source: networking/netlibs/curl.xml@ 1f0e7ec

12.0 12.1 kea ken/TL2024 ken/tuningfonts lazarus lxqt plabs/newcss python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition trunk xry111/llvm18 xry111/xf86-video-removal
Last change on this file since 1f0e7ec was 1f0e7ec, checked in by Douglas R. Reno <renodr@…>, 13 months ago

Update to curl-8.0.1 (Security Update)

  • Property mode set to 100644
File size: 19.2 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY curl-download-http "https://curl.se/download/curl-&curl-version;.tar.xz">
8 <!ENTITY curl-download-ftp " ">
9 <!ENTITY curl-md5sum "f6c2fdeb30ad30234378a56c28350845">
10 <!ENTITY curl-size "2.5 MB">
11 <!ENTITY curl-buildsize "45 MB (add 19 MB for tests)">
12 <!ENTITY curl-time "0.3 SBU (with parallelism=4; add 16 SBU for tests (without valgrind, add 35 SBU with valgrind)">
13]>
14
15<sect1 id="curl" xreflabel="cURL-&curl-version;">
16 <?dbhtml filename="curl.html"?>
17
18
19 <title>cURL-&curl-version;</title>
20
21 <indexterm zone="curl">
22 <primary sortas="a-cURL">cURL</primary>
23 </indexterm>
24
25 <sect2 role="package">
26 <title>Introduction to cURL</title>
27
28 <para>
29 The <application>cURL</application> package contains an utility
30 and a library used for transferring files with URL syntax to any of
31 the following protocols: DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP,
32 HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTSP, SMB, SMBS,
33 SMTP, SMPTS, TELNET, and TFTP. Its ability to both download
34 and upload files can be incorporated into other programs to support
35 functions like streaming media.
36 </para>
37
38 &lfs113_checked;
39
40 <bridgehead renderas="sect3">Package Information</bridgehead>
41 <itemizedlist spacing="compact">
42 <listitem>
43 <para>
44 Download (HTTP): <ulink url="&curl-download-http;"/>
45 </para>
46 </listitem>
47 <listitem>
48 <para>
49 Download (FTP): <ulink url="&curl-download-ftp;"/>
50 </para>
51 </listitem>
52 <listitem>
53 <para>
54 Download MD5 sum: &curl-md5sum;
55 </para>
56 </listitem>
57 <listitem>
58 <para>
59 Download size: &curl-size;
60 </para>
61 </listitem>
62 <listitem>
63 <para>
64 Estimated disk space required: &curl-buildsize;
65 </para>
66 </listitem>
67 <listitem>
68 <para>
69 Estimated build time: &curl-time;
70 </para>
71 </listitem>
72 </itemizedlist>
73<!--
74 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
75 <itemizedlist spacing="compact">
76 <listitem>
77 <para>
78 Required patch:
79 <ulink url="&patch-root;/curl-&curl-version;-function_naming-1.patch"/>
80 </para>
81 </listitem>
82 </itemizedlist>
83-->
84
85 <bridgehead renderas="sect3">cURL Dependencies</bridgehead>
86
87 <bridgehead renderas="sect4">Recommended</bridgehead>
88 <para role="recommended">
89 <xref role="runtime" linkend="make-ca"/> (runtime)
90 </para>
91
92 <bridgehead renderas="sect4">Optional</bridgehead>
93 <para role="optional">
94 <xref linkend="brotli"/>,
95 <xref linkend="c-ares"/>,
96 <xref linkend="gnutls"/>,
97 <xref linkend="libidn2"/>,
98 <xref linkend="libpsl"/>,
99 <xref linkend="libssh2"/>,
100 <xref linkend="mitkrb"/>,
101 <xref linkend="nghttp2"/>,
102 <xref linkend="openldap"/>,
103 <!-- cURL implements the SMB client with own code. Samba is only
104 used for /usr/bin/ntlm_auth helper. The path is correctly
105 guessed even if Samba is not installed, so "runtime". -->
106 <xref role='runtime' linkend="samba"/>
107 (runtime, for NTLM authentication),
108 <ulink url="https://www.gnu.org/software/gsasl/">gsasl</ulink>,
109 <ulink url="https://www.secureauth.com/labs/open-source-tools/impacket/">impacket</ulink>,
110 <ulink url="https://launchpad.net/libmetalink/">libmetalink</ulink>,
111 <ulink url="https://rtmpdump.mplayerhq.hu/">librtmp</ulink>,
112 <ulink url="https://github.com/ngtcp2/ngtcp2/">ngtcp2</ulink>,
113 <!--<ulink url="https://tls.mbed.org/">mbed TLS</ulink> (formerly known as
114 PolarSSL), and -->
115 <!-- mbedTLS/PolarSSL support was removed in 7.65.1 -->
116 <ulink url="https://github.com/cloudflare/quiche">quiche</ulink>, and
117 <ulink url="https://spnego.sourceforge.net/">SPNEGO</ulink>
118 </para>
119
120 <bridgehead renderas="sect4">Optional if Running the Test Suite</bridgehead>
121 <para role="optional">
122 <!-- stunnel is still listed in the docs as required, but 7.58.0
123 tests completed happily without it, although the test for unit1323
124 reported that the tool set in the test case does not exist - ken -->
125 <xref linkend="httpd"/> and
126 <xref linkend="stunnel"/> (for the HTTPS and FTPS tests), and
127 <xref linkend="valgrind"/> (this will slow the tests down and may cause failures.)
