| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
Reported by: Tim Kientzle
|
|
|
|
|
|
|
| |
Denis Shaposhnikov
- update to mod_ssl-2.8.18-1.3.31
Reported by: kris
|
|
|
|
|
|
|
|
|
| |
To run some (mod_perl) applications, a full expat library is needed, but the
built-in one conflicts with it. This patch allows you to build Apache without
the built-in expat so the other modules can load what they need.
PR: 66650
Submitted by: Vivek Khera
|
| |
|
|
|
|
| |
- detect fnmatch.h conficts
|
|
|
|
| |
Submitted by: nork
|
|
|
|
|
| |
Pointed out by: Dan Langille <dan@langille.org>
Pointy hat to: nork
|
|
|
|
|
|
|
|
|
| |
Submitted by: nork
WARNING installing the package will overwrite your "etc/rc.d/apache.sh"
installing from port is safe
- new option WITHOUT_RC_SUBR
|
| |
|
|
|
|
|
|
| |
Denis Shaposhnikov
- use PLIST_FILES for options
|
| |
|
|
|
|
|
|
| |
Submitted by: Denis Shaposhniko
- CONFLICTS extended
|
|
|
|
|
|
|
| |
Submitted by: Denis Shaposhnikov
- cleanup of all options
- CONFLICTS extended
|
|
|
|
| |
- cleanup mod_snmp option
|
|
|
|
|
|
|
|
|
|
| |
http://www.apacheweek.com/features/security-13
Source:
http://cvs.apache.org/viewcvs.cgi/apache-1.3/src/modules/standard/mod_access.c?r1=1.46&r2=1.47
Link from: nectar
Reviewed by: Munechika Sumikawa (IPV6)
|
| |
|
| |
|
|
|
|
| |
are selected.
|
|
|
|
| |
Problem found by: Subhi S Hashwa
|
|
|
|
|
|
|
| |
PR: 42427
Submitted by: sec@42.org
- fix Usage
|
| |
|
|
|
|
|
|
|
|
| |
PR: 43997
Submitted by: zin@the.ne.jp
- update to 2.8.16-1.3.29
- remove the now obsolte fixes.
|
|
|
|
| |
http://www.apache.org/dist/httpd/Announcement.html
|
| |
|
|
|
|
|
| |
- use DOCSDIR
Submitted by: eikemeier@fillmore-labs.com [CONFLICTS]
|
| |
|
| |
|
| |
|
|
|
|
| |
ports tree is mounted noexec.
|
| |
|
|
|
|
|
|
| |
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=21737
http://marc.theaimsgroup.com/?l=apache-httpd-dev&m=105952652425849&w=2
Suggested by: efortenb@sdccd.cc.ca.us
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
o new build options are APACHE_SUEXEC_CALLER, APACHE_SUEXEC_LOG,
APACHE_SUEXEC_UIDMIN, APACHE_SUEXEC_GIDMIN, APACHE_SUEXEC_SAFEPATH,
APACHE_SUEXEC_UMASK
o add APACHE_HARD_SERVER_LIMIT build option
o WITH_APACHE_PERF_TUNING changed to APACHE_PERF_TUNING
o add APACHE_FD_SETSIZE and APACHE_BUFFERED_LOGS build options
- separated from APACHE_PERF_TUNING
o CFLAGS option, used by APACHE_PERF_TUNING, is changed
o cosmetic changes
PR: 50455
Submitted by: drazen@avalon.hr
|
|
|
|
| |
PR: 36804
|
| |
|
|
|
|
|
| |
PR: 50688
Submitted by: mike@tric.tomsk.gov.ru
|
|
|
|
|
|
|
| |
when it tries to execute the pkg-install script.
The script resides in the ports tree and but not in the WRKDIR
PR: 50688
Submitted by: mike@tric.tomsk.gov.ru
|
| |
|
|
|
|
|
| |
openssl vulnerabilities. I double checked the checksums and
the Tarball Digital Signatures.
|
| |
|
|
|
|
|
| |
PR: 47984
Submitted by: Kimura Fuyuki <fuyuki@hadaly.org>
|
|
|
|
|
|
|
|
|
| |
defaults to openssl port (now 0.9.6.h)
New options:
use the lastest version (now 0.9.7)
USE_OPENSSL_BETA=yes
use teh base version with
USE_OPENSSL_BASE=yes
|
| |
|
|
|
|
|
|
|
|
| |
is better studied
o Turn PORTCOMMENT variable in Makefile back into pkg-comment files
Approved by: kris (portmgr hat),
portmgr, re (silence)
|
|
|
|
| |
Approved by: pat
|
|
|
|
|
|
|
|
|
| |
(XSS) security issue:
http://www.apacheweek.com/issues/02-10-25#security
http://www.mail-archive.com/modssl-users@modssl.org/msg15366.html
Note: This update does not fix ports/36804 - be sure to backup your
certificates before updating.
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Mark apache13-ssl FORBIDDEN because the new version does not yet exist.
