CONNECT_ERROR;
-	}
-	result = set_buffer(data, BACKEND->handle,
-	GSK_SSL_EXTN_SERVERNAME_REQUEST, snihost, TRUE);
-	if(result == CURLE_UNSUPPORTED_PROTOCOL)
-	result = CURLE_OK;
-	}
-
-	/* Set session parameters. */
-	if(!result) {
-	/* Compute the handshake timeout. Since GSKit granularity is 1 second,
-	we round up the required value. */
-	timediff_t timeout = Curl_timeleft(data, NULL, TRUE);
-	if(timeout < 0)
-	result = CURLE_OPERATION_TIMEDOUT;
-	else
-	result = set_numeric(data, BACKEND->handle, GSK_HANDSHAKE_TIMEOUT,
-	(timeout + 999) / 1000);
-	}
-	if(!result)
-	result = set_numeric(data, BACKEND->handle, GSK_OS400_READ_TIMEOUT, 1);
-	if(!result)
-	result = set_numeric(data, BACKEND->handle, GSK_FD, BACKEND->localfd >= 0?
-	BACKEND->localfd: Curl_conn_cf_get_socket(cf, data));
-	if(!result)
-	result = set_ciphers(cf, data, BACKEND->handle, &protoflags);
-	if(!protoflags) {
-	failf(data, "No SSL protocol/cipher combination enabled");
-	result = CURLE_SSL_CIPHER;
-	}
-	if(!result)
-	result = set_enum(data, BACKEND->handle, GSK_PROTOCOL_SSLV2,
-	(protoflags & CURL_GSKPROTO_SSLV2_MASK)?
-	GSK_PROTOCOL_SSLV2_ON: GSK_PROTOCOL_SSLV2_OFF, FALSE);
-	if(!result)
-	result = set_enum(data, BACKEND->handle, GSK_PROTOCOL_SSLV3,
-	(protoflags & CURL_GSKPROTO_SSLV3_MASK)?
-	GSK_PROTOCOL_SSLV3_ON: GSK_PROTOCOL_SSLV3_OFF, FALSE);
-	if(!result)
-	result = set_enum(data, BACKEND->handle, GSK_PROTOCOL_TLSV1,
-	(protoflags & CURL_GSKPROTO_TLSV10_MASK)?
-	GSK_PROTOCOL_TLSV1_ON: GSK_PROTOCOL_TLSV1_OFF, FALSE);
-	if(!result) {
-	result = set_enum(data, BACKEND->handle, GSK_PROTOCOL_TLSV11,
-	(protoflags & CURL_GSKPROTO_TLSV11_MASK)?
-	GSK_TRUE: GSK_FALSE, TRUE);
-	if(result == CURLE_UNSUPPORTED_PROTOCOL) {
-	result = CURLE_OK;
-	if(protoflags == CURL_GSKPROTO_TLSV11_MASK) {
-	failf(data, "TLS 1.1 not yet supported");
-	result = CURLE_SSL_CIPHER;
-	}
-	}
-	}
-	if(!result) {
-	result = set_enum(data, BACKEND->handle, GSK_PROTOCOL_TLSV12,
-	(protoflags & CURL_GSKPROTO_TLSV12_MASK)?
-	GSK_TRUE: GSK_FALSE, TRUE);
-	if(result == CURLE_UNSUPPORTED_PROTOCOL) {
-	result = CURLE_OK;
-	if(protoflags == CURL_GSKPROTO_TLSV12_MASK) {
-	failf(data, "TLS 1.2 not yet supported");
-	result = CURLE_SSL_CIPHER;
-	}
-	}
-	}
-	if(!result)
-	result = set_enum(data, BACKEND->handle, GSK_SERVER_AUTH_TYPE,
-	verifypeer? GSK_SERVER_AUTH_FULL:
-	GSK_SERVER_AUTH_PASSTHRU, FALSE);
-
-	if(!result) {
-	/* Start handshake. Try asynchronous first. */
-	memset(&commarea, 0, sizeof(commarea));
-	BACKEND->iocport = QsoCreateIOCompletionPort();
-	if(BACKEND->iocport != -1) {
-	result = gskit_status(data,
-	gsk_secure_soc_startInit(BACKEND->handle,
-	BACKEND->iocport,
-	&commarea),
-	"gsk_secure_soc_startInit()",
-	CURLE_SSL_CONNECT_ERROR);
-	if(!result) {
-	connssl->connecting_state = ssl_connect_2;
-	return CURLE_OK;
-	}
-	else
-	close_async_handshake(connssl);
-	}
-	else if(errno != ENOBUFS)
-	result = gskit_status(data, GSK_ERROR_IO,
-	"QsoCreateIOCompletionPort()", 0);
-	else if(connssl_next) {
-	/* Cannot pipeline while handshaking synchronously. */
-	result = CURLE_SSL_CONNECT_ERROR;
-	}
-	else {
-	/* No more completion port available. Use synchronous IO. */
-	result = gskit_status(data, gsk_secure_soc_init(BACKEND->handle),
-	"gsk_secure_soc_init()", CURLE_SSL_CONNECT_ERROR);
-	if(!result) {
-	connssl->connecting_state = ssl_connect_3;
-	return CURLE_OK;
-	}
-	}
-	}
-
-	/* Error: rollback. */
-	close_one(cf, data);
-	return result;
-	}
-
-
-	static CURLcode gskit_connect_step2(struct Curl_cfilter *cf,
-	struct Curl_easy *data,
-	bool nonblocking)
-	{
-	struct ssl_connect_data *connssl = cf->ctx;
-	Qso_OverlappedIO_t cstat;
-	struct timeval stmv;
-	CURLcode result;
-
-	/* Poll or wait for end of SSL asynchronous handshake. */
-	DEBUGASSERT(BACKEND);
-
-	for(;;) {
-	timediff_t timeout_ms = nonblocking? 0: Curl_timeleft(data, NULL, TRUE);
-	stmv.tv_sec = 0;
-	stmv.tv_usec = 0;
-	if(timeout_ms < 0)
-	timeout_ms = 0;
-	switch(QsoWaitForIOCompletion(BACKEND->iocport, &cstat,
-	curlx_mstotv(&stmv, timeout_ms))) {
-	case 1: /* Operation complete. */
-	break;
-	case -1: /* An error occurred: handshake still in progress. */
-	if(errno == EINTR) {
-	if(nonblocking)
-	return CURLE_OK;
-	continue; /* Retry. */
-	}
-	if(errno != ETIME) {
-	char buffer[STRERROR_LEN];
-	failf(data, "QsoWaitForIOCompletion() I/O error: %s",
-	Curl_strerror(errno, buffer, sizeof(buffer)));
-	cancel_async_handshake(cf, data);
-	close_async_handshake(connssl);
-	return CURLE_SSL_CONNECT_ERROR;
