src/lib/libfetch/fetch.3, branch release/14.4.0

MFC: libfetch: allow disabling TLS v1.3 when negotiating the connection

2026-01-25T04:16:30Z

(cherry picked from commit 129aec72250266e60c07ff4643623188f7c27a9d)

libfetch, fetch: Stop recommending the use of ca_root_nss.

2023-12-13T16:23:57Z

MFC after: 3 days Reviewed by: kevans, emaste Differential Revision: https://reviews.freebsd.org/D42119 (cherry picked from commit 2821a7498f65d357c68166e1978b491abef1ca4a)

Remove $FreeBSD$: two-line nroff pattern

2023-08-16T17:55:10Z

Remove /^\.\\"\n\.\\"\s*\$FreeBSD\$$\n/

There's no PEM(3) anywhere around; delete reference.

2022-09-17T11:14:01Z

Remove support for SSLv3 from fetch(3).

2020-11-24T22:10:33Z

Support for SSLv3 was already removed from OpenSSL (r361392). Differential Revision: https://reviews.freebsd.org/D24947

fetch(3): Add SOCKS5 support

2020-02-15T18:03:16Z

This change adds SOCKS5 support to the library fetch(3) and updates the man page. Details: Within the fetch_connect() function, fetch(3) checks if the SOCKS5_PROXY environment variable is set. If so, it connects to this host rather than the end-host. It then initializes the SOCKS5 connection in accordance with RFC 1928 and returns the resulting conn_t (file descriptor) for usage by the regular FTP/HTTP handlers. Design Decision: This change defaults all DNS resolutions through the proxy by sending all IPs as hostnames. Going forward, another feature might be to create another environmental variable to toggle resolutions through the proxy or not.. One may set the SOCKS5_PROXY environment variable in any of the formats: SOCKS5_PROXY=proxy.example.com SOCKS5_PROXY=proxy.example.com:1080 SOCKS5_PROXY=192.0.2.0 SOCKS5_PROXY=198.51.100.0:1080 SOCKS5_PROXY=[2001:db8::1] SOCKS5_PROXY=[2001:db8::2]:1080 Then perform a request with fetch(1). (note by kevans) I've since been informed that Void Linux/xbps has a fork of libfetch that also implements SOCKS5. I may compare/contrast the two in the mid-to-near future. Submitted by: Farhan Khan Differential Revision: https://reviews.freebsd.org/D18908

Document fetchReqHTTP().

2019-08-28T17:01:28Z

Submitted by: Farhan Khan Reviewed by: 0mp MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D18788

Fix bunch of .Xrs.

2016-03-28T16:48:28Z

MFC after: 1 month Sponsored by: The FreeBSD Foundation

Update fetch.1 and fetch.3 to reflect libfetch's actual use of CA bundles

2016-03-19T11:55:21Z

Reviewed by: wblock Approved by: wblock MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D5558

Use .netrc for HTTP sites and proxies, not just FTP.

2015-11-29T14:26:59Z

PR: 193740 Submitted by: TEUBEL György MFC after: 1 week