head	1.25;
access;
symbols
	pkgsrc-2026Q1:1.23.0.2
	pkgsrc-2026Q1-base:1.23
	pkgsrc-2025Q4:1.20.0.2
	pkgsrc-2025Q4-base:1.20
	pkgsrc-2025Q3:1.17.0.4
	pkgsrc-2025Q3-base:1.17
	pkgsrc-2025Q2:1.17.0.2
	pkgsrc-2025Q2-base:1.17
	pkgsrc-2025Q1:1.14.0.4
	pkgsrc-2025Q1-base:1.14
	pkgsrc-2024Q4:1.14.0.2
	pkgsrc-2024Q4-base:1.14
	pkgsrc-2024Q3:1.9.0.2
	pkgsrc-2024Q3-base:1.9
	pkgsrc-2024Q2:1.8.0.2
	pkgsrc-2024Q2-base:1.8
	pkgsrc-2024Q1:1.5.0.4
	pkgsrc-2024Q1-base:1.5
	pkgsrc-2023Q4:1.5.0.2
	pkgsrc-2023Q4-base:1.5
	pkgsrc-2023Q3:1.2.0.4
	pkgsrc-2023Q3-base:1.2
	pkgsrc-2023Q2:1.2.0.2
	pkgsrc-2023Q2-base:1.2;
locks; strict;
comment	@# @;


1.25
date	2026.05.15.12.37.11;	author kikadf;	state Exp;
branches;
next	1.24;
commitid	9ZxrT5HJQDgFpUFG;

1.24
date	2026.05.14.16.42.20;	author ryoon;	state Exp;
branches;
next	1.23;
commitid	tKipFjQKzke3NNFG;

1.23
date	2026.03.11.07.08.54;	author wiz;	state Exp;
branches;
next	1.22;
commitid	06A2Qxxb9fNPGwxG;

1.22
date	2026.02.06.10.06.08;	author wiz;	state Exp;
branches;
next	1.21;
commitid	MwQEYCXeWSFvIitG;

1.21
date	2026.01.07.08.49.20;	author wiz;	state Exp;
branches;
next	1.20;
commitid	1wQ3ICD8eebefrpG;

1.20
date	2025.11.05.09.59.30;	author wiz;	state Exp;
branches;
next	1.19;
commitid	ox3AtxpTecynGlhG;

1.19
date	2025.10.24.04.01.11;	author riastradh;	state Exp;
branches;
next	1.18;
commitid	9bJ9Bkxvh4mt5MfG;

1.18
date	2025.10.24.03.59.52;	author riastradh;	state Exp;
branches;
next	1.17;
commitid	2eyC8ALAqOg15MfG;

1.17
date	2025.05.28.09.43.53;	author wiz;	state Exp;
branches
	1.17.4.1;
next	1.16;
commitid	qOG5zAqfxeCAKEWF;

1.16
date	2025.04.19.07.58.32;	author wiz;	state Exp;
branches;
next	1.15;
commitid	8J0gu7BGAw8XqDRF;

1.15
date	2025.04.17.21.52.48;	author wiz;	state Exp;
branches;
next	1.14;
commitid	xcIXAVA292fk6sRF;

1.14
date	2024.12.11.09.28.46;	author wiz;	state Exp;
branches;
next	1.13;
commitid	4hPAVZ4qrmxy54BF;

1.13
date	2024.11.14.22.22.06;	author wiz;	state Exp;
branches;
next	1.12;
commitid	JmuDYqwL4erbdFxF;

1.12
date	2024.11.06.08.19.26;	author wiz;	state Exp;
branches;
next	1.11;
commitid	9ZDyoXwpX4WsPywF;

1.11
date	2024.11.01.12.54.51;	author wiz;	state Exp;
branches;
next	1.10;
commitid	QB4Wk02mZPuBuWvF;

1.10
date	2024.11.01.00.54.05;	author wiz;	state Exp;
branches;
next	1.9;
commitid	QT27BdVP362gvSvF;

1.9
date	2024.07.24.07.28.25;	author wiz;	state Exp;
branches;
next	1.8;
commitid	X39UWEpAOCpiV3jF;

1.8
date	2024.05.29.16.34.51;	author adam;	state Exp;
branches;
next	1.7;
commitid	n8aFyEjEVZA0JUbF;

1.7
date	2024.05.23.04.15.35;	author adam;	state Exp;
branches;
next	1.6;
commitid	iys24LZwCyKsQ4bF;

1.6
date	2024.05.16.06.15.41;	author wiz;	state Exp;
branches;
next	1.5;
commitid	kYKPUni8AkogJbaF;

1.5
date	2023.12.07.07.50.55;	author wiz;	state Exp;
branches;
next	1.4;
commitid	WMAtlUogIrWmrvPE;

1.4
date	2023.11.08.13.21.19;	author wiz;	state Exp;
branches;
next	1.3;
commitid	PsuHTklAIsF4bOLE;

1.3
date	2023.10.24.22.11.28;	author wiz;	state Exp;
branches;
next	1.2;
commitid	MTsrqKm6aGrQAVJE;

1.2
date	2023.05.31.20.19.46;	author nikita;	state Exp;
branches;
next	1.1;
commitid	lD5bw1viJdlIG9rE;

1.1
date	2023.05.31.18.37.52;	author nikita;	state Exp;
branches;
next	;
commitid	P1xotZgA1eaM79rE;

1.17.4.1
date	2025.10.24.23.53.01;	author maya;	state Exp;
branches;
next	;
commitid	AZpEFvtPpUalGSfG;


desc
@@


1.25
log
@
libcurl-gnutls: apply patch to fix wakeup consumption
@
text
@# $NetBSD: Makefile,v 1.24 2026/05/14 16:42:20 ryoon Exp $

PKGREVISION= 2
.include "../../www/curl/Makefile.common"

PKGNAME=	${DISTNAME:S/curl/libcurl-gnutls/}

TOOL_DEPENDS+=	patchelf-[0-9]*:../../devel/patchelf

CONFIGURE_ARGS+=	--with-gnutls=${BUILDLINK_PREFIX.gnutls}

INSTALLATION_DIRS+=	lib

.include "options.mk"

do-install:
	cd ${WRKSRC} && \
		${PREFIX}/bin/patchelf \
		--set-soname 'libcurl-gnutls.so.4' \
		lib/.libs/libcurl.so.4.*
	${INSTALL} ${WRKSRC}/lib/.libs/libcurl.so.4.8.0 ${DESTDIR}${PREFIX}/lib/libcurl-gnutls.so.4.8.0
	cd ${DESTDIR}${PREFIX}/lib && \
		${LN} -s libcurl-gnutls.so.4.8.0 libcurl-gnutls.so && \
		${LN} -s libcurl-gnutls.so.4.8.0 libcurl-gnutls.so.4

.include "../../security/gnutls/buildlink3.mk"
.include "../../mk/bsd.pkg.mk"
@


1.24
log
@*: Recursive revbump from security/nettle-4.0
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.23 2026/03/11 07:08:54 wiz Exp $
d3 1
a3 1
PKGREVISION= 1
@


1.23
log
@libcurl-gnutls: update to 8.19.0.

