Re: are ALPN values desirable command line options?

2023-10-23 Thread Stephen Farrell via curl-library
Hiya, On 23/10/2023 07:51, Daniel Stenberg wrote: Are there actually cases where sending in a custom ALPN is likely to be the right thing for a user to get a transfer going? I have not heard of any such cases before. On 23/10/2023 08:44, Stefan Eissing wrote: For this to work, curl needs to

Re: Proposal: URL API extension, second setter function to allow setting from CURLU object

2023-10-23 Thread Daniel Stenberg via curl-library
On Mon, 23 Oct 2023, Timothe Litt via curl-library wrote: If you need more than libcurl's features for manipulating URIs, there are other C libraries that are widely available, e.g. https://uriparser.github.io/ (https://github.com/uriparser/uriparser) However, if you are using libcurl I

Re: Proposal: URL API extension, second setter function to allow setting from CURLU object

2023-10-23 Thread Timothe Litt via curl-library
On 23-Oct-23 08:28, Mark Gaiser via curl-library wrote: On Mon, Oct 23, 2023 at 8:57 AM Daniel Stenberg wrote: On Sun, 22 Oct 2023, Mark Gaiser via curl-library wrote: > I get that this is c-code and just the c-way of doing things. Still, it can > be simplified a lot, even in

Re: Proposal: URL API extension, second setter function to allow setting from CURLU object

2023-10-23 Thread Mark Gaiser via curl-library
On Mon, Oct 23, 2023 at 8:57 AM Daniel Stenberg wrote: > On Sun, 22 Oct 2023, Mark Gaiser via curl-library wrote: > > > I get that this is c-code and just the c-way of doing things. Still, it > can > > be simplified a lot, even in c. > > > > I propose a new URL API function with the following

Re: curl library api secure mode

2023-10-23 Thread Cristian Rodríguez via curl-library
On Sun, Oct 22, 2023 at 7:06 PM Philipp Gühring via curl-library < curl-library@lists.haxx.se> wrote: > Hi, > > I am the maintainer of hddsuperclone, which uses the curl library. > At the moment it is initializing the curl library like this: > curl = curl_easy_init(); > But a security audit

Re: Feature window: open

2023-10-23 Thread Stephen Farrell via curl-library
Hiya, On 23/10/2023 07:46, Daniel Stenberg wrote: On Sat, 21 Oct 2023, Stephen Farrell via curl-library wrote: I'm not clear how you like to handle experimental things like our ECH PR. This work still uses a custom patch on OpenSSL, right? Yep. Latest branch is [1]. That code's been

Re: are ALPN values desirable command line options?

2023-10-23 Thread Stefan Eissing via curl-library
> Am 22.10.2023 um 01:47 schrieb Stephen Farrell via curl-library > : > > > Hiya, > > This is a little long-winded before I get to the question. Sorry > about that;-) > > One of the things we'd like to see for ECH is that "smaller" web > sites and hosters can relatively easily make use of

Re: Proposal: URL API extension, second setter function to allow setting from CURLU object

2023-10-23 Thread Daniel Stenberg via curl-library
On Sun, 22 Oct 2023, Mark Gaiser via curl-library wrote: I get that this is c-code and just the c-way of doing things. Still, it can be simplified a lot, even in c. I propose a new URL API function with the following signature: CURLUcode curl_url_set_o(CURLU *u, CURLUPart what,

Re: are ALPN values desirable command line options?

2023-10-23 Thread Daniel Stenberg via curl-library
On Sun, 22 Oct 2023, Stephen Farrell via curl-library wrote: So, finally getting to the question, for a ZF to use curl to check if a requested ALPN works or not, (in conjunction with the relevant ECHConfigList), there'd have to be a new way to pass in ALPN values from the command line. As of

Re: Feature window: open

2023-10-23 Thread Daniel Stenberg via curl-library
On Sat, 21 Oct 2023, Stephen Farrell via curl-library wrote: I'm not clear how you like to handle experimental things like our ECH PR. This work still uses a custom patch on OpenSSL, right? Do you have any idea if/when that might actually land in OpenSSL proper? I assume the BoringSSL and