Partially based on patches submitted by below authors.
Submitted by: "Sergey A. Osokin" <osa@freebsd.org.ru>,
Udo Schweigert <udo.schweigert@siemens.com>,
Lev A. Serebryakov <lev@serebryakov.spb.ru>
PR: ports/43682, ports/43688, ports/43666, ports/43681
|
|
|
|
|
| |
PR: 40791
Submitted by: Simon 'corecode' Schubert <corecode@corecode.ath.cx>
|
|
|
|
|
| |
PR: ports/41053
Submitted by: Scott Lampert <scott@lampert.org>
|
|
|
|
|
|
| |
PR: ports/40426
Submitted by: Brad Laue <brad@brad-x.com>
Reviewed by: tobez
|
|
|
|
|
| |
PR: ports/40019
Submitted by: Christopher H. Laco <chris.laco@threetech.com>
|
|
|
|
| |
- Use MASTER_SITES grouping
|
|
|
|
|
|
|
|
|
|
| |
- Fix clobbering ${PREFIX}/www on install and warnings coughing up
on deinstall when ${PREFIX}/www is not empty
- Remove pkg-deinstall
PR: ports/39645, ports/36804
Submitted by: Charles Sprickman <freebsd@fasttrackmonkey.com>,
Peter C. Lai <sirmoo@cowbert.2y.net>
|
|
|
|
| |
Fixes chunking vulnerability, so now no longer FORBIDDEN.
|
|
|
|
| |
Fixes chunking vulnerability, so now no longer FORBIDDEN.
|
|
|
|
| |
See <URL:http://httpd.apache.org/info/security_bulletin_20020617.txt>.
|
|
|
|
|
|
|
| |
( same hack as in suck, openssh and openssh-portable )
USE_OPENSSL should be improved, see PR: ports/36080
PR: 36080
|
|
|
|
|
| |
so it can be called within an path or dir.
e.g. in: /usr/local/etc/rc.local/apache.sh
|
| |
|
|
|
|
|
| |
- The standard apache distribution now comes with a FreeBSD layout
that is the same as the one that was in files/FreeBSD.layout
|
| |
|
| |
|
|
|
|
|
| |
PR: 34143
Submitted by: Peter Radavich <peter@hungry.com>
|
|
|
|
|
|
| |
After removing patch-src::modules::ssl::libssl.module this is useless.
Noticed by: Dmitry Petrov <DPetrov@nchcapital.com>
|
|
|
|
|
|
|
| |
because we have OpenSSL in the base system, now. Thus no need to fiddle
around with ${PREFIX}.
Reported by: many
|
|
|
|
|
| |
PR: 15123
Submitted by: Matt Behrens <matt@zigg.com>
|
|
|
|
| |
PR: 32536
|
|
|
|
| |
Don't put 'manual' link to the Apache manual.
|
|
|
|
| |
Add symbolic link to apache's manual into pkg-plist.
|
|
|
|
| |
Found by: bento
|
| |
|
| |
|
| |
|
|
|
|
|
| |
usually don't have the time to update this port as fast as people seem
to expect. This way anyone can jump in and help out.
|
|
|
|
| |
Submitted by: Masahiro TAKEMURA <mastake@msel.t.u-tokyo.ac.jp>
|
| |
|
| |
|
|
|
|
| |
http://www.apache.org/dist/ -> http://www.apache.org/dist/httpd/
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
Approved by: asami
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
space as www/apache13 does, so that other apache-dependendent ports
DTRT regardless of which one is installed.
Nothing concrete (other than we're working on a real cleanup of the
apache ports) has been heard from any of the maintainers. Obviously
that is the best solution, but with 4.2-RELEASE just around the
corner, we have an opportunity here to at least remove a few bogons.
Both times I've raised this issue on -ports, however, there has been
significant interest in the patches, and now plenty of confirmations
that the modifications do not break the port in other ways.
|
|
|
|
|
| |
Apache 1.3.12 -> 1.3.14
mod_ssl 2.6.6 -> 2.7.1
|
|
|
|
|
|
|
| |
it is no longer required. Apologies to the various maintainers whom I
did not yet hear back from, but the ports freeze is coming up in a few
hours and I will be verifying all of these ports on a 4.1 machine
myself to catch any problems.
|
| |
|
| |
|
|
|
|
| |
This especially fixes two nasty segfault situations.
|
|
|
|
|
|
|
| |
options `start' and `stop' now (unless I have forgotten any). This allows
us to call the scripts from /etc/rc.shutdown with the correct option.
The (42 or so) ports that already DTRT before are unchanged.
|
| |
|
|
|
|
| |
- Support for FreeBSD 5.0-CURRENT
|
| |
|
| |
|
|
|
|
| |
all config files rather than just the old default files.
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
changes in the base system.
