summaryrefslogtreecommitdiff
path: root/www/ap-ssl
AgeCommit message (Collapse)AuthorFilesLines
2010-02-16DESTDIR supportjoerg1-26/+26
2010-02-10Hack this to build against Apache 1.3.42. As 1.3.42 doesn't changedholland3-4/+15
anything significant in the internals, all this requires is patching the accepted version and bumping BUILDLINK_API_DEPENDS. PKGREVISION++.
2010-01-17Recursive PKGREVISION bump for jpeg update to 8.wiz1-1/+2
2009-06-14Convert @exec/@unexec to @pkgdir or drop it.joerg1-10/+1
2008-02-24Update ap-ssl to 2.8.31.obache2-9/+8
2.8.31: For Apache 1.3.41 2.8.30: Bug Fix 2.8.29: For Apache 1.3.39
2008-01-18Per the process outlined in revbump(1), perform a recursive revbumptnn1-1/+2
on packages that are affected by the switch from the openssl 0.9.7 branch to the 0.9.8 branch. ok jlam@
2007-12-02Remove Ex-MASTER_SITE. From Zafer Aydogan.wiz1-3/+2
2007-06-10Resort Apache dependency to get the more specific pattern first.joerg1-3/+4
2006-07-30Update to 2.8.28, for apache-1.3.37jdolecek2-8/+8
No changes besides the apache version update.
2006-07-23Update to 2.8.27, for apache-1.3.36.wiz2-8/+8
Fixes PR 34060. Changes unknown.
2006-06-02Rename all PHP 4 packages to php4-*, all PHP 5 packages to php5-*,joerg1-3/+3
all PEAR packages to php?-pear-* and all Apache packages to ap13-* or ap2-* respectively. Add new variables to simplify the Makefile handling. Add CONFLICTS on the old names. Reset revisions of bumped packages. ap-php will now depend on the default Apache and PHP version. All programs using it have an implicit option of the Apache version as well. OK from jlam@ and adrianp@.
2006-04-06Over 1200 files touched but no revisions bumped :)reed1-2/+2
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-03-04Point MAINTAINER to pkgsrc-users@NetBSD.org in the case where nojlam1-2/+2
developer is officially maintaining the package. The rationale for changing this from "tech-pkg" to "pkgsrc-users" is that it implies that any user can try to maintain the package (by submitting patches to the mailing list). Since the folks most likely to care about the package are the folks that want to use it or are already using it, this would leverage the energy of users who aren't developers.
2006-02-05Recursive revision bump / recommended bump for gettext ABI change.joerg1-2/+2
2006-01-24Bump BUILDLINK_RECOMMENDED of textproc/expat to 2.0.0 becausewiz1-1/+2
of the shlib major bump. PKGREVISION++ for the dependencies.
2006-01-05Use SUBST framework, patch files directly.joerg3-21/+18
2005-12-29Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mkjlam1-2/+1
automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
2005-12-05Ran "pkglint --autofix", which corrected some of the quoting issues inrillig1-2/+2
CONFIGURE_ARGS.
2005-12-05Fixed pkglint warnings. The warnings are mostly quoting issues, forrillig1-3/+3
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-10-19Update to mod_ssl 2.8.25. The only change is support for apache 1.3.34.bouyer2-7/+7
2005-09-16Update ap-ssl to version 2.8.24.salo2-7/+7
- Fix a security issue (CAN-2005-2700) where "SSLVerifyClient require" was not enforced in per-location context if "SSLVerifyClient optional" was configured in the global virtual host configuration. Sync apache with the latest ap-ssl.
2005-08-19Merge CONF_FILES/SUPPORT_FILES and CONF_FILES_PERMS/SUPPORT_FILES_PERMSjlam1-5/+5
as the INSTALL and DEINSTALL scripts no longer distinguish between the two types of files. Drop SUPPORT_FILES{,_PERMS} and modify the packages in pkgsrc accordingly.