128 </para>
129
130 <para condition="html" role="usernotes">User Notes:
131 <ulink url="&blfs-wiki;/curl"/>
132 </para>
133 </sect2>
134
135 <sect2 role="installation">
136 <title>Installation of cURL</title>
137
138 <para>
139 Install <application>cURL</application> by running the following
140 commands:
141 </para>
142
143<screen><userinput>./configure --prefix=/usr \
144 --disable-static \
145 --with-openssl \
146 --enable-threaded-resolver \
147 --with-ca-path=/etc/ssl/certs &amp;&amp;
148make</userinput></screen>
149
150<!--
151 For version 7.54.1 I got:
152 TESTDONE: 869 tests out of 869 reported OK: 100%
153 TESTDONE: 1092 tests were considered during 1080 seconds
154
155 <para>
156 Running the test suite is optional. About 2% of the tests fail. Increase
157 in test time by each failed test is about 10%. Tests SBU above was
158 obtained disabling failing tests, with:
159 </para>
160
161 2017-10-29 - bdubbs
162 For version 7.56.1 I had a lot of test failures which included long
163 timeouts. Could not determine the cause of the timeouts or failures,
164 but I was missing c-ares, MIT Kerberos, ldap, samba, and the six
165 external packages.
166
167 2017-12-01 - bdubbs
168 Still a lot of test failures. I did have c-ares, Kerberos, and ldap
169 installed this time. Best guess is that servers are not available.
170
171 2018-08-01 - renodr
172 No test failures, but I didn't have any of the optional dependencies except
173 for c-ares and libidn2. I might re-run this test suite before release with
174 all of the optional deps, but right now, it isn't a priority - rather
175 the security fix is.
176-->
177
178 <para>
179 To run the test suite, issue: <command>make test</command>.
180 <!--Four tests, 1139, 1140, 1173, and 1177, are known to fail due to
181 missing executables from the optional dependencies.-->
182 The tests related to the SMB protocol will output a message
183 duplicated many times complaining the Python module impacket (not a
184 part of BLFS) is missing and be skipped.<!-- If libssh2 is installed
185 and the optional <option>- -enable-ssh2</option> is used, test 1459
186 will fail.-->
187 </para>
188<!-- Two (of 857) tests
189fail for unknown reasons, and all tests fail is valgrind is installed. Moving
190valgrind out of $PATH is recommended if you wish to run the test suite while
191it is installed.
192
193Added by Pierre for curl-7.59.0:
194no stunnel, no valgrind, no options
195Warning: smb server unexpectedly alive
196Warning: dict server unexpectedly alive
197TESTDONE: 950 tests out of 951 reported OK: 99%
198TESTFAIL: These test cases failed: 1148
199TESTDONE: 1189 tests were considered during 362 seconds.
200__________
201
202 if stunnel and valgrind are not installed, and also most options
203 (I had rtmpdump), the tests complete without problems.
204Warning: smb server unexpectedly alive
205Warning: dict server unexpectedly alive
206TESTDONE: 938 tests out of 938 reported OK: 100%
207TESTDONE: 1175 tests were considered during 355 seconds.
208 and no. I don't have smb - so commenting the rest of this:
209 To run the test suite, issue: <command>make test</command>. Many tests
210 may fail that depend on optional dependencies that may not be installed
211 or upstream servers that may not be available, especially for tests
212 numbered 700 and above.
