Viktor Szakats
4e8f6c95a0
boring fixup
2025-08-25 10:55:02 +02:00
Viktor Szakats
060dc2d022
fixup-1
2025-08-25 10:47:40 +02:00
Viktor Szakats
37709e3558
try boringssl 1
2025-08-25 10:41:21 +02:00
Viktor Szakats
d331c8e030
cleanup
2025-08-25 10:38:34 +02:00
Viktor Szakats
b9a7c3bf2c
cleanup 2
2025-08-25 10:27:14 +02:00
Viktor Szakats
4bd4d4cf20
try cleanup 1
2025-08-25 10:18:17 +02:00
Viktor Szakats
78a883b4e4
try 7
2025-08-25 10:06:12 +02:00
Viktor Szakats
c29a28af84
try 6
2025-08-25 09:58:15 +02:00
Viktor Szakats
5a199003b8
try 5
2025-08-25 09:45:27 +02:00
Viktor Szakats
bf8f39bedd
try 4
2025-08-25 00:34:30 +02:00
Viktor Szakats
89f69ac50a
try 3
2025-08-25 00:20:35 +02:00
Viktor Szakats
e88563ddf4
cleanups-2
2025-08-25 00:07:51 +02:00
Viktor Szakats
addcf12a94
cleanups
2025-08-25 00:07:11 +02:00
Viktor Szakats
b8342eb19b
try 2
2025-08-24 23:18:02 +02:00
Viktor Szakats
7537a82a6f
try 1
2025-08-24 23:09:51 +02:00
Viktor Szakats
bed95e568e
try with cmake 3
2025-08-24 22:05:54 +02:00
Viktor Szakats
b20359958e
try with cmake 2
2025-08-24 22:02:09 +02:00
Viktor Szakats
6c6d5693f7
try with cmake 1
2025-08-24 22:00:58 +02:00
Viktor Szakats
b4ba526e23
try fix 1
2025-08-24 21:47:50 +02:00
Viktor Szakats
6da3a5fdf1
GHA/http3-linux: try adding aws-lc
2025-08-24 21:29:23 +02:00
Viktor Szakats
ca6d6dcb20
openssl: assume OPENSSL_VERSION_NUMBER
...
It's defined in all supported OpenSSL versions and forks.
Also formatting in `md4.c`.
Closes #18388
2025-08-24 00:59:39 +02:00
Viktor Szakats
d65436d9a0
openssl: BoringSSL / AWS-LC tidy-ups
...
- schannel: apply BoringSSL workaround to AWS-LC too.
Affects Schannel + AWS-LC MultiSSL builds. (not tested in CI)
Ref: 274940d743#2643 #2634
- curl_ntlm_core: deduplicate macro defines.
- curl_ntlm_core: document version thresholds for an AWS-LC-specific
workaround.
It was necessary between v1.2.0 2022-09-01 and v1.30.1 2024-06-21.
No longer necessary since v1.31.0 2024-07-01:
ba94617d9934ef4fab22#10320
- lib758: drop redundant OpenSSL version guards.
`OPENSSL_VERSION_NUMBER > 3` automatically guards against LibreSSL,
BoringSSL and AWS-LC.
Ref: https://github.com/curl/curl/pull/18288/commits/6ddd8f2c0bbfcb0847b1ee7f257fb772fa47310c
Follow-up to a5f0ab7995#18288
- dllmain, curl_sha512_256: formatting.
Closes #18387
2025-08-24 00:30:06 +02:00
Viktor Szakats
4c40f8b8e0
GHA/linux: add BoringSSL job, with runtests, pytests and cache
...
Ref: cff4c16b83#18385
Cherry-picked from #18384
Closes #18386
2025-08-23 23:40:16 +02:00
Simon Dalvai
a855bdee90
docs: fix link CONTRIBUTE.md link
...
Closes #18372
2025-08-23 23:14:04 +02:00
Daniel Stenberg
aa4596a97e
mdlinkcheck: handle links with a leading slash properly
...