-	}
-	/* FALL INTO... */
-	case 0: /* Handshake in progress, timeout occurred. */
-	if(nonblocking)
-	return CURLE_OK;
-	cancel_async_handshake(cf, data);
-	close_async_handshake(connssl);
-	return CURLE_OPERATION_TIMEDOUT;
-	}
-	break;
-	}
-	result = gskit_status(data, cstat.returnValue, "SSL handshake",
-	CURLE_SSL_CONNECT_ERROR);
-	if(!result)
-	connssl->connecting_state = ssl_connect_3;
-	close_async_handshake(connssl);
-	return result;
-	}
-
-
-	static CURLcode gskit_connect_step3(struct Curl_cfilter *cf,
-	struct Curl_easy *data)
-	{
-	struct ssl_connect_data *connssl = cf->ctx;
-	const gsk_cert_data_elem *cdev;
-	int cdec;
-	const gsk_cert_data_elem *p;
-	const char cert = (const char ) NULL;
-	const char certend = (const char ) NULL;
-	const char *ptr;
-	CURLcode result;
-
-	/* SSL handshake done: gather certificate info and verify host. */
-	DEBUGASSERT(BACKEND);
-
-	if(gskit_status(data, gsk_attribute_get_cert_info(BACKEND->handle,
-	GSK_PARTNER_CERT_INFO,
-	&cdev, &cdec),
-	"gsk_attribute_get_cert_info()", CURLE_SSL_CONNECT_ERROR) ==
-	CURLE_OK) {
-	int i;
-
-	infof(data, "Server certificate:");
-	p = cdev;
-	for(i = 0; i++ < cdec; p++)
-	switch(p->cert_data_id) {
-	case CERT_BODY_DER:
-	cert = p->cert_data_p;
-	certend = cert + cdev->cert_data_l;
-	break;
-	case CERT_DN_PRINTABLE:
-	infof(data, "\t subject: %.*s", p->cert_data_l, p->cert_data_p);
-	break;
-	case CERT_ISSUER_DN_PRINTABLE:
-	infof(data, "\t issuer: %.*s", p->cert_data_l, p->cert_data_p);
-	break;
-	case CERT_VALID_FROM:
-	infof(data, "\t start date: %.*s", p->cert_data_l, p->cert_data_p);
-	break;
-	case CERT_VALID_TO:
-	infof(data, "\t expire date: %.*s", p->cert_data_l, p->cert_data_p);
-	break;
-	}
-	}
-
-	/* Verify host. */
-	result = Curl_verifyhost(cf, data, cert, certend);
-	if(result)
-	return result;
-
-	/* The only place GSKit can get the whole CA chain is a validation
-	callback where no user data pointer is available. Therefore it's not
-	possible to copy this chain into our structures for CAINFO.
-	However the server certificate may be available, thus we can return
-	info about it. */
-	if(data->set.ssl.certinfo) {
-	result = Curl_ssl_init_certinfo(data, 1);
-	if(result)
-	return result;
-
-	if(cert) {
-	result = Curl_extract_certinfo(data, 0, cert, certend);
-	if(result)
-	return result;
-	}
-	}
-
-	/* Check pinned public key. */
-	ptr = Curl_ssl_cf_is_proxy(cf)?
-	data->set.str[STRING_SSL_PINNEDPUBLICKEY_PROXY]:
-	data->set.str[STRING_SSL_PINNEDPUBLICKEY];
-	if(!result && ptr) {
-	struct Curl_X509certificate x509;
-	struct Curl_asn1Element *p;
-
-	memset(&x509, 0, sizeof(x509));
-	if(Curl_parseX509(&x509, cert, certend))
-	return CURLE_SSL_PINNEDPUBKEYNOTMATCH;
-	p = &x509.subjectPublicKeyInfo;
-	result = Curl_pin_peer_pubkey(data, ptr, p->header, p->end - p->header);
-	if(result) {
-	failf(data, "SSL: public key does not match pinned public key");
-	return result;
-	}
-	}
-
-	connssl->connecting_state = ssl_connect_done;
-	return CURLE_OK;
-	}
-
-
-	static CURLcode gskit_connect_common(struct Curl_cfilter *cf,
-	struct Curl_easy *data,
-	bool nonblocking, bool *done)
-	{
-	struct ssl_connect_data *connssl = cf->ctx;
-	timediff_t timeout_ms;
-	CURLcode result = CURLE_OK;
-
-	*done = connssl->state == ssl_connection_complete;
-	if(*done)
-	return CURLE_OK;
-
-	/* Step 1: create session, start handshake. */
-	if(connssl->connecting_state == ssl_connect_1) {
-	/* check allowed time left */
-	timeout_ms = Curl_timeleft(data, NULL, TRUE);
-
-	if(timeout_ms < 0) {
-	/* no need to continue if time already is up */
-	failf(data, "SSL connection timeout");
-	result = CURLE_OPERATION_TIMEDOUT;
-	}
-	else
-	result = gskit_connect_step1(cf, data);
-	}
-
-	/* Handle handshake pipelining. */
-	if(!result)
-	if(pipe_ssloverssl(cf, data, SOS_READ \| SOS_WRITE) < 0)
-	result = CURLE_SSL_CONNECT_ERROR;
-
-	/* Step 2: check if handshake is over. */
-	if(!result && connssl->connecting_state == ssl_connect_2) {
-	/* check allowed time left */
-	timeout_ms = Curl_timeleft(data, NULL, TRUE);
-
-	if(timeout_ms < 0) {
-	/* no need to continue if time already is up */
-	failf(data, "SSL connection timeout");
-	result = CURLE_OPERATION_TIMEDOUT;
-	}
-	else
-	result = gskit_connect_step2(cf, data, nonblocking);
-	}
-
-	/* Handle handshake pipelining. */
-	if(!result)
-	if(pipe_ssloverssl(cf, data, SOS_READ \| SOS_WRITE) < 0)
-	result = CURLE_SSL_CONNECT_ERROR;
-
-	/* Step 3: gather certificate info, verify host. */