213 Test time may be significantly increase due to hanging tests that fail.
214__________
215Added by Bruce for curl-7.60.0:
216TESTDONE: 957 tests out of 959 reported OK: 99%
217TESTFAIL: These test cases failed: 1139 1140
218TESTDONE: 1196 tests were considered during 1184 seconds.
219From the logs, both appear to be ipv6 releated.
220
221==========
222Added by Douglas for curl-7.61.0:
223TESTDONE: 961 tests out of 961 reported OK: 100%
224TESTDONE: 1202 tests were considered during 338 seconds.
225I only have c-ares and libidn2 installed, I will likely try before release
226with all optional dependencies in the book installed.
227
228=========
2297.61.1 NOTE: The test suite is extremely noisy, complaining about verification errors.
230It's possible this is due to openssl-1.1.1, BUT 79/79 tests report as 100% OK. I had
231c-ares, libpsl, and libidn1/2 installed. - Doug
232
233========
2347.62.0: All tests passed. libpsl, c-ares, libssh2, libidn2 installed.
235All 1098 tests report OK.
236
237=======
238Added by Douglas for curl-7.64.0:
239TESTDONE: 1022 tests out of 1023 reported OK: 99%
240TESTFAIL: These tests cases failed: 323
241TESTDONE: 1235 tests were considered during 1279 seconds.
242For dependencies, I had c-ares, gnutls, libidn2, libpsl, krb5, libssh2, nghttp2,
243OpenLDAP, Samba, stunnel, and Valgrind installed.
244=======
245Added by bdubbs for curl-7.64.1:
246TESTDONE: 1022 tests out of 1025 reported OK: 99%
247TESTFAIL: These test cases failed: 323 1139 1140
248TESTDONE: 1242 tests were considered during 1483 seconds
249
250=======
251Added by renodr for curl-7.65.1:
252TESTDONE: 996 tests out of 997 reported OK: 99%
253TESTFAIL: These test cases failed: 1560
254TESTDONE: 1249 tests were considered during 1091 seconds.
255All dependencies except for externals installed.
256=======
257Added by bdubbs for curl-7.65.2:
258TESTDONE: 1034 tests out of 1036 reported OK: 99%
259TESTFAIL: These test cases failed: 323 1560
260TESTDONE: 1254 tests were considered during 1362 seconds.
261Time above does not include test build time.
262All dependencies except for externals installed.
263=======
264Added by bdubbs for curl-7.65.3:
265TESTDONE: 1031 tests out of 1036 reported OK: 99%
266TESTFAIL: These test cases failed: 323 1139 1140 1173 1560
267TESTDONE: 1254 tests were considered during 1364 seconds.
268
269The tests that fail seem to be somewhat random. What happened between
270yesterday and today that that tests 1139 1140 1173 now fail?
271
272=======
273Added by bdubbs for curl-7.68.0:
274TESTDONE: 1066 tests out of 1071 reported OK: 99%
275TESTFAIL: These test cases failed: 323 1139 1140 1173 1560
276TESTDONE: 1290 tests were considered during 1515 seconds.
277
278=======
279Added by bdubbs for curl-7.69.0:
280TESTDONE: 074 tests out of 1079 reported OK: 99%
281TESTFAIL: These test cases failed: 323 1139 1140 1173 1560
282TESTDONE: 1320 tests were considered during 1514 seconds.
283
284For curl-7.69.1, 1082 tests out of 1086 reported OK. 1560 now passes.
2851330 tests were considered during 1528 seconds.
286
287======
288Added by renodr for curl-7.70.0:
289TESTDONE: 1062 tests out of 1062 reported OK: 100%
290TESTDONE: 1352 tests were considered during 1218 seconds.
291Tests were ran with all dependencies present except for stunnel.
292impacket only seems to add one extra test to the mix as well.
293
294======
295Added by renodr for curl-7.71.0:
296TESTDONE: 1072 tests out of 1072 reported OK: 100%
297TESTDONE: 1364 tests were considered during 1202 seconds.
298Tests were run similarly to 7.70.0 - all deps except for stunnel.
299
300======
301Added by renodr for curl-7.71.1:
302TESTDONE: 1076 tests out of 1076 reported OK: 100%
303TESTDONE: 1368 tests were considered during 1207 seconds.
