aef8fd00c8 — curl

Subject

GHA: add NTLM to lots of builds

Binary

No binary (build failed)

Architecture & Compiler Flags

Architecture: x86_64-linux-gnu Compiler: gcc (Ubuntu 11.4.0-1ubuntu1~22.04.3) 11.4.0

—

Build Log

(log yok)

Commit Diff GitHub →

.github/workflows/http3-linux.yml +2 -2 .github/workflows/linux.yml +16 -14 .github/workflows/macos.yml +16 -14 .github/workflows/non-native.yml +2 -0 .github/workflows/windows.yml +9 -7

.github/workflows/http3-linux.yml+2 -2

@@ -646,7 +646,7 @@ jobs:
	cmake -B bld -G Ninja \
	-DCMAKE_C_COMPILER_TARGET="$(uname -m)-pc-linux-gnu" -DBUILD_STATIC_LIBS=ON \
	-DCURL_WERROR=ON -DENABLE_DEBUG=ON \
-	-DCURL_USE_LIBUV=ON \
+	-DCURL_USE_LIBUV=ON -DCURL_ENABLE_NTLM=ON \
	-DTEST_NGHTTPX=/home/runner/nghttp2/build/bin/nghttpx \
	-DHTTPD_NGHTTPX=/home/runner/nghttp2/build/bin/nghttpx \
	${MATRIX_GENERATE} ${options}
@@ -654,7 +654,7 @@ jobs:
	[[ "${MATRIX_CONFIGURE}" = 'boringssl' ]] && export CPPFLAGS="-DCURL_BORINGSSL_VERSION=\\\"${BORINGSSL_VERSION}\\\""
	mkdir bld && cd bld && ../configure --enable-warnings --enable-werror --enable-debug --disable-static \
	--disable-dependency-tracking --enable-option-checking=fatal \
-	--with-libuv \
+	--with-libuv --enable-ntlm \
	--with-test-nghttpx=/home/runner/nghttp2/build/bin/nghttpx \
	${MATRIX_CONFIGURE}
	fi

.github/workflows/linux.yml+16 -14

@@ -81,14 +81,14 @@ jobs:
	install_packages: libnghttp2-dev libldap-dev libkrb5-dev valgrind
	install_steps: libressl-c-arm
	tflags: '--min=870 1 to 950'
-	generate: -DOPENSSL_ROOT_DIR=/home/runner/libressl -DCURL_USE_GSSAPI=ON -DENABLE_DEBUG=ON -DCURL_LIBCURL_VERSIONED_SYMBOLS=ON
+	generate: -DOPENSSL_ROOT_DIR=/home/runner/libressl -DCURL_USE_GSSAPI=ON -DENABLE_DEBUG=ON -DCURL_LIBCURL_VERSIONED_SYMBOLS=ON -DCURL_ENABLE_NTLM=ON

	- name: 'libressl krb5 valgrind 2'
	image: ubuntu-24.04-arm
	install_packages: libnghttp2-dev libldap-dev libkrb5-dev valgrind
	install_steps: libressl-c-arm
	tflags: '--min=900 951 to 9999'
-	generate: -DOPENSSL_ROOT_DIR=/home/runner/libressl -DCURL_USE_GSSAPI=ON -DENABLE_DEBUG=ON -DCURL_LIBCURL_VERSIONED_SYMBOLS=ON
+	generate: -DOPENSSL_ROOT_DIR=/home/runner/libressl -DCURL_USE_GSSAPI=ON -DENABLE_DEBUG=ON -DCURL_LIBCURL_VERSIONED_SYMBOLS=ON -DCURL_ENABLE_NTLM=ON

	- name: 'libressl clang'
	image: ubuntu-24.04-arm
@@ -159,16 +159,16 @@ jobs:

	- name: 'awslc'
	install_steps: awslc pytest
-	configure: LDFLAGS=-Wl,-rpath,/home/runner/awslc/lib --with-openssl=/home/runner/awslc --enable-ech
+	configure: LDFLAGS=-Wl,-rpath,/home/runner/awslc/lib --with-openssl=/home/runner/awslc --enable-ech --enable-ntlm

