30 of 40 on in the package: ALTSVCBROTLICOOKIESDICTDOCSEXAMPLESFTPGOPHERGSSAPI_BASEHTTPHTTP2IDNIMAPIPFSIPV6LIBSSH2MQTTNTLMOPENSSLPOP3PROXYPSLRTSPSMTPSTATICTELNETTFTPTHREADED_RESOLVERWEBSOCKETZSTDShow the 10 options that are off
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by pkg audit for the packaged version 8.23.0.
Fixed (55)
Show 55 fixed
VuXML entries whose affected range the packaged version has left.
maintainer-feedback? ftp/curl: Add HTTP/3 Support (preliminary diff)
New
2026-04-08
Commits (435)
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.74.0_1
Make User-Agent header setting reliable
- Bump PORTREVISION for package change
Requested by: Jonathan Simon <info@simonabc.com>
Obtained from: https://github.com/curl/curl/commit/0936ecd0ee5e3e28c098fefc9e2c0e6847cb7a82
ftp/curl: avoid auto-enabling ZSTD, make explicit option; ensure GSSAPI compilation.
Since August 2020, curl would auto-enable ZSTD if available while
configuring, this would however not propagate to the LIB_DEPENDS.
Make sure to explicitly control ZSTD by introducing an option that
defaults to off.
While here, also mark BROKEN if GSSAPI_BASE is selected while
krb5 is installed when building.
PR: 250414
Approved by: sunpoet@ (maintainer timeout, 14d)
Use built-in CA store of OpenSSL/GnuTLS when CA_BUNDLE is disabled
PR: 248047
Reported by: Michael Osipov <michael.osipov@siemens.com>
Submitted by: kevans
Remove pre-test-PROXY-off:
Tests run without error regardless of PROXY option.
PROXY disabled:
TESTDONE: 930 tests out of 930 reported OK: 100%
TESTDONE: 1364 tests were considered during 369 seconds.
PROXY enabled:
TESTDONE: 1052 tests out of 1052 reported OK: 100%
TESTDONE: 1364 tests were considered during 410 seconds.
ftp/curl: Add NTLM option (Fix OpenSSL build w/o DES)
curl fails to build when OpenSSL is built without DES support, with many
"use of undeclared identifier" errors. For example:
curl_ntlm_core.c:392:3: error: use of undeclared identifier 'DES_key_schedule'
DES_key_schedule ks;
^
An issue was reported back in 2015 [1], requesting support for ./configure
detecting OPENSSL_NO_DES, but the issue was ultimately closed:
"We just don't support very custom OpenSSL builds. I could be talked into
accepting patches that introduce support for this however".
Accordingly and leui of an upstream configure patch, this change adds an
NTLM option, enabled by default, and when disabled, defines
CURL_DISABLE_NTLM, which prevents #define'ing USE_NTLM in
WRKSRC/lib/curl_setup.h, resulting in a successful build.
This allows users the opportunity to easily disable the DES requiring
functionality in curl, if they happen to run custom or stripped down
OpenSSL builds.
Note: This issue may impact builds with other SSL libraries that allow
disabling DES, but I did not investigate this question.
[1] https://sourceforge.net/p/curl/bugs/1439/
[2] Would require a version update, which granted, is mostly bugfixes
Reviewed by: sunpoet (maintainer)
Approved by: sunpoet (maintainer)
MFH: No [2]
Differential Revision: D22498
Update security/nettle to 3.5.1
- Bump PORTREVISION of dependent ports for shlib change
- Fix build of devel/pijul [1]
Changes: https://git.lysator.liu.se/nettle/nettle/blob/master/NEWS
PR: 238991
Exp-run by: antoine
Thanks to: tobik [1]
Fix runtime with OpenSSL without MD4
- Bump PORTREVISION for package change
Obtained from: https://github.com/curl/curl/commit/0dc9a8019962d31787c4929d36de6817ae3090e7
Fix build with FTP disabled and FILE enabled
Obtained from: https://github.com/curl/curl/commit/dc0a671213fa94489933755828b26f5807d61a7a
Reported by: Charlie Li <ml+freebsd@vishwin.info>
Fix undefined Curl_get_line when ALTSVC enabled and COOKIES disabled
ALTSVC requires Curl_get_line which is defined in lib/cookie.c inside a #if
check of HTTP and COOKIES. That makes Curl_get_line undefined if COOKIES is
disabled. This is a workaround to define Curl_get_line unconditionally.
PR: 236885, 236890
Do not install curl.fish to avoid conflicts with shells/fish
- Bump PORTREVISION for package change
PR: 236878
Reported by: Laszlo Karolyi <laszlo@karolyi.hu>
Update GNUTLS and NSS options
nettle for gnutls support in curl is always enabled because it is an unconditional dependency of security/gnutls.
Do not bump PORTREVISION because package-depends-list is unchanged.