2005-07-14Update to 2.8.23:wiz4-26/+12
Changes with mod_ssl 2.8.23 (30-Oct-2004 to 06-Jul-2005) *) Ported to OpenSSL 0.9.8 *) Fixed connection timeout handling by calling the EAPI connection close hook after (and not before) the B_OUT flag was set on the underlying I/O buffer in order to prevent attempted buffer flushes from blocking the connection. *) Updated the ca-bundle.crt file from Mozilla's "certdata.txt" (CVS revision 1.37). *) Fix timeout handling in POST request processing by resetting timeouts. *) Fixed double-definition of OPENSSL_free under OpenSSL 0.9.6 by fixing the version test in ssl_util_ssl.h *) Adjusted all copyright messages to contain the new year 2005 ;)
2005-04-11Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.tv1-2/+1
2005-02-24Add RMD160 checksums.wiz1-1/+2
2005-02-18Remove ASCII art and drop some whitespace; |fmt.wiz1-16/+10
2005-02-18Unused after update to 2.8.22.wiz1-7/+0
2005-02-18Update to 2.8.22:wiz2-9/+7
Changes with mod_ssl 2.8.22 (22-Oct-2004 to 30-Oct-2004) *) Upgraded to Apache 1.3.33
2004-10-29Update to ap-ssl-2.8.21nb1abs3-2/+11
Patch to work against apache 1.3.32
2004-10-25Update "ap-ssl" package to version 2.8.21. Changes since version 2.8.20:tron2-7/+7
- Upgraded to Apache 1.3.32
2004-10-18Update "ap-ssl" package to version 2.8.20. Changes since version 2.8.19:tron2-7/+6
- With OpenSSL 0.9.7, prevent session resumption during a renegotiation to force the client to negotiate a new (and acceptable to mod_ssl) cipher suite. Additionally, ensure that a correct cipher suite has been negotiated afterwards (CAN-2004-0885). - Fixed more printf(3) style format string bugs (not security related) which could crash the server if mod_ssl's trace or debug log level is enabled.
2004-10-03Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10tv1-1/+2
in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include.
2004-08-27Replace RPATH_FLAG with LINKER_RPATH_FLAG and COMPILER_RPATH_FLAG,jlam1-2/+2
which are the full option names used to set rpath directives for the linker and the compiler, respectively. In places were we are invoking the linker, use "${LINKER_RPATH_FLAG} <path>", where the space is inserted in case the flag is a word, e.g. -rpath. The default values of *_RPATH_FLAG are set by the compiler/*.mk files, depending on the compiler that you use. They may be overridden on a ${OPSYS}-specific basis by setting _OPSYS_LINKER_RPATH_FLAG and _OPSYS_COMPILER_RPATH_FLAG, respectively. Garbage-collect _OPSYS_RPATH_NAME and _COMPILER_LD_FLAG.
2004-07-17Update "ap-ssl" package to version 2.8.19:tron2-6/+6
- Fix ssl_log() related format string vulnerability in mod_proxy hook functions.
2004-05-30updated mod_ssl to 2.8.18.grant2-7/+7
- fix installation of example README.CSR. Changes with mod_ssl 2.8.18 (11-May-2004 to 27-May-2004) *) Fix buffer overflow in "SSLOptions +FakeBasicAuth" implementation if the Subject-DN in the client certificate exceeds 6KB in length. (CVE CAN-2004-0488). *) Handle the case of OpenSSL retry requests after interrupted system calls during the SSL handshake phase. *) Remove some unused functions.
2004-05-13Update ap-ssl package (mod_ssl) to 2.8.17.taca2-8/+7
Changes with mod_ssl 2.8.17 (01-Nov-2003 to 11-May-2004) *) Upgraded to Apache 1.3.31 *) Log the OpenSSL error stack contents if the crypto engine load/init fails. *) Fixed segfault in lookup of variable SESSION_ID in case SSL_get_session() returns NULL. *) Bugfix "dbm" session cache: the DBM file was closed too early (before accessing the data). *) Bugfix "shmcb" session cache for situations where the session data is bigger than the cache size. *) Adjusted all copyright messages to contain the new year 2004 ;)
2004-04-26bl3ifyjlam1-8/+8
2004-04-24Relinquish maintainership of packages to tech-pkg@NetBSD.org.jlam1-2/+2
2004-03-26PKGREVISION bump after openssl-security-fix-update to 0.9.6m.wiz1-2/+2
Buildlink files: RECOMMENDED version changed to current version.