Match curl.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.22 2026/02/06 10:06:08 wiz Exp $
d3 1
@


1.22
log
@*: recursive bump for nettle 4.0 shlib major bump
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.21 2026/01/07 08:49:20 wiz Exp $
a2 1
PKGREVISION= 2
@


1.21
log
@*: recursive bump for icu 78.1
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.20 2025/11/05 09:59:30 wiz Exp $
d3 1
a3 1
PKGREVISION= 1
@


1.20
log
@libcurl-gnutls: update to 8.17.0

Disable gssapi option on NetBSD, it is no longer 'free' since heimdal
is not supported any longer.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.19 2025/10/24 04:01:11 riastradh Exp $
d3 1
@


1.19
log
@www/curl, www/libcurl-gnutls: Disable pthread_cancel.

This upstream change is broken on just about every platform because
getaddrinfo is not really cancel-safe, even though it's kinda sorta
supposed to be in POSIX
(https://pubs.opengroup.org/onlinepubs/9799919799/functions/V2_chap02.html#tag_16_09_05_02).

The mistake has been backed out upstream for the next release, but
that won't come until November and we need to pull up the fix now
because it's already biting users.

https://eissing.org/icing/posts/pthread_cancel/
https://eissing.org/icing/posts/rip_pthread_cancel/
https://github.com/curl/curl/issues/18532
https://github.com/curl/curl/pull/18540/files

PR pkg/59720: curl hangs or crashes with pthread_cancel enabled
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.18 2025/10/24 03:59:52 riastradh Exp $
a5 1
PKGREVISION=	2
@


1.18
log
@www/curl, www/libcurl-gnutls: Move PKGREVISION from Makefile.common.

pkglint complains, rightly: it wasn't necessary to revbump
www/libcurl-gnutls by putting PKGREVISION=1 in Makefile.common,
because www/libcurl-gnutls's build options didn't change; it was only
necessary to revbump www/curl because www/curl's build options did
change in a way that affects buildlink3.mk.

But since we already did the revbump, let's keep it.

No functional change intended: both packages retain the same
PKGREVISION, but pkglint is happier now.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.17 2025/05/28 09:43:53 wiz Exp $
d6 1
a6 1
PKGREVISION=	1
@


1.17
log
@*curl*: update to 8.14.0

This release includes the following changes:

 o mqtt: send ping at upkeep interval [49]
 o schannel: handle pkcs12 client certificates containing CA certificates [58]
 o TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs [113]
 o vquic: ngtcp2 + openssl support [96]
 o wcurl: import v2025.04.20 script + docs [97]
 o websocket: add option to disable auto-pong reply [52]

This release includes the following bugfixes:

 o _SEEALSO.md: remove spaces around command and man page section [166]
 o asny-thrdd: fix detach from running thread [191]
 o asnyc-thrdd: explain how this is okay with a comment [200]
 o asyn resolver code improvements [50]
 o async-threaded resolver: use ref counter [10]
 o async: DoH improvements [99]
 o autotools: detect `wolfSSL_set_quic_use_legacy_code` like cmake does [104]
 o autotools: install shell completion files on cross build [119]
 o aws-sigv4: allow a blank string [86]
 o build: check required rustls-ffi version [46]
 o build: enable gcc-12/13+, clang-10+ picky warnings [147]
 o build: enable gcc-15 picky warnings [133]
 o certs: drop unused `default_bits` from `.prm` files [45]
 o cf-https-connect: use the passed in dns struct pointer [64]
 o cf-socket: fix FTP accept connect [153]
 o cfilters: remove assert [120]
 o cmake/FindNGTCP2: simplify multi-pkg-config detection [27]
 o cmake: append picky warnings to `CMAKE_REQUIRED_FLAGS` as string [68]
 o cmake: avoid 'target is imported but not globally visible' when consuming libcurl with old cmake [125]
 o cmake: do not install `mk-ca-bundle` script and manpage [101]
 o cmake: enable `-Wall` for MSVC when `PICKY_COMPILER=ON` [100]
 o cmake: extend integration tests [139]
 o cmake: fix `fish` install directory detection via `pkg-config` [123]
 o cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON` [79]
 o cmake: fix option() and mark_as_advanced() mixed order [111]
 o cmake: fix shell completion install when just one flavor is enabled [73]
 o cmake: honor individual picky option overrides found in `CMAKE_C_FLAGS` [146]
 o cmake: install shell completions for cross-builds [112]
 o cmake: link `crypt32` for OpenSSL feature detection [105]
 o cmake: merge `CURL_WERROR` logic into `PickyWarnings.cmake` [66]
 o cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options [72]
 o cmake: quotes, whitespace, use `VERSION_GREATER_EQUAL` [33]
 o cmake: revert `CURL_LTO` behavior for multi-config generators [74]
 o cmake: set `BUILDING_LIBCURL` directly for unit test targets [174]
 o cmake: stop deleting `-W<n>` from `CMAKE_C_FLAGS` (MSVC) [155]
 o cmake: tidy up and document feature detections in dependencies [107]
 o cmake: use `CMAKE_COMPILE_WARNING_AS_ERROR` if available [154]
 o cmake: use `INCLUDE_DIRECTORIES` prop to specify local header dirs [47]
 o cmake: use `LIB_NAME` in `curl-config.cmake.in` [148]
 o cmake: use absolute paths for completion targets [40]
 o cmake: use the `LINK_OPTIONS` property with CMake 3.13+ [78]
 o configure: catch asking for double resolver without https-rr [82]
 o configure: fix --disable-rt [20]
 o configure: restore link checks [25]
 o configure: suppress command not found for brew [235]
 o conncache: make Curl_cpool_init return void [15]
 o connect: shutdown timer fix [132]
 o content_encoding: Transfer-Encoding parser improvements [31]
 o CONTRIBUTE: add project guidelines for AI use [76]
 o contrithanks.sh: drop set -e [6]
 o cpool/cshutdown: force close connections under pressure [80]
 o curl: fix memory leak when -h is used in config file [161]
 o curl: only warn once for --manual in manual-disabled build [205]
 o curl_get_line: handle lines ending on the buffer boundary [62]
 o curl_krb5: only use functions if FTP is still enabled [21]
 o curl_multibyte: fixup low-level calls, include in unity builds [55]
 o curl_osslq: remove a leftover debug fprintf() call [140]
 o curl_url_get.md: don't call it normalized [212]
 o curl_version_info.md: clarify ssl_version for MultiSSL [145]
 o CURLMOPT_TIMERFUNCTION.md: correct the example [162]
 o CURLOPT_ERRORBUFFER.md: buffer is read only after curl takes ownership [93]
 o CURLOPT_FOLLOWLOCATION.md: switch to GET => no body [208]
 o CURLOPT_READFUNCTION.md: mention the seek callback [209]
 o CURLOPT_XFERINFOFUNCTION.md: fix the callback return type in example [122]
 o curlx: move the docs to docs/internals/ [184]
 o DEPRECATE.md: drop support for VS2008 [214]
 o DEPRECATE.md: drop Windows CE support [216]
 o dist: drop duplicate entry from `CMAKE_DIST` [88]
 o dns_entry: move from conn to data->state [178]
 o Dockerfile: update debian:bookworm-slim Docker digest to 90522ee [211]
 o docs/INSTALL.md: drop reference to removed configure option [83]
 o docs/libcurl: fix type and prototype problems in examples [121]
 o docs/libcurl: make examples build with picky compiler options [84]
 o docs/libcurl: mention sensitive data/headers [206]
 o docs: add missing return statement in examples [85]
 o docs: fix incorrect shell substitution in docker run example command [51]
 o docs: fix typo in retry.md [192]
 o docs: update distros links
 o doh: httpsrr fix [71]
 o doh: make sure CURLOPT_PROTOCOLS is set a with a "long" arg [124]
 o doh: reduce the DNS request buffer size [70]
 o easy_reset: fix dohfor_mid member [63]
 o ECH: reference the OpenSSL ECH feature branch [186]
 o etag-save.md: mention how using both options is a good idea [108]
 o eventfd: fix feature guards [24]
 o formdata: cleanups [219]
 o ftp: fix bug in failed init [179]
 o ftp: fix race in upload handling [207]
 o ftplistparser: add two overflow preventions [173]
 o ftplistparser: split up into more functions [215]
 o generate.bat: exclude curlinfo.c from legacy VS projects [175]
 o genserv.pl: fail with a message if `openssl` is missing or failing [14]
 o headers: enforce a max number of response header to accept [163]
 o headers: set an error message on illegal response headers [181]
 o hostip: fix build without threaded-resolver and without DoH [17]
 o hostip: show the correct name on proxy resolve error [37]
 o http2: fix stream window size after unpausing [34]
 o HTTP3.md: fix incorrect variable placeholders [30]
 o http: fix a build error when all auths are disabled [16]
 o http: fix HTTP/2 handling of TE request header using "trailers" [130]
 o http: in alt-svc negotiation only allow supported HTTP versions [59]
 o http_aws_sigv4: add additional verbose log statements [39]
 o http_aws_sigv4: improve sigv4 url encoding and canonicalization [240]
 o http_chunks: narrow variable scope for 'trlen' [199]
 o http_negotiate: fix non-SSL build with GSSAPI [23]
 o https-connect: fix httpsrr target check [36]
 o HTTPSRR.md: clarify somewhat [137]
 o if2ip: build the function also if FTP is present [19]
 o imap: remove redundant condition [196]
 o INSTALL-CMAKE.md: fix typo
 o INSTALL.md: update the minimal libcurl size example
 o KNOWN_BUGS: fix link in sivg4 issue 16.3 [26]
 o lib/src/docs/test: improve curl_easy_setopt() calls [116]
 o lib1560: use hex notation, drop non-ASCII exception [182]
 o lib3026: drop DLL pre-load perf mitigation for old mingw [222]
 o lib: add const to clientwriter tables
 o lib: drop curlx_getpid, use fake pid in SMB [172]
 o lib: include files using known path [48]
 o lib: make Curl_easyopts const [44]
 o lib: unify conversions to/from hex [3]
 o libcurl-tutorial.md: fix read callback explanation [118]
 o libssh: add NULL check for Curl_meta_get() [201]
 o libssh: fix memory leak [168]
 o libssh: remove a condition that always equals false [202]
 o libtest/first: stop defining MEMDEBUG_NODEFINES [32]
 o libtests: define CURL_DISABLE_DEPRECATION first [177]
 o make: clean tests better [60]
 o mbedtls: TLS 1.3 is max when mbedtls has 1.3 support [109]
 o metahash: add asserts to help analyzers [171]
 o mk-ca-bundle.pl: follow redirects [53]
 o mk-ca-bundle: switch URLs to GitHub versions [195]
 o mkhelp: fix to not generate a line-ending space in some cases [103]
 o mqtt: use conn/easy meta hash [141]
 o multi: do transfer book keeping using mid [91]
 o multi: init_do(): check result [114]
 o netrc: avoid NULL deref on weird input [167]
 o netrc: avoid strdup NULL [198]
 o netrc: deal with null token better [150]
 o ngtcp2: clarify ignoring of result [131]
 o openssl-quic: avoid potential `-Wnull-dereference`, add assert [126]
 o openssl-quic: fix printf mask [102]
 o openssl-quic: fix shutdown when stream not open [11]
 o openssl: enable builds for *both* engines and providers [115]
 o openssl: set the cipher string before doing private cert [138]
 o parsedate: provide Curl_wkday also for GnuTLS builds [13]
 o processhelp.pm: always call `taskkill` with `-f` (force) [69]
 o processhelp.pm: avoid potential endless loop, log more (Windows) [5]
 o progress: avoid integer overflow when gathering total transfer size [128]
 o pytest tls: extend coverage [217]
 o pytest-xdist: pytest in parallel [204]
 o pytest: add pinnedpubkey test cases [232]
 o pytest: give parameterised tests better ids for read- and parsability [142]
 o pytest: make test_07_22 more lenient to exit codes [90]
 o quic: no local idle connection timeout, ngtcp2 keep-alive [61]
 o rand: update comment on Curl_rand_bytes weak random [35]
 o RELEASE-PROCEDURE.md: release candidate git tagging explained [143]
 o rtsp: remove redundant condition [197]
 o runtests: add retry option to reduce flakiness [106]
 o runtests: fix indentation
 o runtests: recognize lowercase `windows` in `curl -V` [77]
 o runtests: remove server verification after start [89]
 o runtests: split `SSH_PWD` into `SCP_PWD` and `SFTP_PWD`, and more [75]
 o rustls: make max size of cert and key reasonable [41]
 o sasl: give help when unable to select AUTH [213]
 o scripts: completion.pl: sort the completion file for all shells [9]
 o scripts: drop unused import, formatting [95]
 o scripts: fix --opts-dir help in completion.pl
 o scripts: fix perl indentation, whitespace, semicolons [127]
 o sectransp: fix building for macOS Sierra and older [151]
 o setopt: provide info for CURLE_BAD_FUNCTION_ARGUMENT [180]
 o smb: avoid integer overflow on weird input date [129]
 o socket: use accept4 when available [7]
 o socketpair: support pipe2 where available [56]
 o spacecheck.pl: check for non-ASCII chars, fix fallouts [187]
 o spacecheck.pl: verify `tests/data/test*` for non-ASCII chars [189]
 o src: drop strcase.[ch] from tool builds [157]
 o src: include memdebug.h consistently with angle brackets <> [160]
 o src: rename curlx_safefree to tool_safefree [164]
 o test1173.pl: whitelist some option-looking names that aren't options [203]
 o test1658: add unit test for the HTTPS RR decoder [28]
 o test: make unittest 1308 into a libtest [4]
 o tests/ech_tests.sh: sync shebang with rest of bash scripts [42]
 o tests/FILEFORMAT.md: clarify %hex[] formatting [188]
 o tests/FILEFORMAT.md: document the aws feature [156]
 o tests/README.md: document --test-duphandle [8]
 o tests/README.md: list the openssl tool among the prerequisites [12]
 o tests/server/dnsd: basic DNS server for test suite [92]
 o tests/server: check for `stream != NULL` in mqttd [194]
 o tests/server: fix typo in comment
 o tests/server: stop using libcurl string comparisons [185]
 o tests/server: stop using libcurl's printf functions [190]
 o tests/serverhelp: remove last remnants of http-pipe server [1]
 o tests/tunit: make a separate directory for tool-based unit tests [54]
 o tests: add aws feature to the related tests [159]
 o tests: Add https-mtls server to force client auth [57]
 o tests: fix some test tag mismatches
 o tests: mark ipfs tests to require ipfs [2]
 o tests: move a boolean variable out of the path section
 o tests: prefer `--insecure` over `-k` [43]
 o tests: provide all non-ascii data hex encoded [183]
 o tests: remove some unused test case sections
 o tests: require IPv6 for 1265, 1324, 2086 [87]
 o tests: separate tunit tests from unit tests more [176]
 o tests: stop using libcurl's strdup [170]
 o tests: unify test case keywords
 o tests: use a more portable null device path [38]
 o TODO: remove "nicer lacking perl message" [117]
 o tool_cb_write.c: handle EINTR on flush [65]
 o tool_getparam: clear argument only when needed [98]
 o tool_operate: make retrycheck() a separate function [218]
 o tool_operate: when retrying, only truncate regular files [165]
 o tool_paramhlp: avoid integer overflow in secs2ms() [152]
 o tool_parsecfg: make get_line handle lines ending on the buffer boundary [81]
 o typecheck-gcc.h: fix the typechecks [110]
 o urlapi: redirecting to "" is considered fine [149]
 o urlapi: remove unneeded guards around PUNY2IDN [193]
 o urldata: remove the unused struct field 'hide_progress' [220]
 o VERSIONS: list all past releases [22]
 o vquic: consistent name for the stream struct across backends [135]
 o vquic: init for every call to recvmsg [134]
 o vtls: avoid NULL deref on bad PEM input [169]
 o vtls: fix build with ssl but without http [18]
 o VULN-DISCLOSURE-POLICY: use of weak algos [94]
 o winbuild: add the deprecation warning to the README [29]
 o winbuild: curl_get_line is not used for tool builds [158]
 o windows: fix builds targeting WinXP, test it in CI [227]
 o wolfssl: fix to enable ALPN when available [67]
 o ws: fix the header replace check [144]
 o ws: store protocol context as connection meta data [136]
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.16 2025/04/19 07:58:32 wiz Exp $
d6 1
@


