setopt: support certificate options in memory with struct curl_blob
—
$ git checkout -f cac5374298b3e79405bbdabe38941227c73a4c96
Previous HEAD position was 34a5400de1 http2: keep trying to send pending frames after req.upload_done
HEAD is now at cac5374298 setopt: support certificate options in memory with struct curl_blob
$ git clean -fdx
Removing Makefile
Removing Makefile.in
Removing aclocal.m4
Removing autom4te.cache/
Removing compile
Removing config.guess
Removing config.log
Removing config.status
Removing config.sub
Removing configure
Removing curl-config
Removing depcomp
Removing docs/Makefile
Removing docs/Makefile.in
Removing docs/cmdline-opts/Makefile
Removing docs/cmdline-opts/Makefile.in
Removing docs/curl.1
Removing docs/examples/.deps/
Removing docs/examples/Makefile
Removing docs/examples/Makefile.in
Removing docs/libcurl/Makefile
Removing docs/libcurl/Makefile.in
Removing docs/libcurl/opts/Makefile
Removing docs/libcurl/opts/Makefile.in
Removing include/Makefile
Removing include/Makefile.in
Removing include/curl/Makefile
Removing include/curl/Makefile.in
Removing install-sh
Removing lib/.deps/
Removing lib/.dirstamp
Removing lib/.libs/
Removing lib/Makefile
Removing lib/Makefile.in
Removing lib/curl-curl_ctype.o
Removing lib/curl-curl_multibyte.o
Removing lib/curl-nonblock.o
Removing lib/curl-strtoofft.o
Removing lib/curl-warnless.o
Removing lib/curl_config.h
Removing lib/curl_config.h.in
Removing lib/libcurl.la
Removing lib/libcurl.vers
Removing lib/libcurl_la-altsvc.lo
Removing lib/libcurl_la-altsvc.o
Removing lib/libcurl_la-amigaos.lo
Removing lib/libcurl_la-amigaos.o
Removing lib/libcurl_la-asyn-ares.lo
Removing lib/libcurl_la-asyn-ares.o
Removing lib/libcurl_la-asyn-thread.lo
Removing lib/libcurl_la-asyn-thread.o
Removing lib/libcurl_la-base64.lo
Removing lib/libcurl_la-base64.o
Removing lib/libcurl_la-conncache.lo
Removing lib/libcurl_la-conncache.o
Removing lib/libcurl_la-connect.lo
Removing lib/libcurl_la-connect.o
Removing lib/libcurl_la-content_encoding.lo
Removing lib/libcurl_la-content_encoding.o
Removing lib/libcurl_la-cookie.lo
Removing lib/libcurl_la-cookie.o
Removing lib/libcurl_la-curl_addrinfo.lo
Removing lib/libcurl_la-curl_addrinfo.o
Removing lib/libcurl_la-curl_ctype.lo
Removing lib/libcurl_la-curl_ctype.o
Removing lib/libcurl_la-curl_des.lo
Removing lib/libcurl_la-curl_des.o
Removing lib/libcurl_la-curl_endian.lo
Removing lib/libcurl_la-curl_endian.o
Removing lib/libcurl_la-curl_fnmatch.lo
Removing lib/libcurl_la-curl_fnmatch.o
Removing lib/libcurl_la-curl_get_line.lo
Removing lib/libcurl_la-curl_get_line.o
Removing lib/libcurl_la-curl_gethostname.lo
Removing lib/libcurl_la-curl_gethostname.o
Removing lib/libcurl_la-curl_gssapi.lo
Removing lib/libcurl_la-curl_gssapi.o
Removing lib/libcurl_la-curl_memrchr.lo
Removing lib/libcurl_la-curl_memrchr.o
Removing lib/libcurl_la-curl_multibyte.lo
Removing lib/libcurl_la-curl_multibyte.o
Removing lib/libcurl_la-curl_ntlm_core.lo
Removing lib/libcurl_la-curl_ntlm_core.o
Removing lib/libcurl_la-curl_ntlm_wb.lo
Removing lib/libcurl_la-curl_ntlm_wb.o
Removing lib/libcurl_la-curl_path.lo
Removing lib/libcurl_la-curl_path.o
Removing lib/libcurl_la-curl_range.lo
Removing lib/libcurl_la-curl_range.o
Removing lib/libcurl_la-curl_rtmp.lo
Removing lib/libcurl_la-curl_rtmp.o
Removing lib/libcurl_la-curl_sasl.lo
Removing lib/libcurl_la-curl_sasl.o
Removing lib/libcurl_la-curl_sspi.lo
Removing lib/libcurl_la-curl_sspi.o
Removing lib/libcurl_la-curl_threads.lo
Removing lib/libcurl_la-curl_threads.o
Removing lib/libcurl_la-dict.lo
Removing lib/libcurl_la-dict.o
Removing lib/libcurl_la-doh.lo
Removing lib/libcurl_la-doh.o
Removing lib/libcurl_la-dotdot.lo
Removing lib/libcurl_la-dotdot.o
Removing lib/libcurl_la-dynbuf.lo
Removing lib/libcurl_la-dynbuf.o
Removing lib/libcurl_la-easy.lo
Removing lib/libcurl_la-easy.o
Removing lib/libcurl_la-escape.lo
Removing lib/libcurl_la-escape.o
Removing lib/libcurl_la-file.lo
Removing lib/libcurl_la-file.o
Removing lib/libcurl_la-fileinfo.lo
Removing lib/libcurl_la-fileinfo.o
Removing lib/libcurl_la-formdata.lo
Removing lib/libcurl_la-formdata.o
Removing lib/libcurl_la-ftp.lo
Removing lib/libcurl_la-ftp.o
Removing lib/libcurl_la-ftplistparser.lo
Removing lib/libcurl_la-ftplistparser.o
Removing lib/libcurl_la-getenv.lo
Removing lib/libcurl_la-getenv.o
Removing lib/libcurl_la-getinfo.lo
Removing lib/libcurl_la-getinfo.o
Removing lib/libcurl_la-gopher.lo
Removing lib/libcurl_la-gopher.o
Removing lib/libcurl_la-hash.lo
Removing lib/libcurl_la-hash.o
Removing lib/libcurl_la-hmac.lo
Removing lib/libcurl_la-hmac.o
Removing lib/libcurl_la-hostasyn.lo
Removing lib/libcurl_la-hostasyn.o
Removing lib/libcurl_la-hostcheck.lo
Removing lib/libcurl_la-hostcheck.o
Removing lib/libcurl_la-hostip.lo
Removing lib/libcurl_la-hostip.o
Removing lib/libcurl_la-hostip4.lo
Removing lib/libcurl_la-hostip4.o
Removing lib/libcurl_la-hostip6.lo
Removing lib/libcurl_la-hostip6.o
Removing lib/libcurl_la-hostsyn.lo
Removing lib/libcurl_la-hostsyn.o
Removing lib/libcurl_la-http.lo
Removing lib/libcurl_la-http.o
Removing lib/libcurl_la-http2.lo
Removing lib/libcurl_la-http2.o
Removing lib/libcurl_la-http_chunks.lo
Removing lib/libcurl_la-http_chunks.o
Removing lib/libcurl_la-http_digest.lo
Removing lib/libcurl_la-http_digest.o
Removing lib/libcurl_la-http_negotiate.lo
Removing lib/libcurl_la-http_negotiate.o
Removing lib/libcurl_la-http_ntlm.lo
Removing lib/libcurl_la-http_ntlm.o
Removing lib/libcurl_la-http_proxy.lo
Removing lib/libcurl_la-http_proxy.o
Removing lib/libcurl_la-idn_win32.lo
Removing lib/libcurl_la-idn_win32.o
Removing lib/libcurl_la-if2ip.lo
Removing lib/libcurl_la-if2ip.o
Removing lib/libcurl_la-imap.lo
Removing lib/libcurl_la-imap.o
Removing lib/libcurl_la-inet_ntop.lo
Removing lib/libcurl_la-inet_ntop.o
Removing lib/libcurl_la-inet_pton.lo
Removing lib/libcurl_la-inet_pton.o
Removing lib/libcurl_la-krb5.lo
Removing lib/libcurl_la-krb5.o
Removing lib/libcurl_la-ldap.lo
Removing lib/libcurl_la-ldap.o
Removing lib/libcurl_la-llist.lo
Removing lib/libcurl_la-llist.o
Removing lib/libcurl_la-md4.lo
Removing lib/libcurl_la-md4.o
Removing lib/libcurl_la-md5.lo
Removing lib/libcurl_la-md5.o
Removing lib/libcurl_la-memdebug.lo
Removing lib/libcurl_la-memdebug.o
Removing lib/libcurl_la-mime.lo
Removing lib/libcurl_la-mime.o
Removing lib/libcurl_la-mprintf.lo
Removing lib/libcurl_la-mprintf.o
Removing lib/libcurl_la-mqtt.lo
Removing lib/libcurl_la-mqtt.o
Removing lib/libcurl_la-multi.lo
Removing lib/libcurl_la-multi.o
Removing lib/libcurl_la-netrc.lo
Removing lib/libcurl_la-netrc.o
Removing lib/libcurl_la-non-ascii.lo
Removing lib/libcurl_la-non-ascii.o
Removing lib/libcurl_la-nonblock.lo
Removing lib/libcurl_la-nonblock.o
Removing lib/libcurl_la-openldap.lo
Removing lib/libcurl_la-openldap.o
Removing lib/libcurl_la-parsedate.lo
Removing lib/libcurl_la-parsedate.o
Removing lib/libcurl_la-pingpong.lo
Removing lib/libcurl_la-pingpong.o
Removing lib/libcurl_la-pop3.lo
Removing lib/libcurl_la-pop3.o
Removing lib/libcurl_la-progress.lo
Removing lib/libcurl_la-progress.o
Removing lib/libcurl_la-psl.lo
Removing lib/libcurl_la-psl.o
Removing lib/libcurl_la-rand.lo
Removing lib/libcurl_la-rand.o
Removing lib/libcurl_la-rename.lo
Removing lib/libcurl_la-rename.o
Removing lib/libcurl_la-rtsp.lo
Removing lib/libcurl_la-rtsp.o
Removing lib/libcurl_la-security.lo
Removing lib/libcurl_la-security.o
Removing lib/libcurl_la-select.lo
Removing lib/libcurl_la-select.o
Removing lib/libcurl_la-sendf.lo
Removing lib/libcurl_la-sendf.o
Removing lib/libcurl_la-setopt.lo
Removing lib/libcurl_la-setopt.o
Removing lib/libcurl_la-sha256.lo
Removing lib/libcurl_la-sha256.o
Removing lib/libcurl_la-share.lo
Removing lib/libcurl_la-share.o
Removing lib/libcurl_la-slist.lo
Removing lib/libcurl_la-slist.o
Removing lib/libcurl_la-smb.lo
Removing lib/libcurl_la-smb.o
Removing lib/libcurl_la-smtp.lo
Removing lib/libcurl_la-smtp.o
Removing lib/libcurl_la-socketpair.lo
Removing lib/libcurl_la-socketpair.o
Removing lib/libcurl_la-socks.lo
Removing lib/libcurl_la-socks.o
Removing lib/libcurl_la-socks_gssapi.lo
Removing lib/libcurl_la-socks_gssapi.o
Removing lib/libcurl_la-socks_sspi.lo
Removing lib/libcurl_la-socks_sspi.o
Removing lib/libcurl_la-speedcheck.lo
Removing lib/libcurl_la-speedcheck.o
Removing lib/libcurl_la-splay.lo
Removing lib/libcurl_la-splay.o
Removing lib/libcurl_la-strcase.lo
Removing lib/libcurl_la-strcase.o
Removing lib/libcurl_la-strdup.lo
Removing lib/libcurl_la-strdup.o
Removing lib/libcurl_la-strerror.lo
Removing lib/libcurl_la-strerror.o
Removing lib/libcurl_la-strtok.lo
Removing lib/libcurl_la-strtok.o
Removing lib/libcurl_la-strtoofft.lo
Removing lib/libcurl_la-strtoofft.o
Removing lib/libcurl_la-system_win32.lo
Removing lib/libcurl_la-system_win32.o
Removing lib/libcurl_la-telnet.lo
Removing lib/libcurl_la-telnet.o
Removing lib/libcurl_la-tftp.lo
Removing lib/libcurl_la-tftp.o
Removing lib/libcurl_la-timeval.lo
Removing lib/libcurl_la-timeval.o
Removing lib/libcurl_la-transfer.lo
Removing lib/libcurl_la-transfer.o
Removing lib/libcurl_la-url.lo
Removing lib/libcurl_la-url.o
Removing lib/libcurl_la-urlapi.lo
Removing lib/libcurl_la-urlapi.o
Removing lib/libcurl_la-version.lo
Removing lib/libcurl_la-version.o
Removing lib/libcurl_la-warnless.lo
Removing lib/libcurl_la-warnless.o
Removing lib/libcurl_la-wildcard.lo
Removing lib/libcurl_la-wildcard.o
Removing lib/libcurl_la-x509asn1.lo
Removing lib/libcurl_la-x509asn1.o
Removing lib/stamp-h1
Removing lib/vauth/.deps/
Removing lib/vauth/.dirstamp
Removing lib/vauth/libcurl_la-cleartext.lo
Removing lib/vauth/libcurl_la-cleartext.o
Removing lib/vauth/libcurl_la-cram.lo
Removing lib/vauth/libcurl_la-cram.o
Removing lib/vauth/libcurl_la-digest.lo
Removing lib/vauth/libcurl_la-digest.o
Removing lib/vauth/libcurl_la-digest_sspi.lo
Removing lib/vauth/libcurl_la-digest_sspi.o
Removing lib/vauth/libcurl_la-krb5_gssapi.lo
Removing lib/vauth/libcurl_la-krb5_gssapi.o
Removing lib/vauth/libcurl_la-krb5_sspi.lo
Removing lib/vauth/libcurl_la-krb5_sspi.o
Removing lib/vauth/libcurl_la-ntlm.lo
Removing lib/vauth/libcurl_la-ntlm.o
Removing lib/vauth/libcurl_la-ntlm_sspi.lo
Removing lib/vauth/libcurl_la-ntlm_sspi.o
Removing lib/vauth/libcurl_la-oauth2.lo
Removing lib/vauth/libcurl_la-oauth2.o
Removing lib/vauth/libcurl_la-spnego_gssapi.lo
Removing lib/vauth/libcurl_la-spnego_gssapi.o
Removing lib/vauth/libcurl_la-spnego_sspi.lo
Removing lib/vauth/libcurl_la-spnego_sspi.o
Removing lib/vauth/libcurl_la-vauth.lo
Removing lib/vauth/libcurl_la-vauth.o
Removing lib/vquic/.deps/
Removing lib/vquic/.dirstamp
Removing lib/vquic/libcurl_la-ngtcp2.lo
Removing lib/vquic/libcurl_la-ngtcp2.o
Removing lib/vquic/libcurl_la-quiche.lo
Removing lib/vquic/libcurl_la-quiche.o
Removing lib/vquic/libcurl_la-vquic.lo
Removing lib/vquic/libcurl_la-vquic.o
Removing lib/vssh/.deps/
Removing lib/vssh/.dirstamp
Removing lib/vssh/libcurl_la-libssh.lo
Removing lib/vssh/libcurl_la-libssh.o
Removing lib/vssh/libcurl_la-libssh2.lo
Removing lib/vssh/libcurl_la-libssh2.o
Removing lib/vssh/libcurl_la-wolfssh.lo
Removing lib/vssh/libcurl_la-wolfssh.o
Removing lib/vtls/.deps/
Removing lib/vtls/.dirstamp
Removing lib/vtls/libcurl_la-bearssl.lo
Removing lib/vtls/libcurl_la-bearssl.o
Removing lib/vtls/libcurl_la-gskit.lo
Removing lib/vtls/libcurl_la-gskit.o
Removing lib/vtls/libcurl_la-gtls.lo
Removing lib/vtls/libcurl_la-gtls.o
Removing lib/vtls/libcurl_la-mbedtls.lo
Removing lib/vtls/libcurl_la-mbedtls.o
Removing lib/vtls/libcurl_la-mbedtls_threadlock.lo
Removing lib/vtls/libcurl_la-mbedtls_threadlock.o
Removing lib/vtls/libcurl_la-mesalink.lo
Removing lib/vtls/libcurl_la-mesalink.o
Removing lib/vtls/libcurl_la-nss.lo
Removing lib/vtls/libcurl_la-nss.o
Removing lib/vtls/libcurl_la-openssl.lo
Removing lib/vtls/libcurl_la-openssl.o
Removing lib/vtls/libcurl_la-schannel.lo
Removing lib/vtls/libcurl_la-schannel.o
Removing lib/vtls/libcurl_la-schannel_verify.lo
Removing lib/vtls/libcurl_la-schannel_verify.o
Removing lib/vtls/libcurl_la-sectransp.lo
Removing lib/vtls/libcurl_la-sectransp.o
Removing lib/vtls/libcurl_la-vtls.lo
Removing lib/vtls/libcurl_la-vtls.o
Removing lib/vtls/libcurl_la-wolfssl.lo
Removing lib/vtls/libcurl_la-wolfssl.o
Removing libcurl.pc
Removing libtool
Removing ltmain.sh
Removing m4/libtool.m4
Removing m4/ltoptions.m4
Removing m4/ltsugar.m4
Removing m4/ltversion.m4
Removing m4/lt~obsolete.m4
Removing missing
Removing packages/Makefile
Removing packages/Makefile.in
Removing packages/vms/Makefile
Removing packages/vms/Makefile.in
Removing scripts/Makefile
Removing scripts/Makefile.in
Removing src/.deps/
Removing src/.libs/
Removing src/Makefile
Removing src/Makefile.in
Removing src/curl
Removing src/curl-slist_wc.o
Removing src/curl-tool_binmode.o
Removing src/curl-tool_bname.o
Removing src/curl-tool_cb_dbg.o
Removing src/curl-tool_cb_hdr.o
Removing src/curl-tool_cb_prg.o
Removing src/curl-tool_cb_rea.o
Removing src/curl-tool_cb_see.o
Removing src/curl-tool_cb_wrt.o
Removing src/curl-tool_cfgable.o
Removing src/curl-tool_convert.o
Removing src/curl-tool_dirhie.o
Removing src/curl-tool_doswin.o
Removing src/curl-tool_easysrc.o
Removing src/curl-tool_filetime.o
Removing src/curl-tool_formparse.o
Removing src/curl-tool_getparam.o
Removing src/curl-tool_getpass.o
Removing src/curl-tool_help.o
Removing src/curl-tool_helpers.o
Removing src/curl-tool_homedir.o
Removing src/curl-tool_hugehelp.o
Removing src/curl-tool_libinfo.o
Removing src/curl-tool_main.o
Removing src/curl-tool_metalink.o
Removing src/curl-tool_msgs.o
Removing src/curl-tool_operate.o
Removing src/curl-tool_operhlp.o
Removing src/curl-tool_panykey.o
Removing src/curl-tool_paramhlp.o
Removing src/curl-tool_parsecfg.o
Removing src/curl-tool_progress.o
Removing src/curl-tool_setopt.o
Removing src/curl-tool_sleep.o
Removing src/curl-tool_strdup.o
Removing src/curl-tool_urlglob.o
Removing src/curl-tool_util.o
Removing src/curl-tool_vms.o
Removing src/curl-tool_writeout.o
Removing src/curl-tool_writeout_json.o
Removing src/curl-tool_xattr.o
Removing src/tool_hugehelp.c
Removing test-driver
Removing tests/Makefile
Removing tests/Makefile.in
Removing tests/certs/Makefile
Removing tests/certs/Makefile.in
Removing tests/certs/scripts/Makefile
Removing tests/certs/scripts/Makefile.in
Removing tests/configurehelp.pm
Removing tests/data/Makefile
Removing tests/data/Makefile.in
Removing tests/libtest/.deps/
Removing tests/libtest/Makefile
Removing tests/libtest/Makefile.in
Removing tests/server/.deps/
Removing tests/server/Makefile
Removing tests/server/Makefile.in
Removing tests/unit/.deps/
Removing tests/unit/Makefile
Removing tests/unit/Makefile.in
$ autoreconf -fi
libtoolize: putting auxiliary files in '.'.
