curl-cmake.sh: fix to enable SSPI for Windows [ci skip]

After disabling MultiSSL (due to HTTP/3 incompatibility) and
Schannel with it, Kerberos/SPNEGO/SSPI feature were gone, because
they depended on the SSPI build option which got its default from
the Schannel-enabler option.

A related issue is that the SSPI build option `BUILD_WINDOWS_SSPI`
is broken, up until 8.6.0, so we use a workaround until merging
the fix upstream and switching to a clean solution for 8.7.0.

Depends on curl/curl#13061 for 8.7.0.

Reported-by: Andreas Loew
Fixes curl/curl#13056

Author: vszakats

README.md

@@ -61,7 +61,7 @@ Uses [LibreSSL](https://www.libressl.org/) TLS backend.
 ```
 Windows:
 Protocols: dict file ftp ftps gopher gophers http https imap imaps ipfs ipns ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp ws wss
-Features: alt-svc AsynchDNS brotli HSTS HTTP2 HTTP3 HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM PSL SPNEGO SSL      threadsafe UnixSockets zstd
+Features: alt-svc AsynchDNS brotli HSTS HTTP2 HTTP3 HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM PSL SPNEGO SSL SSPI threadsafe UnixSockets zstd
 
 macOS:
 Protocols: dict file ftp ftps gopher gophers http https imap imaps ipfs ipns ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp ws wss
@@ -76,7 +76,7 @@ Features: alt-svc AsynchDNS brotli HSTS HTTP2 HTTP3 HTTPS-proxy     IPv6
 ```
 "noh3", HTTP/2:
 Protocols: dict file ftp ftps gopher gophers http https imap imaps ipfs ipns ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp ws wss
-Features: alt-svc AsynchDNS brotli HSTS HTTP2       HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM PSL SPNEGO SSL      threadsafe UnixSockets zstd
+Features: alt-svc AsynchDNS brotli HSTS HTTP2       HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM PSL SPNEGO SSL SSPI threadsafe UnixSockets zstd
 
 "mini", without brotli and zstd, with OS TLS backend (Schannel, SecureTransport) if available:
 Protocols: dict file ftp ftps gopher gophers http https imap imaps ipfs ipns ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp ws wss

_versions.sh

@@ -10,7 +10,7 @@ export CURL_HASH=3ccd55d91af9516539df80625f818c734dc6f2ecf9bada33c76765e99121db1
 # Create revision string
 # NOTE: Set _REV to 1 after bumping CURL_VER_, then increment for each
 #       CI rebuild via `main` branch push (e.g. after bumping a dependency).
-export _REV="${CW_REVISION:-3}"
+export _REV="${CW_REVISION:-4}"
 
 export TRURL_VER_='0.10'
 export TRURL_HASH=e54ee05a1a39f2547fbb39225f9cf5e2608eeaf07ad3f7dbff0a069d060d3c46

curl-cmake.sh

@@ -129,6 +129,12 @@ _VER="$1"
     fi
   fi
 
+  if [ "${CURL_VER_}" = '8.6.0' ]; then
+    CPPFLAGS+=' -DUSE_WINDOWS_SSPI'
+  else
+    options+=' -DCURL_WINDOWS_SSPI=ON'
+  fi
+
   if [[ "${_CONFIG}" = *'nocookie'* ]]; then
     options+=' -DCURL_DISABLE_COOKIES=ON'
   fi