1.17.4.1
log
@Pullup ticket #7027 - requested by bsiegert
www/curl: Bug fix
www/libcurl-gnutls: Bug fix

Revisions pulled up:
- www/curl/Makefile                                             1.301
- www/curl/distinfo                                             1.220
- www/curl/patches/patch-lib_curl__threads.c                    1.1
- www/libcurl-gnutls/Makefile                                   1.19

---
   Module Name:	pkgsrc
   Committed By:	riastradh
   Date:		Fri Oct 24 04:01:11 UTC 2025

   Modified Files:
   	pkgsrc/www/curl: Makefile distinfo
   	pkgsrc/www/libcurl-gnutls: Makefile
   Added Files:
   	pkgsrc/www/curl/patches: patch-lib_curl__threads.c

   Log Message:
   www/curl, www/libcurl-gnutls: Disable pthread_cancel.

   This upstream change is broken on just about every platform because
   getaddrinfo is not really cancel-safe, even though it's kinda sorta
   supposed to be in POSIX
   (https://pubs.opengroup.org/onlinepubs/9799919799/functions/V2_chap02.html#tag_16_09_05_02).

   The mistake has been backed out upstream for the next release, but
   that won't come until November and we need to pull up the fix now
   because it's already biting users.

   https://eissing.org/icing/posts/pthread_cancel/
   https://eissing.org/icing/posts/rip_pthread_cancel/
   https://github.com/curl/curl/issues/18532
   https://github.com/curl/curl/pull/18540/files

   PR pkg/59720: curl hangs or crashes with pthread_cancel enabled
@
text
@d1 1
a1 1
# $NetBSD$
a5 1
PKGREVISION=	2
@


1.16
log
@*: recursive bump for default Kerberos implementation switch
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.15 2025/04/17 21:52:48 wiz Exp $
a2 1
PKGREVISION= 2
@


1.15
log
@*: recursive bump for icu 77 and libxml2 2.14
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.14 2024/12/11 09:28:46 wiz Exp $
d3 1
a3 1
PKGREVISION= 1
@


1.14
log
@libcurl-gnutls: reset PKGREVISION after upgrade
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.13 2024/11/14 22:22:06 wiz Exp $
d3 1
@


1.13
log
@*: recursive bump for icu 76 shlib major version bump
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.12 2024/11/06 08:19:26 wiz Exp $
a2 1
PKGREVISION= 1
@


1.12
log
@*curl*: update to 8.11.0

This release includes the following changes:

 o curl: --create-dirs works for --dump-header as well [4]
 o gtls: Add P12 format support [9]
 o ipfs: add options to disable [8]
 o TLS: TLSv1.3 earlydata support for curl [140]
 o WebSockets: make support official (non-experimental) [106]

This release includes the following bugfixes:

 o alt-svc: honor data->state.httpwant [19]
 o altsvc: avoid using local buffer and memcpy [124]
 o asyn-ares: remove typecast, fix expire [113]
 o autotools: add support for 'unity' builds, enable in CI [15]
 o bearssl: avoid strpcy() when generating TLS version log message [120]
 o bearssl: improved session handling, test exceptions [233]
 o bufq: unwrite fix [121]
 o build: add `ldap` to `libcurl.pc` `Requires:` [139]
 o build: add pytest targets [71]
 o build: clarify CA embed is for curl tool, mark default, improve summary [72]
 o build: detect and use `_setmode()` with Cygwin/MSYS, also use on Windows [136]
 o build: disable warning `-Wunreachable-code-break` [195]
 o build: fix clang-cl builds, add CI job [254]
 o build: fix cross-compile check for poll with bionic [70]
 o build: fix possible `-Wformat-overflow` in lib557 [85]
 o build: limit arc4random detection to no-SSL configs [43]
 o build: show if CA bundle to embed was found [83]
 o build: tidy up and improve versioned-symbols options [5]
 o build: tidy up deprecation suppression, enable warnings for clang [12]
 o certs: add missing `-CAcreateserial` option for LibreSSL [247]
 o checksrc: add check for spaces around logical AND operators [220]
 o checksrc: Added checks for colon operator in ternary expressions [77]
 o checksrc: check for spaces around '?', '>' and '<' [46]
 o ci: dump `curl_config.h` to log in all jobs [199]
 o CI: run with standard mod_http2 [214]
 o cmake, Makefile.mk: use -isystem for headers, silence BearSSL issues [37]
 o cmake/FindCares: fix version detection for c-ares 1.34.1 [209]
 o cmake/FindNGTCP2: use library path as hint for finding crypto module [40]
 o cmake: add missed variable to comment
 o cmake: add native `pkg-config` detection for mbedTLS, MSH3, Quiche, Rustls, wolfSSL [149]
 o cmake: allow building tests in unity mode [31]
 o cmake: apply `WIN32_LEAN_AND_MEAN` to all feature checks
 o cmake: avoid setting `BUILD_TESTING` [179]
 o cmake: clear package version after `pkg-config` detection [207]
 o cmake: delete unused NEED_LBER_H, HAVE_LDAP_H [38]
 o cmake: detect `HAVE_NETINET_IN6_H`, `HAVE_CLOSESOCKET_CAMEL`, `HAVE_PROTO_BSDSOCKET_H` [132]
 o cmake: detect GNU GSS [127]
 o cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled [44]
 o cmake: do not propagate unused `HAVE_GSSAPI_GSSAPI_KRB5_H` to C [131]
 o cmake: document `-D` and env build options [208]
 o cmake: drop obsolete items from `TODO` and `INSTALL-CMAKE` [228]
 o cmake: drop redundant assignments [49]
 o cmake: drop redundant zlib var, rename function (internals) [50]
 o cmake: expand CURL_USE_PKGCONFIG to non-cross MINGW [13]
 o cmake: fix broken dependency chain for cmdline-opts, tidy-ups [11]
 o cmake: fix compile warnings for clang-cl [218]
 o cmake: fix missing spacing in log message [205]
 o cmake: limit `CURL_STATIC_CRT` to MSVC [217]
 o cmake: make `test-ci` target skip building dependencies [88]
 o cmake: mark as advanced some internal Find* variables [212]
 o cmake: readd `generate-curl.1` dependency for `src` just in case [86]
 o cmake: rename LDAP dependency config variables to match Find modules [144]
 o cmake: replace `check_include_file_concat()` for LDAP and GSS detection [143]
 o cmake: replace `CURL_*_DIR` with `{PROJECT,CMAKE_CURRENT}_*_DIR` [211]
 o cmake: require quictls (or fork) when using msh3 on non-Windows [14]
 o cmake: separate target for examples, optimize CI, fix fallouts [16]
 o cmake: set version for `project()` and add CPack support [123]
 o cmake: stop adding dependency headers to global `CMAKE_REQUIRED_INCLUDES` [146]
 o cmake: sync torture test parallelism with autotools [35]
 o cmake: tidy up `CURL_DISABLE_FORM_API` initialization [225]
 o cmake: tidy up and shorten symbol hiding initialization [213]
 o cmake: tidy up line order
 o cmake: tidy up picky warning initialization [215]
 o cmake: tidy-ups and rebase fixups [191]
 o cmake: tweaks around debug mode and hidden symbols [194]
 o cmake: untangle feature detection interdependencies [198]
 o cmake: use `list(APPEND)` on `CURL_INCLUDES` [223]
 o cmake: use OpenSSL for LDAP detection only if available [102]
 o cmake: use the `BSD` variable [210]
 o config: rename the OS define to CURL_OS to reduce collision risk [256]
 o configure: add GSS to `libcurl.pc` `Depends:` [126]
 o configure: catch Apple in more target triplets [6]
 o configure: drop duplicate feature checks for `poll()`, `if_nametoindex()` [135]
 o configure: drop unused bare `socket.h` detection [133]
 o configure: improve help string for some options [78]
 o conncache: find bundle again in case it is removed [129]
 o conncache: more efficient implementation of cpool_remove_bundle [176]
 o cookie: overhaul and cleanup [142]
 o curl-rustls.m4: set linker flags to allow rustls build on macos [186]
 o curl.h: remove the struct pointer for CURL/CURLSH/CURLM typedefs [174]
 o curl: add build options for safe/no CA bundle search (Windows) [26]
 o curl: detect ECH support dynamically, not at build time [230]
 o curl_addrinfo: support operating systems with only getaddrinfo(3) [239]
 o curl_multi_perform.md: fix typo [224]
 o curl_trc: fix build with verbose messages disabled [79]
 o curl_url_set.md: document HOST handling when URL is parsed [2]
 o curl_ws_recv.md: the 'meta' pointer is only returned on success [221]
 o curl_ws_recv: return recv 0 and point meta to NULL on all errors [222]
 o CURLMOPT_PIPELINING.md: clarify that CURLPIPE_NOTHING is not default [54]
 o CURLOPT_APPEND.md: goes for SFTP as well [128]
 o CURLOPT_HEADERFUNCTION.md: do not modify the passed in buffer [107]
 o DISABLED: disable test 1060 with hyper [154]
 o DISTROS: avoid use of "very"
 o Dockerfile: update Docker digest to d830561 [226]
 o docs/cmdline-opts: GnuTLS supports PKCS#11 URI in --cert option [101]
 o docs: clarify FTP over HTTP proxy functionality somewhat [203]
 o docs: fix a typo in some cipher options
 o ech: spelling, whitespace, say `--ech` default config [137]
 o ftp: fix 0-length last write on upload from stdin [76]
 o ftp: move listen handling to socket filter [183]
 o GHA: optimize test prereq steps [188]
 o gnutls: use session cache for QUIC [196]
 o hsts: avoid the local buffer and memcpy on lookup [125]
 o hsts: improve subdomain handling [158]
 o hsts: support "implied LWS" properly around max-age [229]
 o http2: auto reset stream on server eos [147]
 o http_aws_sigv4: avoid local buffer and strcpy [92]
 o INSTALL-CMAKE.md: mention focus on shared libraries [73]
 o INSTALL-CMAKE: fix punctuation and a typo
 o INSTALL.md: fix a typo that slipped in to RISC OS
 o json.md: cli-option `--json` is an alias of `--data-binary` [89]
 o lib, src, tests: added space around ternary expressions [56]
 o lib/cw-out: initialize 'flush_all' directly [62]
 o lib/src: white space edits to comply better with code style [47]
 o lib: avoid assigning 'result' temporarily [97]
 o lib: fix disabled-verbose-strings + enable-debug build warnings
 o lib: fix unity builds with BearSSL, MSH3, Quiche, OmniOS [32]
 o lib: move curl_path.[ch] into vssh/ [182]
 o lib: msnprintf tidy-ups [245]
 o lib: remove Curl_ prefix from static functions [202]
 o lib: remove function pointer typecasts for hmac/sha256/md5 [175]
 o lib: use bool/TRUE/FALSE properly [48]
 o libcurl/opts: improve phrasing for connection cap related options [145]
 o libssh.c: handle EGAINS during proto-connect correctly [23]
 o libssh2: delete duplicate `break` [190]
 o libssh2: put the readdir buffers into struct [170]
 o libssh2: use the Curl_* memory functions to avoid memdebug [22]
 o libssh2: use the filename buffer when getting the homedir [169]
 o libtests: generate the lib1521 atomically [148]
 o mbedTLS: fix handling of TLSv1.3 sessions [184]