libtoolize: copying file './ltmain.sh'
libtoolize: putting macros in AC_CONFIG_MACRO_DIRS, 'm4'.
libtoolize: copying file 'm4/libtool.m4'
libtoolize: copying file 'm4/ltoptions.m4'
libtoolize: copying file 'm4/ltsugar.m4'
libtoolize: copying file 'm4/ltversion.m4'
libtoolize: copying file 'm4/lt~obsolete.m4'
libtoolize: Remember to add 'LT_INIT' to configure.ac.
configure.ac:44: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:44: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:147: CURL_CHECK_OPTION_DEBUG is expanded from...
configure.ac:44: the top level
configure.ac:45: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:45: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:181: CURL_CHECK_OPTION_OPTIMIZE is expanded from...
configure.ac:45: the top level
configure.ac:46: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:46: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:360: CURL_CHECK_OPTION_WARNINGS is expanded from...
configure.ac:46: the top level
configure.ac:47: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:47: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:394: CURL_CHECK_OPTION_WERROR is expanded from...
configure.ac:47: the top level
configure.ac:48: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:48: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:94: CURL_CHECK_OPTION_CURLDEBUG is expanded from...
configure.ac:48: the top level
configure.ac:49: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:49: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:237: CURL_CHECK_OPTION_SYMBOL_HIDING is expanded from...
configure.ac:49: the top level
configure.ac:50: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:50: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:58: CURL_CHECK_OPTION_ARES is expanded from...
configure.ac:50: the top level
configure.ac:51: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:51: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:328: CURL_CHECK_OPTION_RT is expanded from...
configure.ac:51: the top level
configure.ac:52: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:52: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:658: CURL_CHECK_OPTION_ESNI is expanded from...
configure.ac:52: the top level
configure.ac:123: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:123: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-functions.m4:7304: CURL_COVERAGE is expanded from...
configure.ac:123: the top level
configure.ac:375: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:375: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:375: the top level
configure.ac:376: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:376: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:376: the top level
configure.ac:394: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:394: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:394: the top level
configure.ac:395: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:395: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:395: the top level
configure.ac:409: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:409: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:409: the top level
configure.ac:410: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:410: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:410: the top level
configure.ac:424: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:424: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:424: the top level
configure.ac:425: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:425: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:425: the top level
configure.ac:440: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:440: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:440: the top level
configure.ac:441: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:441: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:441: the top level
configure.ac:472: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:472: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:472: the top level
configure.ac:473: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:473: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:473: the top level
configure.ac:498: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:498: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:498: the top level
configure.ac:499: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:499: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:499: the top level
configure.ac:514: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:514: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:514: the top level
configure.ac:515: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:515: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:515: the top level
configure.ac:529: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:529: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:529: the top level
configure.ac:530: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:530: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:530: the top level
configure.ac:544: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:544: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:544: the top level
configure.ac:545: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:545: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:545: the top level
configure.ac:560: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:560: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:560: the top level
configure.ac:561: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:561: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:561: the top level
configure.ac:577: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:577: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:577: the top level
configure.ac:578: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:578: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:578: the top level
configure.ac:594: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:594: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:594: the top level
configure.ac:595: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:595: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:595: the top level
configure.ac:610: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:610: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:610: the top level
configure.ac:611: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:611: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:611: the top level
configure.ac:626: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:626: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:626: the top level
configure.ac:627: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:627: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:627: the top level
configure.ac:642: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:642: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:642: the top level
configure.ac:643: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:643: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:643: the top level
configure.ac:663: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:663: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:663: the top level
configure.ac:664: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:664: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:664: the top level
configure.ac:684: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:684: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:684: the top level
configure.ac:685: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:685: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:685: the top level
configure.ac:704: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:704: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:704: the top level
configure.ac:911: warning: The macro `AC_HEADER_TIME' is obsolete.
configure.ac:911: You should run autoupdate.
./lib/autoconf/headers.m4:743: AC_HEADER_TIME is expanded from...
acinclude.m4:1575: CURL_CHECK_FUNC_CLOCK_GETTIME_MONOTONIC is expanded from...
acinclude.m4:1618: CURL_CHECK_LIBS_CLOCK_GETTIME_MONOTONIC is expanded from...
configure.ac:911: the top level
configure.ac:932: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:932: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:932: the top level
configure.ac:933: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:933: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:933: the top level
configure.ac:1039: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1039: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1039: the top level
configure.ac:1040: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1040: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1040: the top level
configure.ac:1124: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1124: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1124: the top level
configure.ac:1129: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1129: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1129: the top level
configure.ac:1210: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1210: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1210: the top level
configure.ac:1211: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1211: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1211: the top level
configure.ac:1222: warning: The macro `AC_TRY_RUN' is obsolete.
configure.ac:1222: You should run autoupdate.
./lib/autoconf/general.m4:2997: AC_TRY_RUN is expanded from...
configure.ac:1222: the top level
configure.ac:1260: warning: The macro `AC_TRY_COMPILE' is obsolete.
configure.ac:1260: You should run autoupdate.
./lib/autoconf/general.m4:2847: AC_TRY_COMPILE is expanded from...
configure.ac:1260: the top level
configure.ac:1319: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1319: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1319: the top level
configure.ac:1326: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1326: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1326: the top level
configure.ac:1333: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1333: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1333: the top level
configure.ac:1499: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1499: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1499: the top level
configure.ac:1500: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1500: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1500: the top level
configure.ac:1526: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1526: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1526: the top level
configure.ac:1527: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1527: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1527: the top level
configure.ac:1531: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1531: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1531: the top level
configure.ac:1532: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1532: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1532: the top level
configure.ac:1561: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1561: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1561: the top level
configure.ac:1562: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1562: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1562: the top level
configure.ac:1566: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1566: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1566: the top level
configure.ac:1567: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1567: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1567: the top level
configure.ac:1591: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1591: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1591: the top level
configure.ac:1592: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1592: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1592: the top level
configure.ac:1627: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1627: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1627: the top level
configure.ac:1628: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1628: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1628: the top level
configure.ac:1646: warning: The macro `AC_TRY_LINK' is obsolete.
configure.ac:1646: You should run autoupdate.
./lib/autoconf/general.m4:2920: AC_TRY_LINK is expanded from...
configure.ac:1646: the top level
configure.ac:1738: warning: The macro `AC_TRY_LINK' is obsolete.
configure.ac:1738: You should run autoupdate.
./lib/autoconf/general.m4:2920: AC_TRY_LINK is expanded from...
lib/m4sugar/m4sh.m4:692: _AS_IF_ELSE is expanded from...
lib/m4sugar/m4sh.m4:699: AS_IF is expanded from...
./lib/autoconf/libs.m4:100: AC_CHECK_LIB is expanded from...
lib/m4sugar/m4sh.m4:692: _AS_IF_ELSE is expanded from...
lib/m4sugar/m4sh.m4:699: AS_IF is expanded from...
./lib/autoconf/libs.m4:100: AC_CHECK_LIB is expanded from...
configure.ac:1738: the top level
configure.ac:1738: warning: The macro `AC_TRY_LINK' is obsolete.
configure.ac:1738: You should run autoupdate.
./lib/autoconf/general.m4:2920: AC_TRY_LINK is expanded from...
lib/m4sugar/m4sh.m4:692: _AS_IF_ELSE is expanded from...
lib/m4sugar/m4sh.m4:699: AS_IF is expanded from...
./lib/autoconf/general.m4:2894: _AC_LINK_IFELSE is expanded from...
./lib/autoconf/general.m4:2911: AC_LINK_IFELSE is expanded from...
./lib/autoconf/general.m4:2920: AC_TRY_LINK is expanded from...
lib/m4sugar/m4sh.m4:692: _AS_IF_ELSE is expanded from...
lib/m4sugar/m4sh.m4:699: AS_IF is expanded from...
./lib/autoconf/libs.m4:100: AC_CHECK_LIB is expanded from...
lib/m4sugar/m4sh.m4:692: _AS_IF_ELSE is expanded from...
lib/m4sugar/m4sh.m4:699: AS_IF is expanded from...
./lib/autoconf/libs.m4:100: AC_CHECK_LIB is expanded from...
configure.ac:1738: the top level
configure.ac:1951: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1951: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1951: the top level
configure.ac:1962: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1962: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1962: the top level
configure.ac:1997: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1997: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1997: the top level
configure.ac:1998: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:1998: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:1998: the top level
configure.ac:2014: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2014: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2014: the top level
configure.ac:2015: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2015: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2015: the top level
configure.ac:2175: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2175: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2175: the top level
configure.ac:2176: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2176: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2176: the top level
configure.ac:2269: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2269: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2269: the top level
configure.ac:2270: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2270: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2270: the top level
configure.ac:2372: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2372: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2372: the top level
configure.ac:2373: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2373: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2373: the top level
configure.ac:2463: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2463: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2463: the top level
configure.ac:2464: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2464: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2464: the top level
configure.ac:2554: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2554: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2554: the top level
configure.ac:2555: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2555: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2555: the top level
configure.ac:2720: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2720: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
acinclude.m4:2163: CURL_CHECK_CA_BUNDLE is expanded from...
configure.ac:2720: the top level
configure.ac:2751: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2751: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2751: the top level
configure.ac:2752: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2752: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2752: the top level
configure.ac:2845: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2845: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2845: the top level
configure.ac:2846: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2846: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2846: the top level
configure.ac:2852: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2852: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2852: the top level
configure.ac:2853: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2853: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2853: the top level
configure.ac:2858: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2858: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2858: the top level
configure.ac:2859: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:2859: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:2859: the top level
configure.ac:3039: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3039: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3039: the top level
configure.ac:3040: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3040: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3040: the top level
configure.ac:3118: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3118: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3118: the top level
configure.ac:3119: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3119: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3119: the top level
configure.ac:3170: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3170: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3170: the top level
configure.ac:3171: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3171: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3171: the top level
configure.ac:3248: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3248: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3248: the top level
configure.ac:3249: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3249: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3249: the top level
configure.ac:3383: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3383: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3383: the top level
configure.ac:3384: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3384: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3384: the top level
configure.ac:3470: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3470: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3470: the top level
configure.ac:3471: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3471: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3471: the top level
configure.ac:3669: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3669: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3669: the top level
configure.ac:3670: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3670: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3670: the top level
configure.ac:3760: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3760: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3760: the top level
configure.ac:3761: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3761: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3761: the top level
configure.ac:3844: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3844: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3844: the top level
configure.ac:3845: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3845: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3845: the top level
configure.ac:3869: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3869: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3869: the top level
configure.ac:3870: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:3870: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:3870: the top level
configure.ac:3898: warning: The macro `AC_HEADER_STDC' is obsolete.
configure.ac:3898: You should run autoupdate.
./lib/autoconf/headers.m4:704: AC_HEADER_STDC is expanded from...
configure.ac:3898: the top level
configure.ac:3985: warning: The macro `AC_HEADER_TIME' is obsolete.
configure.ac:3985: You should run autoupdate.
./lib/autoconf/headers.m4:743: AC_HEADER_TIME is expanded from...
configure.ac:3985: the top level
configure.ac:4087: warning: The macro `AC_TYPE_SIGNAL' is obsolete.
configure.ac:4087: You should run autoupdate.
./lib/autoconf/types.m4:776: AC_TYPE_SIGNAL is expanded from...
configure.ac:4087: the top level
configure.ac:4267: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4267: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:32: CURL_CHECK_OPTION_THREADED_RESOLVER is expanded from...
configure.ac:4267: the top level
configure.ac:4275: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4275: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4275: the top level
configure.ac:4277: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4277: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4277: the top level
configure.ac:4368: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4368: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4368: the top level
configure.ac:4369: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4369: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4369: the top level
configure.ac:4387: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4387: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4387: the top level
configure.ac:4388: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4388: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4388: the top level
configure.ac:4423: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4423: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4423: the top level
configure.ac:4424: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4424: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4424: the top level
configure.ac:4437: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4437: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
m4/curl-confopts.m4:599: CURL_CHECK_OPTION_NTLM_WB is expanded from...
configure.ac:4437: the top level
configure.ac:4446: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4446: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4446: the top level
configure.ac:4447: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4447: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4447: the top level
configure.ac:4472: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4472: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4472: the top level
configure.ac:4473: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4473: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4473: the top level
configure.ac:4505: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4505: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4505: the top level
configure.ac:4506: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4506: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4506: the top level
configure.ac:4523: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4523: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4523: the top level
configure.ac:4524: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4524: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4524: the top level
configure.ac:4541: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4541: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4541: the top level
configure.ac:4542: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4542: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4542: the top level
configure.ac:4559: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4559: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4559: the top level
configure.ac:4560: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4560: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4560: the top level
configure.ac:4577: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4577: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4577: the top level
configure.ac:4578: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4578: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4578: the top level
configure.ac:4595: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4595: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4595: the top level
configure.ac:4596: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4596: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4596: the top level
configure.ac:4613: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4613: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4613: the top level
configure.ac:4614: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4614: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4614: the top level
configure.ac:4631: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4631: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4631: the top level
configure.ac:4632: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4632: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4632: the top level
configure.ac:4650: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4650: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4650: the top level
configure.ac:4651: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:4651: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:4651: the top level
configure.ac:120: installing './compile'
configure.ac:179: installing './config.guess'
configure.ac:179: installing './config.sub'
configure.ac:120: installing './install-sh'
configure.ac:125: installing './missing'
docs/examples/Makefile.am: installing './depcomp'
parallel-tests: installing './test-driver'
$ bash -c find . -name config.guess -exec cp /usr/share/misc/config.guess {} \;
$ bash -c find . -name config.sub -exec cp /usr/share/misc/config.sub {} \;
$ chmod +x configure
$ ./configure --disable-shared --without-ssl --disable-docs
checking whether to enable maintainer-specific portions of Makefiles... no
checking whether make supports nested variables... yes
checking whether to enable debug build options... no
checking whether to enable compiler optimizer... (assumed) yes
checking whether to enable strict compiler warnings... no
checking whether to enable compiler warnings as errors... no
checking whether to enable curl debug memory tracking... no
checking whether to enable hiding of library internal symbols... yes
checking whether to enable c-ares for DNS lookups... no
checking whether to disable dependency on -lrt... (assumed no)
checking whether to enable ESNI support... no
checking for path separator... :
checking for sed... /usr/bin/sed
checking for grep... /usr/bin/grep
checking for egrep... /usr/bin/grep -E
checking for ar... /usr/bin/ar
checking for a BSD-compatible install... /usr/bin/install -c
checking for gcc... ccache gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether the compiler supports GNU C... yes
checking whether ccache gcc accepts -g... yes
checking for ccache gcc option to enable C11 features... none needed
checking whether ccache gcc understands -c and -o together... yes
checking how to run the C preprocessor... ccache gcc -E
checking for a sed that does not truncate output... (cached) /usr/bin/sed
checking for code coverage support... no
checking whether build environment is sane... yes
checking for a race-free mkdir -p... /usr/bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking whether make supports the include directive... yes (GNU style)
checking dependency style of ccache gcc... gcc3
checking curl version... 7.71.0-DEV
checking build system type... x86_64-pc-linux-gnu
checking host system type... x86_64-pc-linux-gnu
checking for grep that handles long lines and -e... (cached) /usr/bin/grep
checking for egrep... /usr/bin/grep -E
checking if OS is AIX (to define _ALL_SOURCE)... no
checking if _THREAD_SAFE is already defined... no
checking if _THREAD_SAFE is actually needed... no
checking if _THREAD_SAFE is onwards defined... no
checking if _REENTRANT is already defined... no
checking if _REENTRANT is actually needed... no