2003-11-12PKGREVISION++ after openssl update.jschauma1-1/+2
2003-11-02Updated ap-ssl to 2.8.16.grant2-7/+7
Major changes since 2.8.15: *) Upgraded to Apache 1.3.29 *) Avoid memory corruption in certificate handling caused by a heap memory double-freeing situation. *) Allow "HTTPS" variable to be passed through by suEXEC. *) Clear the OpenSSL error code in pass phrase reading code to workaround the following situation: multiple keys, all with different passphrases -- entering the correct pass phrase at each prompt leads to an OpenSSL error message after the last prompt. *) Reverted the recent change where ap_cleanup_for_exec() called ap_kill_alloc_shared(). This caused nasty side-effects in other processes and is not necessary at all (because shared memory segments are not inherited across exec). *) mod_ssl was checking the OpenSSL error reason code against SSL_R_HTTP_REQUEST and concluded the result is an SSL error. Since OpenSSL reason codes are not unique, this isn't always the case. It now additionally checks that the library is the SSL library.
2003-09-12kill all references to gcc.buildlink2.mk and compiler.mk, and definegrant1-2/+1
USE_GCC2 or USE_GCC3 where appropriate. the functionality of the old gcc.buildlink2.mk has been rolled into compiler.mk now, which is automatically used. more changes to come later...
2003-07-19Update "ap-ssl" package to version 2.8.15. Changes since version 2.8.14:tron2-7/+7
- Upgraded to Apache 1.3.28 - Take over security fix from Apache 2.0 related to per-directory renogotiations.
2003-07-17s/netbsd.org/NetBSD.org/grant1-2/+2
2003-05-27use mk/gcc.buildlink2.mkgrant1-2/+2
2003-05-06Drop trailing whitespace. Ok'ed by wiz.jmmv1-4/+4
2003-04-15include lang/gcc/buildlink2.mk, so this can find libgcc from lang/gccgrant1-1/+2
if we're using it.
2003-04-10Update to 2.8.14:wiz3-8/+21
Changes with mod_ssl 2.8.14 (18-Mar-2002 to 21-Mar-2003) *) Fixed logic in the destruction of a temporary certificate structure and this way avoid a crash due to freeing NULL object. *) Removed one newly introduced X509_free() call in the context of SSL_get_certificate(), because this function does not increment a reference count (although SSL_get_peer_certificate() does). *) Fixed hash-table based shared memory session cache (shmht) implementation by making sure that the underlying hash table library does not crash if memory cannot be allocated. Changes with mod_ssl 2.8.13 (23-Oct-2002 to 18-Mar-2003) *) Always enforce RSA blinding on RSA private keys in order to be resistent to timing attacks. *) Added timeout also to the "pre-sucking" of the trailing data in POST request handling. *) Correctly shutdown shared memory pools on fork+exec situations. *) Bugfix SSL client certificate verification: OpenSSL was not informed with SSL_set_verify_result(ssl, X509_V_OK) in case mod_ssl forced the verification to be ok. *) Consistently use OPENSSL_free() instead of plain free() to deallocate memory chunks allocated inside OpenSSL. *) Fixed various memory leaks related to X509 certificates. New patch-ac sent to maintainer.
2003-03-14(1) Publicly export the value of _OPSYS_RPATH_NAME as RPATH_FLAG;jlam1-4/+4
Makefiles simply need to use this value often, for better or for worse. (2) Create a new variable FIX_RPATH that lists variables that should be cleansed of -R or -rpath values if ${_USE_RPATH} is "no". By default, FIX_RPATH contains LIBS, X11_LDFLAGS, and LDFLAGS, and additional variables may be appended from package Makefiles.
2003-01-28Instead of including bsd.pkg.install.mk directly in a package Makefile,jlam1-2/+2
have it be automatically included by bsd.pkg.mk if USE_PKGINSTALL is set to "YES". This enforces the requirement that bsd.pkg.install.mk be included at the end of a package Makefile. Idea suggested by Julio M. Merino Vidal <jmmv at menta.net>.
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-02 13:21:57 +0000