--- /dev/null
+- All the quote options (CURLOPT_QUOTE, CURLOPT_POSTQUOTE and\r
+ CURLOPT_PREQUOTE) now accept a preceeding asterisk before the command to\r
+ send when using FTP, as a sign that libcurl shall simply ignore the response\r
+ from the server instead of treating it as an error. Not treating a 400+ FTP\r
+ response code as an error means that failed commands will not abort the\r
+ chain of commands, nor will they cause the connection to get disconnected.\r
+\r
+SOLO DOCS\r
+\r
+- Added CURLOPT_SSH_KNOWNHOSTS, CURLOPT_SSH_KEYFUNCTION, CURLOPT_SSH_KEYDATA.\r
+ They introduce known_host support for SSH keys to libcurl. See docs for\r
+ details. Note that this feature depends on a new enough libssh2 version, to\r
+ be supported in libssh2 1.2 and later (or current git repo at this time).\r
+\r
+HECHO\r
+\r
+- David Kierznowski notified us about a security flaw\r
+ (http://curl.haxx.se/docs/adv_20090303.html also known as CVE-2009-0037) in\r
+ which previous libcurl versions (by design) can be tricked to access an\r
+ arbitrary local/different file instead of a remote one when\r
+ CURLOPT_FOLLOWLOCATION is enabled. This flaw is now fixed in this release\r
+ together this the addition of two new setopt options for controlling this\r
+ new behavior:\r
+\r
+ o CURLOPT_REDIR_PROTOCOLS controls what protocols libcurl is allowed to\r
+ follow to when CURLOPT_FOLLOWLOCATION is enabled. By default, this option\r
+ excludes the FILE and SCP protocols and thus you nee to explicitly allow\r
+ them in your app if you really want that behavior.\r
+\r
+ o CURLOPT_PROTOCOLS controls what protocol(s) libcurl is allowed to fetch\r
+ using the primary URL option. This is useful if you want to allow a user or\r
+ other outsiders control what URL to pass to libcurl and yet not allow all\r
+ protocols libcurl may have been built to support.\r
+\r
+HECHO\r
+\r
+- After a bug reported by James Cheng I've made curl_easy_getinfo() for\r
+ CURLINFO_CONTENT_LENGTH_DOWNLOAD and CURLINFO_CONTENT_LENGTH_UPLOAD return\r
+ -1 if the sizes aren't know. Previously these returned 0, make it impossible\r
+ to detect the difference between actually zero and unknown.\r
+\r
+SOLO DOC\r
+\r
+- FTP downloads (i.e.: RETR) ending with code 550 now return error\r
+ CURLE_REMOTE_FILE_NOT_FOUND instead of CURLE_FTP_COULDNT_RETR_FILE.\r
+\r
+SOLO DOC\r
+\r
+- CURLOPT_FTP_CREATE_MISSING_DIRS can now be set to 2 in addition to 1 for\r
+ plain FTP connections, and it will then allow MKD to fail once and retry the\r
+ CWD afterwards. This is especially useful if you're doing many simultanoes\r
+ connections against the same server and they all have this option enabled,\r
+ as then CWD may first fail but then another connection does MKD before this\r
+ connection and thus MKD fails but trying CWD works! The numbers can\r
+ (should?) now be set with the convenience enums now called\r
+ CURLFTP_CREATE_DIR and CURLFTP_CREATE_DIR_RETRY.\r
+\r
+ Tests has proven that if you're making an application that uploads a set of\r
+ files to an ftp server, you will get a noticable gain in speed if you're\r
+ using multiple connections and this option will be then be very useful.\r
+\r
+SOLO DOC\r
+\r
+- CURLINFO_CONDITION_UNMET was added to allow an application to get to know if\r
+ the condition in the previous request was unmet. This is typically a time\r
+ condition set with CURLOPT_TIMECONDITION and was previously not possible to\r
+ reliably figure out. From bug report #2565128\r
+ (http://curl.haxx.se/bug/view.cgi?id=2565128) filed by Jocelyn Jaubert.\r
