source: networking/netlibs/curl.xml@ 0516cd2

11.3 12.0 12.1 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts lazarus lxqt plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition trunk xry111/llvm18 xry111/xf86-video-removal
Last change on this file since 0516cd2 was 0516cd2, checked in by Douglas R. Reno <renodr@…>, 16 months ago

Update to curl-7.87.0 (Security Update)

  • Property mode set to 100644
File size: 18.3 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY curl-download-http "https://curl.se/download/curl-&curl-version;.tar.xz">
8 <!ENTITY curl-download-ftp " ">
9 <!ENTITY curl-md5sum "0b0f5de173afd303229e5272689578d7">
10 <!ENTITY curl-size "2.4 MB">
11 <!ENTITY curl-buildsize "140 MB (add 23 MB for tests)">
12 <!ENTITY curl-time "0.2 SBU (with parallelism=4; add 16 SBU for tests)">
13]>
14
15<sect1 id="curl" xreflabel="cURL-&curl-version;">
16 <?dbhtml filename="curl.html"?>
17
18
19 <title>cURL-&curl-version;</title>
20
21 <indexterm zone="curl">
22 <primary sortas="a-cURL">cURL</primary>
23 </indexterm>
24
25 <sect2 role="package">
26 <title>Introduction to cURL</title>
27
28 <para>
29 The <application>cURL</application> package contains an utility
30 and a library used for transferring files with URL syntax to any of
31 the following protocols: DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP,
32 HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTSP, SMB, SMBS,
33 SMTP, SMPTS, TELNET, and TFTP. Its ability to both download
34 and upload files can be incorporated into other programs to support
35 functions like streaming media.
36 </para>
37
38 &lfs112_checked;
39
40 <bridgehead renderas="sect3">Package Information</bridgehead>
41 <itemizedlist spacing="compact">
42 <listitem>
43 <para>
44 Download (HTTP): <ulink url="&curl-download-http;"/>
45 </para>
46 </listitem>
47 <listitem>
48 <para>
49 Download (FTP): <ulink url="&curl-download-ftp;"/>
50 </para>
51 </listitem>
52 <listitem>
53 <para>
54 Download MD5 sum: &curl-md5sum;
55 </para>
56 </listitem>
57 <listitem>
58 <para>
59 Download size: &curl-size;
60 </para>
61 </listitem>
62 <listitem>
63 <para>
64 Estimated disk space required: &curl-buildsize;
65 </para>
66 </listitem>
67 <listitem>
68 <para>
69 Estimated build time: &curl-time;
70 </para>
71 </listitem>
72 </itemizedlist>
73<!--
74 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
75 <itemizedlist spacing="compact">
76 <listitem>
77 <para>
78 Required patch:
79 <ulink url="&patch-root;/curl-&curl-version;-function_naming-1.patch"/>
80 </para>
81 </listitem>
82 </itemizedlist>
83-->
84
85 <bridgehead renderas="sect3">cURL Dependencies</bridgehead>
86
87 <bridgehead renderas="sect4">Recommended</bridgehead>
88 <para role="recommended">
89 <xref role="runtime" linkend="make-ca"/> (runtime)
90 </para>
91
92 <bridgehead renderas="sect4">Optional</bridgehead>
93 <para role="optional">
94 <xref linkend="brotli"/>,
95 <xref linkend="c-ares"/>,
96 <xref linkend="gnutls"/>,
97 <xref linkend="libidn2"/>,
98 <xref linkend="libpsl"/>,
99 <xref linkend="libssh2"/>,
100 <xref linkend="mitkrb"/>,
101 <xref linkend="nghttp2"/>,
102 <xref linkend="openldap"/>,
103 <xref linkend="samba"/>,
104 <ulink url="https://www.gnu.org/software/gsasl/">gsasl</ulink>,
105 <ulink url="https://www.secureauth.com/labs/open-source-tools/impacket/">impacket</ulink>,
106 <ulink url="https://launchpad.net/libmetalink/">libmetalink</ulink>,
107 <ulink url="https://rtmpdump.mplayerhq.hu/">librtmp</ulink>,
108 <ulink url="https://github.com/ngtcp2/ngtcp2/">ngtcp2</ulink>,
109 <!--<ulink url="https://tls.mbed.org/">mbed TLS</ulink> (formerly known as
110 PolarSSL), and -->
111 <!-- mbedTLS/PolarSSL support was removed in 7.65.1 -->
112 <ulink url="https://github.com/cloudflare/quiche">quiche</ulink>, and
113 <ulink url="http://spnego.sourceforge.net/">SPNEGO</ulink>
114 </para>
115
116 <bridgehead renderas="sect4">Optional if Running the Test Suite</bridgehead>
117 <para role="optional">
118 <!-- stunnel is still listed in the docs as required, but 7.58.0
119 tests completed happily without it, although the test for unit1323
120 reported that the tool set in the test case does not exist - ken -->
121 <xref linkend="stunnel"/> (for the HTTPS and FTPS tests) and
122 <xref linkend="valgrind"/> (this will slow the tests down and may cause failures.)