Submitted by: Jim Bloom <bloom@acm.org>
|
| |
|
|
|
|
| |
Submitted by: Jim Bloom <bloom@acm.org>
|
| |
|
|
|
|
| |
Submitted by: Jim Bloom <bloom@acm.org>
|
| |
|
| |
|
| |
|
|
|
|
| |
because openssl also builds shared libraries, now.
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
chown -> ${CHOWN}
|
|
|
|
| |
Upgrade to Apache 1.3.9 and mod_ssl 2.4.0
|
|
|
|
| |
(Thanks to Dirk for catching this ;)
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
| |
apache-1.3.6+mod_ssl-2.3.3 -> apache+mod_ssl-1.3.6+2.3.3
apache-1.3.6+ssl_1.35 -> apache+ssl-1.3.6+1.35
Reviewed by: maintainers of both ports
|
|
|
|
|
|
|
|
|
|
|
|
| |
[Has anyone figured-out what makes the number 393 so interesting to PW, now?]
I wonder what was going through Jordan's head during his infamous
$Id$-smashing commit.
Before I forget....
Thanks to naddy@mips.rhein-neckar.de (Christian Weisgerber) for prompting
this commit. See msg-id: 7geokh$tje$1@mips.rhein-neckar.de
|
|
|
|
| |
(this mainly solves core dumps for HTTPS which were recently introduced)
|
|
|
|
| |
[2.3.2 -> 2.3.3]
|
|
|
|
|
| |
This especially makes the new Shared Memory based SSL session cache available
through the use the MM port.
|
|
|
|
| |
Submitted by: Ralf S. Engelschall <rse@FreeBSD.org> (maintainer)
|
| |
|
| |
|
|
|
|
| |
Thanks to Dirk Froemberg <dirk@freebsd.org> for hint.
|
| |
|
|
|
|
| |
OK'ed by: Ralf S. Engelschall <rse@engelschall.com> (maintainer)
|
|
|
|
| |
- Cleaned up the port
|
|
|
|
|
|
| |
This fixes two really nasty bugs, so users are encouraged to upgrade.
Additionally a little bit more portlint cleanups were done and switched to
HAS_CONFIGURE from GNU_CONFIGURE now that we've the CONFIG_TARGET stuff...
|
|
|
|
| |
Noticed By: #FreeBSD
|
|
|
|
|
|
|
|
|
|
|
| |
MASTER_SITEs
were alternated so the user does not have to get 10 apache MASTER_SITEs when all
they need is one 'mod' MASTER_SITE, which is what would happen if we used a
MASTER_SITE_APACHE or added all of the mirrors in a row.
Approved By: apache maintainers, asami
Submitted By: Brian Feldman <green@unixhelp.org>, billf
|
|
|
|
|
| |
PS: This mod_ssl version has two really nasty bugs fixed,
so you're strongly encouraged to upgrade.
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
| |
- Upgrade to mod_ssl 2.1.7
- Add additional master site
- Add Y2K link
- Make portlint happy
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This is the first port version for the new mod_ssl version 2.1.
As a summary, here are its main SSL/TLS-related features:
o Open-Source software (BSD-style license)
o Useable for both commercial and non-commercial use
o Available for both Unix and Win32 platforms
o 128-bit strong cryptography world-wide
o Support for SSLv2, SSLv3 and TLSv1 protocols
o Clean reviewable ANSI C source code
o Clean Apache module architecture
o Integrates seamlessly into Apache through an Extended API (EAPI)
o Full Dynamic Shared Object (DSO) support
o Support for the SSLeay+RSAref US-situation
o Advanced pass-phrase handling for private keys
o X.509 certificate based authentication for both client and server
o Additional boolean-expression based access control facility
o Backward compatibility to other Apache SSL solutions
o Inter-process SSL session cache
o Powerful dedicated SSL engine logging facility
o Simple and robust application to Apache source trees
o Fully integrated into the Apache 1.3 configuration mechanism
o Additional integration into the Apache Autoconf-style Interface (APACI)
o Assistance in X.509 v3 certificate generation
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- use mod_ssl 2.0.10 which automatically disables
DSO for mod_log_config and mod_proxy which caused
problems for the port
- use mod_auth_dbm instead of mod_auth_db because
first DBM is internally mapped to our DB (so
functionality is the same) and this way we
get rid of the nasty conflicts with DB 2.x port.
- fixed the package list, i.e. the port
now packages and deletes correctly
- automatically create dummy certificate, so
the package can be tested immediately after
installing.
- use "apachectl startssl" instead of "apachectl start"
from within apache.sh rc script now.
- removed the outcommented patch pieces for Makefile.tmpl
because they are confusing both inside patches/patch-ab
and under install time.
- use a "post-patch" target to remove all .orig files
mod_ssl's configure script created to avoid their
installation (which confuses the package list).
|
| |
|
| |
|
| |
|
|
|
|
|
| |
(This version now automatically recognizes whether
SSLeay was build in conjunction with RSAref or not)
|
|
the original Apache 1.3.1 with mod_ssl 2.0.5 (the Apache
Interface to SSLeay).
|