304Tests were run similarly to 7.71.0, including impacket, but no stunnel.
305
306======
307Added by renodr for curl-7.72.0:
308TESTDONE: 1094 tests out of 1097 reported OK: 99%
309TESTFAIL: These test cases failed: 1700 1701 1702
310TESTDONE: 1374 tests were considered during 1285 seconds.
311Tests have all BLFS dependencies with the exception of stunnel;
312and the optional impacket python module was installed.
313Tests seem to be failing due to a missing 'nghttpx' executable
314used to start a test server.
315
316======
317Added by renodr for curl-7.73.0:
318TESTDONE: 1121 tests out of 1121 reported OK: 100%
319TESTDONE: 1387 tests were considered during 1303 seconds.
320Tests have all BLFS dependencies installed with the exception of stunnel,
321as well as the optional impacket installed.
322
323======
324Added by renodr for curl-7.74.0:
325TESTDONE: 1119 tests out of 1119 reported OK: 100%
326TESTDONE: 1388 tests were considered during 1370 seconds.
327Tests have all BLFS dependencies installed, as well as impacket.
328stunnel not installed.
329
330======
331Added by bdubbs for curl-7.79.0:
332TESTDONE: 1432 tests were considered during 1543 seconds.
333TESTDONE: 1208 tests out of 1212 reported OK: 99%
334
335Tests have all BLFS dependencies installed but without impacket.
336
337======
338Added by plabs for curl-7.79.1:
339TESTDONE: 1434 tests were considered during 1652 seconds.
340TESTDONE: 1171 tests out of 1171 reported OK: 100%
341Tests have all BLFS dependencies installed except stunnel but without impacket.
342====
343bdubbs curl-7.83.0 2022-04-28
344TESTDONE: 1497 tests were considered during 1666 seconds.
345TESTDONE: 1252 tests out of 1256 reported OK: 99%
346TESTFAIL: These test cases failed: 1139 1140 1173 1177
347====
348Added by xry111 for curl-7.85.0 on 2022-09-01:
349With:
350 all BLFS dependencies but stunnel installed
351 libssh2-2.10.0 patched with libssh2-1.10.0-upstream_fix-1.patch
352 with-{gssapi,libssh2} enable-threaded-resolver
353TESTDONE: 1520 tests were considered during 508 seconds.
354TESTDONE: 1327 tests out of 1328 reported OK: 99%
355TESTFAIL: These test cases failed: 1459
356 It is a SCP test for bad .known_hosts file and fails because of a mismatch
357 of error codes, I don't think it indicated a serious issue.
358[renodr] - Test results for 7.85.0 (2022-09-03), no libssh2 enabled or gssapi
359TESTDONE: 1528 tests were considered during 2041 seconds.
360TESTDONE: 1326 tests out of 1326 reported OK: 100%
361
362[renodr] - Test results for 7.87.0 (2022-12-30)
363TESTDONE: 1559 tests were considered during 2112 seconds.
364TESTDONE: 1342 tests out of 1342 reported OK: 100%
365libssh2 installed and enabled
366
367[renodr] - Test results for 8.0.1 (2023-03-27)
368TESTDONE: 1593 tests were considered during 4761 seconds.
369TESTDONE: 1356 tests out of 1356 reported OK: 100%
370All BLFS dependencies installed.
371Note that if I move /usr/bin/valgrind to a place where it can't be found, I get
372TESTDONE: 1593 tests were considered during 595 seconds.
373TESTDONE: 1356 tests out of 1356 reported OK: 100%
374It appears that every test is now run under valgrind.
375-->
376
377 <para>
378 Now, as the <systemitem class="username">root</systemitem>
379 user:
380 </para>
381
382<screen role="root"><userinput>make install &amp;&amp;
383
384rm -rf docs/examples/.deps &amp;&amp;
385
386find docs \( -name Makefile\* -o -name \*.1 -o -name \*.3 \) -exec rm {} \; &amp;&amp;
387
388install -v -d -m755 /usr/share/doc/curl-&curl-version; &amp;&amp;
389cp -v -R docs/* /usr/share/doc/curl-&curl-version;</userinput></screen>
390
391 <para>
392 To run some simple verification tests on the newly installed
393 <command>curl</command>, issue the following commands:
394 <command>curl --trace-ascii debugdump.txt https://www.example.com/</command>
395 and
396 <command>curl --trace-ascii d.txt --trace-time https://example.com/</command>.