123 </para>
124
125 <para condition="html" role="usernotes">User Notes:
126 <ulink url="&blfs-wiki;/curl"/>
127 </para>
128 </sect2>
129
130 <sect2 role="installation">
131 <title>Installation of cURL</title>
132
133 <para>
134 Install <application>cURL</application> by running the following
135 commands:
136 </para>
137
138<screen><userinput>./configure --prefix=/usr \
139 --disable-static \
140 --with-openssl \
141 --enable-threaded-resolver \
142 --with-ca-path=/etc/ssl/certs &amp;&amp;
143make</userinput></screen>
144
145<!--
146 For version 7.54.1 I got:
147 TESTDONE: 869 tests out of 869 reported OK: 100%
148 TESTDONE: 1092 tests were considered during 1080 seconds
149
150 <para>
151 Running the test suite is optional. About 2% of the tests fail. Increase
152 in test time by each failed test is about 10%. Tests SBU above was
153 obtained disabling failing tests, with:
154 </para>
155
156 2017-10-29 - bdubbs
157 For version 7.56.1 I had a lot of test failures which included long
158 timeouts. Could not determine the cause of the timeouts or failures,
159 but I was missing c-ares, MIT Kerberos, ldap, samba, and the six
160 external packages.
161
162 2017-12-01 - bdubbs
163 Still a lot of test failures. I did have c-ares, Kerberos, and ldap
164 installed this time. Best guess is that servers are not available.
165
166 2018-08-01 - renodr
167 No test failures, but I didn't have any of the optional dependencies except
168 for c-ares and libidn2. I might re-run this test suite before release with
169 all of the optional deps, but right now, it isn't a priority - rather
170 the security fix is.
171-->
172
173 <para>
174 To run the test suite, issue: <command>make test</command>.
175 <!--Four tests, 1139, 1140, 1173, and 1177, are known to fail due to
176 missing executables from the optional dependencies.-->
177 If Samba is installed, the related tests will output a message
178 duplicated many times complaining the Python module impacket (not a
179 part of BLFS) is missing and be skipped.<!-- If libssh2 is installed
180 and the optional <option>- -enable-ssh2</option> is used, test 1459
181 will fail.-->
182 </para>
183<!-- Two (of 857) tests
184fail for unknown reasons, and all tests fail is valgrind is installed. Moving
185valgrind out of $PATH is recommended if you wish to run the test suite while
186it is installed.
187
188Added by Pierre for curl-7.59.0:
189no stunnel, no valgrind, no options
190Warning: smb server unexpectedly alive
191Warning: dict server unexpectedly alive
192TESTDONE: 950 tests out of 951 reported OK: 99%
193TESTFAIL: These test cases failed: 1148
194TESTDONE: 1189 tests were considered during 362 seconds.
195__________
196
197 if stunnel and valgrind are not installed, and also most options
198 (I had rtmpdump), the tests complete without problems.
199Warning: smb server unexpectedly alive
200Warning: dict server unexpectedly alive
201TESTDONE: 938 tests out of 938 reported OK: 100%
202TESTDONE: 1175 tests were considered during 355 seconds.
203 and no. I don't have smb - so commenting the rest of this:
204 To run the test suite, issue: <command>make test</command>. Many tests
205 may fail that depend on optional dependencies that may not be installed
206 or upstream servers that may not be available, especially for tests
207 numbered 700 and above.