-	if(!result && connssl->connecting_state == ssl_connect_3)
-	result = gskit_connect_step3(cf, data);
-
-	if(result)
-	close_one(cf, data);
-	else if(connssl->connecting_state == ssl_connect_done) {
-	connssl->state = ssl_connection_complete;
-	connssl->connecting_state = ssl_connect_1;
-	*done = TRUE;
-	}
-
-	return result;
-	}
-
-
-	static CURLcode gskit_connect_nonblocking(struct Curl_cfilter *cf,
-	struct Curl_easy *data,
-	bool *done)
-	{
-	struct ssl_connect_data *connssl = cf->ctx;
-	CURLcode result;
-
-	result = gskit_connect_common(cf, data, TRUE, done);
-	if(*done \|\| result)
-	connssl->connecting_state = ssl_connect_1;
-	return result;
-	}
-
-
-	static CURLcode gskit_connect(struct Curl_cfilter *cf,
-	struct Curl_easy *data)
-	{
-	struct ssl_connect_data *connssl = cf->ctx;
-	CURLcode result;
-	bool done;
-
-	connssl->connecting_state = ssl_connect_1;
-	result = gskit_connect_common(cf, data, FALSE, &done);
-	if(result)
-	return result;
-
-	DEBUGASSERT(done);
-
-	return CURLE_OK;
-	}
-
-
-	static void gskit_close(struct Curl_cfilter cf, struct Curl_easy data)
-	{
-	close_one(cf, data);
-	}
-
-
-	static int gskit_shutdown(struct Curl_cfilter *cf,
-	struct Curl_easy *data)
-	{
-	struct ssl_connect_data *connssl = cf->ctx;
-	int what;
-	int rc;
-	char buf[120];
-	int loop = 10; /* don't get stuck */
-
-	DEBUGASSERT(BACKEND);
-
-	if(!BACKEND->handle)
-	return 0;
-
-	#ifndef CURL_DISABLE_FTP
-	if(data->set.ftp_ccc != CURLFTPSSL_CCC_ACTIVE)
-	return 0;
-	#endif
-
-	close_one(cf, data);
-	rc = 0;
-	what = SOCKET_READABLE(Curl_conn_cf_get_socket(cf, data),
-	SSL_SHUTDOWN_TIMEOUT);
-
-	while(loop--) {
-	ssize_t nread;
-
-	if(what < 0) {
-	/* anything that gets here is fatally bad */
-	failf(data, "select/poll on SSL socket, errno: %d", SOCKERRNO);
-	rc = -1;
-	break;
-	}
-
-	if(!what) { /* timeout */
-	failf(data, "SSL shutdown timeout");
-	break;
-	}
-
-	/* Something to read, let's do it and hope that it is the close
-	notify alert from the server. No way to gsk_secure_soc_read() now, so
-	use read(). */
-
-	nread = read(Curl_conn_cf_get_socket(cf, data), buf, sizeof(buf));
-
-	if(nread < 0) {
-	char buffer[STRERROR_LEN];
-	failf(data, "read: %s", Curl_strerror(errno, buffer, sizeof(buffer)));
-	rc = -1;
-	}
-
-	if(nread <= 0)
-	break;
-
-	what = SOCKET_READABLE(Curl_conn_cf_get_socket(cf, data), 0);
-	}
-
-	return rc;
-	}
-
-
-	static size_t gskit_version(char *buffer, size_t size)
-	{
-	return msnprintf(buffer, size, "GSKit");
-	}
-
-
-	static int gskit_check_cxn(struct Curl_cfilter *cf,
-	struct Curl_easy *data)
-	{
-	struct ssl_connect_data *connssl = cf->ctx;
-	int err;
-	int errlen;
-
-	(void)data;
-	/* The only thing that can be tested here is at the socket level. */
-	DEBUGASSERT(BACKEND);
-
-	if(!BACKEND->handle)
-	return 0; /* connection has been closed */
-
-	err = 0;
-	errlen = sizeof(err);
-
-	if(getsockopt(Curl_conn_cf_get_socket(cf, data), SOL_SOCKET, SO_ERROR,
-	(unsigned char *) &err, &errlen) \|\|
-	errlen != sizeof(err) \|\| err)
-	return 0; /* connection has been closed */
-
-	return -1; /* connection status unknown */
-	}
-
-	static void gskit_get_internals(struct ssl_connect_data connssl,
-	CURLINFO info UNUSED_PARAM)
-	{
-	(void)info;
-	DEBUGASSERT(BACKEND);
-	return BACKEND->handle;
-	}
-
-	const struct Curl_ssl Curl_ssl_gskit = {
-	{ CURLSSLBACKEND_GSKIT, "gskit" }, /* info */
-
-	SSLSUPP_CERTINFO \|
-	SSLSUPP_PINNEDPUBKEY,
-
-	sizeof(struct gskit_ssl_backend_data),
-
-	gskit_init, /* init */
-	gskit_cleanup, /* cleanup */
-	gskit_version, /* version */
-	gskit_check_cxn, /* check_cxn */
-	gskit_shutdown, /* shutdown */
-	Curl_none_data_pending, /* data_pending */
-	Curl_none_random, /* random */
-	Curl_none_cert_status_request, /* cert_status_request */
-	gskit_connect, /* connect */
-	gskit_connect_nonblocking, /* connect_nonblocking */
-	Curl_ssl_get_select_socks, /* getsock */
-	gskit_get_internals, /* get_internals */
-	gskit_close, /* close_one */
-	Curl_none_close_all, /* close_all */
-	/* No session handling for GSKit */
-	Curl_none_session_free, /* session_free */
-	Curl_none_set_engine, /* set_engine */
-	Curl_none_set_engine_default, /* set_engine_default */
-	Curl_none_engines_list, /* engines_list */
-	Curl_none_false_start, /* false_start */
-	NULL, /* sha256sum */
-	NULL, /* associate_connection */
-	NULL, /* disassociate_connection */
-	NULL, /* free_multi_ssl_backend_data */
-	gskit_recv, /* recv decrypted data */
-	gskit_send, /* send data to encrypt */
-	};
-
-	#endif /* USE_GSKIT */