	- name: 'awslc'
	install_packages: libidn2-dev
	install_steps: awslc
-	generate: -DOPENSSL_ROOT_DIR=/home/runner/awslc -DUSE_ECH=ON -DCMAKE_UNITY_BUILD=OFF -DCURL_DROP_UNUSED=ON -DCURL_PATCHSTAMP=test-patch
+	generate: -DOPENSSL_ROOT_DIR=/home/runner/awslc -DUSE_ECH=ON -DCMAKE_UNITY_BUILD=OFF -DCURL_DROP_UNUSED=ON -DCURL_PATCHSTAMP=test-patch -DCURL_ENABLE_NTLM=ON

	- name: 'boringssl'
	install_steps: boringssl pytest
-	generate: -DOPENSSL_ROOT_DIR=/home/runner/boringssl -DUSE_ECH=ON
+	generate: -DOPENSSL_ROOT_DIR=/home/runner/boringssl -DUSE_ECH=ON -DCURL_ENABLE_NTLM=ON

	- name: 'openssl default'
	install_steps: pytest
@@ -178,13 +178,13 @@ jobs:
	image: ubuntu-24.04-arm
	install_packages: libidn2-dev libssh2-1-dev libnghttp2-dev libldap-dev valgrind
	tflags: '--min=920 1 to 950'
-	generate: -DENABLE_DEBUG=ON -DENABLE_THREADED_RESOLVER=OFF -DCURL_GCC_ANALYZER=ON
+	generate: -DENABLE_DEBUG=ON -DENABLE_THREADED_RESOLVER=OFF -DCURL_GCC_ANALYZER=ON -DCURL_ENABLE_NTLM=ON

	- name: 'openssl libssh2 sync-resolver valgrind 2'
	image: ubuntu-24.04-arm
	install_packages: libidn2-dev libssh2-1-dev libnghttp2-dev libldap-dev valgrind
	tflags: '--min=910 951 to 9999'
-	generate: -DENABLE_DEBUG=ON -DENABLE_THREADED_RESOLVER=OFF
+	generate: -DENABLE_DEBUG=ON -DENABLE_THREADED_RESOLVER=OFF -DCURL_ENABLE_NTLM=ON

	- name: 'openssl intel C89'
	install_packages: libssh-dev
@@ -201,13 +201,13 @@ jobs:
	install_packages: libssh-dev valgrind
	CFLAGS: -O3
	tflags: '--min=920 1 to 950'
-	generate: -DENABLE_DEBUG=ON -DCURL_USE_LIBSSH=ON -DCMAKE_UNITY_BUILD_BATCH_SIZE=50
+	generate: -DENABLE_DEBUG=ON -DCURL_USE_LIBSSH=ON -DCMAKE_UNITY_BUILD_BATCH_SIZE=50 -DCURL_ENABLE_NTLM=ON

	- name: 'openssl -O3 libssh valgrind 2'
	install_packages: libssh-dev valgrind
	CFLAGS: -O3
	tflags: '--min=890 951 to 9999'
-	generate: -DENABLE_DEBUG=ON -DCURL_USE_LIBSSH=ON -DCMAKE_UNITY_BUILD_BATCH_SIZE=50
+	generate: -DENABLE_DEBUG=ON -DCURL_USE_LIBSSH=ON -DCMAKE_UNITY_BUILD_BATCH_SIZE=50 -DCURL_ENABLE_NTLM=ON

	- name: 'openssl clang krb5 openldap static'
	install_steps: openldap-static
@@ -223,7 +223,7 @@ jobs:

	- name: 'openssl !ipv6 !--libcurl !--digest-auth'
	image: ubuntu-24.04-arm
-	configure: --with-openssl --disable-ipv6 --enable-debug --disable-unity --disable-libcurl-option --disable-digest-auth
+	configure: --with-openssl --disable-ipv6 --enable-debug --disable-unity --disable-libcurl-option --disable-digest-auth --enable-ntlm

	- name: 'openssl https-only'
	image: ubuntu-24.04-arm
@@ -235,18 +235,19 @@ jobs:
	--disable-rtsp
	--without-libssh2 --without-libssh
	--disable-tftp --disable-ftp --disable-file --disable-smb
+	--enable-ntlm