208 Test time may be significantly increase due to hanging tests that fail.
209__________
210Added by Bruce for curl-7.60.0:
211TESTDONE: 957 tests out of 959 reported OK: 99%
212TESTFAIL: These test cases failed: 1139 1140
213TESTDONE: 1196 tests were considered during 1184 seconds.
214From the logs, both appear to be ipv6 releated.
215
216==========
217Added by Douglas for curl-7.61.0:
218TESTDONE: 961 tests out of 961 reported OK: 100%
219TESTDONE: 1202 tests were considered during 338 seconds.
220I only have c-ares and libidn2 installed, I will likely try before release
221with all optional dependencies in the book installed.
222
223=========
2247.61.1 NOTE: The test suite is extremely noisy, complaining about verification errors.
225It's possible this is due to openssl-1.1.1, BUT 79/79 tests report as 100% OK. I had
226c-ares, libpsl, and libidn1/2 installed. - Doug
227
228========
2297.62.0: All tests passed. libpsl, c-ares, libssh2, libidn2 installed.
230All 1098 tests report OK.
231
232=======
233Added by Douglas for curl-7.64.0:
234TESTDONE: 1022 tests out of 1023 reported OK: 99%
235TESTFAIL: These tests cases failed: 323
236TESTDONE: 1235 tests were considered during 1279 seconds.
237For dependencies, I had c-ares, gnutls, libidn2, libpsl, krb5, libssh2, nghttp2,
238OpenLDAP, Samba, stunnel, and Valgrind installed.
239=======
240Added by bdubbs for curl-7.64.1:
241TESTDONE: 1022 tests out of 1025 reported OK: 99%
242TESTFAIL: These test cases failed: 323 1139 1140
243TESTDONE: 1242 tests were considered during 1483 seconds
244
245=======
246Added by renodr for curl-7.65.1:
247TESTDONE: 996 tests out of 997 reported OK: 99%
248TESTFAIL: These test cases failed: 1560
249TESTDONE: 1249 tests were considered during 1091 seconds.
250All dependencies except for externals installed.
251=======
252Added by bdubbs for curl-7.65.2:
253TESTDONE: 1034 tests out of 1036 reported OK: 99%
254TESTFAIL: These test cases failed: 323 1560
255TESTDONE: 1254 tests were considered during 1362 seconds.
256Time above does not include test build time.
257All dependencies except for externals installed.
258=======
259Added by bdubbs for curl-7.65.3:
260TESTDONE: 1031 tests out of 1036 reported OK: 99%
261TESTFAIL: These test cases failed: 323 1139 1140 1173 1560
262TESTDONE: 1254 tests were considered during 1364 seconds.
263
264The tests that fail seem to be somewhat random. What happened between
265yesterday and today that that tests 1139 1140 1173 now fail?
266
267=======
268Added by bdubbs for curl-7.68.0:
269TESTDONE: 1066 tests out of 1071 reported OK: 99%
270TESTFAIL: These test cases failed: 323 1139 1140 1173 1560
271TESTDONE: 1290 tests were considered during 1515 seconds.
272
273=======
274Added by bdubbs for curl-7.69.0:
275TESTDONE: 074 tests out of 1079 reported OK: 99%
276TESTFAIL: These test cases failed: 323 1139 1140 1173 1560
277TESTDONE: 1320 tests were considered during 1514 seconds.
278
279For curl-7.69.1, 1082 tests out of 1086 reported OK. 1560 now passes.
2801330 tests were considered during 1528 seconds.
281
282======
283Added by renodr for curl-7.70.0:
284TESTDONE: 1062 tests out of 1062 reported OK: 100%
285TESTDONE: 1352 tests were considered during 1218 seconds.
286Tests were ran with all dependencies present except for stunnel.
287impacket only seems to add one extra test to the mix as well.
288
289======
290Added by renodr for curl-7.71.0:
291TESTDONE: 1072 tests out of 1072 reported OK: 100%
292TESTDONE: 1364 tests were considered during 1202 seconds.
293Tests were run similarly to 7.70.0 - all deps except for stunnel.
