aports/libfetch, branch v2.10.4

fix strncpy bounds errors

2019-02-13T14:05:27+00:00

error: 'strncpy' specified bound 4096 equals destination size [-Werror=stringop-truncation]

Based on patch by Elan Ruusamäe

libfetch: do not give out user/hostname as ftp anonymous password

2018-09-05T07:32:00+00:00

This is unwanted information disclosure.

Reported-by: Max Justicz

libfetch: support OpenSSL

2018-01-31T20:04:46+00:00

TLS_client_method is a LibreSSL extension.
SSLv23_client_method is generic, and doesn't mean SSL v2/v3 only.

libfetch: add option to set "Cache-Control: no-cache"

2018-01-03T12:25:07+00:00

ref #8161

libfetch: honor https_proxy variable for https

2018-01-03T08:43:31+00:00

fixes #8160

libfetch: fix certificate host name check

2017-10-06T15:09:37+00:00

OpenSSL allows passing zero-length to indicate "use strlen".
LibreSSL requires using the real length always, so pass the length.

libfetch: improve openssl/libressl compatibility

2017-10-06T10:25:27+00:00

X509_check_host() is introduced in libressl-2.5.0 and openssl-1.0.2
which are not yet universally available. Add support for building
against the older versions.

libfetch: improve ssl connections

2017-10-05T13:59:14+00:00

loosely based on the freebsd implementation, implement https
connection settings to override CA, and use client certificate.

new files supported in /etc/apk/:
  ca.pem   - if exists, it contains CAs acceptable for https
	     (otherwise system wide CAs are used)
  crl.pem  - if ca.pem is used, this is the (optional) CRL for it
  cert.pem - used as client authentication certificate (+ key)
  cert.key - used as client key (can be also inside cert.pem)

libfetch: remove unwanted code conditionals

2017-10-05T13:59:14+00:00

libfetch: fix ssl context leak

2017-10-05T13:59:14+00:00

from freebsd