Ref: #18372
Closes #18382
2025-08-23 23:07:13 +02:00
Viktor Szakats
cff4c16b83
pytest: fix test_17_09_ssl_min_max for BoringSSL
...
Ref: https://github.com/curl/curl/actions/runs/17179514833/job/48740057095
Also fix indent.
Cherry-picked from #18384
Closes #18385
2025-08-23 23:04:02 +02:00
Viktor Szakats
f67090679f
openssl: sync an AWS-LC guard with BoringSSL
...
BoringSSL always used the same type:
https://boringssl.googlesource.com/boringssl/+/103ed08549a74af9f03363c633028faf9a475066
103ed0854920f4e94eeb#11568
Closes #18384
2025-08-23 22:57:30 +02:00
Viktor Szakats
1fc622db8e
openssl: drop single-use interim macro USE_OPENSSL_SRP
...
Closes #18383
2025-08-23 21:32:24 +02:00
Stefan Eissing
d57cfc1a8d
asyn-thrdd: more simplifications
...
- use wakeup sockets non-locked.
- send wakeup notify only in normal control flow (not cancel). close
wakeup sockets in unlink only.
- remove 5ms thread lifetime wait crutch before pthread_cancel().
Closes #18380
2025-08-23 16:25:39 +02:00
Viktor Szakats
41923af5fc
GHA/http3-linux: build ngtcp2 for LibreSSL too, add LibreSSL jobs
...
Also: Build LibreSSL with cmake. It's 3x faster (90s -> 30s).
Follow-up to e724259bcb#18379
Follow-up to 31e6798544#18377
Cherry-picked from #18377
Closes #18381
2025-08-23 16:11:00 +02:00
Viktor Szakats
31e6798544
build: support LibreSSL native crypto lib with ngtcp2 1.15.0+
...
In ngtcp2 1.15.0 the LibreSSL crypto interface library got its own name:
`libngtcp2_crypto_libressl`. In previous versions it used
`libngtcp2_crypto_quictls`, shared with quictls itself (but not
compatible with).
Adapt autotools and cmake scripts to look for the new name first, and
fall back to the old one if not found.
Fallback to quictls tested OK in CI with both autotools and cmake:
https://github.com/curl/curl/actions/runs/17174994908?pr=18377
Ref: https://github.com/ngtcp2/ngtcp2/releases/tag/v1.15.0
Ref: https://github.com/ngtcp2/ngtcp2/pull/1716
Closes #18377
2025-08-23 15:45:36 +02:00
renovate[bot]
e724259bcb
GHA: update ngtcp2/ngtcp2 to v1.15.0
...
Closes #18379
2025-08-23 13:44:50 +02:00
Daniel Stenberg
29e4a124a3
tool_operate: bail out better on no URL
...
To avoid NULL derferences with many outputs and --next.
Follow-up to 034612cd51Fixes #18375
Closes #18376
2025-08-23 13:43:46 +02:00
Viktor Szakats
1e430f806a
configure: tidy up internal names in ngtcp2 ossl detection logic
...
Replace "quictls" with "ossl".
Follow-up to 5eefdd71a3#17027
Cherry-picked from #18377
Closes #18378
2025-08-23 12:42:05 +02:00
Viktor Szakats
4f0e530c77
tidy-up: formatting
...
Closes #18373
2025-08-23 01:12:27 +02:00
Viktor Szakats
03868ca714
asyn-thrdd: fix no HAVE_GETADDRINFO builds
...
mingw32ce, CM 4.4.0-arm schannel:
```
lib/asyn-thrdd.c: In function 'gethostbyname_thread':
lib/asyn-thrdd.c:349: error: too many arguments to function 'async_thrd_cleanup'
```
Ref: https://github.com/curl/curl/actions/runs/17158865566/job/48682687295?pr=18039#step:9:21
Follow-up to 88fc6c491f#18263
Closes #18371
2025-08-23 00:16:06 +02:00
Viktor Szakats
d6c51a8fda
cmake: CURL_CA_FALLBACK only works with OpenSSL
...
