Builder curl-ares-solaris11-i386 Build #4824

Results:

Build successful

SourceStamp:

BuildSlave:

Reason:

The SingleBranchScheduler scheduler named 'schedule-curl-ares-solaris11-i386' triggered this build

Steps and Logfiles:

1. git update ( 2 secs )
   1. stdio
2. Runtest './tests/testcurl.pl --nogitpull ...' ( 3 mins, 22 secs )
   1. stdio
   2. resultlog
3. Mail result 'cat resultlog ...' ( 0 secs )
   1. stdio

Build Properties:

Forced Build Properties:

Responsible Users:

1. Stefan Eissing

   stefanohnoyoudont@eissing.org
2. Viktor Szakats

   commitohnoyoudont@vsz.me

Timing:

All Changes:

:

1. Change #262527

   Category	curl
   Changed by	Viktor Szakats <commitohnoyoudont@vsz.me>
   Changed at	Fri 27 Mar 2026 14:19:31
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	351e4f956a11bdf419c14f1f69758a15e77e7fea

   Comments

   mk-ca-bundle.pl: drop reproducible timestamp feature
   Mozilla may push to its repo much later than the commit date, which can
   be a source of confusion when using the reproducible timestamp (which is
   determined by the commit date) by default. Example:
   
   https://curl.se/ca/cacert-2026-03-19.pem vs.
   https://github.com/mozilla-firefox/firefox/commits/1a84aee6387d2f9c9531c655edeea4a80aa0fcfa/security/nss/lib/ckfw/builtins/certdata.txt
   
   This feature had no actual user (or a planned one) from within curl at
   the moment, and not requested by curl users. curl-for-win does this on
   its own, which is the more practical way there since everything (not
   just the CA bundle) needs to be reproducible anyway. I surmise this may
   be true for most if not all reproducible use-cases.
   
   Another limitation was that it could bump into GitHub's rate limiting,
   needing further updates.
   
   Also: code had some unintented leftovers.
   
   Reported-by: Daniel Stenberg
   Bug: https://github.com/curl/curl/pull/20528#issuecomment-4140610008
   Follow-up to ca92e20123928e4788d27135cdafdd084d3833d4 #20528
   
   Closes #21116

   Changed files

   • scripts/mk-ca-bundle.pl

2. Change #262528

   Category	curl
   Changed by	Stefan Eissing <stefanohnoyoudont@eissing.org>
   Changed at	Fri 27 Mar 2026 14:23:29
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	2e8c922a89153083227a8f6b737f15bbe9fe1446

   Comments

   http2: prevent secure schemes pushed over insecure connections
   When assembling the URL of a pushed resource over a not-secured
   connection, require the scheme to be known and not secure.
   
   Reported-by: xkilua on hackerone
   
   Closes #21113

   Changed files

   • lib/http2.c