checking if _REENTRANT is onwards defined... no
checking for special C compiler options needed for large files... no
checking for _FILE_OFFSET_BITS value needed for large files... no
checking how to print strings... printf
checking for a sed that does not truncate output... (cached) /usr/bin/sed
checking for fgrep... /usr/bin/grep -F
checking for ld used by ccache gcc... /usr/bin/ld
checking if the linker (/usr/bin/ld) is GNU ld... yes
checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B
checking the name lister (/usr/bin/nm -B) interface... BSD nm
checking whether ln -s works... yes
checking the maximum length of command line arguments... 1572864
checking how to convert x86_64-pc-linux-gnu file names to x86_64-pc-linux-gnu format... func_convert_file_noop
checking how to convert x86_64-pc-linux-gnu file names to toolchain format... func_convert_file_noop
checking for /usr/bin/ld option to reload object files... -r
checking for objdump... objdump
checking how to recognize dependent libraries... pass_all
checking for dlltool... no
checking how to associate runtime and link libraries... printf %s\n
checking for archiver @FILE support... @
checking for strip... strip
checking for ranlib... ranlib
checking command to parse /usr/bin/nm -B output from ccache gcc object... ok
checking for sysroot... no
checking for a working dd... /usr/bin/dd
checking how to truncate binary pipes... /usr/bin/dd bs=4096 count=1
checking for mt... mt
checking if mt is a manifest tool... no
checking for stdio.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for strings.h... yes
checking for sys/stat.h... yes
checking for sys/types.h... yes
checking for unistd.h... yes
checking for sys/time.h... yes
checking for dlfcn.h... yes
checking for objdir... .libs
checking if ccache gcc supports -fno-rtti -fno-exceptions... no
checking for ccache gcc option to produce PIC... -fPIC -DPIC
checking if ccache gcc PIC flag -fPIC -DPIC works... yes
checking if ccache gcc static flag -static works... yes
checking if ccache gcc supports -c -o file.o... yes
checking if ccache gcc supports -c -o file.o... (cached) yes
checking whether the ccache gcc linker (/usr/bin/ld -m elf_x86_64) supports shared libraries... yes
checking dynamic linker characteristics... GNU/Linux ld.so
checking how to hardcode library paths into programs... immediate
checking whether stripping libraries is possible... yes
checking if libtool supports shared libraries... yes
checking whether to build shared libraries... no
checking whether to build static libraries... yes
checking whether to build shared libraries with -version-info... yes
checking whether to build shared libraries with -no-undefined... no
checking whether to build shared libraries with -mimpure-text... no
checking whether to build shared libraries with PIC... yes
checking whether to build static libraries with PIC... yes
checking whether to build shared libraries only... no
checking whether to build static libraries only... yes
checking for inline... inline
checking if cpp -P is needed... yes
checking if cpp -P works... yes
checking if compiler is DEC/Compaq/HP C... no
checking if compiler is HP-UX C... no
checking if compiler is IBM C... no
checking if compiler is Intel C... no
checking if compiler is clang... no
checking if compiler is GNU C... yes
checking if compiler is LCC... no
checking if compiler is SGI MIPSpro C... no
checking if compiler is SGI MIPS C... no
checking if compiler is SunPro C... no
checking if compiler is Tiny C... no
checking if compiler is Watcom C... no
checking if compiler accepts some basic options... yes
configure: compiler options added: -Werror-implicit-function-declaration
checking if compiler accepts debug disabling options... yes
configure: compiler options added:
checking if compiler optimizer assumed setting might be used... yes
checking if compiler accepts optimizer enabling options... yes
configure: compiler options added: -O2
checking if compiler accepts strict warning options... yes
configure: compiler options added: -Wno-system-headers
checking if compiler halts on compilation errors... yes
checking if compiler halts on negative sized arrays... yes
checking if compiler halts on function prototype mismatch... yes
checking if compiler supports hiding library internal symbols... yes
checking for windows.h... no
checking whether build target is a native Windows one... no
checking whether build target supports WIN32 file API... no
checking for good-to-use Mac CFLAGS... no
checking to see if the compiler supports __builtin_available()... no
checking whether to support http... yes
checking whether to support ftp... yes
checking whether to support file... yes
checking whether to support ldap... yes
checking whether to support ldaps... yes
checking whether to support rtsp... yes
checking whether to support proxies... yes
checking whether to support dict... yes
checking whether to support telnet... yes
checking whether to support tftp... yes
checking whether to support pop3... yes
checking whether to support imap... yes
checking whether to support smb... yes
checking whether to support smtp... yes
checking whether to support gopher... yes
checking whether to support mqtt... no
checking whether to provide built-in manual... yes
checking whether to enable generation of C code... yes
checking whether to use libgcc... no
checking if X/Open network library is required... no
checking for gethostbyname... yes
checking for windows.h... (cached) no
checking for winsock.h... (cached) no
checking for winsock2.h... (cached) no
checking for proto/bsdsocket.h... no
checking for connect in libraries... yes
checking for sys/types.h... (cached) yes
checking for sys/time.h... (cached) yes
checking for time.h... yes
checking for monotonic clock_gettime... yes
checking for clock_gettime in libraries... no additional lib required
checking if monotonic clock_gettime works... yes
checking for pkg-config... /usr/bin/pkg-config
checking for zlib options with pkg-config... found
checking for zlib.h... yes
configure: found both libz and libz.h header
checking for BrotliDecoderDecompress in -lbrotlidec... no
checking for brotli/decode.h... no
checking for lber.h... no
checking for ldap.h... no
checking for ldapssl.h... no
checking for ldap_ssl.h... no
checking for LDAP libraries... cannot find LDAP libraries
checking whether to enable IPv6... yes
checking if struct sockaddr_in6 has sin6_scope_id member... yes
checking if argv can be written to... no
checking if GSS-API support is requested... no
checking whether to enable Windows native SSL/TLS (Windows native builds only)... no
checking whether to enable Secure Transport... no
checking whether to enable Amiga native SSL/TLS (AmiSSL)... no
checking for library containing psl_builtin... -lpsl
checking for RTMP_Init in -lrtmp... no
checking whether versioned symbols are wanted... no
checking whether to enable Windows native IDN (Windows native builds only)... no
checking whether to build with libidn2... (assumed) yes
checking for pkg-config... (cached) /usr/bin/pkg-config
checking for libidn2 options with pkg-config... no
configure: IDN_LIBS: "-lidn2"
configure: IDN_LDFLAGS: ""
configure: IDN_CPPFLAGS: ""
configure: IDN_DIR: ""
checking if idn2_lookup_ul can be linked... no
checking for idn2.h... no
checking for pkg-config... (cached) /usr/bin/pkg-config
checking for libnghttp2 options with pkg-config... no
checking for pkg-config... (cached) /usr/bin/pkg-config
checking for libngtcp2 options with pkg-config... no
checking for pkg-config... (cached) /usr/bin/pkg-config
checking for quiche options with pkg-config... no
checking for pkg-config... (cached) /usr/bin/pkg-config
checking for fish options with pkg-config... no
checking for egrep... (cached) /usr/bin/grep -E
checking for malloc.h... yes
checking for memory.h... no
checking for sys/types.h... (cached) yes
checking for sys/time.h... (cached) yes
checking for sys/select.h... yes
checking for sys/socket.h... yes
checking for sys/ioctl.h... yes
checking for sys/uio.h... yes
checking for assert.h... yes
checking for unistd.h... (cached) yes
checking for stdlib.h... (cached) yes
checking for arpa/inet.h... yes
checking for net/if.h... yes
checking for netinet/in.h... yes
checking for netinet/in6.h... no
checking for sys/un.h... yes
checking for linux/tcp.h... yes
checking for netinet/tcp.h... yes
checking for netdb.h... yes
checking for sys/sockio.h... no
checking for sys/stat.h... (cached) yes
checking for sys/param.h... yes
checking for termios.h... yes
checking for termio.h... yes
checking for sgtty.h... yes
checking for fcntl.h... yes
checking for alloca.h... yes
checking for time.h... (cached) yes
checking for io.h... no
checking for pwd.h... yes
checking for utime.h... yes
checking for sys/utime.h... no
checking for sys/poll.h... yes
checking for poll.h... yes
checking for socket.h... no
checking for sys/resource.h... yes
checking for libgen.h... yes
checking for locale.h... yes
checking for errno.h... yes
checking for stdbool.h... yes
checking for arpa/tftp.h... yes
checking for sys/filio.h... no
checking for sys/wait.h... yes
checking for setjmp.h... yes
checking for an ANSI C-conforming const... yes
checking for compiler support of C99 variadic macro style... yes
checking for compiler support of old gcc variadic macro style... yes
checking for size_t... yes
checking for sys/types.h... (cached) yes
checking for sys/time.h... (cached) yes
checking for time.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for struct timeval... yes
checking run-time libs availability... fine
checking size of size_t... 8
checking size of long... 8
checking size of int... 4
checking size of short... 2
checking size of time_t... 8
checking size of off_t... 8
checking size of curl_off_t... 8
checking for long long... yes
checking if numberLL works... yes
checking for ssize_t... yes
checking for bool... yes
checking for sa_family_t... yes
checking if time_t is unsigned... no
checking for sys/types.h... (cached) yes
checking for poll.h... (cached) yes
checking for sys/poll.h... (cached) yes
checking for in_addr_t... yes
checking for struct sockaddr_storage... yes
checking for signal.h... yes
checking for sig_atomic_t... yes
checking if sig_atomic_t is already defined as volatile... no
checking return type of signal handlers... void
checking for sys/select.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for select... yes
checking types of args and return type for select... int,fd_set *,struct timeval *,int
checking for sys/types.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for recv... yes
checking types of args and return type for recv... int,void *,size_t,int,ssize_t
checking for sys/types.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for send... yes
checking types of args and return type for send... int,const void *,size_t,int,ssize_t
checking for sys/types.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for MSG_NOSIGNAL... yes
checking for sys/types.h... (cached) yes
checking for unistd.h... (cached) yes
checking if alarm can be linked... yes
checking if alarm is prototyped... yes
checking if alarm is compilable... yes
checking if alarm usage allowed... yes
checking if alarm might be used... yes
checking for sys/types.h... (cached) yes
checking for string.h... (cached) yes
checking for strings.h... (cached) yes
checking for sys/types.h... (cached) yes
checking for libgen.h... (cached) yes
checking if basename can be linked... yes
checking if basename is prototyped... yes
checking if basename is compilable... yes
checking if basename usage allowed... yes
checking if basename might be used... yes
checking for sys/types.h... (cached) yes
checking for socket.h... (cached) no
checking if closesocket can be linked... no
checking if closesocket might be used... no
checking for sys/types.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking if CloseSocket can be linked... no
checking if CloseSocket might be used... no
checking if connect can be linked... yes
checking if connect is prototyped... yes
checking if connect is compilable... yes
checking if connect usage allowed... yes
checking if connect might be used... yes
checking for sys/types.h... (cached) yes
checking for unistd.h... (cached) yes
checking for fcntl.h... (cached) yes
checking if fcntl can be linked... yes
checking if fcntl is prototyped... yes
checking if fcntl is compilable... yes
checking if fcntl usage allowed... yes
checking if fcntl might be used... yes
checking if fcntl O_NONBLOCK is compilable... yes
checking if fcntl O_NONBLOCK usage allowed... yes
checking if fcntl O_NONBLOCK might be used... yes
checking for windows.h... (cached) no
checking for winsock2.h... (cached) no
checking for ws2tcpip.h... (cached) no
checking for sys/types.h... (cached) yes
checking for netdb.h... (cached) yes
checking if freeaddrinfo can be linked... yes
checking if freeaddrinfo is prototyped... yes
checking if freeaddrinfo is compilable... yes
checking if freeaddrinfo usage allowed... yes
checking if freeaddrinfo might be used... yes
checking for sys/types.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for netinet/in.h... (cached) yes
checking for ifaddrs.h... yes
checking if freeifaddrs can be linked... yes
checking if freeifaddrs is prototyped... yes
checking if freeifaddrs is compilable... yes
checking if freeifaddrs usage allowed... yes
checking if freeifaddrs might be used... yes
checking for sys/types.h... (cached) yes
checking for sys/xattr.h... yes
checking if fsetxattr can be linked... yes
checking if fsetxattr is prototyped... yes
checking if fsetxattr takes 5 args.... yes
checking if fsetxattr is compilable... yes
checking if fsetxattr usage allowed... yes
checking if fsetxattr might be used... yes
checking if ftruncate can be linked... yes
checking if ftruncate is prototyped... yes
checking if ftruncate is compilable... yes
checking if ftruncate usage allowed... yes
checking if ftruncate might be used... yes
checking for sys/types.h... (cached) yes
checking for stdlib.h... (cached) yes
checking if getaddrinfo can be linked... yes
checking if getaddrinfo is prototyped... yes
checking if getaddrinfo is compilable... yes
checking if getaddrinfo seems to work... yes
checking if getaddrinfo usage allowed... yes
checking if getaddrinfo might be used... yes
checking if getaddrinfo is threadsafe... yes
checking if gai_strerror can be linked... yes
checking if gai_strerror is prototyped... yes
checking if gai_strerror is compilable... yes
checking if gai_strerror usage allowed... yes
checking if gai_strerror might be used... yes
checking if gethostbyaddr can be linked... yes
checking if gethostbyaddr is prototyped... yes
checking if gethostbyaddr is compilable... yes
checking if gethostbyaddr usage allowed... yes
checking if gethostbyaddr might be used... yes
checking if gethostbyaddr_r can be linked... yes
checking if gethostbyaddr_r is prototyped... yes
checking if gethostbyaddr_r takes 5 args.... no
checking if gethostbyaddr_r takes 7 args.... no
checking if gethostbyaddr_r takes 8 args.... yes
checking if gethostbyaddr_r is compilable... yes
checking if gethostbyaddr_r usage allowed... yes
checking if gethostbyaddr_r might be used... yes
checking if gethostbyname can be linked... yes
checking if gethostbyname is prototyped... yes
checking if gethostbyname is compilable... yes
checking if gethostbyname usage allowed... yes
checking if gethostbyname might be used... yes
checking if gethostbyname_r can be linked... yes
checking if gethostbyname_r is prototyped... yes
checking if gethostbyname_r takes 3 args.... no
checking if gethostbyname_r takes 5 args.... no
checking if gethostbyname_r takes 6 args.... yes
checking if gethostbyname_r is compilable... yes
checking if gethostbyname_r usage allowed... yes
checking if gethostbyname_r might be used... yes
checking if gethostname can be linked... yes
checking if gethostname is prototyped... yes
checking if gethostname is compilable... yes
checking for gethostname arg 2 data type... size_t
checking if gethostname usage allowed... yes
checking if gethostname might be used... yes
checking if getpeername can be linked... yes
checking if getpeername is prototyped... yes
checking if getpeername is compilable... yes
checking if getpeername usage allowed... yes
checking if getpeername might be used... yes
checking if getsockname can be linked... yes
checking if getsockname is prototyped... yes
checking if getsockname is compilable... yes
checking if getsockname usage allowed... yes
checking if getsockname might be used... yes
checking for net/if.h... (cached) yes
checking if if_nametoindex can be linked... yes
checking if if_nametoindex is prototyped... yes
checking if if_nametoindex is compilable... yes
checking if if_nametoindex usage allowed... yes
checking if if_nametoindex might be used... yes
checking if getifaddrs can be linked... yes
checking if getifaddrs is prototyped... yes
checking if getifaddrs is compilable... yes
checking if getifaddrs seems to work... yes
checking if getifaddrs usage allowed... yes
checking if getifaddrs might be used... yes
checking if getservbyport_r can be linked... yes
checking if getservbyport_r is prototyped... yes
checking if getservbyport_r takes 4 args.... no
checking if getservbyport_r takes 5 args.... no
checking if getservbyport_r takes 6 args.... yes
checking if getservbyport_r is compilable... yes
checking if getservbyport_r usage allowed... yes
checking if getservbyport_r might be used... yes
checking for sys/types.h... (cached) yes
checking for sys/time.h... (cached) yes
checking for time.h... (cached) yes
checking if gmtime_r can be linked... yes
checking if gmtime_r is prototyped... yes
checking if gmtime_r is compilable... yes
checking if gmtime_r seems to work... yes
checking if gmtime_r usage allowed... yes
checking if gmtime_r might be used... yes
checking for sys/types.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for netinet/in.h... (cached) yes
checking for arpa/inet.h... (cached) yes
checking if inet_ntoa_r can be linked... no
checking if inet_ntoa_r might be used... no
checking if inet_ntop can be linked... yes
checking if inet_ntop is prototyped... yes
checking if inet_ntop is compilable... yes
checking if inet_ntop seems to work... yes
checking if inet_ntop usage allowed... yes
checking if inet_ntop might be used... yes
checking if inet_pton can be linked... yes
checking if inet_pton is prototyped... yes
checking if inet_pton is compilable... yes
checking if inet_pton seems to work... yes
checking if inet_pton usage allowed... yes
checking if inet_pton might be used... yes
checking for sys/types.h... (cached) yes
checking for unistd.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for sys/ioctl.h... (cached) yes
checking for stropts.h... no
checking if ioctl can be linked... yes
checking if ioctl is prototyped... yes
checking if ioctl is compilable... yes
checking if ioctl usage allowed... yes
checking if ioctl might be used... yes
checking if ioctl FIONBIO is compilable... yes
checking if ioctl FIONBIO usage allowed... yes
checking if ioctl FIONBIO might be used... yes
checking if ioctl SIOCGIFADDR is compilable... yes
checking if ioctl SIOCGIFADDR usage allowed... yes
checking if ioctl SIOCGIFADDR might be used... yes
checking if ioctlsocket can be linked... no
checking if ioctlsocket might be used... no
checking if IoctlSocket can be linked... no
checking if IoctlSocket might be used... no
checking if localtime_r can be linked... yes
checking if localtime_r is prototyped... yes
checking if localtime_r is compilable... yes
checking if localtime_r seems to work... yes
checking if localtime_r usage allowed... yes
checking if localtime_r might be used... yes
checking if memrchr can be linked... yes
checking if memrchr is prototyped... no
checking if memrchr might be used... no
checking if poll can be linked... yes
checking if poll is prototyped... yes
checking if poll is compilable... yes
checking if poll seems to work... yes
checking if poll usage allowed... yes
checking if poll might be used... yes
checking if setsockopt can be linked... yes
checking if setsockopt is prototyped... yes
checking if setsockopt is compilable... yes
checking if setsockopt usage allowed... yes
checking if setsockopt might be used... yes
checking if setsockopt SO_NONBLOCK is compilable... no
checking if setsockopt SO_NONBLOCK might be used... no
checking for sys/types.h... (cached) yes
checking for signal.h... (cached) yes
checking if sigaction can be linked... yes
checking if sigaction is prototyped... yes
checking if sigaction is compilable... yes
checking if sigaction usage allowed... yes
checking if sigaction might be used... yes
checking if siginterrupt can be linked... yes
checking if siginterrupt is prototyped... yes
checking if siginterrupt is compilable... yes
checking if siginterrupt usage allowed... yes
checking if siginterrupt might be used... yes
checking if signal can be linked... yes
checking if signal is prototyped... yes
checking if signal is compilable... yes
checking if signal usage allowed... yes
checking if signal might be used... yes
checking for sys/types.h... (cached) yes
checking for setjmp.h... (cached) yes
checking if sigsetjmp can be linked... no
checking if sigsetjmp seems a macro... yes
checking if sigsetjmp is compilable... yes
checking if sigsetjmp usage allowed... yes
checking if sigsetjmp might be used... yes
checking if socket can be linked... yes
checking if socket is prototyped... yes
checking if socket is compilable... yes
checking if socket usage allowed... yes
checking if socket might be used... yes
checking if socketpair can be linked... yes
checking if socketpair is prototyped... yes
checking if socketpair is compilable... yes
checking if socketpair usage allowed... yes
checking if socketpair might be used... yes
checking if strcasecmp can be linked... yes
checking if strcasecmp is prototyped... yes
checking if strcasecmp is compilable... yes
checking if strcasecmp usage allowed... yes
checking if strcasecmp might be used... yes
checking if strcmpi can be linked... no
checking if strcmpi might be used... no
checking if strdup can be linked... yes
checking if strdup is prototyped... yes
checking if strdup is compilable... yes
checking if strdup usage allowed... yes
checking if strdup might be used... yes
checking if strerror_r can be linked... yes
checking if strerror_r is prototyped... yes
checking if strerror_r is compilable... yes
checking if strerror_r is glibc like... no
checking if strerror_r is POSIX like... yes
checking if strerror_r seems to work... yes
checking if strerror_r usage allowed... yes
checking if strerror_r might be used... yes
checking if stricmp can be linked... no
checking if stricmp might be used... no
checking if strncasecmp can be linked... yes
checking if strncasecmp is prototyped... yes
checking if strncasecmp is compilable... yes
checking if strncasecmp usage allowed... yes
checking if strncasecmp might be used... yes
checking if strncmpi can be linked... no
checking if strncmpi might be used... no
checking if strnicmp can be linked... no
checking if strnicmp might be used... no
checking if strstr can be linked... yes
checking if strstr is prototyped... yes
checking if strstr is compilable... yes
checking if strstr usage allowed... yes
checking if strstr might be used... yes
checking if strtok_r can be linked... yes
checking if strtok_r is prototyped... yes
checking if strtok_r is compilable... yes
checking if strtok_r usage allowed... yes
checking if strtok_r might be used... yes
checking if strtoll can be linked... yes
checking if strtoll is prototyped... yes
checking if strtoll is compilable... yes
checking if strtoll usage allowed... yes
checking if strtoll might be used... yes
checking for sys/types.h... (cached) yes
checking for sys/uio.h... (cached) yes
checking if writev can be linked... yes
checking if writev is prototyped... yes
checking if writev is compilable... yes
checking if writev usage allowed... yes
checking if writev might be used... yes
checking for ccache gcc options needed to detect all undeclared functions... none needed
checking whether getpwuid_r is declared... yes
checking for fnmatch... yes
checking for geteuid... yes
checking for getpass_r... no
checking deeper for getpass_r... but still no
checking for getppid... yes
checking for getpwuid... yes
checking for getpwuid_r... yes
checking for getrlimit... yes
checking for gettimeofday... yes
checking for if_nametoindex... yes
checking for mach_absolute_time... no
checking deeper for mach_absolute_time... but still no
checking for pipe... yes
checking for setlocale... yes
checking for setmode... no
checking deeper for setmode... but still no
checking for setrlimit... yes
checking for usleep... yes
checking for utime... yes
checking for utimes... yes
checking how to set a socket into non-blocking mode... fcntl O_NONBLOCK
checking for perl... /usr/bin/perl
checking for gnroff... no
checking for nroff... /usr/bin/nroff
checking how to use *nroff to get plain text from man pages... -man
checking whether to enable the threaded resolver... yes
checking whether to use POSIX threads for threaded resolver... auto
checking for pthread.h... yes
checking for pthread_create... yes
checking convert -I options to -isystem... yes
checking whether to enable verbose strings... yes
checking whether to enable SSPI support (Windows native builds only)... no
checking whether to enable cryptographic authentication methods... yes
checking whether to enable NTLM delegation to winbind's helper... no
checking whether to enable TLS-SRP authentication... yes
checking whether to enable Unix domain sockets... auto
checking for struct sockaddr_un.sun_path... yes
checking whether to support cookies... yes
checking whether to support HTTP authentication... yes
checking whether to support DoH... yes
checking whether to support the MIME API... yes
checking whether to support date parsing... yes
checking whether to support netrc parsing... yes
checking whether to support progress-meter... yes
checking whether to support DNS shuffling... yes
checking whether to support alt-svc... no
checking whether hiding of library internal symbols will actually happen... yes
checking that generated files are newer than configure... done
configure: creating ./config.status
config.status: creating Makefile
config.status: creating docs/Makefile
config.status: creating docs/examples/Makefile
config.status: creating docs/libcurl/Makefile
config.status: creating docs/libcurl/opts/Makefile
config.status: creating docs/cmdline-opts/Makefile
config.status: creating include/Makefile
config.status: creating include/curl/Makefile
config.status: creating src/Makefile
config.status: creating lib/Makefile
config.status: creating scripts/Makefile
config.status: creating lib/libcurl.vers
config.status: creating tests/Makefile
config.status: creating tests/certs/Makefile
config.status: creating tests/certs/scripts/Makefile
config.status: creating tests/data/Makefile
config.status: creating tests/server/Makefile
config.status: creating tests/libtest/Makefile
config.status: creating tests/unit/Makefile
config.status: creating packages/Makefile
config.status: creating packages/vms/Makefile
config.status: creating curl-config
config.status: creating libcurl.pc
config.status: creating lib/curl_config.h
config.status: executing depfiles commands
config.status: executing libtool commands
configure: amending lib/Makefile
configure: amending src/Makefile
configure: amending tests/unit/Makefile
configure: amending tests/server/Makefile
configure: amending tests/libtest/Makefile
configure: amending docs/examples/Makefile
configure: Configured to build curl/libcurl:
Host setup: x86_64-pc-linux-gnu
Install prefix: /usr/local
Compiler: ccache gcc
CFLAGS: -Werror-implicit-function-declaration -O2 -Wno-system-headers
CPPFLAGS:
LDFLAGS:
LIBS: -lpsl -lz
curl version: 7.71.0-DEV
SSL: no (--with-{ssl,gnutls,nss,mbedtls,wolfssl,schannel,secure-transport,mesalink,amissl,bearssl} )
SSH: no (--with-{libssh,libssh2})
zlib: enabled
brotli: no (--with-brotli)
GSS-API: no (--with-gssapi)
TLS-SRP: no (--enable-tls-srp)
resolver: POSIX threaded
IPv6: enabled
Unix sockets: enabled
IDN: no (--with-{libidn2,winidn})
Build libcurl: Shared=no, Static=yes
Built-in manual: enabled
--libcurl option: enabled (--disable-libcurl-option)
Verbose errors: enabled (--disable-verbose)
Code coverage: disabled
SSPI: no (--enable-sspi)
ca cert bundle: no
ca cert path:
ca fallback:
LDAP: no (--enable-ldap / --with-ldap-lib / --with-lber-lib)
LDAPS: no (--enable-ldaps)
RTSP: enabled
RTMP: no (--with-librtmp)
Metalink: no (--with-libmetalink)
PSL: enabled
Alt-svc: no (--enable-alt-svc)
HTTP2: disabled (--with-nghttp2)
HTTP3: disabled (--with-ngtcp2, --with-quiche)
ESNI: no (--enable-esni)
Protocols: DICT FILE FTP GOPHER HTTP IMAP POP3 RTSP SMTP TELNET TFTP
Features: IPv6 UnixSockets libz AsynchDNS PSL
configure: WARNING: Cannot find libraries for LDAP support: LDAP disabled
configure: WARNING: SSL disabled, you will not be able to use HTTPS, FTPS, NTLM and more.