lib/vtls/gskit.h+0 -40

@@ -1,40 +0,0 @@
-	#ifndef HEADER_CURL_GSKIT_H
-	#define HEADER_CURL_GSKIT_H
-	/***************************************************************************
-	* _ _ ____ _
-	* Project ___\| \| \| \| _ \\| \|
-	* / __\| \| \| \| \|_) \| \|
-	* \| (__\| \|_\| \| _ <\| \|___
-	* \___\|\___/\|_\| \_\_____\|
-	*
-	* Copyright (C) Daniel Stenberg, <[email protected]>, et al.
-	*
-	* This software is licensed as described in the file COPYING, which
-	* you should have received as part of this distribution. The terms
-	* are also available at https://curl.se/docs/copyright.html.
-	*
-	* You may opt to use, copy, modify, merge, publish, distribute and/or sell
-	* copies of the Software, and permit persons to whom the Software is
-	* furnished to do so, under the terms of the COPYING file.
-	*
-	* This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
-	* KIND, either express or implied.
-	*
-	* SPDX-License-Identifier: curl
-	*
-	***************************************************************************/
-	#include "curl_setup.h"
-
-	/*
-	* This header should only be needed to get included by vtls.c and gskit.c
-	*/
-
-	#include "urldata.h"
-
-	#ifdef USE_GSKIT
-
-	extern const struct Curl_ssl Curl_ssl_gskit;
-
-	#endif /* USE_GSKIT */
-
-	#endif /* HEADER_CURL_GSKIT_H */

lib/vtls/hostcheck.c+2 -3

@@ -24,8 +24,7 @@

	#include "curl_setup.h"

-	#if defined(USE_OPENSSL) \
-	\|\| defined(USE_GSKIT) \
+	#if defined(USE_OPENSSL) \
	\|\| defined(USE_SCHANNEL)
	/* these backends use functions from this file */

@@ -133,4 +132,4 @@ bool Curl_cert_hostcheck(const char *match, size_t matchlen,
	return FALSE;
	}

