https-client: load certificates from the system cert store on Windows

(cherry picked from commit 572a565130d40172e1f2b5ac83d0cdffd502105b)

https-client: correction error checking

When connecting to a non-existent HTTPS service, the "req" is not null
but the "evhttp_request_get_response_code(req)" is zero.

Closes: #822 (cherry-picked)

https-client: correction error checking

When connecting to a non-existent HTTPS service, the "req" is not null
but the "evhttp_request_get_response_code(req)" is zero.

Closes: #822 (cherry-picked)
(cherry picked from commit 891dd1880fed8c5e1e98f122daeb1ae8414f6b1c)

show more ...

https-client: do not try to free not initialized base

Otherwise:
$ https-client --help
Syntax:
https-client -url <https-url> [-data data-file.bin] [-ignore-cert] [-retries num] [-timeout se

https-client: do not try to free not initialized base

Otherwise:
$ https-client --help
Syntax:
https-client -url <https-url> [-data data-file.bin] [-ignore-cert] [-retries num] [-timeout sec] [-crt crt]
Example:
https-client -url https://ip.appspot.com/
[warn] event_base_free_: no base to free
(cherry picked from commit 428f36e5dd8f2a45ea5795fb9f35dd27a776e3a8)

show more ...

Fix build with LibreSSL 2.7

LibreSSL 2.7 implements OpenSSL 1.1 API except for BIO_get_init()

See also: https://bugs.freebsd.org/226900
Signed-off-by: Bernard Spil <[email protected]>
Closes: #617

Fix build with LibreSSL 2.7

LibreSSL 2.7 implements OpenSSL 1.1 API except for BIO_get_init()

See also: https://bugs.freebsd.org/226900
Signed-off-by: Bernard Spil <[email protected]>
Closes: #617 (cherry-pick)
(cherry picked from commit 28b8075400c70b2d2da2ce07e590c2ec6d11783d)

show more ...

Merge branch 'fix-openssl-linking'

* fix-openssl-linking:
sample/https-client: use ERR_remove_*state() when we have them
Do not check for ERR_remove_thread_state() (do not link ssl into every li

Merge branch 'fix-openssl-linking'

* fix-openssl-linking:
sample/https-client: use ERR_remove_*state() when we have them
Do not check for ERR_remove_thread_state() (do not link ssl into every library)

Closes: #476
(cherry picked from commit 98faf19895bd6aa41c68f7da050179e207f05ae1)

show more ...

sample/https-client: use host SSL certificate store by default

Currently a static (Debian) certificate path is used by default, which
can be overridden using the -crt parameter. This commit changes

sample/https-client: use host SSL certificate store by default

Currently a static (Debian) certificate path is used by default, which
can be overridden using the -crt parameter. This commit changes the
default behaviour such that the openssl default certificate store is
used, unless overridden by -crt.

Signed-off-by: David Disseldorp <[email protected]>
(cherry picked from commit e139cbac0a277cc4eff58bff345fbbcaf0858903)

show more ...

Unbreak build with LibreSSL after openssl 1.1 support added

Fixes: 3e9e0a0d46e4 ("Make it build using OpenSSL 1.1.0")
Fixes: #445
(cherry picked from commit d057c45e8f48aa90d8b340cac4c8ae4cc8b5d0ac)

https-cilent: fix compilation warnings about unused vars/functions on win32

Make it build using OpenSSL 1.1.0

Rebased (azat):
- tabs instead of whitespaces
- make openssl-compat.h safe for complex expressions
- do not call sk_SSL_COMP_free() in 1.1 (fixes double free)

TODO

Make it build using OpenSSL 1.1.0

Rebased (azat):
- tabs instead of whitespaces
- make openssl-compat.h safe for complex expressions
- do not call sk_SSL_COMP_free() in 1.1 (fixes double free)

TODO:
- clean methods_bufferevent

Closes: #397 (cherry-picked)

show more ...

sample/https-client: allow to change path to ca-certificates

And default to one that linux have, for freebsd you will need:
$ https-client -url https://google.com -crt /usr/local/share/certs/ca-root

sample/https-client: allow to change path to ca-certificates

And default to one that linux have, for freebsd you will need:
$ https-client -url https://google.com -crt /usr/local/share/certs/ca-root-nss.crt

show more ...

sample/https-client: check for ERR_remove_thread_state() existence

Fixes: freebsd 9.2 build

sample/https-client: replace ERR_remove_state() by ERR_remove_thread_state()

Since ERR_remove_state() is deprecated:
$ git log --grep ERR_remove_thread_state
commit 2ecd2ededece66bf090fefc93ef3d

sample/https-client: replace ERR_remove_state() by ERR_remove_thread_state()

Since ERR_remove_state() is deprecated:
$ git log --grep ERR_remove_thread_state
commit 2ecd2ededece66bf090fefc93ef3ddb672d9e71a
Author: Bodo Möller <[email protected]>
Date: Wed Aug 13 19:30:01 2008 +0000

Mention ERR_remove_state() deprecation, and ERR_remove_thread_state(NULL).

Link: https://www.openssl.org/docs/manmaster/crypto/ERR_remove_state.html

show more ...

sample/https-client: add -timeout option

sample/https-client: don't try to free uninitialized SSL

sample/https-client.c:459:3: warning: ‘ssl’ may be used uninitialized in this function [-Wmaybe-uninitialized]
SSL_free(ssl);

sample/https-client: graceful exit with freeing memory (to make valgrind happy)

https-client: correctly handle URLs with no path (like "https://host:port")

path == NULL check removed

Fixes: #233
Fixes: #234

Fix compilation for older OpenSSL versions.

For instance OpenSSL 0.9.7 does not have SSL_set_tlsext_host_name.

Also add the missing EVENT__DISABLE_SAMPLES CMake option.

https-client: add -retries argument, for connection retries

Using evhttp_connection_set_retries() API.

add a cast to https-client.c

Fix https-client compilation on Windows.

ssize_t is not defined. But using ssize_t for s in this context makes no
sense, since fread returns size_t.

Change all uses of WIN32 to _WIN32

Fix a couple of "#ifdef WIN32" instances

Sample HTTPS Client: Set hostname for SNI extension (by f69m)

Patch from f69m on SourceForge

Small tweaks to https-client.c

Get rid of unknown pragma warnings.