Also fix the CLI

Author: perkfly

bin/curl_firefox133

@@ -33,4 +33,5 @@ dir=${0%/*}
     --tls-record-size-limit 4001 \
     --tls-key-shares-limit 3 \
     --cert-compression zlib,brotli,zstd \
+    --tls-use-firefox-tls13-ciphers \
     "$@"

bin/curl_firefox135

@@ -34,4 +34,5 @@ dir=${0%/*}
     --tls-key-shares-limit 3 \
     --cert-compression zlib,brotli,zstd \
     --tls-signed-cert-timestamps \
+    --tls-use-firefox-tls13-ciphers \
     "$@"

patches/curl.patch

@@ -4148,7 +4148,7 @@ index 75fef60c8..3ed59525b 100644
    long happy_eyeballs_timeout_ms; /* happy eyeballs timeout in milliseconds.
                                       0 is valid. default: CURL_HET_DEFAULT. */
 diff --git a/src/tool_getparam.c b/src/tool_getparam.c
-index a55973a60..29fec1ea8 100644
+index a55973a60..30885daac 100644
 --- a/src/tool_getparam.c
 +++ b/src/tool_getparam.c
 @@ -90,6 +90,7 @@ static ParameterError getstrn(char **str, const char *val,
@@ -4188,7 +4188,7 @@ index a55973a60..29fec1ea8 100644
    {"silent",                     ARG_BOOL, 's', C_SILENT},
    {"skip-existing",              ARG_BOOL, ' ', C_SKIP_EXISTING},
    {"socks4",                     ARG_STRG, ' ', C_SOCKS4},
-@@ -341,8 +350,17 @@ static const struct LongShort aliases[]= {
+@@ -341,8 +350,18 @@ static const struct LongShort aliases[]= {
    {"tftp-blksize",               ARG_STRG, ' ', C_TFTP_BLKSIZE},
    {"tftp-no-options",            ARG_BOOL, ' ', C_TFTP_NO_OPTIONS},
    {"time-cond",                  ARG_STRG, 'z', C_TIME_COND},
@@ -4202,11 +4202,12 @@ index a55973a60..29fec1ea8 100644
 +  {"tls-record-size-limit",      ARG_STRG, ' ', C_TLS_RECORD_SIZE_LIMIT},  // curl-impersonate
 +  {"tls-session-ticket",         ARG_BOOL, ' ', C_TLS_SESSION_TICKET},  // curl-impersonate
 +  {"tls-signed-cert-timestamps", ARG_BOOL, ' ', C_TLS_SIGNED_CERT_TIMESTAMPS}, // curl-impersonate
++  {"tls-use-firefox-tls13-ciphers", ARG_BOOL, ' ', C_TLS_USE_FIREFOX_TLS13_CIPHERS},  // curl-impersonate
 +  {"tls-use-new-alps-codepoint", ARG_BOOL, ' ', C_TLS_USE_NEW_ALPS_CODEPOINT},  // curl-impersonate
    {"tls13-ciphers",              ARG_STRG|ARG_TLS, ' ', C_TLS13_CIPHERS},
    {"tlsauthtype",                ARG_STRG|ARG_TLS, ' ', C_TLSAUTHTYPE},
    {"tlspassword",                ARG_STRG|ARG_TLS, ' ', C_TLSPASSWORD},
-@@ -1864,7 +1882,7 @@ ParameterError getparameter(const char *flag, /* f or -long-flag */
+@@ -1864,7 +1883,7 @@ ParameterError getparameter(const char *flag, /* f or -long-flag */
          /* if given a blank string, make it NULL again */
          curlx_safefree(config->doh_url);
        break;
@@ -4215,7 +4216,7 @@ index a55973a60..29fec1ea8 100644
        err = getstr(&config->cipher_list, nextarg, DENY_BLANK);
        break;
      case C_DNS_INTERFACE: /* --dns-interface */
-@@ -1913,6 +1931,9 @@ ParameterError getparameter(const char *flag, /* f or -long-flag */
+@@ -1913,6 +1932,9 @@ ParameterError getparameter(const char *flag, /* f or -long-flag */
      case C_ALPN: /* --alpn */
        config->noalpn = !toggle;
        break;
@@ -4225,7 +4226,7 @@ index a55973a60..29fec1ea8 100644
      case C_LIMIT_RATE: /* --limit-rate */
        err = GetSizeParameter(global, nextarg, "rate", &value);
        if(!err) {
-@@ -2294,6 +2315,33 @@ ParameterError getparameter(const char *flag, /* f or -long-flag */
+@@ -2294,6 +2316,36 @@ ParameterError getparameter(const char *flag, /* f or -long-flag */
      case C_TLS_MAX: /* --tls-max */
        err = str2tls_max(&config->ssl_version_max, nextarg);
        break;
@@ -4255,11 +4256,14 @@ index a55973a60..29fec1ea8 100644
 +      break;
 +    case C_TLS_USE_NEW_ALPS_CODEPOINT: /* --tls-use-new-alps-codepoint curl-impersonate */
 +      config->tls_use_new_alps_codepoint = toggle;
++      break;
++    case C_TLS_USE_FIREFOX_TLS13_CIPHERS: /* --tls-use-new-alps-codepoint curl-impersonate */
++      config->tls_use_firefox_tls13_ciphers = toggle;
 +      break;
      case C_SUPPRESS_CONNECT_HEADERS: /* --suppress-connect-headers */
        config->suppress_connect_headers = toggle;
        break;
-@@ -2343,6 +2391,39 @@ ParameterError getparameter(const char *flag, /* f or -long-flag */
+@@ -2343,6 +2395,39 @@ ParameterError getparameter(const char *flag, /* f or -long-flag */
          return PARAM_LIBCURL_DOESNT_SUPPORT;
        sethttpver(global, config, CURL_HTTP_VERSION_2_PRIOR_KNOWLEDGE);
        break;
@@ -4299,7 +4303,7 @@ index a55973a60..29fec1ea8 100644
      case C_HTTP3: /* --http3: */
        /* Try HTTP/3, allow fallback */
        if(!feature_http3)
-@@ -2477,6 +2558,9 @@ ParameterError getparameter(const char *flag, /* f or -long-flag */
+@@ -2477,6 +2562,9 @@ ParameterError getparameter(const char *flag, /* f or -long-flag */
        GetFileAndPassword(nextarg, &config->cert, &config->key_passwd);
        cleanarg(clearthis);
        break;
@@ -4309,7 +4313,7 @@ index a55973a60..29fec1ea8 100644
      case C_CACERT: /* --cacert */
        err = getstr(&config->cacert, nextarg, DENY_BLANK);
        break;
-@@ -2885,6 +2969,9 @@ ParameterError getparameter(const char *flag, /* f or -long-flag */
+@@ -2885,6 +2973,9 @@ ParameterError getparameter(const char *flag, /* f or -long-flag */
      case C_SKIP_EXISTING: /* --skip-existing */
        config->skip_existing = toggle;
        break;