-	#endif /* OPENSSL, GSKIT or schannel+wince */
+	#endif /* OPENSSL or SCHANNEL */

lib/vtls/vtls.c+0 -5

@@ -1240,8 +1240,6 @@ const struct Curl_ssl *Curl_ssl =
	&Curl_ssl_sectransp;
	#elif defined(USE_GNUTLS)
	&Curl_ssl_gnutls;
-	#elif defined(USE_GSKIT)
-	&Curl_ssl_gskit;
	#elif defined(USE_MBEDTLS)
	&Curl_ssl_mbedtls;
	#elif defined(USE_RUSTLS)
@@ -1266,9 +1264,6 @@ static const struct Curl_ssl *available_backends[] = {
	#if defined(USE_GNUTLS)
	&Curl_ssl_gnutls,
	#endif
-	#if defined(USE_GSKIT)
-	&Curl_ssl_gskit,
-	#endif
	#if defined(USE_MBEDTLS)
	&Curl_ssl_mbedtls,
	#endif

lib/vtls/vtls_int.h+0 -1

@@ -217,7 +217,6 @@ CURLcode Curl_ssl_addsessionid(struct Curl_cfilter *cf,

	#include "openssl.h" /* OpenSSL versions */
	#include "gtls.h" /* GnuTLS versions */
-	#include "gskit.h" /* Global Secure ToolKit versions */
	#include "wolfssl.h" /* wolfSSL versions */
	#include "schannel.h" /* Schannel SSPI version */
	#include "sectransp.h" /* SecureTransport (Darwin) version */

lib/vtls/x509asn1.c+4 -11

@@ -24,24 +24,18 @@

	#include "curl_setup.h"

-	#if defined(USE_GSKIT) \|\| defined(USE_GNUTLS) \|\| defined(USE_WOLFSSL) \|\| \
+	#if defined(USE_GNUTLS) \|\| defined(USE_WOLFSSL) \|\| \
	defined(USE_SCHANNEL) \|\| defined(USE_SECTRANSP)

-	#if defined(USE_GSKIT) \|\| defined(USE_WOLFSSL) \|\| defined(USE_SCHANNEL)
+	#if defined(USE_WOLFSSL) \|\| defined(USE_SCHANNEL)
	#define WANT_PARSEX509 /* uses Curl_parseX509() */
	#endif

-	#if defined(USE_GSKIT) \|\| defined(USE_GNUTLS) \|\| defined(USE_SCHANNEL) \|\| \
-	defined(USE_SECTRANSP)
+	#if defined(USE_GNUTLS) \|\| defined(USE_SCHANNEL) \|\| defined(USE_SECTRANSP)
	#define WANT_EXTRACT_CERTINFO /* uses Curl_extract_certinfo() */
	#define WANT_PARSEX509 /* ... uses Curl_parseX509() */
	#endif

-	#if defined(USE_GSKIT)
-	#define WANT_VERIFYHOST /* uses Curl_verifyhost () */
-	#define WANT_PARSEX509 /* ... uses Curl_parseX509() */
-	#endif
-
	#include <curl/curl.h>
	#include "urldata.h"
	#include "strcase.h"
@@ -1261,8 +1255,7 @@ CURLcode Curl_extract_certinfo(struct Curl_easy *data,

	#endif /* WANT_EXTRACT_CERTINFO */

-	#endif /* USE_GSKIT or USE_GNUTLS or USE_WOLFSSL or USE_SCHANNEL * or
-	USE_SECTRANSP */
+	#endif /* USE_GNUTLS or USE_WOLFSSL or USE_SCHANNEL or USE_SECTRANSP */

	#ifdef WANT_VERIFYHOST

lib/vtls/x509asn1.h+2 -3

@@ -27,7 +27,7 @@

	#include "curl_setup.h"

-	#if defined(USE_GSKIT) \|\| defined(USE_GNUTLS) \|\| defined(USE_WOLFSSL) \|\| \
+	#if defined(USE_GNUTLS) \|\| defined(USE_WOLFSSL) \|\| \
	defined(USE_SCHANNEL) \|\| defined(USE_SECTRANSP)

	#include "cfilters.h"
@@ -76,6 +76,5 @@ CURLcode Curl_extract_certinfo(struct Curl_easy *data, int certnum,
	const char beg, const char end);
	CURLcode Curl_verifyhost(struct Curl_cfilter cf, struct Curl_easy data,
	const char beg, const char end);
-	#endif /* USE_GSKIT or USE_GNUTLS or USE_WOLFSSL or USE_SCHANNEL
-	* or USE_SECTRANSP */
+	#endif /* USE_GNUTLS or USE_WOLFSSL or USE_SCHANNEL or USE_SECTRANSP */
	#endif /* HEADER_CURL_X509ASN1_H */

packages/OS400/README.OS400+0 -16

@@ -39,22 +39,6 @@ header files are thus altered during build process to use this pragma, in
	order to force libcurl enums of being type int (the pragma disposition in use
	before inclusion is restored before resuming the including unit compilation).

-	Secure socket layer is provided by the IBM GSKit API: unlike other SSL
-	implementations, GSKit is based on "certificate stores" or keyrings
-	rather than individual certificate/key files. Certificate stores, as well as
-	"certificate labels" are managed by external IBM-defined applications.
-	There are two ways to specify an SSL context:
-	- By an application identifier.
-	- By a keyring file pathname and (optionally) certificate label.
-	To identify an SSL context by application identifier, use option
-	SETOPT_SSLCERT to specify the application identifier.
-	To address an SSL context by keyring and certificate label, use CURLOPT_CAINFO
-	to set-up the keyring pathname, CURLOPT_SSLCERT to define the certificate label
-	(omitting it will cause the default certificate in keyring to be used) and
-	CURLOPT_KEYPASSWD to give the keyring password. If SSL is used without
-	defining any of these options, the default (i.e.: system) keyring is used for
-	server certificate validation.
-
	Non-standard EBCDIC wrapper prototypes are defined in an additional header
	file: ccsidcurl.h. These should be self-explanatory to an OS/400-aware
	designer. CCSID 0 can be used to select the current job's CCSID.

