Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-07-11 | Allow ftp(1) to change its User-Agent for HTTP(S) URL requests using a | Lawrence Teo | |
-U command-line option. feedback from deraadt@, halex@, and Adam Thompson ok deraadt@ sthen@, man page changes ok jmc@ | |||
2014-07-05 | Given an http or https URL with user and password, URL-decode the user | Philip Guenther | |
and password info before base64 encoding it for the Authorization header. Also: - eliminate the COOKIE_MAX_LEN constant (if they can fit it on the command line or in their environment, surely we can malloc the base64 version) - rename the variable with user:pass from "cookie" to "credentials" - empty password isn't an error - add a boolean ishttpurl so that we don't have to do strcmps on the schema that we just set - when looping across multiple ftp:// urls on the command line, don't leak the username/password memory problem noted by Se'bastien Marie (semarie-openbsd (at) latrappe.fr) | |||
2014-06-25 | Alexander Schrijver posted a diff to remove references to the c_rehash script, | Jason McIntyre | |
which we don;t have in base. after some discussion with jca, i've not removed these references, but tried to make it clearer it's distributed with openssl and not included in base; | |||
2014-05-20 | Use errc/warnc to simplify code. | Philip Guenther | |
Also, in 'ftp', always put the error message last, after the hostname/ipaddr. ok jsing@ krw@ millert@ | |||
2014-05-19 | X509_free() the certificate if the server hostname check fails. | Jeremie Courreges-Anglas | |
No functional change. Reported by Mike Small and Maxime Villard. | |||
2014-05-19 | Explicitely initialize two static variables introduced in the previous | Jeremie Courreges-Anglas | |
commit, to please lteo@ | |||
2014-05-19 | HTTPS connections may see redirects, so initialize libcrypto and libssl | Jeremie Courreges-Anglas | |
only once, and reuse the crafted SSL_CTX for further connections. ok lteo@ | |||
2014-04-23 | Kill useless assignement, matchlen is initialized two lines below. | Jeremie Courreges-Anglas | |
From Fritjof Bornebusch. | |||
2014-04-22 | remove dead stores to error. from Fritjof Bornebusch | Ted Unangst | |
2014-04-09 | If TLS validation is on, retrieve the server TLS certificate and | Jeremie Courreges-Anglas | |
check the server hostname against the subjectAltName extension field and/or the CommonName DN portion. ok sthen@ | |||
2014-03-30 | SNI support. ok guenther@ sthen@ | Jeremie Courreges-Anglas | |
2014-03-30 | Check the return value from SSL_CTX_set_cipher_list(), for consistency. | Jeremie Courreges-Anglas | |
ok guenther@ sthen@ | |||
2014-03-30 | SSLeay_add_ssl_algorithms() is just a #define for SSL_library_init(), so | Jeremie Courreges-Anglas | |
kill the former. ok guenther@ sthen@ | |||
2014-03-02 | only signed types work when comparing less than zero. | Ted Unangst | |
reported by matthieu. ok deraadt | |||
2014-02-26 | use a larger read buffer to speed things up, particularly during upgrades. | Ted Unangst | |
ok deraadt | |||
2014-01-29 | Unbreak ftp progress meter after the introduction of the '-D' flag | David Coppa | |
ok tedu@ | |||
2014-01-23 | tweak previous; | Jason McIntyre | |
2014-01-23 | Add -D shorttitle support, so that the progress meter can show some sort | Theo de Raadt | |
of reason why it is processing a certain file. This will be used by the installer for that purpose. ok krw rpe | |||
2013-12-24 | Add support for SSL/TLS server certificate validation, enabled by | Jeremie Courreges-Anglas | |
default. See the documentation for the `-S' switch. This also allows setting the preferred ciphers for the communication. Documentation bits ok'ed by jmc@, ok beck@ sthen@. | |||
2013-12-20 | When writing a file, break out when we get a write(2) error, not | Jeremie Courreges-Anglas | |
just EPIPE, else we'll just reattempt the write with non-sensical values. From Maxime Villard (max at m00nbsd dot net). | |||
2013-11-13 | protos | Theo de Raadt | |
2013-11-13 | satisfy gcc in -Whiny mode | Theo de Raadt | |
2013-11-12 | simple prototype repairs | Theo de Raadt | |
2013-10-27 | If a constant string needs a name, use a static const array instead of a | Philip Guenther | |
pointer or non-const array, as that minimizes the symbols, maximizes the placement into read-only memory, and avoids warnings from gcc -Wformat=2 when they're used as format strings. ok deraadt@ | |||
2013-04-28 | Remove an obsolete paragraph in the BUGS section about using ftp(1) with | Lawrence Teo | |
4.2BSD servers. ok jmc nick tedu | |||