configure: WARNING: Use --with-ssl, --with-gnutls, --with-wolfssl, --with-mbedtls, --with-nss, --with-schannel, --with-secure-transport, --with-mesalink, --with-amissl or --with-bearssl to address this.
configure: WARNING: Cannot find libraries for IDN support: IDN disabled
$ make -j3
Making all in lib
make[1]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0/lib'
make all-am
make[2]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0/lib'
CC libcurl_la-altsvc.lo
CC libcurl_la-amigaos.lo
CC libcurl_la-asyn-ares.lo
CC libcurl_la-asyn-thread.lo
CC libcurl_la-base64.lo
CC libcurl_la-conncache.lo
CC libcurl_la-connect.lo
CC libcurl_la-content_encoding.lo
CC libcurl_la-cookie.lo
CC libcurl_la-curl_addrinfo.lo
CC libcurl_la-curl_ctype.lo
CC libcurl_la-curl_des.lo
CC libcurl_la-curl_endian.lo
CC libcurl_la-curl_fnmatch.lo
CC libcurl_la-curl_get_line.lo
CC libcurl_la-curl_gethostname.lo
CC libcurl_la-curl_gssapi.lo
CC libcurl_la-curl_memrchr.lo
CC libcurl_la-curl_multibyte.lo
CC libcurl_la-curl_ntlm_core.lo
CC libcurl_la-curl_ntlm_wb.lo
CC libcurl_la-curl_path.lo
CC libcurl_la-curl_range.lo
CC libcurl_la-curl_rtmp.lo
CC libcurl_la-curl_sasl.lo
CC libcurl_la-curl_sspi.lo
CC libcurl_la-curl_threads.lo
CC libcurl_la-dict.lo
CC libcurl_la-dotdot.lo
CC libcurl_la-easy.lo
CC libcurl_la-escape.lo
CC libcurl_la-file.lo
CC libcurl_la-fileinfo.lo
CC libcurl_la-formdata.lo
CC libcurl_la-ftp.lo
CC libcurl_la-url.lo
CC libcurl_la-ftplistparser.lo
CC libcurl_la-getenv.lo
CC libcurl_la-getinfo.lo
CC libcurl_la-gopher.lo
CC libcurl_la-hash.lo
CC libcurl_la-hmac.lo
CC libcurl_la-hostasyn.lo
CC libcurl_la-hostcheck.lo
CC libcurl_la-hostip.lo
CC libcurl_la-hostip4.lo
CC libcurl_la-hostip6.lo
CC libcurl_la-hostsyn.lo
CC libcurl_la-http.lo
CC libcurl_la-http2.lo
CC libcurl_la-http_chunks.lo
CC libcurl_la-http_digest.lo
CC libcurl_la-http_negotiate.lo
CC libcurl_la-http_ntlm.lo
CC libcurl_la-http_proxy.lo
CC libcurl_la-idn_win32.lo
CC libcurl_la-if2ip.lo
CC libcurl_la-imap.lo
CC libcurl_la-inet_ntop.lo
CC libcurl_la-inet_pton.lo
CC libcurl_la-krb5.lo
CC libcurl_la-ldap.lo
CC libcurl_la-llist.lo
CC libcurl_la-md4.lo
CC libcurl_la-md5.lo
CC libcurl_la-memdebug.lo
CC libcurl_la-mime.lo
CC libcurl_la-mprintf.lo
CC libcurl_la-mqtt.lo
CC libcurl_la-multi.lo
CC libcurl_la-netrc.lo
CC libcurl_la-non-ascii.lo
CC libcurl_la-nonblock.lo
CC libcurl_la-openldap.lo
CC libcurl_la-parsedate.lo
CC libcurl_la-pingpong.lo
CC libcurl_la-pop3.lo
CC libcurl_la-progress.lo
CC libcurl_la-psl.lo
CC libcurl_la-doh.lo
CC libcurl_la-rand.lo
CC libcurl_la-rename.lo
CC libcurl_la-rtsp.lo
CC libcurl_la-security.lo
CC libcurl_la-select.lo
CC libcurl_la-sendf.lo
CC libcurl_la-setopt.lo
CC libcurl_la-sha256.lo
CC libcurl_la-share.lo
CC libcurl_la-slist.lo
CC libcurl_la-smb.lo
CC libcurl_la-smtp.lo
CC libcurl_la-socketpair.lo
CC libcurl_la-socks.lo
CC libcurl_la-socks_gssapi.lo
CC libcurl_la-socks_sspi.lo
CC libcurl_la-speedcheck.lo
CC libcurl_la-splay.lo
CC libcurl_la-strcase.lo
CC libcurl_la-strdup.lo
CC libcurl_la-strerror.lo
CC libcurl_la-strtok.lo
CC libcurl_la-strtoofft.lo
CC libcurl_la-system_win32.lo
CC libcurl_la-telnet.lo
CC libcurl_la-tftp.lo
CC libcurl_la-timeval.lo
CC libcurl_la-transfer.lo
CC libcurl_la-urlapi.lo
CC libcurl_la-version.lo
CC libcurl_la-warnless.lo
CC libcurl_la-wildcard.lo
CC libcurl_la-x509asn1.lo
CC libcurl_la-dynbuf.lo
CC vauth/libcurl_la-cleartext.lo
CC vauth/libcurl_la-cram.lo
CC vauth/libcurl_la-digest.lo
CC vauth/libcurl_la-digest_sspi.lo
CC vauth/libcurl_la-krb5_gssapi.lo
CC vauth/libcurl_la-krb5_sspi.lo
CC vauth/libcurl_la-ntlm.lo
CC vauth/libcurl_la-ntlm_sspi.lo
CC vauth/libcurl_la-oauth2.lo
CC vauth/libcurl_la-spnego_gssapi.lo
CC vauth/libcurl_la-spnego_sspi.lo
CC vauth/libcurl_la-vauth.lo
CC vtls/libcurl_la-bearssl.lo
CC vtls/libcurl_la-gskit.lo
CC vtls/libcurl_la-gtls.lo
CC vtls/libcurl_la-mbedtls.lo
CC vtls/libcurl_la-mbedtls_threadlock.lo
CC vtls/libcurl_la-mesalink.lo
CC vtls/libcurl_la-nss.lo
CC vtls/libcurl_la-openssl.lo
CC vtls/libcurl_la-schannel.lo
CC vtls/libcurl_la-schannel_verify.lo
CC vtls/libcurl_la-sectransp.lo
CC vtls/libcurl_la-vtls.lo
CC vtls/libcurl_la-wolfssl.lo
CC vquic/libcurl_la-ngtcp2.lo
CC vquic/libcurl_la-quiche.lo
CC vquic/libcurl_la-vquic.lo
CC vssh/libcurl_la-libssh.lo
CC vssh/libcurl_la-libssh2.lo
CC vssh/libcurl_la-wolfssh.lo
CCLD libcurl.la
make[2]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0/lib'
make[1]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0/lib'
Making all in src
make[1]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0/src'
Making all in ../docs
make[2]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0/docs'
Making all in .
make[3]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0/docs'
if test "..x" != "..x" -a -e "./curl.1"; then \
/usr/bin/install -c -m 644 "./curl.1" /root/asi_db/builds/curl/_worktrees/w0/docs/curl.1; fi
cd cmdline-opts && make
make[4]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0/docs/cmdline-opts'
generate ../../docs/curl.1
make[4]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0/docs/cmdline-opts'
make[3]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0/docs'
Making all in cmdline-opts
make[3]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0/docs/cmdline-opts'
make[3]: Nothing to be done for 'all'.
make[3]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0/docs/cmdline-opts'
make[2]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0/docs'
make[2]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0/src'
CC curl-slist_wc.o
CC curl-tool_binmode.o
CC curl-tool_bname.o
CC curl-tool_cb_dbg.o
CC curl-tool_cb_hdr.o
CC curl-tool_cb_prg.o
CC curl-tool_cb_rea.o
CC curl-tool_cb_see.o
CC curl-tool_cb_wrt.o
CC curl-tool_cfgable.o
CC curl-tool_convert.o
CC curl-tool_dirhie.o
CC curl-tool_easysrc.o
CC curl-tool_doswin.o
CC curl-tool_filetime.o
CC curl-tool_formparse.o
CC curl-tool_getpass.o
CC curl-tool_getparam.o
CC curl-tool_help.o
CC curl-tool_helpers.o
CC curl-tool_homedir.o
HUGE tool_hugehelp.c
CC curl-tool_libinfo.o
CC curl-tool_main.o
CC curl-tool_metalink.o
CC curl-tool_msgs.o
CC curl-tool_operate.o
CC curl-tool_operhlp.o
CC curl-tool_panykey.o
CC curl-tool_paramhlp.o
CC curl-tool_parsecfg.o
CC curl-tool_progress.o
CC curl-tool_strdup.o
CC curl-tool_setopt.o
CC curl-tool_sleep.o
CC curl-tool_urlglob.o
CC curl-tool_util.o
CC curl-tool_vms.o
CC curl-tool_writeout.o
CC curl-tool_writeout_json.o
CC curl-tool_xattr.o
CC ../lib/curl-strtoofft.o
CC ../lib/curl-nonblock.o
CC ../lib/curl-warnless.o
CC ../lib/curl-curl_ctype.o
CC ../lib/curl-curl_multibyte.o
CC curl-tool_hugehelp.o
CCLD curl
make[2]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0/src'
make[1]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0/src'
make[1]: Entering directory '/root/asi_db/builds/curl/_worktrees/w0'
make[1]: Nothing to be done for 'all-am'.