packages/OS400/os400sys.c+0 -370

@@ -44,11 +44,6 @@
	#include <zlib.h>
	#endif

-	#ifdef USE_GSKIT
-	#include <gskssl.h>
-	#include <qsoasync.h>
-	#endif
-
	#ifdef HAVE_GSSAPI
	#include <gssapi.h>
	#endif
@@ -344,371 +339,6 @@ Curl_getaddrinfo_a(const char nodename, const char servname,
	return status;
	}

-	#ifdef USE_GSKIT
-
-	/* ASCII wrappers for the GSKit procedures. */
-
-	/*
-	* EBCDIC --> ASCII string mapping table.
-	* Some strings returned by GSKit are dynamically allocated and automatically
-	* released when closing the handle.
-	* To provide the same functionality, we use a "private" handle that
-	* holds the GSKit handle and a list of string mappings. This will allow
-	* avoid conversion of already converted strings and releasing them upon
-	* close time.
-	*/
-
-	struct gskstrlist {
-	struct gskstrlist *next;
-	const char *ebcdicstr;
-	const char *asciistr;
-	};
-
-	struct Curl_gsk_descriptor {
-	gsk_handle h;
-	struct gskstrlist *strlist;
-	};
-
-	int Curl_gsk_environment_open(gsk_handle *my_env_handle)
-	{
-	struct Curl_gsk_descriptor *p;
-	int rc;
-
-	if(!my_env_handle)
-	return GSK_OS400_ERROR_INVALID_POINTER;
-	p = (struct Curl_gsk_descriptor ) malloc(sizeof(p));
-	if(!p)
-	return GSK_INSUFFICIENT_STORAGE;
-	p->strlist = (struct gskstrlist *) NULL;
-	rc = gsk_environment_open(&p->h);
-	if(rc != GSK_OK)
-	free(p);
-	else
-	*my_env_handle = (gsk_handle) p;
-	return rc;
-	}
-
-	int Curl_gsk_secure_soc_open(gsk_handle my_env_handle,
-	gsk_handle *my_session_handle)
-	{
-	struct Curl_gsk_descriptor *p;
-	gsk_handle h;
-	int rc;
-
-	if(!my_env_handle)
-	return GSK_INVALID_HANDLE;
-	if(!my_session_handle)
-	return GSK_OS400_ERROR_INVALID_POINTER;
-	h = ((struct Curl_gsk_descriptor *) my_env_handle)->h;
-	p = (struct Curl_gsk_descriptor ) malloc(sizeof(p));
-	if(!p)
-	return GSK_INSUFFICIENT_STORAGE;
-	p->strlist = (struct gskstrlist *) NULL;
-	rc = gsk_secure_soc_open(h, &p->h);
-	if(rc != GSK_OK)
-	free(p);
-	else
-	*my_session_handle = (gsk_handle) p;
-	return rc;
-	}
-
-	static void gsk_free_handle(struct Curl_gsk_descriptor *p)
-	{
-	struct gskstrlist *q;
-
-	while((q = p->strlist)) {
-	p->strlist = q;
-	free((void *) q->asciistr);
-	free(q);
-	}
-	free(p);
-	}
-
-	int Curl_gsk_environment_close(gsk_handle *my_env_handle)
-	{
-	struct Curl_gsk_descriptor *p;
-	int rc;
-
-	if(!my_env_handle)
-	return GSK_OS400_ERROR_INVALID_POINTER;
-	if(!*my_env_handle)
-	return GSK_INVALID_HANDLE;
-	p = (struct Curl_gsk_descriptor ) my_env_handle;
-	rc = gsk_environment_close(&p->h);
-	if(rc == GSK_OK) {
-	gsk_free_handle(p);
-	*my_env_handle = (gsk_handle) NULL;
-	}
-	return rc;
-	}
-
-
-	int Curl_gsk_secure_soc_close(gsk_handle *my_session_handle)
-	{
-	struct Curl_gsk_descriptor *p;
-	int rc;
-
-	if(!my_session_handle)
-	return GSK_OS400_ERROR_INVALID_POINTER;
-	if(!*my_session_handle)
-	return GSK_INVALID_HANDLE;
-	p = (struct Curl_gsk_descriptor ) my_session_handle;
-	rc = gsk_secure_soc_close(&p->h);
-	if(rc == GSK_OK) {
-	gsk_free_handle(p);
-	*my_session_handle = (gsk_handle) NULL;
-	}
-	return rc;
-	}
-
-	int Curl_gsk_environment_init(gsk_handle my_env_handle)
-	{
-	struct Curl_gsk_descriptor *p;
-
-	if(!my_env_handle)
-	return GSK_INVALID_HANDLE;
-	p = (struct Curl_gsk_descriptor *) my_env_handle;
-	return gsk_environment_init(p->h);
-	}
-
-
-	int Curl_gsk_secure_soc_init(gsk_handle my_session_handle)
-	{
-	struct Curl_gsk_descriptor *p;
-
-	if(!my_session_handle)
-	return GSK_INVALID_HANDLE;
-	p = (struct Curl_gsk_descriptor *) my_session_handle;
-	return gsk_secure_soc_init(p->h);
-	}
-
-
-	int
-	Curl_gsk_attribute_set_buffer_a(gsk_handle my_gsk_handle, GSK_BUF_ID bufID,
-	const char *buffer, int bufSize)
-	{
-	struct Curl_gsk_descriptor *p;
-	char *ebcdicbuf;
-	int rc;
-
-	if(!my_gsk_handle)
-	return GSK_INVALID_HANDLE;
-	if(!buffer)
-	return GSK_OS400_ERROR_INVALID_POINTER;
-	if(bufSize < 0)
-	return GSK_ATTRIBUTE_INVALID_LENGTH;
-	p = (struct Curl_gsk_descriptor *) my_gsk_handle;
-	if(!bufSize)
-	bufSize = strlen(buffer);
-	ebcdicbuf = malloc(bufSize + 1);
-	if(!ebcdicbuf)
-	return GSK_INSUFFICIENT_STORAGE;
-	QadrtConvertA2E(ebcdicbuf, buffer, bufSize, bufSize);
-	ebcdicbuf[bufSize] = '\0';
-	rc = gsk_attribute_set_buffer(p->h, bufID, ebcdicbuf, bufSize);
-	free(ebcdicbuf);
-	return rc;
-	}
-
-
-	int
-	Curl_gsk_attribute_set_enum(gsk_handle my_gsk_handle, GSK_ENUM_ID enumID,
-	GSK_ENUM_VALUE enumValue)
-	{
-	struct Curl_gsk_descriptor *p;
-
-	if(!my_gsk_handle)
-	return GSK_INVALID_HANDLE;
-	p = (struct Curl_gsk_descriptor *) my_gsk_handle;
-	return gsk_attribute_set_enum(p->h, enumID, enumValue);