 o mbedtls: handle session as blobs [234]
 o mbedtls: remove failf() use from mbedtls_random [255]
 o mk-lib1521: fix the long return code check [204]
 o mprintf: do not ignore length modifiers of `%o`, `%x`, `%X` [164]
 o mprintf: treat `%o` as unsigned, add tests for `%o`, `%x`, `%X` [162]
 o mqtt: fix mqtt.md wording and add clearer explanation [172]
 o multi.c: make stronger check for paused transfer before asserting [24]
 o multi.c: warn/assert on stall only without timer [80]
 o multi: avoid reading whole struct pointer from pointer [10]
 o multi: convert Curl_follow to static multi_follow [141]
 o multi: make curl_multi_cleanup invalidate magic latter [159]
 o multi: make multi_handle_timeout use the connect timeout [98]
 o multi: split multi_runsingle into sub functions [200]
 o negotiate: conditional check around GSS & SSL specific code [1]
 o netrc: cache the netrc file in memory [138]
 o ngtcp2: do not loop on recv [251]
 o ngtcp2: set max window size to 10x of initial (128KB) [232]
 o openssl quic: populate x509 store before handshake [117]
 o openssl: convert a memcpy to dynbuf use [57]
 o openssl: extend the OpenSSL error messages [238]
 o openssl: improve retries on shutdown [151]
 o openssl: remove two strcpy() calls [64]
 o OS400: don't delete source files when building with debug [235]
 o packages/OS400/curlmain: remove the strncpy calls [155]
 o processhelp.pm: improve taskkill calls (Windows) [52]
 o pytest: fix run against multissl curl [236]
 o pytest: improve pytest_07_42a reliability [118]
 o pytest: include `buildinfo.txt` in the output [189]
 o pytest: include curl version string and python platform in log [242]
 o pytest: show curl features and protocols [150]
 o quic: use send/recvmmsg when available [93]
 o quic: use the session cache with wolfSSL as well [231]
 o request: on shutdown send, proceed normally on timeout [18]
 o runtests.md: suggest a value for -j for torture tests
 o runtests: add comment for handle64 pathsep requirement
 o runtests: drop unused code for old/classic-mingw support [87]
 o runtests: pass single backslashes with Windows Perl [243]
 o runtests: use deterministic sort for `TESTINFO` lines [201]
 o schannel: fix TLS cert verification by IP SAN [253]
 o schannel: ignore error on recv beyond close notify [167]
 o schannel: reclassify extra-verbose schannel_recv messages [153]
 o select: use poll() if existing, avoid poll() with no sockets [75]
 o sendf: add condition to max-filesize check [3]
 o server/mqttd: fix two memory leaks [178]
 o setopt: avoid superfluous length checks before strcmp() [105]
 o setopt: return error for bad input to CURLOPT_RTSP_REQUEST [240]
 o setopt_cptr: make overflow check only done when needed [241]
 o singleuse: make `git grep` faster, add Apple `nm` support [109]
 o smb: do not redefine `getpid` on Windows [187]
 o smb: replace use of strcpy() with snprintf() [122]
 o socks_gssapi: switch to dynbuf from buffer with strcpy [42]
 o source: avoid use of 'very' in comments
 o src/lib: remove redundant ternary operators [244]
 o src: guard for double declaration of `curl_ca_embed` in unity builds [166]
 o sws: fix unused static function with `TCP_NODELAY` undefined [134]
 o telnet: avoid two strcpy() by pointing to the strings instead [99]
 o test1035: convert host name back to utf8 as should be [63]
 o test1515: add tracing and more debug info [119]
 o test1540: add debug logging [58]
 o test190: replace %FTPTIME2 with a fixed value [34]
 o test1915: add tracing and connect timeout [114]
 o test1915: remove wrong comment
 o test2502: add libtest debug tracing [60]
 o test504: fix handling on pending connect [59]
 o testrun: explicitly set proper IP address for stunnel listen/connect [61]
 o tests/http: fix ubuntu GnuTLS CI failures [161]
 o tests/scorecard: allow remote server test [171]
 o tests/server/util.c: remove use of strncpy [156]
 o tests/valgrind.pm: fix warnings with no valgrind report to show [25]
 o tests/valgrind.supp: remove a travis suppression, add a Debian [116]
 o tests: add and use `%PERL` variable to refer to the Perl binary [82]
 o tests: add codeset-utf8 as a feature [66]
 o tests: add file: tests with existing files [45]
 o tests: allow pytests to run in out-of-tree builds [192]
 o tests: capture stdin to get the vsftpd version number [165]
 o tests: change Python code style to pass ruff checks
 o tests: check http/2 and http/3 server responsiveness [28]
 o tests: delete duplicate macro check [53]
 o tests: enable additional ruff Python lint options
 o tests: fix `%POSIX_PWD` on native Windows Perl [111]
 o tests: fix callback signatures to please UndefinedBehaviorSanitizer [173]
 o tests: Fix FILEFORMAT <file name=""> directive [206]
 o tests: fix keyword for test1411
 o tests: fix shell quoting on native Windows Perl [110]
 o tests: fix some Python typing issues
 o tests: fixup `checkcmd` `PATH` on non-unixy platforms [108]
 o tests: improve mqtt server handling [27]
 o tests: introduce %CLIENT6IP-NB [67]
 o tests: let openssl generate random cert serials [91]
 o tests: libtests and unit tests need explicit #include memdebug [7]
 o tests: make precheck for HTTP on 127.0.0.1 into a feature [68]
 o tests: Only log warnings or worse by default in smbserver [33]
 o tests: postcheck is now in verify [69]
 o tests: remove all valgrind disable instructions [21]
 o tests: remove debug requirement on 38 tests [100]
 o tests: remove the %FTPTIME3 variable [41]
 o tests: replace `%PWD` with `%FILE_PWD` for `file://` [84]
 o tests: replace `%PWD` with `%SSH_PWD` in SCP/SFTP tests [112]
 o tests: replace hard-coded `/dev/null` with variable [81]
 o tests: simplify `pathhelp.pm`, avoid using external tools [95]
 o tests: speed up builds with single-binary test bundles [29]
 o tests: testrunner fairness [39]
 o tests: testrunner reliability improvements [55]
 o tests: use '-4' where needed [17]
 o tests: use a set for several of the curl_props [249]
 o tftp: avoid two memcpy/strcpy [94]
 o tidy-up: rename CURL_WINDOWS_APP to CURL_WINDOWS_UWP [36]
 o tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED [246]
 o tool: support --show-headers AND --remote-header-name [103]
 o tool_doswin: simplify; remove unused options and strncpy calls [65]
 o tool_getparam: drop unused time() call [177]
 o tool_getparam: replace two uses of strncpy(), ban strncpy [157]
 o tool_operate: make --skip-existing work for --parallel [180]
 o tool_operate: reuse the schannel backend check [130]
 o tool_xattr: create the user.creator xattr attribute [197]
 o unit1307: tidy up Apple OS detection [252]
 o unit1660: fix unreachable code warning in no-SSL builds [30]
 o url: connection reuse on h3 connections [20]
 o url: use same credentials on redirect [181]
 o urlapi: drop unused header [51]
 o urlapi: normalize the IPv6 address [115]
 o version: minor cleanups [152]
 o version: say quictls in MSH3 builds [219]
 o vquic: fix compiler warning with gcc + MUSL [168]
 o vquic: recv_mmsg, use fewer, but larger buffers [250]
 o vtls: convert Curl_pin_peer_pubkey to use dynbuf [74]
 o vtls: convert pubkey_pem_to_der to use dynbuf [90]
 o warnless: remove curlx_sktosi and curlx_sitosk [104]
 o winbuild/README: consolidate command prompt section [193]
 o winbuild/README: document how to clean a build [163]
 o winbuild: add initial wolfSSL support [227]
 o winbuild: drop `gen_resp_file.bat` [248]
 o wolfssl: convert malloc + memcpys to dynbuf for cipher string [96]
 o wolfSSL: fix handling of TLSv1.3 sessions [185]
 o wolfssl: no more use of the OpenSSL API [216]
 o wolfssl: use old version API without openssl extra [160]
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.11 2024/11/01 12:54:51 wiz Exp $
d3 1
@