	- name: 'openssl torture 1'
	install_packages: libnghttp2-dev libssh2-1-dev libc-ares-dev
	tflags: '-t --shallow=25 --min=920 1 to 950'
	torture: true
-	generate: -DCURL_USE_OPENSSL=ON -DENABLE_DEBUG=ON -DENABLE_ARES=ON
+	generate: -DCURL_USE_OPENSSL=ON -DENABLE_DEBUG=ON -DENABLE_ARES=ON -DCURL_ENABLE_NTLM=ON

	- name: 'openssl torture 2'
	install_packages: libnghttp2-dev libssh2-1-dev libc-ares-dev
	tflags: '-t --shallow=25 --min=900 951 to 9999'
	torture: true
-	generate: -DCURL_USE_OPENSSL=ON -DENABLE_DEBUG=ON -DENABLE_ARES=ON
+	generate: -DCURL_USE_OPENSSL=ON -DENABLE_DEBUG=ON -DENABLE_ARES=ON -DCURL_ENABLE_NTLM=ON

	- name: 'openssl i686'
	install_packages: gcc-14-i686-linux-gnu libssl-dev:i386 libssh2-1-dev:i386 libidn2-dev:i386 libc-ares-dev:i386 zlib1g-dev:i386
@@ -273,6 +274,7 @@ jobs:
	-DOPENSSL_ROOT_DIR=/home/runner/libressl -DCURL_USE_LIBPSL=OFF
	-DCURL_ZLIB=OFF -DCURL_BROTLI=OFF -DCURL_ZSTD=OFF
	-DCURL_DISABLE_LDAP=ON -DUSE_LIBIDN2=OFF -DCURL_USE_LIBSSH2=OFF
+	-DCURL_ENABLE_NTLM=ON

	- name: 'clang-tidy'
	install_packages: clang-20 clang-tidy-20 libssl-dev libidn2-dev libssh2-1-dev libnghttp2-dev libldap-dev libkrb5-dev libgnutls28-dev
@@ -337,7 +339,7 @@ jobs:

	- name: 'event-based'
	install_packages: libssh-dev
-	configure: --enable-debug --enable-static --disable-shared --disable-threaded-resolver --with-libssh --with-openssl
+	configure: --enable-debug --enable-static --disable-shared --disable-threaded-resolver --with-libssh --with-openssl --enable-ntlm
	tflags: '-n --test-event --min=1350'

	- name: 'duphandle'
@@ -457,7 +459,7 @@ jobs:
	--location "https://github.com/libressl/portable/releases/download/v${LIBRESSL_VERSION}/libressl-${LIBRESSL_VERSION}.tar.gz" --output pkg.bin
	sha256sum pkg.bin && tar -xzf pkg.bin && rm -f pkg.bin
	cd "libressl-${LIBRESSL_VERSION}"
-	cmake -B . -G Ninja -DLIBRESSL_APPS=OFF -DLIBRESSL_TESTS=OFF -DCMAKE_INSTALL_PREFIX=/home/runner/libressl
+	cmake -B . -G Ninja -DLIBRESSL_APPS=OFF -DLIBRESSL_TESTS=OFF -DCMAKE_INSTALL_PREFIX=/home/runner/libressl -DCURL_ENABLE_NTLM=ON
	cmake --build .
	cmake --install .

.github/workflows/macos.yml+16 -14

@@ -80,7 +80,7 @@ jobs:
	-DOPENSSL_INCLUDE_DIR=/Users/runner/libressl/include
	-DOPENSSL_SSL_LIBRARY=/Users/runner/libressl/lib/libssl.a
	-DOPENSSL_CRYPTO_LIBRARY=/Users/runner/libressl/lib/libcrypto.a
-	-DCURL_USE_LIBPSL=OFF
+	-DCURL_USE_LIBPSL=OFF -DCURL_ENABLE_NTLM=ON