294
295======
296Added by renodr for curl-7.71.1:
297TESTDONE: 1076 tests out of 1076 reported OK: 100%
298TESTDONE: 1368 tests were considered during 1207 seconds.
299Tests were run similarly to 7.71.0, including impacket, but no stunnel.
300
301======
302Added by renodr for curl-7.72.0:
303TESTDONE: 1094 tests out of 1097 reported OK: 99%
304TESTFAIL: These test cases failed: 1700 1701 1702
305TESTDONE: 1374 tests were considered during 1285 seconds.
306Tests have all BLFS dependencies with the exception of stunnel;
307and the optional impacket python module was installed.
308Tests seem to be failing due to a missing 'nghttpx' executable
309used to start a test server.
310
311======
312Added by renodr for curl-7.73.0:
313TESTDONE: 1121 tests out of 1121 reported OK: 100%
314TESTDONE: 1387 tests were considered during 1303 seconds.
315Tests have all BLFS dependencies installed with the exception of stunnel,
316as well as the optional impacket installed.
317
318======
319Added by renodr for curl-7.74.0:
320TESTDONE: 1119 tests out of 1119 reported OK: 100%
321TESTDONE: 1388 tests were considered during 1370 seconds.
322Tests have all BLFS dependencies installed, as well as impacket.
323stunnel not installed.
324
325======
326Added by bdubbs for curl-7.79.0:
327TESTDONE: 1432 tests were considered during 1543 seconds.
328TESTDONE: 1208 tests out of 1212 reported OK: 99%
329
330Tests have all BLFS dependencies installed but without impacket.
331
332======
333Added by plabs for curl-7.79.1:
334TESTDONE: 1434 tests were considered during 1652 seconds.
335TESTDONE: 1171 tests out of 1171 reported OK: 100%
336Tests have all BLFS dependencies installed except stunnel but without impacket.
337====
338bdubbs curl-7.83.0 2022-04-28
339TESTDONE: 1497 tests were considered during 1666 seconds.
340TESTDONE: 1252 tests out of 1256 reported OK: 99%
341TESTFAIL: These test cases failed: 1139 1140 1173 1177
342====
343Added by xry111 for curl-7.85.0 on 2022-09-01:
344With:
345 all BLFS dependencies but stunnel installed
346 libssh2-2.10.0 patched with libssh2-1.10.0-upstream_fix-1.patch
347 with-{gssapi,libssh2} enable-threaded-resolver
348TESTDONE: 1520 tests were considered during 508 seconds.
349TESTDONE: 1327 tests out of 1328 reported OK: 99%
350TESTFAIL: These test cases failed: 1459
351 It is a SCP test for bad .known_hosts file and fails because of a mismatch
352 of error codes, I don't think it indicated a serious issue.
353[renodr] - Test results for 7.85.0 (2022-09-03), no libssh2 enabled or gssapi
354TESTDONE: 1528 tests were considered during 2041 seconds.
355TESTDONE: 1326 tests out of 1326 reported OK: 100%
356
357[renodr] - Test results for 7.87.0 (2022-12-30)
358TESTDONE: 1559 tests were considered during 2112 seconds.
359TESTDONE: 1342 tests out of 1342 reported OK: 100%
360libssh2 installed and enabled
361-->
362
363 <para>
364 Now, as the <systemitem class="username">root</systemitem>
365 user:
366 </para>
367
368<screen role="root"><userinput>make install &amp;&amp;
369
370rm -rf docs/examples/.deps &amp;&amp;
371
372find docs \( -name Makefile\* -o -name \*.1 -o -name \*.3 \) -exec rm {} \; &amp;&amp;
373
374install -v -d -m755 /usr/share/doc/curl-&curl-version; &amp;&amp;
375cp -v -R docs/* /usr/share/doc/curl-&curl-version;</userinput></screen>
376
377 <para>
378 Simple tests to the new installed <command>curl</command>:
379 <command>curl --trace-ascii debugdump.txt https://www.example.com/</command>
380 and
381 <command>curl --trace-ascii d.txt --trace-time https://example.com/</command>.
382 Inspect the locally created trace files <filename>debugdump.txt</filename>
383 and <filename>d.txt</filename>, which contain version downloaded
384 files information, etc. One file has the time for each action logged.
