Viktor Szakats 22652a5a4c curl: add options for safe/no CA bundle search (Windows) ... Add `CURL_CA_SEARCH_SAFE` build-time option to enable CA bundle search in the `curl` tool directory. The lookup method was already used to find `.curlrc` and `_curlrc` (on Windows). On Windows it overrides the unsafe default `SearchPath()` method. Enable with: - cmake: `-DCURL_CA_SEARCH_SAFE=ON` - autotools: `--enable-ca-search-safe` - raw: `CPPFLAGS=-DCURL_CA_SEARCH_SAFE` On Windows, before this patch the whole `PATH` was searched for a CA bundle. `PATH` may contain unwanted or world-writable locations, including the current directory. Searching them all is convenient to pick up any CA bundle, but not secure. The Muldersoft curl distro implements such CA search via a custom patch for Windows: cd652d4792/patch/curl_tool_doswin.diff (L50) MSYS2/mingw-w64 distro has also been rolling a patch solving this: https://github.com/msys2/MINGW-packages/blob/master/mingw-w64-curl/0001-Make-cURL-relocatable.patch https://github.com/msys2/MINGW-packages/blob/master/mingw-w64-curl/pathtools.c Also add option to fully disable Windows CA search: - cmake: `-DCURL_DISABLE_CA_SEARCH=ON` - autotools: `--disable-ca-search` - raw: `CPPFLAGS=-DCURL_DISABLE_CA_SEARCH`. Both options are considered EXPERIMENTAL, with possible incompatible changes or even (partial) removal in the future, depending on feedback. An alternative, secure option is to embed the CA bundle into the binary. Safe search can be extended to other platforms if necessary or useful, by using `_NSGetExecutablePath()` (macOS), `/proc/self/exe` (Linux/Cygwin), or `argv[0]`. Closes #14582		2024-09-22 18:17:25 +02:00
..
ISSUE_TEMPLATE	ISSUE_TEMPLATE/docs: correct the field identifiers	2024-07-12 12:22:15 +02:00
scripts	GHA/configure-vs-cmake: check libcurl.pc/curl-config, fix issues	2024-09-21 12:08:35 +02:00
workflows	curl: add options for safe/no CA bundle search (Windows)	2024-09-22 18:17:25 +02:00
CODEOWNERS	CI: add whitespace checker	2024-06-27 13:33:30 +02:00
CONTRIBUTING.md	copyright: update all copyright lines and remove year ranges	2023-01-03 09:19:21 +01:00
dependabot.yml	reuse: add copyright + license info to individual docs/*.md files	2024-03-31 12:01:18 +02:00
FUNDING.yml	copyright: update all copyright lines and remove year ranges	2023-01-03 09:19:21 +01:00
labeler.yml	CI: move Azure jobs to GHA, fix fallouts, sshserver, runtests tweaks	2024-09-16 10:00:17 +02:00
lock.yml	copyright: update all copyright lines and remove year ranges	2023-01-03 09:19:21 +01:00
stale.yml	copyright: update all copyright lines and remove year ranges	2023-01-03 09:19:21 +01:00