summaryrefslogtreecommitdiff
path: root/usr.bin/ftp
AgeCommit message (Collapse)Author
2014-07-11Allow ftp(1) to change its User-Agent for HTTP(S) URL requests using aLawrence Teo
-U command-line option. feedback from deraadt@, halex@, and Adam Thompson ok deraadt@ sthen@, man page changes ok jmc@
2014-07-05Given an http or https URL with user and password, URL-decode the userPhilip Guenther
and password info before base64 encoding it for the Authorization header. Also: - eliminate the COOKIE_MAX_LEN constant (if they can fit it on the command line or in their environment, surely we can malloc the base64 version) - rename the variable with user:pass from "cookie" to "credentials" - empty password isn't an error - add a boolean ishttpurl so that we don't have to do strcmps on the schema that we just set - when looping across multiple ftp:// urls on the command line, don't leak the username/password memory problem noted by Se'bastien Marie (semarie-openbsd (at) latrappe.fr)
2014-06-25Alexander Schrijver posted a diff to remove references to the c_rehash script,Jason McIntyre
which we don;t have in base. after some discussion with jca, i've not removed these references, but tried to make it clearer it's distributed with openssl and not included in base;
2014-05-20Use errc/warnc to simplify code.Philip Guenther
Also, in 'ftp', always put the error message last, after the hostname/ipaddr. ok jsing@ krw@ millert@
2014-05-19X509_free() the certificate if the server hostname check fails.Jeremie Courreges-Anglas
No functional change. Reported by Mike Small and Maxime Villard.
2014-05-19Explicitely initialize two static variables introduced in the previousJeremie Courreges-Anglas
commit, to please lteo@
2014-05-19HTTPS connections may see redirects, so initialize libcrypto and libsslJeremie Courreges-Anglas
only once, and reuse the crafted SSL_CTX for further connections. ok lteo@
2014-04-23Kill useless assignement, matchlen is initialized two lines below.Jeremie Courreges-Anglas
From Fritjof Bornebusch.
2014-04-22remove dead stores to error. from Fritjof BornebuschTed Unangst
2014-04-09If TLS validation is on, retrieve the server TLS certificate andJeremie Courreges-Anglas
check the server hostname against the subjectAltName extension field and/or the CommonName DN portion. ok sthen@
2014-03-30SNI support. ok guenther@ sthen@Jeremie Courreges-Anglas
2014-03-30Check the return value from SSL_CTX_set_cipher_list(), for consistency.Jeremie Courreges-Anglas
ok guenther@ sthen@
2014-03-30SSLeay_add_ssl_algorithms() is just a #define for SSL_library_init(), soJeremie Courreges-Anglas
kill the former. ok guenther@ sthen@
2014-03-02only signed types work when comparing less than zero.Ted Unangst
reported by matthieu. ok deraadt
2014-02-26use a larger read buffer to speed things up, particularly during upgrades.Ted Unangst
ok deraadt
2014-01-29Unbreak ftp progress meter after the introduction of the '-D' flagDavid Coppa
ok tedu@
2014-01-23tweak previous;Jason McIntyre
2014-01-23Add -D shorttitle support, so that the progress meter can show some sortTheo de Raadt
of reason why it is processing a certain file. This will be used by the installer for that purpose. ok krw rpe
2013-12-24Add support for SSL/TLS server certificate validation, enabled byJeremie Courreges-Anglas
default. See the documentation for the `-S' switch. This also allows setting the preferred ciphers for the communication. Documentation bits ok'ed by jmc@, ok beck@ sthen@.
2013-12-20When writing a file, break out when we get a write(2) error, notJeremie Courreges-Anglas
just EPIPE, else we'll just reattempt the write with non-sensical values. From Maxime Villard (max at m00nbsd dot net).
