]> git.ipfire.org Git - thirdparty/curl.git/commit
krb5: fix detecting channel binding feature
authorViktor Szakats <commit@vsz.me>
Sat, 29 Nov 2025 14:23:58 +0000 (15:23 +0100)
committerViktor Szakats <commit@vsz.me>
Mon, 1 Dec 2025 10:43:20 +0000 (11:43 +0100)
commit4aed2dcc897b383b8bb9ae3bf2d7a2246ebccfcd
treec5c75b725c8abb471c1b824a461c1f2a03f77fca
parentdabfae84f0f2626974c109c979a21bcaad357450
krb5: fix detecting channel binding feature

Use the already detected `gssapi/gssapi_krb5.h` MIT Kerberos header
to pull in `gssapi_ext.h`, which in turn sets `GSS_C_CHANNEL_BOUND_FLAG`
if supported. Channel binding is present in MIT Kerberos 1.19+.

Also:
- lib: de-duplicate GSS-API header includes.
- vauth: de-duplicate `urldata.h` includes.
- drop interim feature macro in favor of the native GSS one.

Assisted-by: Max Faxälv
Reported-by: Max Faxälv
Bug: https://github.com/curl/curl/pull/19164#issuecomment-3551687025
Follow-up to 8616e5aada9c78fb611c60d913c999c8e78c14ba #19164
Closes #19603
Closes #19760
18 files changed:
lib/curl_gssapi.h
lib/http_negotiate.c
lib/urldata.h
lib/vauth/cleartext.c
lib/vauth/cram.c
lib/vauth/digest.c
lib/vauth/digest_sspi.c
lib/vauth/gsasl.c
lib/vauth/krb5_gssapi.c
lib/vauth/krb5_sspi.c
lib/vauth/ntlm.c
lib/vauth/ntlm_sspi.c
lib/vauth/oauth2.c
lib/vauth/spnego_gssapi.c
lib/vauth/spnego_sspi.c
lib/vauth/vauth.c
lib/vauth/vauth.h
lib/version.c