Ref: 2f6524ce3c#18364
Ref: #18362
Closes #18365
2025-08-23 00:02:33 +02:00
Daniel Stenberg
6d53263f0b
TODO: remove the expand ~ idea
...
As we can expand evironment variables now, HOME can easily be used
instead.
Ref: #18240
Closes #18363
2025-08-22 23:55:51 +02:00
Daniel Stenberg
2f6524ce3c
acinclude: --with-ca-fallback only works with OpenSSL
...
Make it error if another TLS backend is used. Also tweaked the
documentation for it to make it more clear it is only for OpenSSL.
Follow-up to 9cf4759354Fixes #18362
Closes #18364
2025-08-22 23:54:14 +02:00
Viktor Szakats
806d97d172
openssl: merge two #if blocks
...
Cherry-picked from #18330
Closes #18370
2025-08-22 22:52:51 +02:00
Viktor Szakats
b54039de2c
openssl: use RSA_flags() again with BoringSSL
...
Supported since 2017-12-18:
a0c87adbf0cd276c3cca#2117
Closes #18369
2025-08-22 20:36:11 +02:00
Viktor Szakats
78f53e0460
openssl: enable HAVE_KEYLOG_CALLBACK for AWS-LC
...
Supported by all AWS-LC versions:
6e3f5cc7e1Closes #18368
2025-08-22 20:36:10 +02:00
Viktor Szakats
63bf7a0898
openssl: drop redundant HAVE_OPENSSL_VERSION macro
...
It served as an extra guard over `OPENSSL_VERSION_STRING`.
Also, document that `OPENSSL_VERSION_STRING` is supported by OpenSSL 3+.
Closes #18367
2025-08-22 18:55:26 +02:00
Viktor Szakats
0be7f382dc
openssl: add and use HAVE_BORINGSSL_LIKE internal macro
...
To cover the common case of guarding for both BoringSSL and AWS-LC.
Cherry-picked from #18330
Closes #18358
2025-08-22 17:49:21 +02:00
Viktor Szakats
8c29a29add
openssl: add and use HAVE_OPENSSL3 internal macro
...
Cherry-picked from #18330
Closes #18360
2025-08-22 17:21:29 +02:00
Viktor Szakats
db08e86cfb
openssl: drop more legacy cruft
...
- drop `ALLOW_RENEG` undocumented (insecure) build-time option.
- drop unnecessary check for `OPENSSL_VERSION_NUMBER`.
It's present in all supported OpenSSL versions and forks.
Follow-up to 80c10c5d5d#18351
Follow-up to 59311bd3df#3293 #3283
Closes #18359
2025-08-22 17:21:28 +02:00
Daniel Stenberg
bfbee798ca
tool_operate: use stricter curl_multi_setopt() arguments
...
To please the curl_multi_setopt() typechecker
- set multi callback protypes to match exactylu
- set CURLMOPT_MAX_HOST_CONNECTIONS as a long
Closes #18357
2025-08-22 17:13:07 +02:00
Daniel Stenberg
844c385812
typecheck-gcc: add type checks for curl_multi_setopt()
...
Test 745 verifies that all options are tested.
Closes #18357
2025-08-22 17:12:58 +02:00
Daniel Stenberg
b3570b36d7
runtests: show still running tests when nothing has happened for a while
...
... even if there are tests still pending. To help visualize tests that
might be hanging.
Attempts to set the limit at 10 seconds of silence.
Closes #18349
2025-08-22 16:28:03 +02:00
Stefan Eissing
a8d20cd223
asyn-thrdd: manage DEFERRED and locks better
...
- cancel thread waits until thread start is at least 5ms in the past
to give it some time to get its cancellation setup in place
- cancel thread without holding the mutex. It's supposed to be an
async operation, but better be safe
- set DEFERRED cancel state explicitly, should be default in a pthread,
but better be safe
Closes #18350
2025-08-22 16:26:11 +02:00