	steps:
	- name: 'brew install'
@@ -238,7 +238,7 @@ jobs:
	generate: >-
	-DENABLE_DEBUG=ON -DENABLE_ARES=ON
	-DCURL_ENABLE_SSL=OFF -DHTTP_ONLY=ON
-	-DCURL_ENABLE_NTLM=OFF -DCURL_DISABLE_ALTSVC=ON -DENABLE_UNIX_SOCKETS=OFF
+	-DCURL_DISABLE_ALTSVC=ON -DENABLE_UNIX_SOCKETS=OFF
	-DCURL_USE_LIBSSH2=OFF -DCURL_USE_LIBSSH=OFF -DUSE_NGHTTP2=OFF
	-DCURL_USE_GSSAPI=OFF -DUSE_LIBIDN2=OFF -DCURL_USE_LIBPSL=OFF
	-DCURL_BROTLI=OFF -DCURL_ZLIB=OFF -DCURL_ZSTD=OFF
@@ -249,26 +249,26 @@ jobs:
	compiler: clang
	install: libressl
	install_steps: pytest
-	generate: -DENABLE_DEBUG=ON -DOPENSSL_ROOT_DIR=/opt/homebrew/opt/libressl -DCURL_DISABLE_LDAP=ON -DCURL_BROTLI=OFF -DCURL_ZSTD=OFF -DCURL_USE_LIBSSH2=OFF
+	generate: -DENABLE_DEBUG=ON -DOPENSSL_ROOT_DIR=/opt/homebrew/opt/libressl -DCURL_DISABLE_LDAP=ON -DCURL_BROTLI=OFF -DCURL_ZSTD=OFF -DCURL_USE_LIBSSH2=OFF -DCURL_ENABLE_NTLM=ON
	- name: 'OpenSSL 10.15 C89'
	compiler: clang
	install: libnghttp3 libngtcp2
	install_steps: pytest
-	generate: -DENABLE_DEBUG=ON -DOPENSSL_ROOT_DIR=/opt/homebrew/opt/openssl -DUSE_NGTCP2=ON -DCURL_BROTLI=OFF -DCURL_ZSTD=OFF -DCURL_USE_LIBSSH2=OFF -DCMAKE_C_STANDARD=90
+	generate: -DENABLE_DEBUG=ON -DOPENSSL_ROOT_DIR=/opt/homebrew/opt/openssl -DUSE_NGTCP2=ON -DCURL_BROTLI=OFF -DCURL_ZSTD=OFF -DCURL_USE_LIBSSH2=OFF -DCMAKE_C_STANDARD=90 -DCURL_ENABLE_NTLM=ON
	macos-version-min: '10.15'
	- name: 'OpenSSL SecTrust'
	compiler: clang
	install: libnghttp3 libngtcp2
	install_steps: pytest
-	configure: --enable-debug --with-openssl=/opt/homebrew/opt/openssl --with-ngtcp2 --with-apple-sectrust
+	configure: --enable-debug --with-openssl=/opt/homebrew/opt/openssl --with-ngtcp2 --with-apple-sectrust --enable-ntlm
	- name: 'OpenSSL event-based'
	compiler: clang
-	generate: -DENABLE_DEBUG=ON -DOPENSSL_ROOT_DIR=/opt/homebrew/opt/openssl -DCURL_BROTLI=OFF -DCURL_ZSTD=OFF -DCURL_USE_LIBSSH2=OFF
+	generate: -DENABLE_DEBUG=ON -DOPENSSL_ROOT_DIR=/opt/homebrew/opt/openssl -DCURL_BROTLI=OFF -DCURL_ZSTD=OFF -DCURL_USE_LIBSSH2=OFF -DCURL_ENABLE_NTLM=ON
	tflags: '--test-event --min=1300'
	- name: 'OpenSSL gsasl AppleIDN SecTrust +examples'
	compiler: clang
	install: libnghttp3 libngtcp2 gsasl
-	generate: -DOPENSSL_ROOT_DIR=/opt/homebrew/opt/openssl -DCURL_USE_GSASL=ON -DUSE_APPLE_IDN=ON -DUSE_NGTCP2=ON -DCURL_DISABLE_VERBOSE_STRINGS=ON -DUSE_APPLE_SECTRUST=ON
+	generate: -DOPENSSL_ROOT_DIR=/opt/homebrew/opt/openssl -DCURL_USE_GSASL=ON -DUSE_APPLE_IDN=ON -DUSE_NGTCP2=ON -DCURL_DISABLE_VERBOSE_STRINGS=ON -DUSE_APPLE_SECTRUST=ON -DCURL_ENABLE_NTLM=ON
	- name: 'MultiSSL AppleIDN clang-tidy +examples'
	image: macos-26
	compiler: clang
@@ -283,6 +283,7 @@ jobs:
	-DCURL_BROTLI=ON -DCURL_ZSTD=ON
	-DCURL_CLANG_TIDY=ON -DCLANG_TIDY=/opt/homebrew/opt/llvm/bin/clang-tidy
	-DCURL_COMPLETION_FISH=ON -DCURL_COMPLETION_ZSH=ON
+	-DCURL_ENABLE_NTLM=ON