1.11
log
@*: revbump for icu downgrade
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.10 2024/11/01 00:54:05 wiz Exp $
a2 1
PKGREVISION= 2
@


1.10
log
@*: recursive bump for icu 76.1 shlib bump
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.9 2024/07/24 07:28:25 wiz Exp $
d3 1
a3 1
PKGREVISION= 1
@


1.9
log
@libcurl-gnutls: update to 8.9.0.

See www/curl.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.8 2024/05/29 16:34:51 adam Exp $
d3 1
@


1.8
log
@revbump after icu and protobuf updates
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.7 2024/05/23 04:15:35 adam Exp $
a2 1
PKGREVISION= 1
@


1.7
log
@curl libcurl-gnutls: updated to 8.8.0

8.8.0

Changes:

curl_version_info: provide librtmp version
file: add support for directory listings
idn: add native AppleIDN (icucore) support for macOS/iOS
lib: add curl_multi_waitfds
mbedTLS: implement CURLOPT_SSL_CIPHER_LIST option
NTLM_WB: drop support
TLS: add support for ECH (Encrypted Client Hello)
urlapi: add CURLU_GET_EMPTY for empty queries and fragments

Bugfixes:

appveyor: drop unnecessary `--clean-first` cmake option
appveyor: guard against crash-build with VS2008
appveyor: make gcc 6 mingw64 job build-only
asyn-thread: fix curl_global_cleanup crash in Windows
asyn-thread: fix Curl_thread_create result check
autotools: delete unused functions
autotools: fix `HAVE_IOCTLSOCKET_FIONBIO` test for gcc 14
autotools: only probe for SGI MIPS compilers on IRIX
bearssl: fix compiler warnings
bearssl: use common code for cipher suite lookup
bufq: remove duplicate word in comment
BUG-BOUNTY.md: clarify the third party situation
build: prefer `USE_IPV6` macro internally (was: `ENABLE_IPV6`)
build: remove MacOSX-Framework script
cd2nroff/manage: use UTC when SOURCE_DATE_EPOCH is set
cf-https-connect: use timeouts as unsigned ints
cf-socket: don't try getting local IP without socket
cf-socket: remove references to l_ip, l_port
ci: add curl-for-win builds: Linux MUSL, macOS, Windows
cmake: add `BUILD_EXAMPLES` option to build examples
cmake: add librtmp/rtmpdump option and detection
cmake: check fseeko after detecting HAVE_FILE_OFFSET_BITS
cmake: do not pass linker flags to the static library tool
cmake: enable `-pedantic-errors` for clang when `CURL_WERROR=ON`
cmake: FindNGHTTP2 add static lib name to find_library call
cmake: fix `CURL_WERROR=ON` for old CMake and use it in GHA/linux-old
cmake: fix `HAVE_IOCTLSOCKET_FIONBIO` test with gcc 14
cmake: fixup `DEPENDS` filename
cmake: forward `USE_LIBRTMP` option to C
cmake: generate misc manpages and install `mk-ca-bundle.pl`
cmake: initialize `BUILD_TESTING` before first use
cmake: speed up libcurl doc building again
cmake: tidy-up to use `WORKING_DIRECTORY`
cmake: use namespaced custom target names
cmdline-docs: fix make install with configure --disable-docs
configure: error on missing perl if docs or manual is enabled
configure: make --disable-docs imply --disable-manual
content_encoding: brotli and others, pass through 0-length writes
content_encoding: ignore duplicate chunked encoding
content_encoding: reject transfer-encoding after chunked
contrithanks: honor `CURLWWW` variable
curl-confopts.m4: define CARES_NO_DEPRECATED when c-ares is used
curl.h: change CURL_SSLVERSION_* from enum to defines
curl: make --help adapt to the terminal width
curl: use curl_getenv instead of the curlx_ version
Curl_creader_read: init two variables to avoid using them uninited
curl_easy_pause.md: use correct defines in example
curl_getdate.md: document two-digit year handling
curl_global_trace.md: shorten the description
curl_multibyte: remove access() function wrapper for Windows
curl_path: make Curl_get_pathname use dynbuf
curl_setup.h: add support for IAR compiler
curl_setup.h: detect 'inline' support
curl_sha512_256: do not use workaround for NetBSD when not needed
curl_sha512_256: fix detection of OpenSSL 1.1.1 or later
curl_url_get.md: clarify queries and fragments and CURLU_GET_EMPTY
CURLINFO_REQUEST_SIZE: fixed, add tests for transfer infos reported
CURLOPT_WRITEFUNCTION.md: fix the callback proto in the example
cw-out: improved error handling
DEPRECATE.md: TLS libraries without 1.3 support
digest: replace strcpy for empty string with simple assignment
dist: `set -eu`, fix shellcheck, make reproducible and smaller tarballs
dist: add files missing from release tarball
dist: add reproducible dir entries to tarballs
dist: do not require Perl in `maketgz`
dist: remove the curl-config.1 from the tarball
dist: verify tarball reproducibility in CI
DISTROS: add patch and issues link for curl-for-win
DISTROS: Cygwin updates
dllmain: Call OpenSSL thread cleanup for Windows and Cygwin
doc: pytest `--repeat` -> `--count`
docs/cmdline-opts: invoke managen using a relative path
docs/cmdline-opts: mention STARTTLS for --ssl and --ssl-reqd
docs: add CURLOPT_NOPROGRESS to CURLOPT_XFERINFOFUNCTION example
docs: clarify CURLOPT_MAXFILESIZE and CURLOPT_MAXFILESIZE_LARGE
docs: fix some CURLINFO examples
doh: fix typo in comment
doh: remove unused function prototype
dynbuf: fix returncode on memory error
examples: fix/silence `-Wsign-conversion`
EXPERIMENTAL: add graduation requirements for each feature
file: remove useless assignment
ftp: add tracing support
ftp: fix build for CURL_DISABLE_VERBOSE_STRINGS
ftp: fix socket leak on rare error
GHA: add NetBSD, OpenBSD, FreeBSD/arm64 and OmniOS jobs
GHA: add shellcheck job and fix warnings, shell tidy-ups
GHA: add valgrind to a wolfSSL build
GHA: on macOS remove $HOME/.curlrc
GHA: pin dependencies
gnutls: lazy init the trust settings
h3/ngtcp2: improve error handling
hash: change 'slots' to size_t from int
hash: delete unused debug function
hsts: explicitly skip blank lines
hsts: remove single-use single-line function
http tests: in CI skip test_02_23* for quiche
http2 + ngtcp2: pass CURLcode errors from callbacks
http2, http3: decouple stream state from easy handle
http2: emit RST when client write fails
http3: quiche+ngtcp2 improvements
http: acknowledge a returned error code
http: HEAD response body tolerance
http: reject HTTP major version switch mid connection
http: remove redundant check
http: with chunked POST forced, disable length check on read callback
http_aws_sigv4: remove useless assignment
idn: make Curl_idnconvert_hostname() use Curl_idn_decode()
if2ip: make the buf_size arg a size_t
INSTALL-CMAKE.md: explain `cmake -G <generator-name>`
krb5: use dynbuf
ldap: fix unused variables (seen on OmniOS)
lib/cf-h1-proxy: silence compiler warnings (gcc 14)
lib: add trace support for client reads and writes
lib: bump hash sizes to `size_t`
lib: clear the easy handle's saved errno before transfer
lib: fix compiler warnings (gcc)
lib: make protocol handlers store scheme name lowercase
lib: merge `ENABLE_QUIC` C macro into `USE_HTTP3`
lib: remove two instances of "only only" messages
lib: silence `-Wsign-conversion` in base64, strcase, mprintf
lib: silence warnings on comma misuse
lib: use `#error` instead of invalid syntax in `curl_setup_once.h`
lib: use multi instead of multi_easy for the active multi
libcurl-opts: mention pipelining less
libssh2: delete redundant feature guard
libssh2: replace `access()` with `stat()`
libssh2: set length to 0 if strdup failed
m4: fix rustls pkg-config codepath
MAIL-ETIQUETTE: convert to markdown
makefile: remove the sorting from the vc-ide action
maketgz: put docs/RELEASE-TOOL.md into the tarball
managen: fix the option sort order
mbedtls: call mbedtls_ssl_setup() after RNG callback is set
mbedtls: cut off trailing newlines from debug logs
mbedtls: fix building with v3 in CMake Unity mode
mbedtls: support TLS 1.3
mime: avoid using access()
misc: fix typos
misc: fix typos, quoting and spelling
mprintf: check fputc error rather than matching returned character
mqtt: when Curl_xfer_recv returns error, don't use nread
multi: avoid memory-leak risk
multi: introduce SETUP state for better timeouts
multi: multi_wait improvements
multi: remove the unused Curl_preconnect function
multi: remove useless assignment
multi: timeout handles even without connection
openldap: create ldap URLs correctly for IPv6 addresses
openssl: do not set SSL_MODE_RELEASE_BUFFERS
openssl: revert keylog_callback support for LibreSSL
OS400: fix shellcheck warnings in scripts
projects: drop MSVC project files for recent versions
pytest: add DELETE tests, check server version
pytest: fixes for recent python, add FTP tests
quic: fixup duplicate static function name (for cmake unity)
quiche: expire all active transfers on connection close
quiche: trust its timeout handling
RELEASE-PROCEDURE: mention an initial working build
request: make Curl_req_init return void
request: paused upload on completed download, assess connection
reuse: add copyright + license info to individual docs/*.md files
ROADMAP: remove completed entries, mention websocket
rustls: fix handshake done handling
rustls: fix partial send handling
rustls: remove incorrect SSLSUPP_TLS13_CIPHERSUITES flag
rustsls: fix error code on receive
sendf: fix two typos in comments
sendf: useless assignment in cr_lc_read()
setopt: acknowledge errors proper for CURLOPT_COOKIEJAR
setopt: make the setstropt_userpwd args compulsory
setopt: remove check for 'option' that is always true
setopt: warn on Curl_set*opt() uses not using the return value
smtp: result of Curl_bufq_cread was not used
socket: remove redundant call to getsockname
socketpair: fix compilation when USE_UNIX_SOCKETS is not defined
src: tidy up types, add necessary casts
telnet: check return code from fileno()
tests/http: fix compiler warning
tests: add -q as first option when invoking curl for tests
tests: check caddy server version to match test expectations
tests: enable test 1117 for hyper
tests: fix feature case in test1481
tests: fix test 1167 to skip digit-only symbols
tests: make the unit test result type `CURLcode`
tests: Mark tftpd timer function as noreturn
tests: tidy up types in server code
tls: fix SecureTransport + BearSSL cmake unity builds
tls: remove EXAMPLEs from deprecated options
tls: use shared init code for TCP+QUIC
tool: move tool_ftruncate64 to tool_util.c
tool_cb_rea: limit rate unpause for -T . uploads
tool_cfgable: free {proxy_}cipher13_list on exit
tool_getparam: output warning for leading unicode quote character
tool_getparam: remove two redundant conditions
tool_operate: don't truncate the etag save file by default
tool_operate: init vars unconditionally in post_per_transfer
tool_paramhlp: remove duplicate assign
tool_xattr: "guess" URL scheme if none is provided
tool_xattr: in debug builds, act normally if CURL_FAKE_XATTR is not set
transfer: remove useless assignment
url: do not URL decode proxy crendentials
url: fix use of an uninitialized variable
url: make parse_login_details use memdup0
url: remove duplicate call to Curl_conncache_remove_conn when pruning
urlapi: allow setting port number zero
urlapi: fix relative redirects to fragment-only
urldata: remove fields not used depending on used features
vauth: make two functions void that always just returned OK
version: use msnprintf instead of strncpy
vquic-tls: use correct cert name check API for wolfSSL
vquic: use CURL_FORMAT_CURL_OFF_T for 64 bit printf output
vtls: TLS session storage overhaul
wakeup_create: use FD_CLOEXEC/SOCK_CLOEXEC
warnless: delete orphan declarations
websocket: avoid memory leak in error path
winbuild: add ENABLE_WEBSOCKETS option
winbuild: use $(RC) correctly
wolfssl: plug memory leak in wolfssl_connect_step2()
x509asn1: return error on missing OID
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.6 2024/05/16 06:15:41 wiz Exp $
d3 1
@