-	}
-
-
-	int
-	Curl_gsk_attribute_set_numeric_value(gsk_handle my_gsk_handle,
-	GSK_NUM_ID numID, int numValue)
-	{
-	struct Curl_gsk_descriptor *p;
-
-	if(!my_gsk_handle)
-	return GSK_INVALID_HANDLE;
-	p = (struct Curl_gsk_descriptor *) my_gsk_handle;
-	return gsk_attribute_set_numeric_value(p->h, numID, numValue);
-	}
-
-
-	int
-	Curl_gsk_attribute_set_callback(gsk_handle my_gsk_handle,
-	GSK_CALLBACK_ID callBackID,
-	void *callBackAreaPtr)
-	{
-	struct Curl_gsk_descriptor *p;
-
-	if(!my_gsk_handle)
-	return GSK_INVALID_HANDLE;
-	p = (struct Curl_gsk_descriptor *) my_gsk_handle;
-	return gsk_attribute_set_callback(p->h, callBackID, callBackAreaPtr);
-	}
-
-
-	static int
-	cachestring(struct Curl_gsk_descriptor *p,
-	const char ebcdicbuf, int bufsize, const char *buffer)
-	{
-	int rc;
-	char *asciibuf;
-	struct gskstrlist *sp;
-
-	for(sp = p->strlist; sp; sp = sp->next)
-	if(sp->ebcdicstr == ebcdicbuf)
-	break;
-	if(!sp) {
-	sp = (struct gskstrlist ) malloc(sizeof(sp));
-	if(!sp)
-	return GSK_INSUFFICIENT_STORAGE;
-	asciibuf = malloc(bufsize + 1);
-	if(!asciibuf) {
-	free(sp);
-	return GSK_INSUFFICIENT_STORAGE;
-	}
-	QadrtConvertE2A(asciibuf, ebcdicbuf, bufsize, bufsize);
-	asciibuf[bufsize] = '\0';
-	sp->ebcdicstr = ebcdicbuf;
-	sp->asciistr = asciibuf;
-	sp->next = p->strlist;
-	p->strlist = sp;
-	}
-	*buffer = sp->asciistr;
-	return GSK_OK;
-	}
-
-
-	int
-	Curl_gsk_attribute_get_buffer_a(gsk_handle my_gsk_handle, GSK_BUF_ID bufID,
-	const char *buffer, int bufSize)
-	{
-	struct Curl_gsk_descriptor *p;
-	int rc;
-	const char *mybuf;
-	int mylen;
-
-	if(!my_gsk_handle)
-	return GSK_INVALID_HANDLE;
-	if(!buffer \|\| !bufSize)
-	return GSK_OS400_ERROR_INVALID_POINTER;
-	p = (struct Curl_gsk_descriptor *) my_gsk_handle;
-	rc = gsk_attribute_get_buffer(p->h, bufID, &mybuf, &mylen);
-	if(rc != GSK_OK)
-	return rc;
-	rc = cachestring(p, mybuf, mylen, buffer);
-	if(rc == GSK_OK)
-	*bufSize = mylen;
-	return rc;
-	}
-
-
-	int
-	Curl_gsk_attribute_get_enum(gsk_handle my_gsk_handle, GSK_ENUM_ID enumID,
-	GSK_ENUM_VALUE *enumValue)
-	{
-	struct Curl_gsk_descriptor *p;
-
-	if(!my_gsk_handle)
-	return GSK_INVALID_HANDLE;
-	p = (struct Curl_gsk_descriptor *) my_gsk_handle;
-	return gsk_attribute_get_enum(p->h, enumID, enumValue);
-	}
-
-
-	int
-	Curl_gsk_attribute_get_numeric_value(gsk_handle my_gsk_handle,
-	GSK_NUM_ID numID, int *numValue)
-	{
-	struct Curl_gsk_descriptor *p;
-
-	if(!my_gsk_handle)
-	return GSK_INVALID_HANDLE;
-	p = (struct Curl_gsk_descriptor *) my_gsk_handle;
-	return gsk_attribute_get_numeric_value(p->h, numID, numValue);
-	}
-
-
-	int
-	Curl_gsk_attribute_get_cert_info(gsk_handle my_gsk_handle,
-	GSK_CERT_ID certID,
-	const gsk_cert_data_elem **certDataElem,
-	int *certDataElementCount)
-	{
-	struct Curl_gsk_descriptor *p;
-
-	if(!my_gsk_handle)
-	return GSK_INVALID_HANDLE;
-	p = (struct Curl_gsk_descriptor *) my_gsk_handle;
-	/* No need to convert code: text results are already in ASCII. */
-	return gsk_attribute_get_cert_info(p->h, certID,
-	certDataElem, certDataElementCount);
-	}
-
-
-	int
-	Curl_gsk_secure_soc_misc(gsk_handle my_session_handle, GSK_MISC_ID miscID)
-	{
-	struct Curl_gsk_descriptor *p;
-
-	if(!my_session_handle)
-	return GSK_INVALID_HANDLE;
-	p = (struct Curl_gsk_descriptor *) my_session_handle;
-	return gsk_secure_soc_misc(p->h, miscID);
-	}
-
-
-	int
-	Curl_gsk_secure_soc_read(gsk_handle my_session_handle, char *readBuffer,
-	int readBufSize, int *amtRead)
-	{
-	struct Curl_gsk_descriptor *p;
-
-	if(!my_session_handle)
-	return GSK_INVALID_HANDLE;
-	p = (struct Curl_gsk_descriptor *) my_session_handle;
-	return gsk_secure_soc_read(p->h, readBuffer, readBufSize, amtRead);
-	}
-
-
-	int
-	Curl_gsk_secure_soc_write(gsk_handle my_session_handle, char *writeBuffer,
-	int writeBufSize, int *amtWritten)
-	{
-	struct Curl_gsk_descriptor *p;
-
-	if(!my_session_handle)
-	return GSK_INVALID_HANDLE;
-	p = (struct Curl_gsk_descriptor *) my_session_handle;
-	return gsk_secure_soc_write(p->h, writeBuffer, writeBufSize, amtWritten);
-	}
-
-
-	const char *
-	Curl_gsk_strerror_a(int gsk_return_value)
-	{
-	return set_thread_string(LK_GSK_ERROR, gsk_strerror(gsk_return_value));
-	}
-
-	int
-	Curl_gsk_secure_soc_startInit(gsk_handle my_session_handle,
-	int IOCompletionPort,
-	Qso_OverlappedIO_t *communicationsArea)
-	{
-	struct Curl_gsk_descriptor *p;
-
-	if(!my_session_handle)
-	return GSK_INVALID_HANDLE;
-	p = (struct Curl_gsk_descriptor *) my_session_handle;
-	return gsk_secure_soc_startInit(p->h, IOCompletionPort, communicationsArea);
-	}
-
-	#endif /* USE_GSKIT */
-
	#ifdef HAVE_GSSAPI