	- name: 'HTTP/3 clang-tidy'
	image: macos-26
@@ -295,6 +296,7 @@ jobs:
	-DCURL_USE_GSSAPI=ON -DGSS_ROOT_DIR=/opt/homebrew/opt/krb5
	-DCURL_BROTLI=ON -DCURL_ZSTD=ON
	-DCURL_CLANG_TIDY=ON -DCLANG_TIDY=/opt/homebrew/opt/llvm/bin/clang-tidy
+	-DCURL_ENABLE_NTLM=ON

	- name: 'LibreSSL openldap krb5 c-ares +examples'
	compiler: clang
@@ -304,16 +306,16 @@ jobs:
	compiler: clang
	install: brotli wolfssl zstd
	install_steps: pytest
-	generate: -DCURL_USE_WOLFSSL=ON -DCURL_DISABLE_LDAP=ON -DUSE_ECH=ON
+	generate: -DCURL_USE_WOLFSSL=ON -DCURL_DISABLE_LDAP=ON -DUSE_ECH=ON -DCURL_ENABLE_NTLM=ON
	- name: 'mbedTLS !ldap brotli zstd MultiSSL AppleIDN'
	compiler: llvm@18
	install: brotli mbedtls zstd
	install_steps: codeset-test
-	generate: -DCURL_USE_MBEDTLS=ON -DCURL_DISABLE_LDAP=ON -DCURL_DEFAULT_SSL_BACKEND=mbedtls -DCURL_USE_OPENSSL=ON -DUSE_APPLE_IDN=ON
+	generate: -DCURL_USE_MBEDTLS=ON -DCURL_DISABLE_LDAP=ON -DCURL_DEFAULT_SSL_BACKEND=mbedtls -DCURL_USE_OPENSSL=ON -DUSE_APPLE_IDN=ON -DCURL_ENABLE_NTLM=ON
	- name: 'GnuTLS !ldap krb5 +examples'
	compiler: clang
	install: gnutls nettle krb5
-	generate: -DENABLE_DEBUG=ON -DCURL_USE_GNUTLS=ON -DCURL_USE_OPENSSL=OFF -DCURL_USE_GSSAPI=ON -DGSS_ROOT_DIR=/opt/homebrew/opt/krb5 -DCURL_DISABLE_LDAP=ON -DUSE_SSLS_EXPORT=ON
+	generate: -DENABLE_DEBUG=ON -DCURL_USE_GNUTLS=ON -DCURL_USE_OPENSSL=OFF -DCURL_USE_GSSAPI=ON -DGSS_ROOT_DIR=/opt/homebrew/opt/krb5 -DCURL_DISABLE_LDAP=ON -DUSE_SSLS_EXPORT=ON -DCURL_ENABLE_NTLM=ON
	- name: 'aws-lc +analyzer'
	compiler: gcc-15
	install: aws-lc
@@ -321,25 +323,25 @@ jobs:
	- name: 'Rustls'
	compiler: clang
	install: rustls-ffi
-	generate: -DENABLE_DEBUG=ON -DCURL_USE_RUSTLS=ON -DUSE_ECH=ON -DCURL_DISABLE_LDAP=ON
+	generate: -DENABLE_DEBUG=ON -DCURL_USE_RUSTLS=ON -DUSE_ECH=ON -DCURL_DISABLE_LDAP=ON -DCURL_ENABLE_NTLM=ON
	tflags: '--min=1650'
	- name: 'OpenSSL torture 1'
	compiler: clang
	install: libnghttp3
	install_steps: torture
-	generate: -DENABLE_DEBUG=ON -DBUILD_SHARED_LIBS=OFF -DENABLE_THREADED_RESOLVER=OFF -DOPENSSL_ROOT_DIR=/opt/homebrew/opt/openssl
+	generate: -DENABLE_DEBUG=ON -DBUILD_SHARED_LIBS=OFF -DENABLE_THREADED_RESOLVER=OFF -DOPENSSL_ROOT_DIR=/opt/homebrew/opt/openssl -DCURL_ENABLE_NTLM=ON
	tflags: '-t --shallow=25 --min=480 1 to 500'
	- name: 'OpenSSL torture 2'
	compiler: clang
	install: libnghttp3
	install_steps: torture
-	generate: -DENABLE_DEBUG=ON -DBUILD_SHARED_LIBS=OFF -DENABLE_THREADED_RESOLVER=OFF -DOPENSSL_ROOT_DIR=/opt/homebrew/opt/openssl
+	generate: -DENABLE_DEBUG=ON -DBUILD_SHARED_LIBS=OFF -DENABLE_THREADED_RESOLVER=OFF -DOPENSSL_ROOT_DIR=/opt/homebrew/opt/openssl -DCURL_ENABLE_NTLM=ON
	tflags: '-t --shallow=25 --min=730 501 to 1250'
	- name: 'OpenSSL torture 3'
	compiler: clang
	install: libnghttp3
	install_steps: torture
-	generate: -DENABLE_DEBUG=ON -DBUILD_SHARED_LIBS=OFF -DENABLE_THREADED_RESOLVER=OFF -DOPENSSL_ROOT_DIR=/opt/homebrew/opt/openssl
+	generate: -DENABLE_DEBUG=ON -DBUILD_SHARED_LIBS=OFF -DENABLE_THREADED_RESOLVER=OFF -DOPENSSL_ROOT_DIR=/opt/homebrew/opt/openssl -DCURL_ENABLE_NTLM=ON
	tflags: '-t --shallow=25 --min=628 1251 to 9999'

