]> granicus.if.org Git - curl/commit
spnego_sspi: add support for channel binding
authorgeorgeok <giorgos.n.oikonomou@gmail.com>
Tue, 29 Jan 2019 17:26:31 +0000 (18:26 +0100)
committerMarcel Raad <Marcel.Raad@teamviewer.com>
Fri, 1 Feb 2019 08:56:27 +0000 (09:56 +0100)
commita730432e59754df97c8985eb3094ca1cdd3e4955
tree3e19c162afb855193a7ef4db1419a3f80b0d9392
parent463f16d188f9e7fae2e71a6b3160d391fbe8ff18
spnego_sspi: add support for channel binding

Attempt to add support for Secure Channel binding when negotiate
authentication is used. The problem to solve is that by default IIS
accepts channel binding and curl doesn't utilise them. The result was a
401 response. Scope affects only the Schannel(winssl)-SSPI combination.

Fixes https://github.com/curl/curl/issues/3503
Closes https://github.com/curl/curl/pull/3509
lib/http_negotiate.c
lib/http_ntlm.c
lib/urldata.h
lib/vauth/spnego_sspi.c
lib/vtls/schannel.c