make[1]: Leaving directory '/root/asi_db/builds/curl/_worktrees/w0'
| @@ -506,16 +506,24 @@ Sets the interval at which connection upkeep are performed. See | |
| .SH SSL and SECURITY OPTIONS | |
| .IP CURLOPT_SSLCERT | |
| Client cert. See \fICURLOPT_SSLCERT(3)\fP | |
| + | .IP CURLOPT_SSLCERT_BLOB |
| + | Client cert memory buffer. See \fICURLOPT_SSLCERT_BLOB(3)\fP |
| .IP CURLOPT_PROXY_SSLCERT | |
| Proxy client cert. See \fICURLOPT_PROXY_SSLCERT(3)\fP | |
| + | .IP CURLOPT_PROXY_SSLCERT_BLOB |
| + | Proxy client cert memory buffer. See \fICURLOPT_PROXY_SSLCERT_BLOB(3)\fP |
| .IP CURLOPT_SSLCERTTYPE | |
| Client cert type. See \fICURLOPT_SSLCERTTYPE(3)\fP | |
| .IP CURLOPT_PROXY_SSLCERTTYPE | |
| Proxy client cert type. See \fICURLOPT_PROXY_SSLCERTTYPE(3)\fP | |
| .IP CURLOPT_SSLKEY | |
| Client key. See \fICURLOPT_SSLKEY(3)\fP | |
| + | .IP CURLOPT_SSLKEY_BLOB |
| + | Client key memory buffer. See \fICURLOPT_SSLKEY_BLOB(3)\fP |
| .IP CURLOPT_PROXY_SSLKEY | |
| Proxy client key. See \fICURLOPT_PROXY_SSLKEY(3)\fP | |
| + | .IP CURLOPT_PROXY_SSLKEY_BLOB |
| + | Proxy client key. See \fICURLOPT_PROXY_SSLKEY_BLOB(3)\fP |
| .IP CURLOPT_SSLKEYTYPE | |
| Client key type. See \fICURLOPT_SSLKEYTYPE(3)\fP | |
| .IP CURLOPT_PROXY_SSLKEYTYPE | |
| @@ -554,6 +562,8 @@ CA cert bundle. See \fICURLOPT_CAINFO(3)\fP | |
| Proxy CA cert bundle. See \fICURLOPT_PROXY_CAINFO(3)\fP | |
| .IP CURLOPT_ISSUERCERT | |
| Issuer certificate. See \fICURLOPT_ISSUERCERT(3)\fP | |
| + | .IP CURLOPT_ISSUERCERT_BLOB |
| + | Issuer certificate memory buffer. See \fICURLOPT_ISSUERCERT_BLOB(3)\fP |
| .IP CURLOPT_CAPATH | |
| Path to CA cert bundle. See \fICURLOPT_CAPATH(3)\fP | |
| .IP CURLOPT_PROXY_CAPATH | |
| @@ -0,0 +1,79 @@ | |
| + | .\" ************************************************************************** |
| + | .\" * _ _ ____ _ |
| + | .\" * Project ___| | | | _ \| | |
| + | .\" * / __| | | | |_) | | |
| + | .\" * | (__| |_| | _ <| |___ |
| + | .\" * \___|\___/|_| \_\_____| |
| + | .\" * |
| + | .\" * Copyright (C) 1998 - 2020, Daniel Stenberg, <[email protected]>, et al. |
| + | .\" * |
| + | .\" * This software is licensed as described in the file COPYING, which |
| + | .\" * you should have received as part of this distribution. The terms |
| + | .\" * are also available at https://curl.haxx.se/docs/copyright.html. |
| + | .\" * |
| + | .\" * You may opt to use, copy, modify, merge, publish, distribute and/or sell |
| + | .\" * copies of the Software, and permit persons to whom the Software is |
| + | .\" * furnished to do so, under the terms of the COPYING file. |
| + | .\" * |
| + | .\" * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY |
| + | .\" * KIND, either express or implied. |
| + | .\" * |
| + | .\" ************************************************************************** |
| + | .\" |
| + | .TH CURLOPT_ISSUERCERT_BLOB 3 "24 Jun 2020" "libcurl 7.71.0" "curl_easy_setopt options" |
| + | .SH NAME |
| + | CURLOPT_ISSUERCERT_BLOB \- issuer SSL certificate from memory blob |
| + | .SH SYNOPSIS |
| + | #include <curl/curl.h> |
| + | |
| + | CURLcode curl_easy_setopt(CURL *handle, CURLOPT_ISSUERCERT_BLOB, struct curl_blob *stblob); |
| + | .SH DESCRIPTION |
| + | Pass a pointer to a curl_blob structure, which contains information (pointer |
| + | and size) about a memory block with binary data of a CA certificate in PEM |
| + | format. If the option is set, an additional check against the peer certificate |
| + | is performed to verify the issuer is indeed the one associated with the |
| + | certificate provided by the option. This additional check is useful in |
| + | multi-level PKI where one needs to enforce that the peer certificate is from a |
| + | specific branch of the tree. |
| + | |
| + | This option should be used in combination with the |
| + | \fICURLOPT_SSL_VERIFYPEER(3)\fP option. Otherwise, the result of the check is |
| + | not considered as failure. |
| + | |
| + | A specific error code (CURLE_SSL_ISSUER_ERROR) is defined with the option, |
| + | which is returned if the setup of the SSL/TLS session has failed due to a |
| + | mismatch with the issuer of peer certificate (\fICURLOPT_SSL_VERIFYPEER(3)\fP |
| + | has to be set too for the check to fail). |
| + | |
| + | If the blob is initialized with the flags member of struct curl_blob set to |
| + | CURL_BLOB_COPY, the application does not have to keep the buffer around after |
| + | setting this. |
| + | |
| + | This option is an alternative to \fICURLOPT_ISSUERCERT(3)\fP which instead |
| + | expects a file name as input. |
| + | .SH DEFAULT |
| + | NULL |
| + | .SH PROTOCOLS |
| + | All TLS-based protocols |
| + | .SH EXAMPLE |
| + | .nf |
| + | CURL *curl = curl_easy_init(); |
| + | if(curl) { |
| + | struct curl_blob blob; |
| + | curl_easy_setopt(curl, CURLOPT_URL, "https://example.com/"); |
| + | blob.data = certificateData; |
| + | blob.len = filesize; |
| + | blob.flags = CURL_BLOB_COPY; |
| + | curl_easy_setopt(curl, CURLOPT_ISSUERCERT_BLOB, &blob); |
| + | ret = curl_easy_perform(curl); |
| + | curl_easy_cleanup(curl); |
| + | } |
| + | .fi |
| + | .SH AVAILABILITY |
| + | Added in libcurl 7.71.0. This option is supported by the OpenSSL backends. |
| + | .SH RETURN VALUE |
| + | Returns CURLE_OK if the option is supported, CURLE_UNKNOWN_OPTION if not, or |
| + | CURLE_OUT_OF_MEMORY if there was insufficient heap space. |
| + | .SH "SEE ALSO" |
| + | .BR CURLOPT_ISSUERCERT "(3)," |
| + | .BR CURLOPT_CRLFILE "(3), " CURLOPT_SSL_VERIFYPEER "(3), " |
| @@ -0,0 +1,72 @@ | |
| + | .\" ************************************************************************** |
| + | .\" * _ _ ____ _ |
| + | .\" * Project ___| | | | _ \| | |
| + | .\" * / __| | | | |_) | | |
| + | .\" * | (__| |_| | _ <| |___ |
| + | .\" * \___|\___/|_| \_\_____| |
| + | .\" * |
| + | .\" * Copyright (C) 1998 - 2020, Daniel Stenberg, <[email protected]>, et al. |
| + | .\" * |
| + | .\" * This software is licensed as described in the file COPYING, which |
| + | .\" * you should have received as part of this distribution. The terms |
| + | .\" * are also available at https://curl.haxx.se/docs/copyright.html. |
| + | .\" * |
| + | .\" * You may opt to use, copy, modify, merge, publish, distribute and/or sell |
| + | .\" * copies of the Software, and permit persons to whom the Software is |
| + | .\" * furnished to do so, under the terms of the COPYING file. |
| + | .\" * |
| + | .\" * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY |
| + | .\" * KIND, either express or implied. |
| + | .\" * |
| + | .\" ************************************************************************** |
| + | .\" |
| + | .TH CURLOPT_PROXY_SSLCERT_BLOB 3 "24 Jun 2020" "libcurl 7.71.0" "curl_easy_setopt options" |
| + | .SH NAME |
| + | CURLOPT_PROXY_SSLCERT_BLOB \- SSL proxy client certificate from memory blob |
| + | .SH SYNOPSIS |
| + | #include <curl/curl.h> |
| + | |
| + | CURLcode curl_easy_setopt(CURL *handle, CURLOPT_PROXY_SSLCERT_BLOB, struct curl_blob *blob); |
| + | .SH DESCRIPTION |
| + | Pass a pointer to a curl_blob structure, which contains information (pointer |
| + | and size) about a memory block with binary data of the certificate used to |
| + | connect to the HTTPS proxy. The format must be "P12" on Secure Transport or |
| + | Schannel. The format must be "P12" or "PEM" on OpenSSL. The string "P12" or |
| + | "PEM" must be specified with \fICURLOPT_PROXY_SSLCERTTYPE(3)\fP. |
| + | |
| + | If the blob is initialized with the flags member of struct curl_blob set to |
| + | CURL_BLOB_COPY, the application does not have to keep the buffer around after |
| + | setting this. |
| + | |
| + | This option is an alternative to \fICURLOPT_PROXY_SSLCERT(3)\fP which instead |
| + | expects a file name as input. |
| + | .SH DEFAULT |
| + | NULL |
| + | .SH PROTOCOLS |
| + | All TLS based protocols: HTTPS, FTPS, IMAPS, POP3S, SMTPS etc. |
| + | .SH EXAMPLE |
| + | .nf |
| + | CURL *curl = curl_easy_init(); |
| + | if(curl) { |
| + | struct curl_blob blob; |
| + | blob.data = certificateData; |
| + | blob.len = filesize; |
| + | blob.flags = CURL_BLOB_COPY; |
| + | curl_easy_setopt(curl, CURLOPT_URL, "https://example.com/"); |
| + | curl_easy_setopt(curl, CURLOPT_PROXY, "https://proxy"); |
| + | curl_easy_setopt(curl, CURLOPT_PROXY_SSLKEY, "key.pem"); |
| + | curl_easy_setopt(curl, CURLOPT_PROXY_KEYPASSWD, "s3cret"); |
| + | curl_easy_setopt(curl, CURLOPT_PROXY_SSLCERT_BLOB, &blob); |
| + | ret = curl_easy_perform(curl); |
| + | curl_easy_cleanup(curl); |
| + | } |
| + | .fi |
| + | .SH AVAILABILITY |
| + | Added in libcurl 7.71.0. This option is supported by the OpenSSL, Secure |
| + | Transport and Schannel backends. |
| + | .SH RETURN VALUE |
| + | Returns CURLE_OK if TLS enabled, CURLE_UNKNOWN_OPTION if not, or |
| + | CURLE_OUT_OF_MEMORY if there was insufficient heap space. |
| + | .SH "SEE ALSO" |
| + | .BR CURLOPT_PROXY_SSLCERTTYPE "(3), " CURLOPT_PROXY_SSLKEY "(3), " |
| + | .BR CURLOPT_PROXY_SSLCERT "(3), " |
| @@ -0,0 +1,73 @@ | |
| + | .\" ************************************************************************** |
| + | .\" * _ _ ____ _ |
| + | .\" * Project ___| | | | _ \| | |
| + | .\" * / __| | | | |_) | | |
| + | .\" * | (__| |_| | _ <| |___ |
| + | .\" * \___|\___/|_| \_\_____| |
| + | .\" * |
| + | .\" * Copyright (C) 1998 - 2020, Daniel Stenberg, <[email protected]>, et al. |
| + | .\" * |
| + | .\" * This software is licensed as described in the file COPYING, which |
| + | .\" * you should have received as part of this distribution. The terms |
| + | .\" * are also available at https://curl.haxx.se/docs/copyright.html. |
| + | .\" * |
| + | .\" * You may opt to use, copy, modify, merge, publish, distribute and/or sell |
| + | .\" * copies of the Software, and permit persons to whom the Software is |
| + | .\" * furnished to do so, under the terms of the COPYING file. |
| + | .\" * |
| + | .\" * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY |
| + | .\" * KIND, either express or implied. |
| + | .\" * |
| + | .\" ************************************************************************** |
| + | .\" |
| + | .TH CURLOPT_PROXY_SSLKEY_BLOB 3 "24 Jun 2020" "libcurl 7.71.0" "curl_easy_setopt options" |
| + | .SH NAME |
| + | CURLOPT_PROXY_SSLKEY_BLOB \- private key for proxy cert from memory blob |
| + | .SH SYNOPSIS |
| + | .nf |
| + | #include <curl/curl.h> |
| + | |
| + | CURLcode curl_easy_setopt(CURL *handle, CURLOPT_PROXY_SSLKEY_BLOB, |
| + | struct curl_blob *blob); |
| + | .fi |
| + | .SH DESCRIPTION |
| + | Pass a pointer to a curl_blob structure that contains information (pointer and |
| + | size) about the private key for connecting to the HTTPS proxy. Compatible with |
| + | OpenSSL. The format (like "PEM") must be specified with |
| + | \fICURLOPT_PROXY_SSLKEYTYPE(3)\fP. |
| + | |
| + | If the blob is initialized with the flags member of struct curl_blob set to |
| + | CURL_BLOB_COPY, the application does not have to keep the buffer around after |
| + | setting this. |
| + | .SH DEFAULT |
| + | NULL |
| + | .SH PROTOCOLS |
| + | All TLS based protocols: HTTPS, FTPS, IMAPS, POP3S, SMTPS etc. |
| + | .SH EXAMPLE |
| + | .nf |
| + | CURL *curl = curl_easy_init(); |
| + | if(curl) { |
| + | struct curl_blob blob; |
| + | curl_easy_setopt(curl, CURLOPT_URL, "https://example.com/"); |
| + | curl_easy_setopt(curl, CURLOPT_PROXY, "https://proxy"); |
| + | blob.data = certificateData; |
| + | blob.len = filesize; |
| + | blob.flags = CURL_BLOB_COPY; |
| + | curl_easy_setopt(curl, CURLOPT_PROXY_SSLCERT_BLOB, &blob); |
| + | curl_easy_setopt(curl, CURLOPT_PROXY_SSLCERTTYPE, "PEM"); |
| + | |
| + | blob.data = privateKeyData; |
| + | blob.len = privateKeySize; |
| + | curl_easy_setopt(curl, CURLOPT_PROXY_SSLKEY_BLOB, &blob); |
| + | curl_easy_setopt(curl, CURLOPT_PROXY_KEYPASSWD, "s3cret"); |
| + | ret = curl_easy_perform(curl); |
| + | curl_easy_cleanup(curl); |
| + | } |
| + | .fi |
| + | .SH AVAILABILITY |
| + | Added in libcurl 7.71.0. This option is supported by the OpenSSL backends. |
| + | .SH RETURN VALUE |
| + | Returns CURLE_OK if TLS enabled, CURLE_UNKNOWN_OPTION if not, or |
| + | CURLE_OUT_OF_MEMORY if there was insufficient heap space. |
| + | .SH "SEE ALSO" |
| + | .BR CURLOPT_SSLKEYTYPE "(3), " CURLOPT_SSLKEY "(3), " |
| @@ -38,15 +38,17 @@ you wish to authenticate with as it is named in the security database. If you | |
| want to use a file from the current directory, please precede it with "./" | |
| prefix, in order to avoid confusion with a nickname. | |
| - | (Schannel only) Client certificates must be specified by a path expression to |
| - | a certificate store. (Loading PFX is not supported; you can import it to a |
| - | store first). You can use "<store location>\\<store name>\\<thumbprint>" to |
| - | refer to a certificate in the system certificates store, for example, |
| + | (Schannel only) Client certificates can be specified by a path expression to |
| + | a certificate store. (You can import PFX to a store first). You can use |
| + | "<store location>\\<store name>\\<thumbprint>" to refer to a certificate |
| + | in the system certificates store, for example, |
| "CurrentUser\\MY\\934a7ac6f8a5d579285a74fa61e19f23ddfe8d7a". Thumbprint is | |
| usually a SHA-1 hex string which you can see in certificate details. Following | |
| store locations are supported: CurrentUser, LocalMachine, CurrentService, | |
| Services, CurrentUserGroupPolicy, LocalMachineGroupPolicy, | |
| LocalMachineEnterprise. | |
| + | Schannel also support P12 certificate file, with the string "P12" specified |
| + | with \fICURLOPT_SSLCERTTYPE(3)\fP. |
| When using a client certificate, you most likely also need to provide a | |
| private key with \fICURLOPT_SSLKEY(3)\fP. | |
| @@ -0,0 +1,69 @@ | |
| + | .\" ************************************************************************** |
| + | .\" * _ _ ____ _ |
| + | .\" * Project ___| | | | _ \| | |
| + | .\" * / __| | | | |_) | | |
| + | .\" * | (__| |_| | _ <| |___ |
| + | .\" * \___|\___/|_| \_\_____| |
| + | .\" * |
| + | .\" * Copyright (C) 1998 - 2020, Daniel Stenberg, <[email protected]>, et al. |
| + | .\" * |
| + | .\" * This software is licensed as described in the file COPYING, which |
| + | .\" * you should have received as part of this distribution. The terms |
| + | .\" * are also available at https://curl.haxx.se/docs/copyright.html. |
| + | .\" * |
| + | .\" * You may opt to use, copy, modify, merge, publish, distribute and/or sell |
| + | .\" * copies of the Software, and permit persons to whom the Software is |
| + | .\" * furnished to do so, under the terms of the COPYING file. |
| + | .\" * |
| + | .\" * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY |
| + | .\" * KIND, either express or implied. |
| + | .\" * |
| + | .\" ************************************************************************** |
| + | .\" |
| + | .TH CURLOPT_SSLCERT_BLOB 3 "24 Jun 2020" "libcurl 7.71.0" "curl_easy_setopt options" |
| + | .SH NAME |
| + | CURLOPT_SSLCERT_BLOB \- SSL client certificate from memory blob |
| + | .SH SYNOPSIS |
| + | #include <curl/curl.h> |
| + | |
| + | CURLcode curl_easy_setopt(CURL *handle, CURLOPT_SSLCERT_BLOB, struct curl_blob *stblob); |
| + | .SH DESCRIPTION |
| + | Pass a pointer to a curl_blob structure, which contains (pointer and size) a |
| + | client certificate. The format must be "P12" on Secure Transport or |
| + | Schannel. The format must be "P12" or "PEM" on OpenSSL. The string "P12" or |
| + | "PEM" must be specified with \fICURLOPT_SSLCERTTYPE(3)\fP. |
| + | |
| + | If the blob is initialized with the flags member of struct curl_blob set to |
| + | CURL_BLOB_COPY, the application does not have to keep the buffer around after |