2013-11-13protosTheo de Raadt
2013-11-13satisfy gcc in -Whiny modeTheo de Raadt
2013-11-12simple prototype repairsTheo de Raadt
2013-10-27If a constant string needs a name, use a static const array instead of aPhilip Guenther
pointer or non-const array, as that minimizes the symbols, maximizes the placement into read-only memory, and avoids warnings from gcc -Wformat=2 when they're used as format strings. ok deraadt@
2013-04-28Remove an obsolete paragraph in the BUGS section about using ftp(1) withLawrence Teo
4.2BSD servers. ok jmc nick tedu
2013-04-09Retry when SSL_read fails with SSL_ERROR_WANT_READ. Fixes the case whereStuart Henderson
an https server attempts renegotiation. ok jung@
2013-03-30Fixed a memory leak during HTTP header parsing.Tobias Stoeckmann
ok deraadt, halex, sthen
2013-02-19Add a STANDARDS section to list RFC's related to the FTP protocolLawrence Teo
(matches the STANDARDS section on the ftpd(8) man page); suggested by jmc@ in a discussion about this man page with Sebastian Rother and myself. ok jmc phessler
2013-02-15ARPANET -> InternetLawrence Teo
ok jmc
2013-01-06Remove empty[]. Unused after rev. 1.26.Martynas Venckus
2012-12-05Remove excessive sys/cdefs.h inclusionTheo de Raadt
ok guenther millert kettenis
2012-10-15Add support for recursive ftp upload. The mput command of the ftpAlexander Bluhm
client got the -r switch and -d depth option. From Jan Klemkow <j.klemkow AT wemelug DOT de> OK haesbaert@
2012-08-26Make a few ftp(1) usage/man page changes related to BasicLawrence Teo
authentication: - Combine the http and https usage formats into a single http[s] format to make it more concise. - In the AUTO-FETCHING FILES section of the ftp(1) man page, mention that specifying "user" and "password" with HTTP and HTTPS URLs will log in using Basic authentication (if http_proxy is not defined). - When compiled with -DSMALL, fix ftp(1) usage so that "[user:password@]" is not shown for http[s] since Basic authentication is not supported with -DSMALL. Done with a lot of discussion with and help from jmc@ (thank you!). ok deraadt haesbaert jmc
2012-08-18Fix http resume without out auth, which I broke on the last commit,Christiano F. Haesbaert
spotted by bluhm. ok bluhm.
2012-08-14Add support for basic HTTP authentication as described on RFC 2617 andChristiano F. Haesbaert
RFC 3986. This allows the following idiom in ftp: ftp http[s]://user:pass@host/file With some pointers from halex a lot of testing and feedback from lteo, thanks a lot. ok lteo@
2012-05-19Reformat usage() to avoid the line wrap, and make it match the way itLawrence Teo
looks on the man page. ok haesbaert jmc henning
2012-04-30Add a -s flag to ftp(1) to let the user specify the source IP addressChristiano F. Haesbaert
of the connection. This is useful for testing ftp(1) over VPN tunnels. This -s flag is present in the other BSDs, including OS X. All work was done by Lawrence Teo, thanks (-:. ok myself mikeb
2012-04-23Handle HTTP Content-Length headers with trailing whitespace. ok martynas@Stuart Henderson
2010-09-03Make second parameter of poll() the correct type. Removes compile warning.lum
advice and ok martynas@
2010-08-25don't free proxyurl and cookie twice in the location code; with halex@Martynas Venckus
2010-07-26fix SYNOPSIS (yes, there are still some issues here);Jason McIntyre
2010-07-23Handle redirection to relative url's in the Location: header of httpAlexander Hall
responses. Yes, they are violating the rfc's. Yes they do exist anyway. Also fix a memory leak when url_encode fails to malloc, by simply err'ing out if so. feedback and ok phessler@
2010-07-15More delimiters that need quoting inside macros, hunted down by jmc@,Ingo Schwarze
who asked me to commit because he is just running out of the door.
2010-07-03make lint happyAlexander Hall
ok phessler@
2010-07-02#ifndef SMALL a few more things to save space on the ramdisksTheo de Raadt
2010-06-29fix output handling:Alexander Hall
- if a remote file by the name '-' is retrieved, that does not imply it should go to standard output... - make -o '' reset any previous -o action - properly handle multiple -o 's ok phessler@
2010-06-27Fix a crash when the directory entry isn't complete.Peter Hessler
found by Alexander Schrijver OK halex@
2010-06-03HTTP/1.1 requests must send a "Connection: close" header. Fixes the issue whereAlexander Hall
a download would stall at the end of the file for no apparent reason. ok sthen@, phessler@
2010-06-03When attempting to resume a download, against an HTTP server thatPeter Hessler
doesn't support resume, we restart the download from the beginning, like all other browsers. Diagnosed by sthen and halex, comment from sthen OK sthen@, halex@
2010-04-30shuffle some things around to deal with incomplete typesJonathan Gray
gcc4 gets upset about. based on suggestions from miod@, ok millert@