Changes in 7.48.0 - March 23 2016

Changes:

• configure: --with-ca-fallback: use built-in TLS CA fallback
• TFTP: add --tftp-no-options to expose CURLOPT_TFTP_NO_OPTIONS
• getinfo: CURLINFO_TLS_SSL_PTR supersedes CURLINFO_TLS_SESSION
• added CODE_STYLE.md

Bugfixes:

• Proxy-Connection: stop sending this header by default
• os400: sync ILE/RPG definitions with latest public header files
• cookies: allow spaces in cookie names, cut of trailing spaces
• tool_urlglob: Allow reserved dos device names (Windows)
• openssl: remove most BoringSSL #ifdefs
• tool_doswin: Support for literal path prefix \\?
• mbedtls: fix ALPN usage segfault
• mbedtls: fix memory leak when destroying SSL connection data
• nss: do not count enabled cipher-suites
• examples/cookie_interface.c: add cleanup call
• examples: adhere to curl code style
• curlx_tvdiff: handle 32bit time_t overflows
• dist: ship buildconf.bat too
• curl.1: --disable-{eprt,epsv} are ignored for IPv6 hosts
• generate.bat: Fix comment bug by removing old comments
• test1604: Add to Makefile.inc so it gets run
• gtls: fix for builds lacking encrypted key file support
• SCP: use libssh2_scp_recv2 to support > 2GB files on windows
• CURLOPT_CONNECTTIMEOUT_MS.3: Fix example to use milliseconds option
• cookie: do not refuse cookies to localhost
• openssl: avoid direct PKEY access with OpenSSL 1.1.0
• http: Don't break the header into chunks if HTTP/2
• http2: don't decompress gzip decoding automatically
• curlx.c: i2s_ASN1_IA5STRING() clashes with an openssl function
• curl.1: add a missing dash
• curl.1: HTTP headers for --cookie must be Set-Cookie style
• CURLOPT_COOKIEFILE.3: HTTP headers must be Set-Cookie style
• curl_sasl: Fix memory leak in digest parser
• src/Makefile.m32: add CURL_{LD,C}FLAGS_EXTRAS support
• CURLOPT_DEBUGFUNCTION.3: Fix example
• runtests: Fixed usage of %PWD on MinGW64
• tests/sshserver.pl: use RSA instead of DSA for host auth
• multi_remove_handle: keep the timeout list until after disconnect
• Curl_read: check for activated HTTP/1 pipelining, not only requested
• configure: warn on invalid ca bundle or path
• file: try reading from files with no size
• getinfo: Add support for mbedTLS TLS session info
• formpost: fix memory leaks in AddFormData error branches
• makefile.m32: allow to pass .dll/.exe-specific LDFLAGS
• url: if Curl_done is premature then pipeline not in use
• cookie: remove redundant check
• cookie: Don't expire session cookies in remove_expired
• makefile.m32: fix to allow -ssh2-winssl combination
• checksrc.bat: Fixed cannot find perl if installed but not in path
• build-openssl.bat: Fixed cannot find perl if installed but not in path
• mbedtls: fix user-specified SSL protocol version
• makefile.m32: add missing libs for static -winssl-ssh2 builds
• test46: change cookie expiry date
• pipeline: Sanity check pipeline pointer before accessing it
• openssl: use the correct OpenSSL/BoringSSL/LibreSSL in messages
• ftp_done: clear tunnel_state when secondary socket closes
• opt-docs: fix heading macros
• imap/pop3/smtp: Fixed connections upgraded with TLS are not reused
• curl_multi_wait: never return -1 in 'numfds'
• url.c: fix clang warning: no newline at end of file
• krb5: improved type handling to avoid clang compiler warnings
• cookies: first n/v pair in Set-Cookie: is the cookie, then parameters
• multi: avoid blocking during CURLM_STATE_WAITPROXYCONNECT
• multi hash: ensure modulo performed on curl_socket_t
• curl: glob_range: no need to check unsigned variable for negative
• easy: add check to malloc() when running event-based
• CURLOPT_SSLENGINE.3: Only for OpenSSL built with engine support
• version: thread safety
• openssl: verbose: show matching SAN pattern
• openssl: adapt to OpenSSL 1.1.0 API breakage in ERR_remove_thread_state()
• formdata.c: Fixed compilation warning
• configure: use cpp -P when needed
• imap.c: Fixed compilation warning with /Wall enabled
• config-w32.h: Fixed compilation warning when /Wall enabled
• ftp/imap/pop3/smtp: Fixed compilation warning when /Wall enabled
• build: Added missing Visual Studio filter files for VC10 onwards
• easy: Remove poll failure check in easy_transfer
• mbedtls: fix compiler warning
• build-wolfssl: Update VS properties for wolfSSL v3.9.0
• Fixed various compilation warnings when verbose strings disabled
• sshserver: remove use of AuthorizedKeysFile2

Further