+\r
+HECHO\r
+\r
+- Markus Moeller introduced tw onew options to libcurl:\r
+ CURLOPT_SOCKS5_GSSAPI_SERVICE and CURLOPT_SOCKS5_GSSAPI_NEC to allow libcurl\r
+ to do GSS-style authentication with SOCKS5 proxies. The curl tool got the\r
+ options called --socks5-gssapi-service and --socks5-gssapi-nec to enable\r
+ these.\r
+\r
+HECHO\r
+\r
+- Chad Monroe provided the new CURLOPT_TFTP_BLKSIZE option that allows an app\r
+ to set desired block size to use for TFTP transfers instead of the default\r
+ 512 bytes.\r
+\r
+HECHO\r
+\r
+- Internet Explorer had a broken HTTP digest authentication before v7 and\r
+ there are servers "out there" that relies on the client doing this broken\r
+ Digest authentication. Apache even comes with an option to work with such\r
+ broken clients.\r
+\r
+ The difference is only for URLs that contain a query-part (a '?'-letter and\r
+ text to the right of it).\r
+\r
+ libcurl now supports this quirk, and you enable it by setting the\r
+ CURLAUTH_DIGEST_IE bit in the bitmask you pass to the CURLOPT_HTTPAUTH or\r
+ CURLOPT_PROXYAUTH options. They are thus individually controlled to server\r
+ and proxy.\r
+\r
+HECHO\r
+\r
+- Igor Novoseltsev added CURLOPT_PROXYUSER and CURLOPT_PROXYPASSWORD that then\r
+ make CURLOPT_PROXYUSERPWD sort of deprecated. The primary motive for adding\r
+ these new options is that they have no problems with the colon separator\r
+ that the CURLOPT_PROXYUSERPWD option does.\r
+\r
+HECHO\r
+\r
+- Igor Novoseltsev brought a patch that introduced two new options to\r
+ curl_easy_setopt: CURLOPT_USERNAME and CURLOPT_PASSWORD that sort of\r
+ deprecates the good old CURLOPT_USERPWD since they allow applications to set\r
+ the user name and password independently and perhaps more importantly allow\r
+ both to contain colon(s) which CURLOPT_USERPWD doesn't fully support.\r
+\r
+HECHO\r
+\r
+- The libcurl FTP code now returns CURLE_REMOTE_FILE_NOT_FOUND error when SIZE\r
+ gets a 550 response back for the cases where a download (or NOBODY) is\r
+ wanted. It still allows a 550 as response if the SIZE is used as part of an\r
+ upload process (like if resuming an upload is requested and the file isn't\r
+ there before the upload). I also modified the FTP test server and a few test\r
+ cases accordingly to match this modified behavior.\r
+\r
+NADA\r
+\r
+- Martin Drasar provided the CURLOPT_POSTREDIR patch. It renames\r
+ CURLOPT_POST301 (but adds a define for backwards compatibility for you who\r
+ don't define CURL_NO_OLDIES). This option allows you to now also change the\r
+ libcurl behavior for a HTTP response 302 after a POST to not use GET in the\r
+ subsequent request (when CURLOPT_FOLLOWLOCATION is enabled). I edited the\r
+ patch somewhat before commit. The curl tool got a matching --post302\r
+ option. Test case 1076 was added to verify this.\r
+\r
+HECHO\r
+\r
+- Introducing CURLOPT_CERTINFO and the corresponding CURLINFO_CERTINFO. By\r
+ enabling this feature with CURLOPT_CERTINFO for a request using SSL (HTTPS\r
+ or FTPS), libcurl will gather lots of server certificate info and that info\r
+ can then get extracted by a client after the request has completed with\r
+ curl_easy_getinfo()'s CURLINFO_CERTINFO option. Linus Nielsen Feltzing\r
+ helped me test and smoothen out this feature.\r
+\r
+ Unfortunately, this feature currently only works with libcurl built to use\r
+ OpenSSL.\r
+\r
+ This feature was sponsored by networking4all.com - thanks!\r
+\r
+HECHO\r
+\r
projects / sven / tclcurl.git / blobdiff