| + | setting this. |
| + | |
| + | This option is an alternative to \fICURLOPT_SSLCERT(3)\fP which instead |
| + | expects a file name as input. |
| + | .SH DEFAULT |
| + | NULL |
| + | .SH PROTOCOLS |
| + | All TLS based protocols: HTTPS, FTPS, IMAPS, POP3S, SMTPS etc. |
| + | .SH EXAMPLE |
| + | .nf |
| + | CURL *curl = curl_easy_init(); |
| + | if(curl) { |
| + | struct curl_blob stblob; |
| + | stblob.data = certificateData; |
| + | stblob.len = filesize; |
| + | stblob.flags = CURL_BLOB_COPY; |
| + | curl_easy_setopt(curl, CURLOPT_URL, "https://example.com/"); |
| + | curl_easy_setopt(curl, CURLOPT_SSLCERT_BLOB, &stblob); |
| + | curl_easy_setopt(curl, CURLOPT_SSLCERTTYPE, "P12"); |
| + | curl_easy_setopt(curl, CURLOPT_KEYPASSWD, "s3cret"); |
| + | ret = curl_easy_perform(curl); |
| + | curl_easy_cleanup(curl); |
| + | } |
| + | .fi |
| + | .SH AVAILABILITY |
| + | Added in libcurl 7.71.0. This option is supported by the OpenSSL, Secure |
| + | Transport and Schannel backends. |
| + | .SH RETURN VALUE |
| + | Returns CURLE_OK if TLS enabled, CURLE_UNKNOWN_OPTION if not, or |
| + | CURLE_OUT_OF_MEMORY if there was insufficient heap space. |
| + | .SH "SEE ALSO" |
| + | .BR CURLOPT_SSLCERTTYPE "(3), " CURLOPT_SSLKEY "(3), " |
| @@ -0,0 +1,75 @@ | |
| + | .\" ************************************************************************** |
| + | .\" * _ _ ____ _ |
| + | .\" * Project ___| | | | _ \| | |
| + | .\" * / __| | | | |_) | | |
| + | .\" * | (__| |_| | _ <| |___ |
| + | .\" * \___|\___/|_| \_\_____| |
| + | .\" * |
| + | .\" * Copyright (C) 1998 - 2020, Daniel Stenberg, <[email protected]>, et al. |
| + | .\" * |
| + | .\" * This software is licensed as described in the file COPYING, which |
| + | .\" * you should have received as part of this distribution. The terms |
| + | .\" * are also available at https://curl.haxx.se/docs/copyright.html. |
| + | .\" * |
| + | .\" * You may opt to use, copy, modify, merge, publish, distribute and/or sell |
| + | .\" * copies of the Software, and permit persons to whom the Software is |
| + | .\" * furnished to do so, under the terms of the COPYING file. |
| + | .\" * |
| + | .\" * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY |
| + | .\" * KIND, either express or implied. |
| + | .\" * |
| + | .\" ************************************************************************** |
| + | .\" |
| + | .TH CURLOPT_SSLKEY_BLOB 3 "24 Jun 2020" "libcurl 7.71.0" "curl_easy_setopt options" |
| + | .SH NAME |
| + | CURLOPT_SSLKEY_BLOB \- private key for client cert from memory blob |
| + | .SH SYNOPSIS |
| + | .nf |
| + | #include <curl/curl.h> |
| + | |
| + | CURLcode curl_easy_setopt(CURL *handle, CURLOPT_SSLKEY_BLOB, |
| + | struct curl_blob *blob); |
| + | .fi |
| + | .SH DESCRIPTION |
| + | Pass a pointer to a curl_blob structure, which contains information (pointer |
| + | and size) for a private key. Compatible with OpenSSL. The format (like "PEM") |
| + | must be specified with \fICURLOPT_SSLKEYTYPE(3)\fP. |
| + | |
| + | If the blob is initialized with the flags member of struct curl_blob set to |
| + | CURL_BLOB_COPY, the application does not have to keep the buffer around after |
| + | setting this. |
| + | |
| + | This option is an alternative to \fICURLOPT_SSLKEY(3)\fP which instead expects |
| + | a file name as input. |
| + | .SH DEFAULT |
| + | NULL |
| + | .SH PROTOCOLS |
| + | All TLS based protocols: HTTPS, FTPS, IMAPS, POP3S, SMTPS etc. |
| + | .SH EXAMPLE |
| + | .nf |
| + | CURL *curl = curl_easy_init(); |
| + | if(curl) { |
| + | struct curl_blob blob; |
| + | curl_easy_setopt(curl, CURLOPT_URL, "https://example.com/"); |
| + | blob.data = certificateData; |
| + | blob.len = filesize; |
| + | blob.flags = CURL_BLOB_COPY; |
| + | curl_easy_setopt(curl, CURLOPT_SSLCERT_BLOB, &blob); |
| + | curl_easy_setopt(curl, CURLOPT_SSLCERTTYPE, "PEM"); |
| + | |
| + | blob.data = privateKeyData; |
| + | blob.len = privateKeySize; |
| + | curl_easy_setopt(curl, CURLOPT_SSLKEY_BLOB, &blob); |
| + | curl_easy_setopt(curl, CURLOPT_KEYPASSWD, "s3cret"); |
| + | curl_easy_setopt(curl, CURLOPT_SSLKEYTYPE, "PEM"); |
| + | ret = curl_easy_perform(curl); |
| + | curl_easy_cleanup(curl); |
| + | } |
| + | .fi |
| + | .SH AVAILABILITY |
| + | Added in libcurl 7.71.0. This option is supported by the OpenSSL backends. |
| + | .SH RETURN VALUE |
| + | Returns CURLE_OK if TLS enabled, CURLE_UNKNOWN_OPTION if not, or |
| + | CURLE_OUT_OF_MEMORY if there was insufficient heap space. |
| + | .SH "SEE ALSO" |
| + | .BR CURLOPT_SSLKEYTYPE "(3), " CURLOPT_SSLKEY "(3), " |
| @@ -198,6 +198,7 @@ man_MANS = \ | |
| CURLOPT_IOCTLFUNCTION.3 \ | |
| CURLOPT_IPRESOLVE.3 \ | |
| CURLOPT_ISSUERCERT.3 \ | |
| + | CURLOPT_ISSUERCERT_BLOB.3 \ |
| CURLOPT_KEEP_SENDING_ON_ERROR.3 \ | |
| CURLOPT_KEYPASSWD.3 \ | |
| CURLOPT_KRBLEVEL.3 \ | |
| @@ -260,8 +261,10 @@ man_MANS = \ | |
| CURLOPT_PROXY_PINNEDPUBLICKEY.3 \ | |
| CURLOPT_PROXY_SERVICE_NAME.3 \ | |
| CURLOPT_PROXY_SSLCERT.3 \ | |
| + | CURLOPT_PROXY_SSLCERT_BLOB.3 \ |
| CURLOPT_PROXY_SSLCERTTYPE.3 \ | |
| CURLOPT_PROXY_SSLKEY.3 \ | |
| + | CURLOPT_PROXY_SSLKEY_BLOB.3 \ |
| CURLOPT_PROXY_SSLKEYTYPE.3 \ | |
| CURLOPT_PROXY_SSLVERSION.3 \ | |
| CURLOPT_PROXY_SSL_CIPHER_LIST.3 \ | |
| @@ -313,10 +316,12 @@ man_MANS = \ | |
| CURLOPT_SSH_PRIVATE_KEYFILE.3 \ | |
| CURLOPT_SSH_PUBLIC_KEYFILE.3 \ | |
| CURLOPT_SSLCERT.3 \ | |
| + | CURLOPT_SSLCERT_BLOB.3 \ |
| CURLOPT_SSLCERTTYPE.3 \ | |
| CURLOPT_SSLENGINE.3 \ | |
| CURLOPT_SSLENGINE_DEFAULT.3 \ | |
| CURLOPT_SSLKEY.3 \ | |
| + | CURLOPT_SSLKEY_BLOB.3 \ |
| CURLOPT_SSLKEYTYPE.3 \ | |
| CURLOPT_SSLVERSION.3 \ | |
| CURLOPT_SSL_CIPHER_LIST.3 \ | |
| @@ -347,6 +347,7 @@ CURLM_RECURSIVE_API_CALL 7.59.0 | |
| CURLM_UNKNOWN_OPTION 7.15.4 | |
| CURLM_WAKEUP_FAILURE 7.68.0 | |
| CURLOPT 7.69.0 | |
| + | CURLOPTTYPE_BLOB 7.71.0 |
| CURLOPTTYPE_FUNCTIONPOINT 7.1 | |
| CURLOPTTYPE_LONG 7.1 | |
| CURLOPTTYPE_OBJECTPOINT 7.1 | |
| @@ -459,6 +460,7 @@ CURLOPT_IOCTLDATA 7.12.3 | |
| CURLOPT_IOCTLFUNCTION 7.12.3 | |
| CURLOPT_IPRESOLVE 7.10.8 | |
| CURLOPT_ISSUERCERT 7.19.0 | |
| + | CURLOPT_ISSUERCERT_BLOB 7.71.0 |
| CURLOPT_KEEP_SENDING_ON_ERROR 7.51.0 | |
| CURLOPT_KEYPASSWD 7.17.0 | |
| CURLOPT_KRB4LEVEL 7.3 7.17.0 | |
| @@ -528,8 +530,10 @@ CURLOPT_PROXY_KEYPASSWD 7.52.0 | |
| CURLOPT_PROXY_PINNEDPUBLICKEY 7.52.0 | |
| CURLOPT_PROXY_SERVICE_NAME 7.43.0 | |
| CURLOPT_PROXY_SSLCERT 7.52.0 | |
| + | CURLOPT_PROXY_SSLCERT_BLOB 7.71.0 |
| CURLOPT_PROXY_SSLCERTTYPE 7.52.0 | |
| CURLOPT_PROXY_SSLKEY 7.52.0 | |
| + | CURLOPT_PROXY_SSLKEY_BLOB 7.71.0 |
| CURLOPT_PROXY_SSLKEYTYPE 7.52.0 | |
| CURLOPT_PROXY_SSLVERSION 7.52.0 | |
| CURLOPT_PROXY_SSL_CIPHER_LIST 7.52.0 | |
| @@ -591,11 +595,13 @@ CURLOPT_SSH_KNOWNHOSTS 7.19.6 | |
| CURLOPT_SSH_PRIVATE_KEYFILE 7.16.1 | |
| CURLOPT_SSH_PUBLIC_KEYFILE 7.16.1 | |
| CURLOPT_SSLCERT 7.1 | |
| + | CURLOPT_SSLCERT_BLOB 7.71.0 |
| CURLOPT_SSLCERTPASSWD 7.1.1 7.17.0 | |
| CURLOPT_SSLCERTTYPE 7.9.3 | |
| CURLOPT_SSLENGINE 7.9.3 | |
| CURLOPT_SSLENGINE_DEFAULT 7.9.3 | |
| CURLOPT_SSLKEY 7.9.3 | |
| + | CURLOPT_SSLKEY_BLOB 7.71.0 |
| CURLOPT_SSLKEYPASSWD 7.9.3 7.17.0 | |
| CURLOPT_SSLKEYTYPE 7.9.3 | |
| CURLOPT_SSLVERSION 7.1 | |
| @@ -950,6 +950,7 @@ typedef enum { | |
| #define CURLOPTTYPE_OBJECTPOINT 10000 | |
| #define CURLOPTTYPE_FUNCTIONPOINT 20000 | |
| #define CURLOPTTYPE_OFF_T 30000 | |
| + | #define CURLOPTTYPE_BLOB 40000 |
| /* *STRINGPOINT is an alias for OBJECTPOINT to allow tools to extract the | |
| string options from the header file */ | |
| @@ -1959,6 +1960,13 @@ typedef enum { | |
| /* allow RCPT TO command to fail for some recipients */ | |
| CURLOPT(CURLOPT_MAIL_RCPT_ALLLOWFAILS, CURLOPTTYPE_LONG, 290), | |
| + | /* the private SSL-certificate as a "blob" */ |
| + | CURLOPT(CURLOPT_SSLCERT_BLOB, CURLOPTTYPE_BLOB, 291), |
| + | CURLOPT(CURLOPT_SSLKEY_BLOB, CURLOPTTYPE_BLOB, 292), |
| + | CURLOPT(CURLOPT_PROXY_SSLCERT_BLOB, CURLOPTTYPE_BLOB, 293), |
| + | CURLOPT(CURLOPT_PROXY_SSLKEY_BLOB, CURLOPTTYPE_BLOB, 294), |
| + | CURLOPT(CURLOPT_ISSUERCERT_BLOB, CURLOPTTYPE_BLOB, 295), |
| + | |
| CURLOPT_LASTENTRY /* the last unused */ | |
| } CURLoption; | |
| @@ -7,7 +7,7 @@ | |
| * | (__| |_| | _ <| |___ | |
| * \___|\___/|_| \_\_____| | |
| * | |
| - | * Copyright (C) 1998 - 2019, Daniel Stenberg, <[email protected]>, et al. |
| + | * Copyright (C) 1998 - 2020, Daniel Stenberg, <[email protected]>, et al. |
| * | |
| * This software is licensed as described in the file COPYING, which | |
| * you should have received as part of this distribution. The terms | |
| @@ -25,6 +25,17 @@ | |
| extern "C" { | |
| #endif | |
| + | /* Flag bits in the curl_blob struct: */ |
| + | #define CURL_BLOB_COPY 1 /* tell libcurl to copy the data */ |
| + | #define CURL_BLOB_NOCOPY 0 /* tell libcurl to NOT copy the data */ |
| + | |
| + | struct curl_blob { |
| + | void *data; |
| + | size_t len; |
| + | unsigned int flags; /* bit 0 is defined, the rest are reserved and should be |
| + | left zeroes */ |
| + | }; |
| + | |
| CURL_EXTERN CURL *curl_easy_init(void); | |
| CURL_EXTERN CURLcode curl_easy_setopt(CURL *curl, CURLoption option, ...); | |
| CURL_EXTERN CURLcode curl_easy_perform(CURL *curl); | |
| @@ -764,6 +764,7 @@ static CURLcode dupset(struct Curl_easy *dst, struct Curl_easy *src) | |
| { | |
| CURLcode result = CURLE_OK; | |
| enum dupstring i; | |
| + | enum dupblob j; |
| /* Copy src->set into dst->set first, then deal with the strings | |
| afterwards */ | |
| @@ -780,6 +781,16 @@ static CURLcode dupset(struct Curl_easy *dst, struct Curl_easy *src) | |
| return result; | |
| } | |
| + | /* clear all blob pointers first */ |
| + | memset(dst->set.blobs, 0, BLOB_LAST * sizeof(struct curl_blob *)); |
| + | /* duplicate all blobs */ |
| + | for(j = (enum dupblob)0; j < BLOB_LAST; j++) { |
| + | result = Curl_setblobopt(&dst->set.blobs[j], src->set.blobs[j]); |
| + | /* Curl_setstropt return CURLE_BAD_FUNCTION_ARGUMENT with blob */ |
| + | if(result) |
| + | return result; |
| + | } |
| + | |
| /* duplicate memory areas pointed to */ | |
| i = STRING_COPYPOSTFIELDS; | |
| if(src->set.postfieldsize && src->set.str[i]) { | |
| @@ -77,6 +77,37 @@ CURLcode Curl_setstropt(char **charp, const char *s) | |
| return CURLE_OK; | |
| } | |
| + | CURLcode Curl_setblobopt(struct curl_blob **blobp, |
| + | const struct curl_blob *blob) |
| + | { |
| + | /* free the previous storage at `blobp' and replace by a dynamic storage |
| + | copy of blob. If CURL_BLOB_COPY is set, the data is copied. */ |
| + | |
| + | Curl_safefree(*blobp); |
| + | |
| + | if(blob) { |
| + | struct curl_blob *nblob; |
| + | if(blob->len > CURL_MAX_INPUT_LENGTH) |
| + | return CURLE_BAD_FUNCTION_ARGUMENT; |
| + | nblob = (struct curl_blob *) |
| + | malloc(sizeof(struct curl_blob) + |
| + | ((blob->flags & CURL_BLOB_COPY) ? blob->len : 0)); |
| + | if(!nblob) |
| + | return CURLE_OUT_OF_MEMORY; |
| + | *nblob = *blob; |
| + | if(blob->flags & CURL_BLOB_COPY) { |
| + | /* put the data after the blob struct in memory */ |
| + | nblob->data = (char *)nblob + sizeof(struct curl_blob); |
| + | memcpy(nblob->data, blob->data, blob->len); |
| + | } |
| + | |
| + | *blobp = nblob; |
| + | return CURLE_OK; |
| + | } |
| + | |
| + | return CURLE_OK; |
| + | } |
| + | |
| static CURLcode setstropt_userpwd(char *option, char **userp, char **passwdp) | |
| { | |
| CURLcode result = CURLE_OK; | |
| @@ -1606,6 +1637,13 @@ CURLcode Curl_vsetopt(struct Curl_easy *data, CURLoption option, va_list param) | |
| result = Curl_setstropt(&data->set.str[STRING_CERT_ORIG], | |
| va_arg(param, char *)); | |
| break; | |
| + | case CURLOPT_SSLCERT_BLOB: |
| + | /* |
| + | * Blob that holds file name of the SSL certificate to use |
| + | */ |
| + | result = Curl_setblobopt(&data->set.blobs[BLOB_CERT_ORIG], |
| + | va_arg(param, struct curl_blob *)); |
| + | break; |
| #ifndef CURL_DISABLE_PROXY | |
| case CURLOPT_PROXY_SSLCERT: | |
| /* | |
| @@ -1614,6 +1652,13 @@ CURLcode Curl_vsetopt(struct Curl_easy *data, CURLoption option, va_list param) | |
| result = Curl_setstropt(&data->set.str[STRING_CERT_PROXY], | |
| va_arg(param, char *)); | |
| break; | |
| + | case CURLOPT_PROXY_SSLCERT_BLOB: |
| + | /* |
| + | * Blob that holds file name of the SSL certificate to use for proxy |
| + | */ |
| + | result = Curl_setblobopt(&data->set.blobs[BLOB_CERT_PROXY], |
| + | va_arg(param, struct curl_blob *)); |
| + | break; |
| #endif | |
| case CURLOPT_SSLCERTTYPE: | |
| /* | |
| @@ -1638,6 +1683,13 @@ CURLcode Curl_vsetopt(struct Curl_easy *data, CURLoption option, va_list param) | |
| result = Curl_setstropt(&data->set.str[STRING_KEY_ORIG], | |
| va_arg(param, char *)); | |
| break; | |
| + | case CURLOPT_SSLKEY_BLOB: |
| + | /* |
| + | * Blob that holds file name of the SSL key to use |
| + | */ |
| + | result = Curl_setblobopt(&data->set.blobs[BLOB_KEY_ORIG], |
| + | va_arg(param, struct curl_blob *)); |
| + | break; |
| #ifndef CURL_DISABLE_PROXY | |
| case CURLOPT_PROXY_SSLKEY: | |
| /* | |
| @@ -1646,6 +1698,13 @@ CURLcode Curl_vsetopt(struct Curl_easy *data, CURLoption option, va_list param) | |
| result = Curl_setstropt(&data->set.str[STRING_KEY_PROXY], | |
| va_arg(param, char *)); | |
| break; | |
| + | case CURLOPT_PROXY_SSLKEY_BLOB: |
| + | /* |
| + | * Blob that holds file name of the SSL key to use for proxy |
| + | */ |
| + | result = Curl_setblobopt(&data->set.blobs[BLOB_KEY_PROXY], |
| + | va_arg(param, struct curl_blob *)); |
| + | break; |
| #endif | |
| case CURLOPT_SSLKEYTYPE: | |
| /* | |
| @@ -1970,6 +2029,13 @@ CURLcode Curl_vsetopt(struct Curl_easy *data, CURLoption option, va_list param) | |
| result = Curl_setstropt(&data->set.str[STRING_SSL_ISSUERCERT_ORIG], | |
| va_arg(param, char *)); | |
| break; | |
| + | case CURLOPT_ISSUERCERT_BLOB: |
| + | /* |
| + | * Blob that holds Issuer certificate to check certificates issuer |
| + | */ |
| + | result = Curl_setblobopt(&data->set.blobs[BLOB_SSL_ISSUERCERT_ORIG], |
| + | va_arg(param, struct curl_blob *)); |
| + | break; |
| #ifndef CURL_DISABLE_TELNET | |
| case CURLOPT_TELNETOPTIONS: | |
| /* | |
| @@ -7,7 +7,7 @@ | |
| * | (__| |_| | _ <| |___ | |
| * \___|\___/|_| \_\_____| | |
| * | |
| - | * Copyright (C) 1998 - 2019, Daniel Stenberg, <[email protected]>, et al. |
| + | * Copyright (C) 1998 - 2020, Daniel Stenberg, <[email protected]>, et al. |
| * | |
| * This software is licensed as described in the file COPYING, which | |
| * you should have received as part of this distribution. The terms | |
| @@ -23,6 +23,8 @@ | |
| ***************************************************************************/ | |
| CURLcode Curl_setstropt(char **charp, const char *s); | |
| + | CURLcode Curl_setblobopt(struct curl_blob **blobp, |
| + | const struct curl_blob *blob); |
| CURLcode Curl_vsetopt(struct Curl_easy *data, CURLoption option, va_list arg); | |
| #endif /* HEADER_CURL_SETOPT_H */ | |
| @@ -281,10 +281,16 @@ void Curl_freeset(struct Curl_easy *data) | |
| { | |
| /* Free all dynamic strings stored in the data->set substructure. */ | |
| enum dupstring i; | |
| + | enum dupblob j; |
| + | |
| for(i = (enum dupstring)0; i < STRING_LAST; i++) { | |
| Curl_safefree(data->set.str[i]); | |
| } | |
| + | for(j = (enum dupblob)0; j < BLOB_LAST; j++) { |
| + | Curl_safefree(data->set.blobs[j]); |
| + | } |
| + | |
| if(data->change.referer_alloc) { | |
| Curl_safefree(data->change.referer); | |
| data->change.referer_alloc = FALSE; | |
| @@ -3617,6 +3623,12 @@ static CURLcode create_conn(struct Curl_easy *data, | |
| data->set.proxy_ssl.password = data->set.str[STRING_TLSAUTH_PASSWORD_PROXY]; | |
| #endif | |
| + | data->set.ssl.cert_blob = data->set.blobs[BLOB_CERT_ORIG]; |