	/* ASCII wrappers for the GSSAPI procedures. */

tests/unit/unit1397.c+1 -1

@@ -34,7 +34,7 @@ static void unit_stop(void)
	}

	/* only these backends define the tested functions */
-	#if defined(USE_OPENSSL) \|\| defined(USE_GSKIT) \|\| defined(USE_SCHANNEL)
+	#if defined(USE_OPENSSL) \|\| defined(USE_SCHANNEL)
	#include "vtls/hostcheck.h"
	struct testcase {
	const char *host;

tests/unit/unit1651.c+1 -2

@@ -34,8 +34,7 @@ static void unit_stop(void)
	{

	}
-	#if defined(USE_GSKIT) \|\| defined(USE_GNUTLS) \|\| defined(USE_SCHANNEL) \|\| \
-	defined(USE_SECTRANSP)
+	#if defined(USE_GNUTLS) \|\| defined(USE_SCHANNEL) \|\| defined(USE_SECTRANSP)

	/* cert captured from gdb when connecting to curl.se on October 26
	2018 */

@@ -60,9 +60,8 @@ the case insensitive name of the particular backend to use when curl is
	invoked. Setting a name that is not a built-in alternative will make curl
	stay with the default.

-	SSL backend names (case-insensitive): bearssl, gnutls, gskit,
-	mbedtls, openssl, rustls, schannel, secure-transport,
-	wolfssl
+	SSL backend names (case-insensitive): bearssl, gnutls, mbedtls,
+	openssl, rustls, schannel, secure-transport, wolfssl
	.IP "HOME <dir>"
	If set, this is used to find the home directory when that is needed. Like when
	looking for the default .curlrc. CURL_HOME and XDG_CONFIG_HOME

@@ -647,7 +647,7 @@

	#if defined(USE_GNUTLS) \|\| defined(USE_OPENSSL) \|\| defined(USE_MBEDTLS) \|\| \
	defined(USE_WOLFSSL) \|\| defined(USE_SCHANNEL) \|\| defined(USE_SECTRANSP) \|\| \
-	defined(USE_GSKIT) \|\| defined(USE_BEARSSL) \|\| defined(USE_RUSTLS)
+	defined(USE_BEARSSL) \|\| defined(USE_RUSTLS)
	#define USE_SSL /* SSL support has been enabled */
	#endif