	steps:

.github/workflows/non-native.yml+2 -0

@@ -66,6 +66,7 @@ jobs:
	-DENABLE_DEBUG=ON -DCMAKE_BUILD_TYPE=Debug \
	-DCURL_USE_OPENSSL=ON \
	-DCURL_USE_GSSAPI=ON \
+	-DCURL_ENABLE_NTLM=ON \
	\|\| { cat bld/CMakeFiles/CMake*.yaml; false; }
	echo '::group::curl_config.h (raw)'; cat bld/lib/curl_config.h \|\| true; echo '::endgroup::'
	echo '::group::curl_config.h'; grep -F '#define' bld/lib/curl_config.h \| sort \|\| true; echo '::endgroup::'
@@ -111,6 +112,7 @@ jobs:
	-DCURL_WERROR=ON \
	-DENABLE_DEBUG=ON -DCMAKE_BUILD_TYPE=Debug \
	-DCURL_USE_OPENSSL=ON \
+	-DCURL_ENABLE_NTLM=ON \
	\|\| { cat bld/CMakeFiles/CMake*.yaml; false; }
	echo '::group::curl_config.h (raw)'; cat bld/lib/curl_config.h \|\| true; echo '::endgroup::'
	echo '::group::curl_config.h'; grep -F '#define' bld/lib/curl_config.h \| sort \|\| true; echo '::endgroup::'

