Changes in 7.70.0 - April 29 2020

Changes:

• curl: add --ssl-revoke-best-effort to allow a "best effort" revocation check
• mqtt: add new experimental protocol
• schannel: add "best effort" revocation check option: CURLSSLOPT_REVOKE_BEST_EFFORT
• writeout: support to generate JSON output with '%{json}'

Bugfixes:

• appveyor: add Unicode winbuild jobs
• appveyor: completely disable tests that fail to timeout early
• appveyor: show failed tests in log even if test is ignored
• appveyor: sort builds by type and add two new variants
• appveyor: turn disabled tests into ignored result tests
• appveyor: use random test server ports based upon APPVEYOR_API_URL
• build: fixed build for systems with select() in unistd.h
• buildconf: avoid using tempfile when removing files
• checksrc: warn on obvious conditional blocks on the same line as if()
• CI-fuzz: increase fuzz time to 40 minutes
• ci/tests: fix Azure Pipelines not running Windows containers
• CI: add build with ngtcp2 + gnutls on Travis CI
• CI: bring GitHub Actions fuzzing job in line with macOS jobs
• CI: migrate macOS jobs from Azure and Travis CI to GitHub Actions
• CI: remove default Ubuntu build from GitHub Actions
• cirrus: no longer ignore test 504 which is working again
• cirrus: re-enable the FreeBSD 13 CI builds
• cleanup: insert newline after if() conditions
• cmake: add aliases so exported target names are available in tree
• cmake: add CMAKE_MSVC_RUNTIME_LIBRARY
• cmake: add support for building with wolfSSL
• cmake: Avoid MSVC C4273 warnings in send/recv checks
• cmdline: fix handling of OperationConfig linked list (--next)
• compressed.d: stress that the headers are not modified
• config: remove all defines of HAVE_DES_H
• configure: convert -I to -isystem as a last step
• configure: document 'compiler_num' for gcc
• configure: don't check for Security.framework when cross-compiling
• configure: fix -pedantic-errors for GCC 5 and later
• configure: remove use of -vec-report0 from CFLAGS with icc
• connect: happy eyeballs cleanup
• connect: store connection info for QUIC connections
• copyright: fix out-of-date copyright ranges and missing headers
• curl-functions.m4: remove inappropriate AC_REQUIRE
• curl.h: remnove CURL_VERSION_ESNI. Never supported nor documented
• curl.h: update comment typo
• curl: allow both --etag-compare and --etag-save with same filename
• curl_setup: define _WIN32_WINNT_[OS] symbols
• CURLINFO_CONDITION_UNMET: return true for 304 http status code
• CURLINFO_NUM_CONNECTS: improve accuracy
• CURLOPT_WRITEFUNCTION.3: add inline example and new see-also
• dist: add mail-rcpt-allowfails.d to the tarball
• docs/make: generate curl.1 from listed files only
• docs: add warnings about FILE: URLs on Windows
• easy: fix curl_easy_duphandle for builds missing IPv6 that use c-ares
• examples/sessioninfo.c: add include to fix compiler warning
• github actions: run when pushed to master or */ci + PRs
• gnutls: bump lowest supported version to 3.1.10
• gnutls: Don't skip really long certificate fields
• gnutls: ensure TLS 1.3 when SRP isn't requested
• gopher: check remaining time left during write busy loop
• gskit: use our internal select wrapper for portability
• http2: Fix erroneous debug message that h2 connection closed
• http: don't consider upload done if the request isn't completely sent off
• http: free memory when Alt-Used header creation fails due to OOM
• lib/mk-ca-bundle: skip empty certs
• lib670: use the same Win32 API check as all other lib tests
• lib: fix typos in comments and errormessages
• lib: never define CURL_CA_BUNDLE with a getenv
• libcurl-multi.3: added missing full stop
• libssh: avoid options override by configuration files
• libssh: Use new ECDSA key types to check known hosts
• mailmap: fixup a few author names/fields
• Makefile.m32: Improve windres parameter compatibility
• Makefile: run the cd commands in a subshell