2013-04-09 | Retry when SSL_read fails with SSL_ERROR_WANT_READ. Fixes the case where | Stuart Henderson | |
an https server attempts renegotiation. ok jung@ | |||
2013-03-30 | Fixed a memory leak during HTTP header parsing. | Tobias Stoeckmann | |
ok deraadt, halex, sthen | |||
2013-02-19 | Add a STANDARDS section to list RFC's related to the FTP protocol | Lawrence Teo | |
(matches the STANDARDS section on the ftpd(8) man page); suggested by jmc@ in a discussion about this man page with Sebastian Rother and myself. ok jmc phessler | |||
2013-02-15 | ARPANET -> Internet | Lawrence Teo | |
ok jmc | |||
2013-01-06 | Remove empty[]. Unused after rev. 1.26. | Martynas Venckus | |
2012-12-05 | Remove excessive sys/cdefs.h inclusion | Theo de Raadt | |
ok guenther millert kettenis | |||
2012-10-15 | Add support for recursive ftp upload. The mput command of the ftp | Alexander Bluhm | |
client got the -r switch and -d depth option. From Jan Klemkow <j.klemkow AT wemelug DOT de> OK haesbaert@ | |||
2012-08-26 | Make a few ftp(1) usage/man page changes related to Basic | Lawrence Teo | |
authentication: - Combine the http and https usage formats into a single http[s] format to make it more concise. - In the AUTO-FETCHING FILES section of the ftp(1) man page, mention that specifying "user" and "password" with HTTP and HTTPS URLs will log in using Basic authentication (if http_proxy is not defined). - When compiled with -DSMALL, fix ftp(1) usage so that "[user:password@]" is not shown for http[s] since Basic authentication is not supported with -DSMALL. Done with a lot of discussion with and help from jmc@ (thank you!). ok deraadt haesbaert jmc | |||
2012-08-18 | Fix http resume without out auth, which I broke on the last commit, | Christiano F. Haesbaert | |
spotted by bluhm. ok bluhm. | |||
2012-08-14 | Add support for basic HTTP authentication as described on RFC 2617 and | Christiano F. Haesbaert | |
RFC 3986. This allows the following idiom in ftp: ftp http[s]://user:pass@host/file With some pointers from halex a lot of testing and feedback from lteo, thanks a lot. ok lteo@ | |||
2012-05-19 | Reformat usage() to avoid the line wrap, and make it match the way it | Lawrence Teo | |
looks on the man page. ok haesbaert jmc henning | |||
2012-04-30 | Add a -s flag to ftp(1) to let the user specify the source IP address | Christiano F. Haesbaert | |
of the connection. This is useful for testing ftp(1) over VPN tunnels. This -s flag is present in the other BSDs, including OS X. All work was done by Lawrence Teo, thanks (-:. ok myself mikeb | |||
2012-04-23 | Handle HTTP Content-Length headers with trailing whitespace. ok martynas@ | Stuart Henderson | |
2010-09-03 | Make second parameter of poll() the correct type. Removes compile warning. | lum | |
advice and ok martynas@ | |||
2010-08-25 | don't free proxyurl and cookie twice in the location code; with halex@ | Martynas Venckus | |
2010-07-26 | fix SYNOPSIS (yes, there are still some issues here); | Jason McIntyre | |
2010-07-23 | Handle redirection to relative url's in the Location: header of http | Alexander Hall | |
responses. Yes, they are violating the rfc's. Yes they do exist anyway. Also fix a memory leak when url_encode fails to malloc, by simply err'ing out if so. feedback and ok phessler@ | |||
2010-07-15 | More delimiters that need quoting inside macros, hunted down by jmc@, | Ingo Schwarze | |
who asked me to commit because he is just running out of the door. | |||
2010-07-03 | make lint happy | Alexander Hall | |
ok phessler@ | |||
2010-07-02 | #ifndef SMALL a few more things to save space on the ramdisks | Theo de Raadt | |
2010-06-29 | fix output handling: | Alexander Hall | |
- if a remote file by the name '-' is retrieved, that does not imply it should go to standard output... - make -o '' reset any previous -o action - properly handle multiple -o 's ok phessler@ | |||
2010-06-27 | Fix a crash when the directory entry isn't complete. | Peter Hessler | |
found by Alexander Schrijver OK halex@ | |||
2010-06-03 | HTTP/1.1 requests must send a "Connection: close" header. Fixes the issue where | Alexander Hall | |
a download would stall at the end of the file for no apparent reason. ok sthen@, phessler@ | |||
2010-06-03 | When attempting to resume a download, against an HTTP server that | Peter Hessler | |
doesn't support resume, we restart the download from the beginning, like all other browsers. Diagnosed by sthen and halex, comment from sthen OK sthen@, halex@ | |||
2010-04-30 | shuffle some things around to deal with incomplete types | Jonathan Gray | |
gcc4 gets upset about. based on suggestions from miod@, ok millert@ |