.github/workflows/windows.yml+9 -7

@@ -81,7 +81,7 @@ jobs:
	matrix:
	include:
	- { build: 'autotools', platform: 'x86_64', tflags: 'skiprun', config: '--with-openssl', install: 'libssl-devel libssh2-devel', name: 'openssl R' }
-	- { build: 'cmake' , platform: 'x86_64', tflags: '' , config: '-DENABLE_DEBUG=ON -DCURL_USE_OPENSSL=ON -DENABLE_THREADED_RESOLVER=OFF', install: 'libssl-devel libssh2-devel', name: 'openssl' }
+	- { build: 'cmake' , platform: 'x86_64', tflags: '' , config: '-DENABLE_DEBUG=ON -DCURL_USE_OPENSSL=ON -DENABLE_THREADED_RESOLVER=OFF -DCURL_ENABLE_NTLM=ON', install: 'libssl-devel libssh2-devel', name: 'openssl' }
	fail-fast: false
	steps:
	- uses: cygwin/cygwin-install-action@711d29f3da23c9f4a1798e369a6f01198c13b11a # v6.1
@@ -238,13 +238,13 @@ jobs:
	matrix:
	include:
	# MSYS
-	- { build: 'autotools', sys: 'msys' , env: 'x86_64' , tflags: '--min=1550', config: '--enable-debug --with-openssl --disable-threaded-resolver --disable-proxy', install: 'openssl-devel libssh2-devel', name: '!proxy' }
-	- { build: 'autotools', sys: 'msys' , env: 'x86_64' , tflags: 'skiprun' , config: '--enable-debug --with-openssl --disable-threaded-resolver', install: 'openssl-devel libssh2-devel', name: 'default' }
-	- { build: 'cmake' , sys: 'msys' , env: 'x86_64' , tflags: '' , config: '-DENABLE_DEBUG=ON -DENABLE_THREADED_RESOLVER=OFF', install: 'openssl-devel libssh2-devel', name: 'default' }
-	- { build: 'autotools', sys: 'msys' , env: 'x86_64' , tflags: '' , config: '--with-openssl', install: 'openssl-devel libssh2-devel', name: 'default R' }
+	- { build: 'autotools', sys: 'msys' , env: 'x86_64' , tflags: '--min=1550', config: '--enable-debug --with-openssl --disable-threaded-resolver --disable-proxy --enable-ntlm', install: 'openssl-devel libssh2-devel', name: '!proxy' }
+	- { build: 'autotools', sys: 'msys' , env: 'x86_64' , tflags: 'skiprun' , config: '--enable-debug --with-openssl --disable-threaded-resolver --enable-ntlm', install: 'openssl-devel libssh2-devel', name: 'default' }
+	- { build: 'cmake' , sys: 'msys' , env: 'x86_64' , tflags: '' , config: '-DENABLE_DEBUG=ON -DENABLE_THREADED_RESOLVER=OFF -DCURL_ENABLE_NTLM=ON', install: 'openssl-devel libssh2-devel', name: 'default' }
+	- { build: 'autotools', sys: 'msys' , env: 'x86_64' , tflags: '' , config: '--with-openssl --enable-ntlm', install: 'openssl-devel libssh2-devel', name: 'default R' }
	# MinGW
	- { build: 'autotools', sys: 'mingw64' , env: 'x86_64' , tflags: 'skiprun' , config: '--enable-debug --with-openssl --disable-threaded-resolver --enable-static --without-zlib', install: 'mingw-w64-x86_64-openssl mingw-w64-x86_64-libssh2', name: 'default' }
-	- { build: 'autotools', sys: 'mingw64' , env: 'x86_64' , tflags: '' , config: '--enable-debug --with-openssl --enable-windows-unicode --enable-ares --enable-static --disable-shared --enable-ca-native', install: 'mingw-w64-x86_64-c-ares mingw-w64-x86_64-openssl mingw-w64-x86_64-nghttp3 mingw-w64-x86_64-libssh2', name: 'c-ares U' }
+	- { build: 'autotools', sys: 'mingw64' , env: 'x86_64' , tflags: '' , config: '--enable-debug --with-openssl --enable-windows-unicode --enable-ares --enable-static --disable-shared --enable-ca-native --enable-ntlm', install: 'mingw-w64-x86_64-c-ares mingw-w64-x86_64-openssl mingw-w64-x86_64-nghttp3 mingw-w64-x86_64-libssh2', name: 'c-ares U' }
