Yesterday, I blogged about curl's graceful connection shutdown. I was a bit vague on why this is beneficial in TCP.
With the help of Dan Fandrich, I provide a more detailed explanation. Hope it helps.
github.com/icing/blog/blob/mai…
#curl #tcp
Contribute to icing/blog development by creating an account on GitHub.GitHub
long term #curl versions
daniel.haxx.se/blog/2024/06/27…
tldr: we don't do LTS releases.
But everything we ship is for the long term.
Kaboom. tatsuhiro just made #http3 transfers in #curl about 39% faster
github.com/curl/curl/pull/1401…
A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS…GitHub
Top-5 #curl version distribution among requests done on haxproxy.org in June 2024:
curl/7.81.0 79.64%
curl/7.61.1 5.88%
curl/7.68.0 5.47%
curl/7.29.0 2.00%
curl/8.5.0 1.31%
When user sets CURLOPT_SSLCERT but leaves CURLOPT_SSLKEY unset assume the path passed in CURLOPT_SSLCERT holds the ssl key which is what we do in openssl implementation. Closed #14007GitHub
Here's a user in the wild who was bitten by the Apple "backdoor" in #curl:
github.com/curl/curl/discussio…
Question When studying certificate mechanisms, I discovered that curl requests do not encounter problems even without intermediate certificates. While web browsers automatically fetch intermediate ...GitHub
Here's another good idea coming from the #curl user survey:
Support "curl -h --insecure" etc to output the manpage section for the --insecure command line option in the terminal. Should be possible to work with either long or short versions of command line options.
github.com/curl/curl/pull/1399…
Open for grabs!
Support "curl -h --insecure" etc to output the manpage section for the --insecure command line option in the terminal. Should be possible to work with either long or short versions of command line ...GitHub
You asked, I heard you. #curl --resolve with wildcard support for port number:
github.com/curl/curl/pull/1398…
Let's you do this to redirect all host names against all ports used in the cmdline to 127.0.0.1:
curl --resolve *:*:127.0.0.1 example.com
Allow resolves for a hostname independent of port number, to a fixed address. Resolves to a fixed port number have priority. Also works if the hostname itself is using "*" to catch all hostnames. A...GitHub
Do you think we should create --show-headers the new name (alias) for #curl's --include option, to make it easier to remember and know what it does?
github.com/curl/curl/pull/1398…
Simply a name alias that better explains what the option does.GitHub
Do you think #curl -O on a URL that ends with a trailing slash should pick a default file name to save the content in ?
github.com/curl/curl/pull/1398…
Instead of returning error. Add test 690 to verifyGitHub
🎉 New episode of Changelog & Friends!
@bagder shares his guiding principles for BDFL’ing curl, gives us his perspective on the state of the internet, talks financial independence, ensuring curl won’t be the next XZ & more!
🎧 changelog.com/friends/49 #curl #podcast
Daniel Stenberg shares his guiding principles for BDFL’ing curl, gives us his perspective on the state of the internet, talks financial independence, ensuring curl won’t be the next XZ & more!Changelog
#curl is now in feature freeze now for 8.9.0 curl.se/mail/lib-2024-06/0051.…
Pending release notes: curl.se/dev/release-notes.html
MQTT in #Xojo
We can use our #RabbitMQ plugin/classes to connect to RabbitMQ server with MQTT Plugin.
Or use #CURL functions to connect directly to MQTT server and post new messages and subscribe to a topic.
Great way to automate something.
mbsplugins.de/archive/2024-06-…
Newly disclosed (and dismissed) #curl vulnerability reports
"HTTP headers eat all memory:"
hackerone.com/reports/2552192
"Incorrect conversion in hostname"
hackerone.com/reports/2552179
"Unicode-to-ASCII conversion in cmdlines on Windows lead to argument injection"
hackerone.com/reports/2550951
Transparency baby.
Hello cURL team, I am splitline from DEVCORE Research Team. We recently found a vulnerability on cURL. We have reproduced the issues in the latest version of cURL (curl-8.8.0_1) and would like to...HackerOne
Next bike-shed opportunity in #curl: should it special case the .i2p TLD (as well)?
github.com/curl/curl/discussio…
Hello, I recently read the blog entry about curl no longer leaking .onion domains into the DNS, which is great. However, curl still leaks .i2p domains. Like Tor, I2P is a "darknet" or overlay netwo...GitHub
I started a discussion (well, Friday afternoons are good for those) on the possiblity/benefits of a 'curl-agent'.
github.com/curl/curl/discussio…
#curl
This is an idea about using a resident agent to hold information where curl can store/retrieve information that is relevant for transfers. This should similar to ssh-agent (or maybe even use that, ...GitHub
The book documenting the curl project, the curl tool, libcurl and more. Simply put: everything curl. - Issues · curl/everything-curlGitHub
The #curl website has been hosted by #Fastly CDN for over seven years now. I cannot ask for a better service and a friendlier company to help us.
Starting now they offer a free tier. fastly.com/pricing/
Here's my blog post from seven years ago: daniel.haxx.se/blog/2017/05/02…
On this day, exactly four years ago, #curl celebrated getting its 800th commit author.
Since then, 478 additional authors have contributed to the project. A 60% author growth in just four years.
The old blog post: daniel.haxx.se/blog/2020/06/12…
Add --vlan-priority option to the command line tool for setting VLAN priority.GitHub
A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS…GitHub
#curl now has 261 command line options, as --ip-tos and --mptcp were added for the pending 8.9.0 release:
Would you like a "num_retries" variable for #curl's --write-out format?
github.com/curl/curl/discussio…
It would be nice to expose the number of --retry retries that were required to complete a request: curl --retry 5 --retry-delay 2 --silent --write-out '%{num_retries} attempts\n' https://unreliable...GitHub
Add --ip-tos option to the command line tool for setting TOS for IPv4 or Traffic Class for IPv6.GitHub
Multipath TCP (MPTCP), standardized in RFC8684 [1], is a TCP extension that enables a TCP connection to use different paths. Multipath TCP has been used for several use cases. On smartphones, MPTCP...GitHub
Some of the emails I get are truly sad reflections of the complicated and rather sorry state of things we are in. Like this.
(also, apparently #curl is used in another popular game)
"Rainbow 6 Siege Activation issue"
