How to set service name for SPNEGO?

Hi, Is there a way to set a custom service name for SPNEGO? I have a service deployed with a custom service principal which does not have HTTP as the service name, for example, foo.service/hostname@realm. Is it possible to configure this name from libcurl? I checked http.c and found this code:

[PATCH 1/2] connect: avoid skipping an IPv4 address

... in case the protocol versions are mixed in a DNS response (IPv6 - IPv4 - IPv6). Bug: https://bugzilla.redhat.com/show_bug.cgi?id=1187531#c3 --- lib/connect.c | 8 ++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/lib/connect.c b/lib/connect.c index 32888e6..61b1808

[PATCH 2/2] connect: wait for IPv4 connection attempts

... even if the last IPv6 connection attempt has failed. Bug: https://bugzilla.redhat.com/show_bug.cgi?id=1187531#c4 --- lib/connect.c | 9 +++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/lib/connect.c b/lib/connect.c index 61b1808..904d3c9 100644 --- a/lib/connect.c +++

[RFC] TLS Session Tickets

Hello, I was looking into enabling TLS session tickets (RFC5077) (which allow session resumption without server-side state), when I noticed that in the OpenSSL code they are explicitly disabled. I traced this back to commit 8fa8df95 which says: - The -no_ticket option was introduced in

Re: [PATCH/RFC] Support for TLS False Start

On Feb 14, 2015, at 12:06 PM, Alessandro Ghedini alessan...@ghedini.me wrote: I've implemented new libcurl/curl options for enabling TLS false start [0]. AFAICT only nss supports it so only the nss backend implements the new option. SecureTransport also supports false start (since iOS 7

Re: How to set service name for SPNEGO?

I investigated this further and could not find out a good way to set the service identiy/name. So I went ahead and created this simple diff http://www.pastebin.ca/2929587 on top of libcurl version 7.36.0. Basically I added a new curl option CURLOPT_NEGOTIATE_SERVICE_IDENTITY for people to specify

Re: [PATCH/RFC] Support for TLS False Start

On Sat, 14 Feb 2015, Alessandro Ghedini wrote: I've implemented new libcurl/curl options for enabling TLS false start [0]. AFAICT only nss supports it so only the nss backend implements the new option. Awesome! Both chromium and firefox enable false start only if the server also suports

cUrl on c and Failed to connect() to host after 1 hours

Hi, My name is Arnaud and i develop an application. I upload from Debain 7 with curl 7.40 to windows serveur many full HD pictures every 5 minutes. I use filezila server and FTP protocole. But after 1 hours, cUrl said : Failed to connect() to host. Same server, same IP, same config... If i

Re: [PATCH/RFC] Support for TLS False Start

On Mon, Feb 16, 2015 at 02:19:17PM +0100, Daniel Stenberg wrote: On Sat, 14 Feb 2015, Alessandro Ghedini wrote: I've implemented new libcurl/curl options for enabling TLS false start [0]. AFAICT only nss supports it so only the nss backend implements the new option. Awesome! Both

Re[2]: question about examples

On Mon, 16 Feb 2015, Серега Касаткин wrote: Please don't top-post, it makes this even harder. Quote what you need then enter your response below. This certificates installs by some java applet on that site. A few of them always the same - i dont know how it names correctly - root

Re: curl-library Digest, Vol 114, Issue 22

On Mon, Feb 16, 2015 at 02:26:01PM +0800, brianyao2...@gmail.com wrote: I Can't repeat it manually. We just collect the dump from the customer's app when it is crashing.we only know that the app is using libcurl multi-interfaces to download some resource from net according to our log ,and

Re: question about examples

On Sun, 15 Feb 2015, Серега Касаткин wrote: i see three examples of code for certificate cases for https autorization. but this code read certificate from body of programm. That's why they are examples because that's not how you normally do it. can you make another type of autorization,

Re[2]: question about examples

This certificates installs by some java applet on that site. A few of them always the same - i dont know how it names correctly - root certificates? they lay on site. And then this applet is starts and can import to window's storage personal certificate from special file from hdd - to MY