| + | data->set.proxy_ssl.cert_blob = data->set.blobs[BLOB_CERT_PROXY]; |
| + | data->set.ssl.key_blob = data->set.blobs[BLOB_KEY_ORIG]; |
| + | data->set.proxy_ssl.key_blob = data->set.blobs[BLOB_KEY_PROXY]; |
| + | data->set.ssl.issuercert_blob = data->set.blobs[BLOB_SSL_ISSUERCERT_ORIG]; |
| + | |
| if(!Curl_clone_primary_ssl_config(&data->set.ssl.primary, | |
| &conn->ssl_config)) { | |
| result = CURLE_OUT_OF_MEMORY; | |
| @@ -240,11 +240,14 @@ struct ssl_config_data { | |
| long certverifyresult; /* result from the certificate verification */ | |
| char *CRLfile; /* CRL to check certificate revocation */ | |
| char *issuercert;/* optional issuer certificate filename */ | |
| + | struct curl_blob *issuercert_blob; |
| curl_ssl_ctx_callback fsslctx; /* function to initialize ssl ctx */ | |
| void *fsslctxp; /* parameter for call back */ | |
| char *cert; /* client certificate file name */ | |
| + | struct curl_blob *cert_blob; |
| char *cert_type; /* format for certificate (default: PEM)*/ | |
| char *key; /* private key file name */ | |
| + | struct curl_blob *key_blob; |
| char *key_type; /* format for private key (default: PEM) */ | |
| char *key_passwd; /* plain text private key password */ | |
| #ifdef USE_TLS_SRP | |
| @@ -1580,6 +1583,15 @@ enum dupstring { | |
| STRING_LAST /* not used, just an end-of-list marker */ | |
| }; | |
| + | enum dupblob { |
| + | BLOB_CERT_ORIG, |
| + | BLOB_CERT_PROXY, |
| + | BLOB_KEY_ORIG, |
| + | BLOB_KEY_PROXY, |
| + | BLOB_SSL_ISSUERCERT_ORIG, |
| + | BLOB_LAST |
| + | }; |
| + | |
| /* callback that gets called when this easy handle is completed within a multi | |
| handle. Only used for internally created transfers, like for example | |
| DoH. */ | |
| @@ -1711,6 +1723,7 @@ struct UserDefined { | |
| long new_directory_perms; /* Permissions to use when creating remote dirs */ | |
| long ssh_auth_types; /* allowed SSH auth types */ | |
| char *str[STRING_LAST]; /* array of strings, pointing to allocated memory */ | |
| + | struct curl_blob *blobs[BLOB_LAST]; |
| unsigned int scope_id; /* Scope id for IPv6 */ | |
| long allowed_protocols; | |
| long redir_protocols; | |
| @@ -621,12 +621,136 @@ static bool is_pkcs11_uri(const char *string) | |
| static CURLcode Curl_ossl_set_engine(struct Curl_easy *data, | |
| const char *engine); | |
| + | static int |
| + | SSL_CTX_use_certificate_bio(SSL_CTX *ctx, BIO *in, int type, |
| + | const char *key_passwd) |
| + | { |
| + | int ret = 0; |
| + | X509 *x = NULL; |
| + | |
| + | if(type == SSL_FILETYPE_ASN1) { |
| + | /* j = ERR_R_ASN1_LIB; */ |
| + | x = d2i_X509_bio(in, NULL); |
| + | } |
| + | else if(type == SSL_FILETYPE_PEM) { |
| + | /* ERR_R_PEM_LIB; */ |
| + | x = PEM_read_bio_X509(in, NULL, |
| + | passwd_callback, (void *)key_passwd); |
| + | } |
| + | else { |
| + | ret = 0; |
| + | goto end; |
| + | } |
| + | |
| + | if(x == NULL) { |
| + | ret = 0; |
| + | goto end; |
| + | } |
| + | |
| + | ret = SSL_CTX_use_certificate(ctx, x); |
| + | end: |
| + | X509_free(x); |
| + | return ret; |
| + | } |
| + | |
| + | static int |
| + | SSL_CTX_use_PrivateKey_bio(SSL_CTX *ctx, BIO* in, int type, |
| + | const char *key_passwd) |
| + | { |
| + | int ret = 0; |
| + | EVP_PKEY *pkey = NULL; |
| + | |
| + | if(type == SSL_FILETYPE_PEM) |
| + | pkey = PEM_read_bio_PrivateKey(in, NULL, passwd_callback, |
| + | (void *)key_passwd); |
| + | else if(type == SSL_FILETYPE_ASN1) |
| + | pkey = d2i_PrivateKey_bio(in, NULL); |
| + | else { |
| + | ret = 0; |
| + | goto end; |
| + | } |
| + | if(pkey == NULL) { |
| + | ret = 0; |
| + | goto end; |
| + | } |
| + | ret = SSL_CTX_use_PrivateKey(ctx, pkey); |
| + | EVP_PKEY_free(pkey); |
| + | end: |
| + | return ret; |
| + | } |
| + | |
| + | static int |
| + | SSL_CTX_use_certificate_chain_bio(SSL_CTX *ctx, BIO* in, |
| + | const char *key_passwd) |
| + | { |
| + | /* SSL_CTX_add1_chain_cert introduced in OpenSSL 1.0.2 */ |
| + | #if (OPENSSL_VERSION_NUMBER >= 0x1000200fL) /* 1.0.2 or later */ |
| + | int ret = 0; |
| + | X509 *x = NULL; |
| + | void *passwd_callback_userdata = (void *)key_passwd; |
| + | |
| + | ERR_clear_error(); |
| + | |
| + | x = PEM_read_bio_X509_AUX(in, NULL, |
| + | passwd_callback, (void *)key_passwd); |
| + | |
| + | if(x == NULL) { |
| + | ret = 0; |
| + | goto end; |
| + | } |
| + | |
| + | ret = SSL_CTX_use_certificate(ctx, x); |
| + | |
| + | if(ERR_peek_error() != 0) |
| + | ret = 0; |
| + | |
| + | if(ret) { |
| + | X509 *ca; |
| + | unsigned long err; |
| + | |
| + | if(!SSL_CTX_clear_chain_certs(ctx)) { |
| + | ret = 0; |
| + | goto end; |
| + | } |
| + | |
| + | while((ca = PEM_read_bio_X509(in, NULL, passwd_callback, |
| + | passwd_callback_userdata)) |
| + | != NULL) { |
| + | |
| + | if(!SSL_CTX_add0_chain_cert(ctx, ca)) { |
| + | X509_free(ca); |
| + | ret = 0; |
| + | goto end; |
| + | } |
| + | } |
| + | |
| + | err = ERR_peek_last_error(); |
| + | if((ERR_GET_LIB(err) == ERR_LIB_PEM) && |
| + | (ERR_GET_REASON(err) == PEM_R_NO_START_LINE)) |
| + | ERR_clear_error(); |
| + | else |
| + | ret = 0; |
| + | } |
| + | |
| + | end: |
| + | X509_free(x); |
| + | return ret; |
| + | #else |
| + | (void)ctx; /* unused */ |
| + | (void)in; /* unused */ |
| + | (void)key_passwd; /* unused */ |
| + | return 0; |
| + | #endif |
| + | } |
| + | |
| static | |
| int cert_stuff(struct connectdata *conn, | |
| SSL_CTX* ctx, | |
| char *cert_file, | |
| + | BIO *cert_bio, |
| const char *cert_type, | |
| char *key_file, | |
| + | BIO* key_bio, |
| const char *key_type, | |
| char *key_passwd) | |
| { | |
| @@ -636,10 +760,11 @@ int cert_stuff(struct connectdata *conn, | |
| int file_type = do_file_type(cert_type); | |
| - | if(cert_file || (file_type == SSL_FILETYPE_ENGINE)) { |
| + | if(cert_file || cert_bio || (file_type == SSL_FILETYPE_ENGINE)) { |
| SSL *ssl; | |
| X509 *x509; | |
| int cert_done = 0; | |
| + | int cert_use_result; |
| if(key_passwd) { | |
| /* set the password in the callback userdata */ | |
| @@ -652,8 +777,10 @@ int cert_stuff(struct connectdata *conn, | |
| switch(file_type) { | |
| case SSL_FILETYPE_PEM: | |
| /* SSL_CTX_use_certificate_chain_file() only works on PEM files */ | |
| - | if(SSL_CTX_use_certificate_chain_file(ctx, |
| - | cert_file) != 1) { |
| + | cert_use_result = cert_bio ? |
| + | SSL_CTX_use_certificate_chain_bio(ctx, cert_bio, key_passwd) : |
| + | SSL_CTX_use_certificate_chain_file(ctx, cert_file); |
| + | if(cert_use_result != 1) { |
| failf(data, | |
| "could not load PEM client certificate, " OSSL_PACKAGE | |
| " error %s, " | |
| @@ -668,9 +795,12 @@ int cert_stuff(struct connectdata *conn, | |
| /* SSL_CTX_use_certificate_file() works with either PEM or ASN1, but | |
| we use the case above for PEM so this can only be performed with | |
| ASN1 files. */ | |
| - | if(SSL_CTX_use_certificate_file(ctx, |
| - | cert_file, |
| - | file_type) != 1) { |
| + | |
| + | cert_use_result = cert_bio ? |
| + | SSL_CTX_use_certificate_bio(ctx, cert_bio, |
| + | file_type, key_passwd) : |
| + | SSL_CTX_use_certificate_file(ctx, cert_file, file_type); |
| + | if(cert_use_result != 1) { |
| failf(data, | |
| "could not load ASN1 client certificate, " OSSL_PACKAGE | |
| " error %s, " | |
| @@ -750,27 +880,31 @@ int cert_stuff(struct connectdata *conn, | |
| PKCS12 *p12 = NULL; | |
| EVP_PKEY *pri; | |
| STACK_OF(X509) *ca = NULL; | |
| + | if(!cert_bio) { |
| + | fp = BIO_new(BIO_s_file()); |
| + | if(fp == NULL) { |
| + | failf(data, |
| + | "BIO_new return NULL, " OSSL_PACKAGE |
| + | " error %s", |
| + | ossl_strerror(ERR_get_error(), error_buffer, |
| + | sizeof(error_buffer)) ); |
| + | return 0; |
| + | } |
| - | fp = BIO_new(BIO_s_file()); |
| - | if(fp == NULL) { |
| - | failf(data, |
| - | "BIO_new return NULL, " OSSL_PACKAGE |
| - | " error %s", |
| - | ossl_strerror(ERR_get_error(), error_buffer, |
| - | sizeof(error_buffer)) ); |
| - | return 0; |
| + | if(BIO_read_filename(fp, cert_file) <= 0) { |
| + | failf(data, "could not open PKCS12 file '%s'", cert_file); |
| + | BIO_free(fp); |
| + | return 0; |
| + | } |
| } | |
| - | if(BIO_read_filename(fp, cert_file) <= 0) { |
| - | failf(data, "could not open PKCS12 file '%s'", cert_file); |
| + | p12 = d2i_PKCS12_bio(cert_bio ? cert_bio : fp, NULL); |
| + | if(fp) |
| BIO_free(fp); | |
| - | return 0; |
| - | } |
| - | p12 = d2i_PKCS12_bio(fp, NULL); |
| - | BIO_free(fp); |
| if(!p12) { | |
| - | failf(data, "error reading PKCS12 file '%s'", cert_file); |
| + | failf(data, "error reading PKCS12 file '%s'", |
| + | cert_bio ? "(memory blob)" : cert_file); |
| return 0; | |
| } | |
| @@ -851,8 +985,10 @@ int cert_stuff(struct connectdata *conn, | |
| return 0; | |
| } | |
| - | if(!key_file) |
| + | if((!key_file) && (!key_bio)) { |
| key_file = cert_file; | |
| + | key_bio = cert_bio; |
| + | } |
| else | |
| file_type = do_file_type(key_type); | |
| @@ -862,9 +998,12 @@ int cert_stuff(struct connectdata *conn, | |
| break; | |
| /* FALLTHROUGH */ | |
| case SSL_FILETYPE_ASN1: | |
| - | if(SSL_CTX_use_PrivateKey_file(ctx, key_file, file_type) != 1) { |
| + | cert_use_result = key_bio ? |
| + | SSL_CTX_use_PrivateKey_bio(ctx, key_bio, file_type, key_passwd) : |
| + | SSL_CTX_use_PrivateKey_file(ctx, key_file, file_type); |
| + | if(cert_use_result != 1) { |
| failf(data, "unable to set private key file: '%s' type %s", | |
| - | key_file, key_type?key_type:"PEM"); |
| + | key_file?key_file:"(memory blob)", key_type?key_type:"PEM"); |
| return 0; | |
| } | |
| break; | |
| @@ -2418,6 +2557,7 @@ static CURLcode ossl_connect_step1(struct connectdata *conn, int sockindex) | |
| const enum CURL_TLSAUTH ssl_authtype = SSL_SET_OPTION(authtype); | |
| #endif | |
| char * const ssl_cert = SSL_SET_OPTION(cert); | |
| + | const struct curl_blob *ssl_cert_blob = SSL_SET_OPTION(cert_blob); |
| const char * const ssl_cert_type = SSL_SET_OPTION(cert_type); | |
| const char * const ssl_cafile = SSL_CONN_CONFIG(CAfile); | |
| const char * const ssl_capath = SSL_CONN_CONFIG(CApath); | |
| @@ -2662,10 +2802,33 @@ static CURLcode ossl_connect_step1(struct connectdata *conn, int sockindex) | |
| } | |
| #endif | |
| - | if(ssl_cert || ssl_cert_type) { |
| - | if(!cert_stuff(conn, backend->ctx, ssl_cert, ssl_cert_type, |
| - | SSL_SET_OPTION(key), SSL_SET_OPTION(key_type), |
| - | SSL_SET_OPTION(key_passwd))) { |
| + | if(ssl_cert || ssl_cert_blob || ssl_cert_type) { |
| + | BIO *ssl_cert_bio = NULL; |
| + | BIO *ssl_key_bio = NULL; |
| + | int result_cert_stuff; |
| + | if(ssl_cert_blob) { |
| + | /* the typecast of blob->len is fine since it is guaranteed to never be |
| + | larger than CURL_MAX_INPUT_LENGTH */ |
| + | ssl_cert_bio = BIO_new_mem_buf(ssl_cert_blob->data, |
| + | (int)ssl_cert_blob->len); |
| + | if(!ssl_cert_bio) |
| + | return CURLE_SSL_CERTPROBLEM; |
| + | } |
| + | if(SSL_SET_OPTION(key_blob)) { |
| + | ssl_key_bio = BIO_new_mem_buf(SSL_SET_OPTION(key_blob)->data, |
| + | (int)SSL_SET_OPTION(key_blob)->len); |
| + | if(!ssl_key_bio) |
| + | return CURLE_SSL_CERTPROBLEM; |
| + | } |
| + | result_cert_stuff = cert_stuff(conn, backend->ctx, |
| + | ssl_cert, ssl_cert_bio, ssl_cert_type, |
| + | SSL_SET_OPTION(key), ssl_key_bio, |
| + | SSL_SET_OPTION(key_type), SSL_SET_OPTION(key_passwd)); |
| + | if(ssl_cert_bio) |
| + | BIO_free(ssl_cert_bio); |
| + | if(ssl_key_bio) |
| + | BIO_free(ssl_key_bio); |
| + | if(!result_cert_stuff) { |
| /* failf() is already done in cert_stuff() */ | |
| return CURLE_SSL_CERTPROBLEM; | |
| } | |
| @@ -3714,27 +3877,32 @@ static CURLcode servercert(struct connectdata *conn, | |
| deallocating the certificate. */ | |
| /* e.g. match issuer name with provided issuer certificate */ | |
| - | if(SSL_SET_OPTION(issuercert)) { |
| - | fp = BIO_new(BIO_s_file()); |
| - | if(fp == NULL) { |
| - | failf(data, |
| - | "BIO_new return NULL, " OSSL_PACKAGE |
| - | " error %s", |
| - | ossl_strerror(ERR_get_error(), error_buffer, |
| - | sizeof(error_buffer)) ); |
| - | X509_free(backend->server_cert); |
| - | backend->server_cert = NULL; |
| - | return CURLE_OUT_OF_MEMORY; |
| - | } |
| + | if(SSL_SET_OPTION(issuercert) || SSL_SET_OPTION(issuercert_blob)) { |
| + | if(SSL_SET_OPTION(issuercert_blob)) |
| + | fp = BIO_new_mem_buf(SSL_SET_OPTION(issuercert_blob)->data, |
| + | (int)SSL_SET_OPTION(issuercert_blob)->len); |
| + | else { |
| + | fp = BIO_new(BIO_s_file()); |
| + | if(fp == NULL) { |
| + | failf(data, |
| + | "BIO_new return NULL, " OSSL_PACKAGE |
| + | " error %s", |
| + | ossl_strerror(ERR_get_error(), error_buffer, |
| + | sizeof(error_buffer)) ); |
| + | X509_free(backend->server_cert); |
| + | backend->server_cert = NULL; |
| + | return CURLE_OUT_OF_MEMORY; |
| + | } |
| - | if(BIO_read_filename(fp, SSL_SET_OPTION(issuercert)) <= 0) { |
| - | if(strict) |
| - | failf(data, "SSL: Unable to open issuer cert (%s)", |
| - | SSL_SET_OPTION(issuercert)); |
| - | BIO_free(fp); |
| - | X509_free(backend->server_cert); |
| - | backend->server_cert = NULL; |
| - | return CURLE_SSL_ISSUER_ERROR; |
| + | if(BIO_read_filename(fp, SSL_SET_OPTION(issuercert)) <= 0) { |
| + | if(strict) |
| + | failf(data, "SSL: Unable to open issuer cert (%s)", |
| + | SSL_SET_OPTION(issuercert)); |
| + | BIO_free(fp); |
| + | X509_free(backend->server_cert); |
| + | backend->server_cert = NULL; |
| + | return CURLE_SSL_ISSUER_ERROR; |
| + | } |
| } | |
| issuer = PEM_read_bio_X509(fp, NULL, ZERO_NULL, NULL); | |
| @@ -39,6 +39,7 @@ | |
| #include "schannel.h" | |
| #include "vtls.h" | |
| + | #include "strcase.h" |
| #include "sendf.h" | |
| #include "connect.h" /* for the connect timeout */ | |
| #include "strerror.h" | |
| @@ -583,94 +584,122 @@ schannel_connect_step1(struct connectdata *conn, int sockindex) | |
| #ifdef HAS_CLIENT_CERT_PATH | |
| /* client certificate */ | |
| - | if(data->set.ssl.cert) { |
| - | DWORD cert_store_name; |
| + | if(data->set.ssl.cert || data->set.ssl.cert_blob) { |
| + | DWORD cert_store_name = 0; |
| TCHAR *cert_store_path = NULL; | |
| - | TCHAR *cert_thumbprint_str; |
| + | TCHAR *cert_thumbprint_str = NULL; |
| CRYPT_HASH_BLOB cert_thumbprint; | |
| BYTE cert_thumbprint_data[CERT_THUMBPRINT_DATA_LEN]; | |
| - | HCERTSTORE cert_store; |
| + | HCERTSTORE cert_store = NULL; |
| FILE *fInCert = NULL; | |
| + | void *certdata = NULL; |
| + | size_t certsize = 0; |
| + | bool blob = data->set.ssl.cert_blob != NULL; |
| + | TCHAR *cert_path = NULL; |
| + | if(blob) { |
| + | certdata = data->set.ssl.cert_blob->data; |
| + | certsize = data->set.ssl.cert_blob->len; |
| + | } |
| + | else { |
| + | cert_path = curlx_convert_UTF8_to_tchar(data->set.ssl.cert); |
| + | if(!cert_path) |
| + | return CURLE_OUT_OF_MEMORY; |
| - | TCHAR *cert_path = curlx_convert_UTF8_to_tchar(data->set.ssl.cert); |
| - | if(!cert_path) |
| - | return CURLE_OUT_OF_MEMORY; |
| + | result = get_cert_location(cert_path, &cert_store_name, |
| + | &cert_store_path, &cert_thumbprint_str); |
| + | |
| + | if(result && (data->set.ssl.cert[0]!='\0')) |
| + | fInCert = fopen(data->set.ssl.cert, "rb"); |
| - | result = get_cert_location(cert_path, &cert_store_name, |
| - | &cert_store_path, &cert_thumbprint_str); |
| - | if((result != CURLE_OK) && (data->set.ssl.cert[0]!='\0')) |
| - | fInCert = fopen(data->set.ssl.cert, "rb"); |
| + | if(result && !fInCert) { |
| + | failf(data, "schannel: Failed to get certificate location" |
| + | " or file for %s", |
| + | data->set.ssl.cert); |
| + | curlx_unicodefree(cert_path); |
| + | return result; |
| + | } |
| + | } |
| - | if((result != CURLE_OK) && (fInCert == NULL)) { |
| - | failf(data, "schannel: Failed to get certificate location" |
| - | " or file for %s", |
| - | data->set.ssl.cert); |
| + | if((fInCert || blob) && (data->set.ssl.cert_type) && |
