romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-26 13:43:34 +03:00
Code Issues Projects Releases Packages Wiki Activity

spnego_sspi: add support for channel binding

Browse source 
Attempt to add support for Secure Channel binding when negotiate
authentication is used. The problem to solve is that by default IIS
accepts channel binding and curl doesn't utilise them. The result was a
401 response. Scope affects only the Schannel(winssl)-SSPI combination.

Fixes https://github.com/curl/curl/issues/3503
Closes https://github.com/curl/curl/pull/3509
This commit is contained in:
georgeok 2019-01-29 18:26:31 +01:00 • committed by Marcel Raad
parent 463f16d188
commit a730432e59
No known key found for this signature in database
GPG key ID: 33C416EFAE4D6F02
5 changed files with 49 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

5
lib/http_negotiate.c
View file

@ -89,6 +89,11 @@ CURLcode Curl_input_negotiate(struct connectdata *conn, bool proxy,
}
}
/* Supports SSL channel binding for Windows ISS extended protection */
#if defined(USE_WINDOWS_SSPI) && defined(SECPKG_ATTR_ENDPOINT_BINDINGS)
neg_ctx->sslContext = conn->sslContext;
#endif
/* Initialize the security context and decode our challenge */
result = Curl_auth_decode_spnego_message(data, userp, passwdp, service,
host, header, neg_ctx);