• memdebug: don't log free(NULL)
• mime: properly check Content-Type even if it has parameters
• multi-ssl: reset the SSL backend on `Curl_global_cleanup()`
• multi: improve parameter check for curl_multi_remove_handle
• nghttp2: 1.12.0 required
• ngtcp2: update to git master for the key installation API change
• nss: check for PK11_CreateDigestContext() returning NULL
• openssl: adapt to functions marked as deprecated since version 3
• OS400: update strings for ccsid-ifier (fixes the build)
• output.d: quote the URL when globbing
• packages: add OS400/chkstrings.c to the dist
• RELEASE-PROCEDURE.md: run the copyright.pl script!
• Revert "file: on Windows, refuse paths that start with \\"
• runtests: always put test number in servercmd file
• runtests: provide nicer errormsg when protocol "dump" file is empty
• schannel: Fix blocking timeout logic
• schannel: support .P12 or .PFX client certificates
• scripts/release-notes.pl: add helper script for RELEASE-NOTES maintenance
• select: make Curl_socket_check take timediff_t timeout
• select: move duplicate select preparation code into Curl_select
• select: remove typecast from SOCKET_WRITABLE/READABLE macros
• server/getpart: make the "XML-parser" stricter
• server/resolve: remove AI_CANONNAME to make macos tell the truth
• smtp: set auth correctly
• sockfilt: add logmsg output to select_ws_wait_thread on Windows
• sockfilt: fix broken pipe on Windows to be ready in select_ws
• sockfilt: fix handling of ready closed sockets on Windows
• sockfilt: fix race-condition of waiting threads and event handling
• socks: Fix blocking timeout logic
• src: Remove C99 constructs to ensure C89 compliance
• SSLCERTS.md: Fix example code for setting CA cert file
• test1148: tolerate progress updates better (again)
• test1154: set a proper name
• test1177: verify that all the CURL_VERSION_ bits are documented
• test1566: verify --etag-compare that gets a 304 back
• test1908: avoid using fixed port number in test data
• test2043: use revoked.badssl.com instead of revoked.grc.com
• test2100: fix static port instead of dynamic value being used
• tests/data: fix some XML formatting issues in test cases
• tests/FILEFORMAT: converted to markdown and extended
• tests/server/util.c: use curl_off_t instead of long for pid
• tests: add %NOLISTENPORT and use it
• tests: add Windows compatible pidwait like pidkill and pidterm
• tests: fix conflict between Cygwin/msys and Windows PIDs
• tests: introduce preprocessed test cases
• tests: make Python-based servers compatible with Python 2 and 3
• tests: make runtests check that disabled tests exists
• tests: move pingpong server to dynamic listening port
• tests: remove python_dependencies for smbserver from our tree
• tests: run the RTSP test server on a dynamic port number
• tests: run the SOCKS test server on a dynamic port number
• tests: run the sws server on "any port"
• tests: run the TFTP test server on a dynamic port number
• tests: use Cygwin/msys PIDs for stunnel and sshd on Windows
• tls: remove the BACKEND define kludge from most backends
• tool: do not declare functions with Curl_ prefix
• tool_operate: fix add_parallel_transfers when more are in queue
• transfer: cap retries of "dead connections" to 5
• transfer: Switch PUT to GET/HEAD on 303 redirect
• travis: bump the wolfssl CI build to use 4.4.0
• travis: update the ngtcp2 build to use the latest OpenSSL patch
• url: allow non-HTTPS altsvc-matching for debug builds
• version: add 'cainfo' and 'capath' to version info struct
• version: increase buffer space for ssl version output
• version: skip idn2_check_version() check and add precaution
• vquic: add support for GnuTLS backend of ngtcp2
• vtls: fix ssl_config memory-leak on out-of-memory
• warnless: remove code block for icc that didn't work
• windows: enable UnixSockets with all build toolchains
• windows: suppress UI in all CryptAcquireContext() calls

Further