	- { build: 'cmake' , sys: 'mingw64' , env: 'x86_64' , tflags: '--min=1650', config: '-DENABLE_DEBUG=ON -DBUILD_SHARED_LIBS=OFF -DCURL_USE_SCHANNEL=ON -DENABLE_UNICODE=ON -DENABLE_ARES=ON -DCURL_DROP_UNUSED=ON', install: 'mingw-w64-x86_64-c-ares mingw-w64-x86_64-libssh2', type: 'Debug', name: 'schannel c-ares U' }
	# MinGW torture
	- { build: 'cmake' , sys: 'mingw64' , env: 'x86_64' , tflags: '-t --shallow=13 --min=700 1 to 950' , config: '-DENABLE_DEBUG=ON -DBUILD_SHARED_LIBS=OFF -DCURL_USE_SCHANNEL=ON -DENABLE_UNICODE=ON -DENABLE_ARES=ON', install: 'mingw-w64-x86_64-c-ares mingw-w64-x86_64-libssh2', type: 'Debug', name: 'schannel U torture 1' }
@@ -253,7 +253,7 @@ jobs:
	# read its configuration from, making it vulnerable to attacks on
	# Windows. Do not use this component till there is a fix for these.
	# https://github.com/curl/curl-for-win/blob/3951808deb04df9489ee17430f236ed54436f81a/libssh.sh#L6-L8
-	- { build: 'cmake' , sys: 'clang64' , env: 'clang-x86_64' , tflags: '' , config: '-DENABLE_DEBUG=ON -DBUILD_SHARED_LIBS=OFF -DCURL_USE_GNUTLS=ON -DENABLE_UNICODE=OFF -DUSE_NGTCP2=ON -DCURL_USE_LIBSSH2=OFF -DCURL_USE_LIBSSH=ON', install: 'mingw-w64-clang-x86_64-gnutls mingw-w64-clang-x86_64-nghttp3 mingw-w64-clang-x86_64-ngtcp2 mingw-w64-clang-x86_64-libssh', type: 'Debug', name: 'gnutls libssh' }
+	- { build: 'cmake' , sys: 'clang64' , env: 'clang-x86_64' , tflags: '' , config: '-DENABLE_DEBUG=ON -DBUILD_SHARED_LIBS=OFF -DCURL_USE_GNUTLS=ON -DENABLE_UNICODE=OFF -DUSE_NGTCP2=ON -DCURL_USE_LIBSSH2=OFF -DCURL_USE_LIBSSH=ON -DCURL_ENABLE_NTLM=ON', install: 'mingw-w64-clang-x86_64-gnutls mingw-w64-clang-x86_64-nghttp3 mingw-w64-clang-x86_64-ngtcp2 mingw-w64-clang-x86_64-libssh', type: 'Debug', name: 'gnutls libssh' }
	- { build: 'cmake' , sys: 'clangarm64', env: 'clang-aarch64', tflags: 'skiprun' , config: '-DENABLE_DEBUG=OFF -DBUILD_SHARED_LIBS=ON -DCURL_USE_SCHANNEL=ON -DENABLE_UNICODE=ON -DCURL_DROP_UNUSED=ON', install: 'mingw-w64-clang-aarch64-libssh2', type: 'Release', name: 'schannel R', image: 'windows-11-arm' }
	- { build: 'cmake' , sys: 'clang64' , env: 'clang-x86_64' , tflags: 'skiprun' , config: '-DENABLE_DEBUG=ON -DBUILD_SHARED_LIBS=OFF -DCURL_USE_OPENSSL=ON -DENABLE_UNICODE=OFF -DUSE_NGTCP2=ON', install: 'mingw-w64-clang-x86_64-openssl mingw-w64-clang-x86_64-nghttp3 mingw-w64-clang-x86_64-ngtcp2 mingw-w64-clang-x86_64-libssh2', type: 'Release', name: 'openssl', chkprefill: '_chkprefill' }
	- { build: 'cmake' , sys: 'ucrt64' , env: 'ucrt-x86_64' , tflags: 'skiprun' , config: '-DENABLE_DEBUG=OFF -DBUILD_SHARED_LIBS=ON -DCURL_USE_OPENSSL=ON', install: 'mingw-w64-ucrt-x86_64-openssl mingw-w64-ucrt-x86_64-libssh2', type: 'Release', test: 'uwp', name: 'schannel' }
@@ -714,6 +714,7 @@ jobs:
	-DCURL_WERROR=ON \
	-DCURL_USE_SCHANNEL=ON -DUSE_WIN32_IDN=ON \
	-DCURL_USE_LIBPSL=OFF \
+	-DCURL_ENABLE_NTLM=ON \
	-D_CURL_SKIP_BUILD_CERTS=ON \
	${options}
	else
@@ -845,6 +846,7 @@ jobs:
	-DNGTCP2_LIBRARY=/ucrt64/lib/libngtcp2.dll.a
	-DNGTCP2_CRYPTO_OSSL_LIBRARY=/ucrt64/lib/libngtcp2_crypto_ossl.dll.a
	-DCURL_CA_NATIVE=ON
+	-DCURL_ENABLE_NTLM=ON

	- name: 'schannel U'
	install-vcpkg: 'zlib libssh2[core,zlib]'