385 </para>
386 </sect2>
387
388 <sect2 role="commands">
389 <title>Command Explanations</title>
390
391 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
392 href="../../xincludes/static-libraries.xml"/>
393
394 <para>
395 <parameter>--enable-threaded-resolver</parameter>: This switch enables
396 <application>cURL</application>'s builtin threaded DNS resolver.
397 </para>
398
399 <para>
400 <parameter>--with-ca-path=/etc/ssl/certs</parameter>: This
401 switch sets the location of the BLFS Certificate Authority store.
402 </para>
403
404 <para>
405 <parameter>--with-openssl</parameter>: This parameter chooses
406 <application>OpenSSL</application> as SSL/TLS implementation.
407 This seems mandatory now.
408 </para>
409
410 <para>
411 <option>--with-gssapi</option>: This parameter adds
412 <application>Kerberos 5</application> support to
413 <filename class="libraryfile">libcurl</filename>.
414 </para>
415
416 <para>
417 <option>--without-ssl --with-gnutls</option>: Use to
418 build with <application>GnuTLS</application> support
419 instead of <application>OpenSSL</application> for SSL/TLS.
420 </para>
421
422 <para>
423 <option>--with-ca-bundle=/etc/pki/tls/certs/ca-bundle.crt</option>: Use
424 this switch instead of <parameter>--with-ca-path</parameter> if
425 building with <application>GnuTLS</application> support
426 instead of <application>OpenSSL</application> for SSL/TLS.
427 </para>
428
429 <para>
430 <option>--with-libssh2</option>: This parameter adds
431 <application>SSH</application> support to cURL. This is disabled
432 by default.
433 </para>
434
435 <para>
436 <option>--enable-ares</option>: This parameter adds
437 support for DNS resolution through the c-ares library. It overrides
438 <parameter>--enable-threaded-resolver</parameter> and is not widely
439 tested by the editors.
440 </para>
441
442 <para>
443 <command>find docs ... -exec rm {} \;</command>: This command removes
444 <filename>Makefiles</filename> and man files from the documentation
445 directory that would otherwise be installed by the commands that follow.
446 </para>
447
448 </sect2>
449
450 <sect2 role="content">
451 <title>Contents</title>
452
453 <segmentedlist>
454 <segtitle>Installed Programs</segtitle>
455 <segtitle>Installed Library</segtitle>
456 <segtitle>Installed Directories</segtitle>
457
458 <seglistitem>
459 <seg>
460 curl and curl-config
461 </seg>
462 <seg>
463 libcurl.so
464 </seg>
465 <seg>
466 /usr/include/curl and
467 /usr/share/doc/curl-&curl-version;
468 </seg>
469 </seglistitem>
470 </segmentedlist>
471
472 <variablelist>
473 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
474 <?dbfo list-presentation="list"?>
475 <?dbhtml list-presentation="table"?>
476
477 <varlistentry id="curl-prog">
478 <term><command>curl</command></term>
479 <listitem>
480 <para>
481 is a command line tool for transferring files with URL syntax
482 </para>
483 <indexterm zone="curl curl-prog">
484 <primary sortas="b-curl">curl</primary>
485 </indexterm>
486 </listitem>
487 </varlistentry>
488
489 <varlistentry id="curl-config">
490 <term><command>curl-config</command></term>
491 <listitem>
492 <para>
493 prints information about the last compile, like libraries
494 linked to and prefix setting
495 </para>
496 <indexterm zone="curl curl-config">
497 <primary sortas="b-curl-config">curl-config</primary>
498 </indexterm>
499 </listitem>
500 </varlistentry>
501
502 <varlistentry id="libcurl">
503 <term><filename class="libraryfile">libcurl.so</filename></term>
504 <listitem>
505 <para>
506 provides the API functions required by
507 <command>curl</command> and other programs
508 </para>
509 <indexterm zone="curl libcurl">
510 <primary sortas="c-libcurl">libcurl.so</primary>
511 </indexterm>
512 </listitem>
513 </varlistentry>
514
515 </variablelist>
516
517 </sect2>
518
519</sect1>
Note: See TracBrowser for help on using the repository browser.