src/lib/libfetch, branch release/9.3.0

MFH (r260904): fix format string

2014-05-25T16:20:53Z

MFH (r261230,r261263): fix issues with buffering / stalling MFH (r261284): bump copyright dates MFH (r266291): look for root certs in /usr/local first Approved by: re (gjb)

MFC r263021:

2014-03-19T00:54:43Z

Support Last-Modified behind proxies which return UTC instead of GMT.

MFC r258347,r258349:

2013-12-02T10:59:41Z

Support SNI in libfetch SNI is Server Name Indentification which is a protocol for TLS that indicates the host that is being connected to at the start of the handshake. It allows to use Virtual Hosts on HTTPS. PR: kern/183583 Approved by: bapt (implicit)

Merge from head r253514,r253680,r253805,r254650:

2013-10-10T09:42:41Z

--------------------------------------------------------------------- r253514 | des | 2013-07-21 10:59:56 +0400 (вс, 21 июл 2013) | 5 lines Use the correct request syntax for proxied (tunneled) HTTPS requests. PR: bin/180666 MFC after: 3 days --------------------------------------------------------------------- r253680 | des | 2013-07-26 19:53:43 +0400 (пт, 26 июл 2013) | 7 lines Implement certificate verification, and many other SSL-related imrovements; complete details in the PR. PR: kern/175514 Submitted by: Michael Gmelin MFC after: 1 week --------------------------------------------------------------------- r253805 | des | 2013-07-30 17:07:55 +0400 (вт, 30 июл 2013) | 5 lines Include an Accept header in requests. PR: kern/180917 MFC after: 1 week --------------------------------------------------------------------- r254650 | des | 2013-08-22 11:43:36 +0400 (чт, 22 авг 2013) | 8 lines Even though it doesn't really make sense in the context of a CONNECT request, RFC 2616 14.23 mandates the presence of the Host: header in all HTTP 1.1 requests. PR: kern/181445 Submitted by: Kimo MFC after: 3 days --------------------------------------------------------------------- Reviewed by: des

MFH (r252375): remove useless side effect which triggers a clang bug.

2013-07-10T14:06:35Z

MFH (r243149): fix indentation

2013-05-26T16:48:51Z

MFH (r249431): use CONNECT to proxy HTTPS over HTTP PR: bin/80176

MFH (r240496): use libmd if and only if OpenSSL is not available

2012-11-05T10:42:31Z

MFC r241841:

2012-10-29T04:18:34Z

Implement HTTP 305 redirect handling. PR: 172452 Approved by: cperciva (implicit)

MFC r241840:

2012-10-29T04:16:52Z

Don't deny non-temporary redirects if the -A option is set (per the man page) [0] While here add support for draft-reschke-http-status-308-07 PR: 172451 [0] Approved by: cperciva (implicit)

MFC r241839:

2012-10-25T03:11:18Z

Be a bit more lenient in the maximum number of redirects allowed. Chrome and Firefox have a limit of 20. IE has a limit of 8. Approved by: cperciva (implicit)