src/lib/libfetch/fetch.3, branch release/13.1.0

Remove support for SSLv3 from fetch(3).

2020-11-24T22:10:33Z

Support for SSLv3 was already removed from OpenSSL (r361392). Differential Revision: https://reviews.freebsd.org/D24947

fetch(3): Add SOCKS5 support

2020-02-15T18:03:16Z

This change adds SOCKS5 support to the library fetch(3) and updates the man page. Details: Within the fetch_connect() function, fetch(3) checks if the SOCKS5_PROXY environment variable is set. If so, it connects to this host rather than the end-host. It then initializes the SOCKS5 connection in accordance with RFC 1928 and returns the resulting conn_t (file descriptor) for usage by the regular FTP/HTTP handlers. Design Decision: This change defaults all DNS resolutions through the proxy by sending all IPs as hostnames. Going forward, another feature might be to create another environmental variable to toggle resolutions through the proxy or not.. One may set the SOCKS5_PROXY environment variable in any of the formats: SOCKS5_PROXY=proxy.example.com SOCKS5_PROXY=proxy.example.com:1080 SOCKS5_PROXY=192.0.2.0 SOCKS5_PROXY=198.51.100.0:1080 SOCKS5_PROXY=[2001:db8::1] SOCKS5_PROXY=[2001:db8::2]:1080 Then perform a request with fetch(1). (note by kevans) I've since been informed that Void Linux/xbps has a fork of libfetch that also implements SOCKS5. I may compare/contrast the two in the mid-to-near future. Submitted by: Farhan Khan Differential Revision: https://reviews.freebsd.org/D18908

Document fetchReqHTTP().

2019-08-28T17:01:28Z

Submitted by: Farhan Khan Reviewed by: 0mp MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D18788

Fix bunch of .Xrs.

2016-03-28T16:48:28Z

MFC after: 1 month Sponsored by: The FreeBSD Foundation

Update fetch.1 and fetch.3 to reflect libfetch's actual use of CA bundles

2016-03-19T11:55:21Z

Reviewed by: wblock Approved by: wblock MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D5558

Use .netrc for HTTP sites and proxies, not just FTP.

2015-11-29T14:26:59Z

PR: 193740 Submitted by: TEUBEL György MFC after: 1 week

Remove defunct SSLv2 support from fetch(1) and fetch(3).

2015-03-25T18:56:36Z

As pointed out by several people, r273114 was incorrect: it unconditionally

2014-10-15T07:35:50Z

disabled everything except TLS 1.0. Replace it with a more carefully wrought patch: - Switch the default for SSLv3 from on to off - Add environment variables to control TLS 1.1 and 1.2 - In verbose mode, report which version is used - Update the man page to reflect these changes. MFC after: 1 week

Use Mt macro to properly format mailto links (patch from Franco Fichtner for Dragonfly)

2014-06-11T20:20:14Z

Reviewed by: des Approved by: des Obtained from: Dragonfly MFC after: 1 week

If HTTP_USER_AGENT is defined but empty, don't send User-Agent at all.

2014-06-05T20:27:16Z

PR: 184507 Submitted by: jbeich@tormail.org (with modifications) MFC after: 1 week