397 Inspect the locally created trace files <filename>debugdump.txt</filename>
398 and <filename>d.txt</filename>, which contains version information,
399 downloaded files information, etc. One file has the time for each action logged.
400 </para>
401 </sect2>
402
403 <sect2 role="commands">
404 <title>Command Explanations</title>
405
406 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
407 href="../../xincludes/static-libraries.xml"/>
408
409 <para>
410 <parameter>--enable-threaded-resolver</parameter>: This switch enables
411 <application>cURL</application>'s builtin threaded DNS resolver.
412 </para>
413
414 <para>
415 <parameter>--with-ca-path=/etc/ssl/certs</parameter>: This
416 switch sets the location of the BLFS Certificate Authority store.
417 </para>
418
419 <para>
420 <parameter>--with-openssl</parameter>: This parameter chooses
421 <application>OpenSSL</application> as SSL/TLS implementation.
422 This seems mandatory now.
423 </para>
424
425 <para>
426 <option>--with-gssapi</option>: This parameter adds
427 <application>Kerberos 5</application> support to
428 <filename class="libraryfile">libcurl</filename>.
429 </para>
430
431 <para>
432 <option>--without-ssl --with-gnutls</option>: Use to
433 build with <application>GnuTLS</application> support
434 instead of <application>OpenSSL</application> for SSL/TLS.
435 </para>
436
437 <para>
438 <option>--with-ca-bundle=/etc/pki/tls/certs/ca-bundle.crt</option>: Use
439 this switch instead of <parameter>--with-ca-path</parameter> if
440 building with <application>GnuTLS</application> support
441 instead of <application>OpenSSL</application> for SSL/TLS.
442 </para>
443
444 <para>
445 <option>--with-libssh2</option>: This parameter adds
446 <application>SSH</application> support to cURL. This is disabled
447 by default.
448 </para>
449
450 <para>
451 <option>--enable-ares</option>: This parameter adds
452 support for DNS resolution through the c-ares library. It overrides
453 <parameter>--enable-threaded-resolver</parameter> and is not widely
454 tested by the editors.
455 </para>
456
457 <para>
458 <command>find docs ... -exec rm {} \;</command>: This command removes
459 <filename>Makefiles</filename> and man files from the documentation
460 directory that would otherwise be installed by the commands that follow.
461 </para>
462
463 </sect2>
464
465 <sect2 role="content">
466 <title>Contents</title>
467
468 <segmentedlist>
469 <segtitle>Installed Programs</segtitle>
470 <segtitle>Installed Library</segtitle>
471 <segtitle>Installed Directories</segtitle>
472
473 <seglistitem>
474 <seg>
475 curl and curl-config
476 </seg>
477 <seg>
478 libcurl.so
479 </seg>
480 <seg>
481 /usr/include/curl and
482 /usr/share/doc/curl-&curl-version;
483 </seg>
484 </seglistitem>
485 </segmentedlist>
486
487 <variablelist>
488 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
489 <?dbfo list-presentation="list"?>
490 <?dbhtml list-presentation="table"?>
491
492 <varlistentry id="curl-prog">
493 <term><command>curl</command></term>
494 <listitem>
495 <para>
496 is a command line tool for transferring files with URL syntax
497 </para>
498 <indexterm zone="curl curl-prog">
499 <primary sortas="b-curl">curl</primary>
500 </indexterm>
501 </listitem>
502 </varlistentry>
503
504 <varlistentry id="curl-config">
505 <term><command>curl-config</command></term>
506 <listitem>
507 <para>
508 prints information about the last compile, like libraries
509 linked to and prefix setting
510 </para>
511 <indexterm zone="curl curl-config">
512 <primary sortas="b-curl-config">curl-config</primary>
513 </indexterm>
514 </listitem>
515 </varlistentry>
516
517 <varlistentry id="libcurl">
518 <term><filename class="libraryfile">libcurl.so</filename></term>
519 <listitem>
520 <para>
521 provides the API functions required by
522 <command>curl</command> and other programs
523 </para>
524 <indexterm zone="curl libcurl">
525 <primary sortas="c-libcurl">libcurl.so</primary>
526 </indexterm>
527 </listitem>
528 </varlistentry>
529
530 </variablelist>
531
532 </sect2>
533
534</sect1>
Note: See TracBrowser for help on using the repository browser.