spnego_sspi: add support for channel binding

Attempt to add support for Secure Channel binding when negotiate
authentication is used. The problem to solve is that by default IIS
accepts channel binding and curl doesn't utilise them. The result was a
401 response. Scope affects only the Schannel(winssl)-SSPI combination.

Fixes https://github.com/curl/curl/issues/3503
Closes https://github.com/curl/curl/pull/3509
This commit is contained in:
georgeok 2019-01-29 18:26:31 +01:00 committed by Marcel Raad
parent 463f16d188
commit a730432e59
No known key found for this signature in database
GPG key ID: 33C416EFAE4D6F02
5 changed files with 49 additions and 8 deletions

View file

@ -175,6 +175,9 @@ CURLcode Curl_output_ntlm(struct connectdata *conn, bool proxy)
if(s_hSecDll == NULL)
return err;
}
#ifdef SECPKG_ATTR_ENDPOINT_BINDINGS
ntlm->sslContext = conn->sslContext;
#endif
#endif
switch(ntlm->state) {