1.6
log
@*: recursive bump for gnutls p11-kit option

(existing installations need the bl3.mk included, but it's now only
optionally included)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.5 2023/12/07 07:50:55 wiz Exp $
a2 1
PKGREVISION= 1
@


1.5
log
@curl: update to 8.5.0

Security fix release.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.4 2023/11/08 13:21:19 wiz Exp $
d3 1
@


1.4
log
@*: recursive bump for icu 74.1
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.3 2023/10/24 22:11:28 wiz Exp $
a2 1
PKGREVISION= 2
@


1.3
log
@*: bump for openssl 3
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.2 2023/05/31 20:19:46 nikita Exp $
d3 1
a3 1
PKGREVISION= 1
@


1.2
log
@libcurl-gnutls: update to version 8.1.2, use Makefile fragment
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.1 2023/05/31 18:37:52 nikita Exp $
d3 1
@


1.1
log
@import libcurl-gnutls as www/libcurl-gnutls version 8.1.1
@
text
@d1 3
a3 1
# $NetBSD: Makefile,v 1.271 2023/05/25 10:00:19 adam Exp $
a4 1
DISTNAME=	curl-8.1.1
a5 11
CATEGORIES=	www
MASTER_SITES=	https://curl.se/download/
EXTRACT_SUFX=	.tar.xz

MAINTAINER=	pkgsrc-users@@NetBSD.org
HOMEPAGE=	https://curl.se/
COMMENT=	Client that groks URLs (build against gnuTLS)
# not completely, but near enough
LICENSE=	mit

BUILD_DEFS+=	IPV6_READY
a6 1
TEST_DEPENDS+=	${PYPKGPREFIX}-impacket-[0-9]*:../../net/py-impacket
a8 5
PYTHON_VERSIONS_INCOMPATIBLE=	27 # py-impacket

USE_TOOLS+=		nroff perl
USE_LIBTOOL=		yes
GNU_CONFIGURE=		yes
a9 17
# Some systems use bundles instead of directories; this needs configuring
# because curl doesn't use default validation.
.if !empty(SSLCERTBUNDLE)
CONFIGURE_ARGS+=	--with-ca-bundle=${SSLCERTBUNDLE}
.else
CONFIGURE_ARGS+=	--with-ca-path=${SSLCERTS}
.endif
CONFIGURE_ARGS+=	--with-zlib=${BUILDLINK_PREFIX.zlib}
CONFIGURE_ARGS+=	--without-libpsl
PKGCONFIG_OVERRIDE=	libcurl.pc.in
TEST_TARGET=		check

SUBST_CLASSES+=		python
SUBST_STAGE.python=	pre-configure
SUBST_MESSAGE.python=	Adjust hard-coded python invocations
SUBST_FILES.python=	tests/data/test1451
SUBST_SED.python=	-e 's,python,${PYTHONBIN},g'
d11 1
a11 2
REPLACE_PERL+=		tests/*.pl tests/*/*.pl
REPLACE_PYTHON+=	tests/*.py
d13 1
a13 3
PYTHON_FOR_BUILD_ONLY=	test

INSTALLATION_DIRS+=	lib
a24 5
.include "options.mk"

.include "../../devel/gettext-lib/buildlink3.mk"
.include "../../devel/zlib/buildlink3.mk"
.include "../../lang/python/application.mk"
a25 1
.include "../../mk/pthread.buildlink3.mk"
@