| + | (!strcasecompare(data->set.ssl.cert_type, "P12"))) { |
| + | failf(data, "schannel: certificate format compatibility error " |
| + | " for %s", |
| + | blob ? "(memory blob)" : data->set.ssl.cert); |
| curlx_unicodefree(cert_path); | |
| - | return result; |
| + | return CURLE_SSL_CERTPROBLEM; |
| } | |
| - | if(fInCert) { |
| + | if(fInCert || blob) { |
| /* Reading a .P12 or .pfx file, like the example at bottom of | |
| - | https://social.msdn.microsoft.com/Forums/windowsdesktop/ |
| - | en-US/3e7bc95f-b21a-4bcd-bd2c-7f996718cae5 |
| + | https://social.msdn.microsoft.com/Forums/windowsdesktop/ |
| + | en-US/3e7bc95f-b21a-4bcd-bd2c-7f996718cae5 |
| */ | |
| - | void *certdata = NULL; |
| - | long filesize = 0; |
| CRYPT_DATA_BLOB datablob; | |
| WCHAR* pszPassword; | |
| size_t pwd_len = 0; | |
| int str_w_len = 0; | |
| - | int continue_reading = fseek(fInCert, 0, SEEK_END) == 0; |
| - | if(continue_reading) |
| - | filesize = ftell(fInCert); |
| - | if(filesize < 0) |
| - | continue_reading = 0; |
| - | if(continue_reading) |
| - | continue_reading = fseek(fInCert, 0, SEEK_SET) == 0; |
| - | if(continue_reading) |
| - | certdata = malloc(((size_t)filesize) + 1); |
| - | if((certdata == NULL) || |
| - | ((int) fread(certdata, (size_t)filesize, 1, fInCert) != 1)) |
| - | continue_reading = 0; |
| - | fclose(fInCert); |
| + | const char *cert_showfilename_error = blob ? |
| + | "(memory blob)" : data->set.ssl.cert; |
| curlx_unicodefree(cert_path); | |
| - | |
| - | if(!continue_reading) { |
| - | failf(data, "schannel: Failed to read cert file %s", |
| + | if(fInCert) { |
| + | long cert_tell = 0; |
| + | bool continue_reading = fseek(fInCert, 0, SEEK_END) == 0; |
| + | if(continue_reading) |
| + | cert_tell = ftell(fInCert); |
| + | if(cert_tell < 0) |
| + | continue_reading = FALSE; |
| + | else |
| + | certsize = (size_t)cert_tell; |
| + | if(continue_reading) |
| + | continue_reading = fseek(fInCert, 0, SEEK_SET) == 0; |
| + | if(continue_reading) |
| + | certdata = malloc(certsize + 1); |
| + | if((!certdata) || |
| + | ((int) fread(certdata, certsize, 1, fInCert) != 1)) |
| + | continue_reading = FALSE; |
| + | fclose(fInCert); |
| + | if(!continue_reading) { |
| + | failf(data, "schannel: Failed to read cert file %s", |
| data->set.ssl.cert); | |
| - | free(certdata); |
| - | return CURLE_SSL_CERTPROBLEM; |
| + | free(certdata); |
| + | return CURLE_SSL_CERTPROBLEM; |
| + | } |
| } | |
| /* Convert key-pair data to the in-memory certificate store */ | |
| datablob.pbData = (BYTE*)certdata; | |
| - | datablob.cbData = (DWORD)filesize; |
| + | datablob.cbData = (DWORD)certsize; |
| if(data->set.ssl.key_passwd != NULL) | |
| pwd_len = strlen(data->set.ssl.key_passwd); | |
| pszPassword = (WCHAR*)malloc(sizeof(WCHAR)*(pwd_len + 1)); | |
| - | if(pwd_len > 0) |
| - | str_w_len = |
| - | MultiByteToWideChar(CP_UTF8, MB_ERR_INVALID_CHARS, |
| - | data->set.ssl.key_passwd, (int)pwd_len, |
| - | pszPassword, (int)(pwd_len + 1)); |
| - | |
| - | if((str_w_len >= 0) && (str_w_len <= (int)pwd_len)) |
| - | pszPassword[str_w_len] = 0; |
| - | else |
| - | pszPassword[0] = 0; |
| - | |
| - | cert_store = PFXImportCertStore(&datablob, pszPassword, 0); |
| - | free(pszPassword); |
| - | free(certdata); |
| + | if(pszPassword) { |
| + | if(pwd_len > 0) |
| + | str_w_len = MultiByteToWideChar(CP_UTF8, |
| + | MB_ERR_INVALID_CHARS, |
| + | data->set.ssl.key_passwd, (int)pwd_len, |
| + | pszPassword, (int)(pwd_len + 1)); |
| + | |
| + | if((str_w_len >= 0) && (str_w_len <= (int)pwd_len)) |
| + | pszPassword[str_w_len] = 0; |
| + | else |
| + | pszPassword[0] = 0; |
| + | |
| + | cert_store = PFXImportCertStore(&datablob, pszPassword, 0); |
| + | free(pszPassword); |
| + | } |
| + | if(!blob) |
| + | free(certdata); |
| if(cert_store == NULL) { | |
| DWORD errorcode = GetLastError(); | |
| if(errorcode == ERROR_INVALID_PASSWORD) | |
| failf(data, "schannel: Failed to import cert file %s, " | |
| - | "password is bad", data->set.ssl.cert); |
| + | "password is bad", |
| + | cert_showfilename_error); |
| else | |
| failf(data, "schannel: Failed to import cert file %s, " | |
| - | "last error is 0x%x", data->set.ssl.cert, errorcode); |
| + | "last error is 0x%x", |
| + | cert_showfilename_error, errorcode); |
| return CURLE_SSL_CERTPROBLEM; | |
| } | |
| @@ -681,7 +710,7 @@ schannel_connect_step1(struct connectdata *conn, int sockindex) | |
| if(client_certs[0] == NULL) { | |
| failf(data, "schannel: Failed to get certificate from file %s" | |
| ", last error is 0x%x", | |
| - | data->set.ssl.cert, GetLastError()); |
| + | cert_showfilename_error, GetLastError()); |
| CertCloseStore(cert_store, 0); | |
| return CURLE_SSL_CERTPROBLEM; | |
| } | |
| @@ -1126,12 +1126,12 @@ static OSStatus CopyIdentityWithLabel(char *label, | |
| } | |
| static OSStatus CopyIdentityFromPKCS12File(const char *cPath, | |
| + | const struct curl_blob *blob, |
| const char *cPassword, | |
| SecIdentityRef *out_cert_and_key) | |
| { | |
| OSStatus status = errSecItemNotFound; | |
| - | CFURLRef pkcs_url = CFURLCreateFromFileSystemRepresentation(NULL, |
| - | (const UInt8 *)cPath, strlen(cPath), false); |
| + | CFURLRef pkcs_url = NULL; |
| CFStringRef password = cPassword ? CFStringCreateWithCString(NULL, | |
| cPassword, kCFStringEncodingUTF8) : NULL; | |
| CFDataRef pkcs_data = NULL; | |
| @@ -1140,8 +1140,26 @@ static OSStatus CopyIdentityFromPKCS12File(const char *cPath, | |
| /* These constants are documented as having first appeared in 10.6 but they | |
| raise linker errors when used on that cat for some reason. */ | |
| #if CURL_BUILD_MAC_10_7 || CURL_BUILD_IOS | |
| - | if(CFURLCreateDataAndPropertiesFromResource(NULL, pkcs_url, &pkcs_data, |
| - | NULL, NULL, &status)) { |
| + | bool resource_imported; |
| + | |
| + | if(blob) { |
| + | pkcs_data = CFDataCreate(kCFAllocatorDefault, |
| + | (const unsigned char *)blob->data, blob->len); |
| + | status = (pkcs_data != NULL) ? errSecSuccess : errSecAllocate; |
| + | resource_imported = (pkcs_data != NULL); |
| + | } |
| + | else { |
| + | pkcs_url = |
| + | CFURLCreateFromFileSystemRepresentation(NULL, |
| + | (const UInt8 *)cPath, |
| + | strlen(cPath), false); |
| + | resource_imported = |
| + | CFURLCreateDataAndPropertiesFromResource(NULL, |
| + | pkcs_url, &pkcs_data, |
| + | NULL, NULL, &status); |
| + | } |
| + | |
| + | if(resource_imported) { |
| CFArrayRef items = NULL; | |
| /* On iOS SecPKCS12Import will never add the client certificate to the | |
| @@ -1219,7 +1237,8 @@ static OSStatus CopyIdentityFromPKCS12File(const char *cPath, | |
| #endif /* CURL_BUILD_MAC_10_7 || CURL_BUILD_IOS */ | |
| if(password) | |
| CFRelease(password); | |
| - | CFRelease(pkcs_url); |
| + | if(pkcs_url) |
| + | CFRelease(pkcs_url); |
| return status; | |
| } | |
| @@ -1376,8 +1395,10 @@ static CURLcode sectransp_connect_step1(struct connectdata *conn, | |
| struct ssl_connect_data *connssl = &conn->ssl[sockindex]; | |
| struct ssl_backend_data *backend = connssl->backend; | |
| const char * const ssl_cafile = SSL_CONN_CONFIG(CAfile); | |
| + | const struct curl_blob *ssl_cablob = NULL; |
| const bool verifypeer = SSL_CONN_CONFIG(verifypeer); | |
| char * const ssl_cert = SSL_SET_OPTION(cert); | |
| + | const struct curl_blob *ssl_cert_blob = SSL_SET_OPTION(cert_blob); |
| const char * const hostname = SSL_IS_PROXY() ? conn->http_proxy.host.name : | |
| conn->host.name; | |
| const long int port = SSL_IS_PROXY() ? conn->port : conn->remote_port; | |
| @@ -1612,15 +1633,16 @@ static CURLcode sectransp_connect_step1(struct connectdata *conn, | |
| "Transport. The private key must be in the Keychain.\n"); | |
| } | |
| - | if(ssl_cert) { |
| + | if(ssl_cert || ssl_cert_blob) { |
| + | bool is_cert_data = ssl_cert_blob != NULL; |
| + | bool is_cert_file = (!is_cert_data) && is_file(ssl_cert); |
| SecIdentityRef cert_and_key = NULL; | |
| - | bool is_cert_file = is_file(ssl_cert); |
| /* User wants to authenticate with a client cert. Look for it: | |
| If we detect that this is a file on disk, then let's load it. | |
| Otherwise, assume that the user wants to use an identity loaded | |
| from the Keychain. */ | |
| - | if(is_cert_file) { |
| + | if(is_cert_file || is_cert_data) { |
| if(!SSL_SET_OPTION(cert_type)) | |
| infof(data, "WARNING: SSL: Certificate type not set, assuming " | |
| "PKCS#12 format.\n"); | |
| @@ -1629,7 +1651,7 @@ static CURLcode sectransp_connect_step1(struct connectdata *conn, | |
| infof(data, "WARNING: SSL: The Security framework only supports " | |
| "loading identities that are in PKCS#12 format.\n"); | |
| - | err = CopyIdentityFromPKCS12File(ssl_cert, |
| + | err = CopyIdentityFromPKCS12File(ssl_cert, ssl_cert_blob, |
| SSL_SET_OPTION(key_passwd), &cert_and_key); | |
| } | |
| else | |
| @@ -1669,27 +1691,30 @@ static CURLcode sectransp_connect_step1(struct connectdata *conn, | |
| CFRelease(cert_and_key); | |
| } | |
| else { | |
| + | const char *cert_showfilename_error = |
| + | is_cert_data ? "(memory blob)" : ssl_cert; |
| + | |
| switch(err) { | |
| case errSecAuthFailed: case -25264: /* errSecPkcs12VerifyFailure */ | |
| failf(data, "SSL: Incorrect password for the certificate \"%s\" " | |
| - | "and its private key.", ssl_cert); |
| + | "and its private key.", cert_showfilename_error); |
| break; | |
| case -26275: /* errSecDecode */ case -25257: /* errSecUnknownFormat */ | |
| failf(data, "SSL: Couldn't make sense of the data in the " | |
| "certificate \"%s\" and its private key.", | |
| - | ssl_cert); |
| + | cert_showfilename_error); |
| break; | |
| case -25260: /* errSecPassphraseRequired */ | |
| failf(data, "SSL The certificate \"%s\" requires a password.", | |
| - | ssl_cert); |
| + | cert_showfilename_error); |
| break; | |
| case errSecItemNotFound: | |
| failf(data, "SSL: Can't find the certificate \"%s\" and its private " | |
| - | "key in the Keychain.", ssl_cert); |
| + | "key in the Keychain.", cert_showfilename_error); |
| break; | |
| default: | |
| failf(data, "SSL: Can't load the certificate \"%s\" and its private " | |
| - | "key: OSStatus %d", ssl_cert, err); |
| + | "key: OSStatus %d", cert_showfilename_error, err); |
| break; | |
| } | |
| return CURLE_SSL_CERTPROBLEM; | |
| @@ -1721,7 +1746,8 @@ static CURLcode sectransp_connect_step1(struct connectdata *conn, | |
| #else | |
| if(SSLSetSessionOption != NULL) { | |
| #endif /* CURL_BUILD_MAC */ | |
| - | bool break_on_auth = !conn->ssl_config.verifypeer || ssl_cafile; |
| + | bool break_on_auth = !conn->ssl_config.verifypeer || |
| + | ssl_cafile || ssl_cablob; |
| err = SSLSetSessionOption(backend->ssl_ctx, | |
| kSSLSessionOptionBreakOnServerAuth, | |
| break_on_auth); | |
| @@ -1749,10 +1775,11 @@ static CURLcode sectransp_connect_step1(struct connectdata *conn, | |
| } | |
| #endif /* CURL_BUILD_MAC_10_6 || CURL_BUILD_IOS */ | |
| - | if(ssl_cafile && verifypeer) { |
| - | bool is_cert_file = is_file(ssl_cafile); |
| + | if((ssl_cafile || ssl_cablob) && verifypeer) { |
| + | bool is_cert_data = ssl_cablob != NULL; |
| + | bool is_cert_file = (!is_cert_data) && is_file(ssl_cafile); |
| - | if(!is_cert_file) { |
| + | if(!(is_cert_file || is_cert_data)) { |
| failf(data, "SSL: can't load CA certificate file %s", ssl_cafile); | |
| return CURLE_SSL_CACERT_BADFILE; | |
| } | |
| @@ -1556,11 +1556,90 @@ static CURLcode single_transfer(struct GlobalConfig *global, | |
| } | |
| } | |
| + | /* In debug build of curl tool, using |
| + | * --cert loadmem=<filename>:<password> --cert-type p12 |
| + | * must do the same thing than classic: |
| + | * --cert <filename>:<password> --cert-type p12 |
| + | * but is designed to test blob */ |
| + | #if defined(CURLDEBUG) || defined(DEBUGBUILD) |
| + | if(config->cert && (strlen(config->cert) > 8) && |
| + | (memcmp(config->cert, "loadmem=",8) == 0)) { |
| + | FILE *fInCert = fopen(config->cert + 8, "rb"); |
| + | void *certdata = NULL; |
| + | long filesize = 0; |
| + | bool continue_reading = fInCert != NULL; |
| + | if(continue_reading) |
| + | continue_reading = fseek(fInCert, 0, SEEK_END) == 0; |
| + | if(continue_reading) |
| + | filesize = ftell(fInCert); |
| + | if(filesize < 0) |
| + | continue_reading = FALSE; |
| + | if(continue_reading) |
| + | continue_reading = fseek(fInCert, 0, SEEK_SET) == 0; |
| + | if(continue_reading) |
| + | certdata = malloc(((size_t)filesize) + 1); |
| + | if((!certdata) || |
| + | ((int)fread(certdata, (size_t)filesize, 1, fInCert) != 1)) |
| + | continue_reading = FALSE; |
| + | if(fInCert) |
| + | fclose(fInCert); |
| + | if((filesize > 0) && continue_reading) { |
| + | struct curl_blob structblob; |
| + | structblob.data = certdata; |
| + | structblob.len = (size_t)filesize; |
| + | structblob.flags = CURL_BLOB_COPY; |
| + | my_setopt_str(curl, CURLOPT_SSLCERT_BLOB, &structblob); |
| + | /* if test run well, we are sure we don't reuse |
| + | * original mem pointer */ |
| + | memset(certdata, 0, (size_t)filesize); |
| + | } |
| + | free(certdata); |
| + | } |
| + | else |
| + | #endif |
| my_setopt_str(curl, CURLOPT_SSLCERT, config->cert); | |
| my_setopt_str(curl, CURLOPT_PROXY_SSLCERT, config->proxy_cert); | |
| my_setopt_str(curl, CURLOPT_SSLCERTTYPE, config->cert_type); | |
| my_setopt_str(curl, CURLOPT_PROXY_SSLCERTTYPE, | |
| config->proxy_cert_type); | |
| + | |
| + | |
| + | #if defined(CURLDEBUG) || defined(DEBUGBUILD) |
| + | if(config->key && (strlen(config->key) > 8) && |
| + | (memcmp(config->key, "loadmem=",8) == 0)) { |
| + | FILE *fInCert = fopen(config->key + 8, "rb"); |
| + | void *certdata = NULL; |
| + | long filesize = 0; |
| + | bool continue_reading = fInCert != NULL; |
| + | if(continue_reading) |
| + | continue_reading = fseek(fInCert, 0, SEEK_END) == 0; |
| + | if(continue_reading) |
| + | filesize = ftell(fInCert); |
| + | if(filesize < 0) |
| + | continue_reading = FALSE; |
| + | if(continue_reading) |
| + | continue_reading = fseek(fInCert, 0, SEEK_SET) == 0; |
| + | if(continue_reading) |
| + | certdata = malloc(((size_t)filesize) + 1); |
| + | if((!certdata) || |
| + | ((int)fread(certdata, (size_t)filesize, 1, fInCert) != 1)) |
| + | continue_reading = FALSE; |
| + | if(fInCert) |
| + | fclose(fInCert); |
| + | if((filesize > 0) && continue_reading) { |
| + | struct curl_blob structblob; |
| + | structblob.data = certdata; |
| + | structblob.len = (size_t)filesize; |
| + | structblob.flags = CURL_BLOB_COPY; |
| + | my_setopt_str(curl, CURLOPT_SSLKEY_BLOB, &structblob); |
| + | /* if test run well, we are sure we don't reuse |
| + | * original mem pointer */ |
| + | memset(certdata, 0, (size_t)filesize); |
| + | } |
| + | free(certdata); |
| + | } |
| + | else |
| + | #endif |
| my_setopt_str(curl, CURLOPT_SSLKEY, config->key); | |
| my_setopt_str(curl, CURLOPT_PROXY_SSLKEY, config->proxy_key); | |
| my_setopt_str(curl, CURLOPT_SSLKEYTYPE, config->key_type); | |
| @@ -683,7 +683,7 @@ CURLcode tool_setopt(CURL *curl, bool str, struct GlobalConfig *config, | |
| ret = curl_easy_setopt(curl, tag, pval); | |
| } | |
| - | else { |
| + | else if(tag < CURLOPTTYPE_BLOB) { |
| /* Value is expected to be curl_off_t */ | |
| curl_off_t oval = va_arg(arg, curl_off_t); | |
| msnprintf(buf, sizeof(buf), | |
| @@ -694,6 +694,20 @@ CURLcode tool_setopt(CURL *curl, bool str, struct GlobalConfig *config, | |
| if(!oval) | |
| skip = TRUE; | |
| } | |
| + | else { |
| + | /* Value is a blob */ |
| + | void *pblob = va_arg(arg, void *); |
| + | |
| + | /* blobs are never printable */ |
| + | if(pblob) { |
| + | value = "blobpointer"; |
| + | remark = TRUE; |
| + | } |
| + | else |
| + | skip = TRUE; |
| + | |
| + | ret = curl_easy_setopt(curl, tag, pblob); |
| + | } |
| va_end(arg); | |