Re: excessive amount of output produced by `curl -v` for a TLSv1.3 connection

2023-03-29 Thread Kamil Dudka via curl-library
On Wednesday, March 29, 2023 10:20:57 AM CEST Daniel Stenberg via curl-library wrote: > On Wed, 29 Mar 2023, Ray Satiro via curl-library wrote: > > > I don't see that output in curl 8.0.1. > > > > { [15637 bytes data] > > * Connection #0 to host static.snyk.io left intact > > Is it perhaps

excessive amount of output produced by `curl -v` for a TLSv1.3 connection

2023-03-29 Thread Kamil Dudka via curl-library
`curl -v` started to print an excessive amount of output for a TLSv1.3 connection. Is it really useful to get two lines of verbose output for each chunk of data (sometimes 1B) transferred over a TLS connection? $ curl -V curl 7.61.1 (x86_64-redhat-linux-gnu) libcurl/7.61.1 OpenSSL/1.1.1k

Re: On more stable curl releases

2023-03-22 Thread Kamil Dudka via curl-library
On Wednesday, March 22, 2023 8:34:30 AM CET Daniel Stenberg via curl-library wrote: > On Tue, 21 Mar 2023, Dan Fandrich via curl-library wrote: > > > It would be great if we can find more people to test pre-release curl > > versions > > I believe that is the holy grail we can only dream of.

Re: The curl nuget story

2023-03-02 Thread Kamil Dudka via curl-library
On Thursday, March 2, 2023 9:44:46 AM CET Daniel Stenberg via curl-library wrote: > Hi friends, > > The last few days I've worked with nuget and them offering a curl package > from > 2013. tldr: that package is now delisted. > > The longer version of the story: >

Re: Accidental debug-enabled version

2023-01-11 Thread Kamil Dudka via curl-library
On Wednesday, January 11, 2023 2:39:47 PM CET Daniel Stenberg via curl-library wrote: > On Wed, 11 Jan 2023, Jeffrey Walton wrote: > > > I would not put it on the first line. Some folks may be parsing the > > first line for a version number using something like: > > > > curl_version=$(curl

Re: Backporting CVE-2022-27774 fixes to older curl

2022-12-29 Thread Kamil Dudka via curl-library
On Thursday, December 29, 2022 11:56:59 AM CET Kamil Dudka wrote: > On Wednesday, December 28, 2022 9:25:39 PM CET Roberto C. Sánchez via > curl-library wrote: > > I am in the process of trying to backport the fixes for CVE-2022-27774 > > (commits 620ea21 and 139a54e) to some older versions of

Re: Backporting CVE-2022-27774 fixes to older curl

2022-12-29 Thread Kamil Dudka via curl-library
On Wednesday, December 28, 2022 9:25:39 PM CET Roberto C. Sánchez via curl-library wrote: > I am in the process of trying to backport the fixes for CVE-2022-27774 > (commits 620ea21 and 139a54e) to some older versions of cURL, > specifically I'm targeting some pre-7.83.0 versions (i.e., before

Re: Fedora and curl-minimal

2022-03-17 Thread Kamil Dudka via curl-library
On Thursday, March 17, 2022 3:32:45 AM CET Henrik Holst wrote: > Another point when it comes to security is that if the version of curl > provided by the distro does not support the protocols the user needs (and > sorry for my ignorance here since I do not know if Fedora also have another >

Re: Fedora and curl-minimal

2022-03-16 Thread Kamil Dudka via curl-library
Hi Patrick, On Wednesday, March 16, 2022 12:50:56 PM CET Patrick Monnerat via curl-library wrote: > On 3/16/22 08:56, Daniel Stenberg via curl-library wrote: > > Hello friends, > > > > In case you missed this idea that popped up in the Fedora project, I > > wrote up my take on it: > > > >

Re: Fedora and curl-minimal

2022-03-16 Thread Kamil Dudka via curl-library
On Wednesday, March 16, 2022 10:46:18 AM CET Daniel Stenberg wrote: > On Wed, 16 Mar 2022, Kamil Dudka wrote: > > Thanks for the clarifications! Thank you for updating the blog post! Note that we do use the results from the annual curl user surveys when we decide what to exclude from minimal

Re: Fedora and curl-minimal

2022-03-16 Thread Kamil Dudka via curl-library
On Wednesday, March 16, 2022 8:56:54 AM CET Daniel Stenberg via curl-library wrote: > Hello friends, > > In case you missed this idea that popped up in the Fedora project, I wrote > up my take on it: > >https://daniel.haxx.se/blog/2022/03/16/fedora-and-curl-minimal/ Hi Daniel, the Fedora

Re: Has the time come to drop NSS?

2022-02-21 Thread Kamil Dudka via curl-library
On Monday, February 21, 2022 9:56:08 AM CET Daniel Stenberg via curl-library wrote: > On Fri, 18 Feb 2022, Michael Stahl via curl-library wrote: > > NSS is much preferred over OpenSSL because it has an ABI; you can ship it > > as shared libraries and it's going to work - we are currently shipping