Author donmez
Recipients donmez, paul.moore, steve.dower, tim.golden, zach.ware
Date 2015-12-23.15:38:03
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1450885083.97.0.29185685319.issue25932@psf.upfronthosting.co.za>
In-reply-to
Content
Installed Python 3.5.1 windows x64 version and ended up having

C:\Users\ismail\AppData\Local\Programs\Python\Python35\curl.exe

which is outdated:

C:\Users\ismail>C:\Users\ismail\AppData\Local\Programs\Python\Python35\curl.exe -V
curl 7.37.0 (Windows) libcurl/7.37.0 OpenSSL/1.0.2d zlib/1.2.8
Protocols: dict file ftp ftps gopher http https imap imaps pop3 pop3s rtsp smtp smtps telnet tftp
Features: NTLM SSL libz

That is released in May 2014!

Also its insecure:

C:\Users\ismail>C:\Users\ismail\AppData\Local\Programs\Python\Python35\curl.exe -vvvv "https://www.g
oogle.com"
* Rebuilt URL to: https://www.google.com/
* timeout on name lookup is not supported
* Hostname was NOT found in DNS cache
*   Trying 173.194.32.177...
* Connected to www.google.com (173.194.32.177) port 443 (#0)
* libcurl is now using a weak random seed!
[...]

I would be happy if you don't ship curl at all, or at least use a secure, up-to-date version from https://bintray.com/vszakats/generic/curl/view
History
Date User Action Args
2015-12-23 15:38:03donmezsetrecipients: + donmez, paul.moore, tim.golden, zach.ware, steve.dower
2015-12-23 15:38:03donmezsetmessageid: <1450885083.97.0.29185685319.issue25932@psf.upfronthosting.co.za>
2015-12-23 15:38:03donmezlinkissue25932 messages
2015-12-23 15:38:03donmezcreate