Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix curl --proto and --proto-redir with SSL protocols (https, etc) #97

Closed
wants to merge 1 commit into from

Conversation

drizzt
Copy link

@drizzt drizzt commented Apr 17, 2014

curl --proto and --proto-redir actually does NOT work with SSL protocols.

Test:
curl --proto -https https://github.com
curl -L --proto -http --proto-redir -https http://github.com

@bagder
Copy link
Member

bagder commented Apr 19, 2014

Thanks for pointing this out and providing a patch.

I don't really like how it is done though. The list of explicit protocols in the code makes it very error prone, and I think the fact you missed a protocol proves this very good. Although I'll admit I haven't yet come up with a really nice approach I've come to piece with.

Secondly, your change doesn't include the redirect protocol check just a few more lines below.

@bagder
Copy link
Member

bagder commented Apr 20, 2014

Here's my suggested alternative: http://curl.haxx.se/mail/lib-2014-04/0148.html

Please discuss on the list and not here. Closing this.

@bagder bagder closed this Apr 20, 2014
bagder added a commit that referenced this pull request Apr 23, 2014
This makes the findprotocol() function work as intended so that libcurl
can properly be restricted to not support HTTP while still supporting
HTTPS - since the HTTPS handler previously set both the HTTP and HTTPS
bits in the protocol field.

This fixes --proto and --proto-redir for most SSL protocols.

This is done by adding a few new convenience defines that groups HTTP
and HTTPS, FTP and FTPS etc that should then be used when the code wants
to check for both protocols at once. PROTO_FAMILY_[protocol] style.

Bug: #97
Reported-by: drizzt
@lock lock bot locked as resolved and limited conversation to collaborators Jan 20, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants