summaryrefslogtreecommitdiff
path: root/www/squid
AgeCommit message (Collapse)AuthorFilesLines
2002-12-09Replace "true" by "${TRUE}".tron1-2/+2
2002-12-03regen (squid-2.5.STABLE1-disable-http-violations.patch size and SHA1 change)wiz1-3/+3
2002-12-02If we include buildlink2.mk files, we need to turn on USE_BUILDLINK2grant1-15/+17
:-) Fixes openssl dependancy problem on platforms which do not have a suitable (read: secure) openssl in the base system. Some whitespace cleanup.
2002-12-01src/fs/diskd: only include sys/msg.h if we have it.grant4-1/+55
fixes build on (at least) Darwin 6.2.
2002-11-25Update squid package to squid-2.5.1nb2.taca3-7/+8
- Apply disabled official patch since the patch's content has corrected. * Impossible to define acls with spaces in them - Remove "@unexec ${RMDIR} %D/etc/squid ..." line from PLIST since there is already removing directory line which use more generic PKG_SYSCONFDIR variable.
2002-11-25List Takahiro Kambe as new maintainer of this package.tron1-2/+2
2002-11-24Update squid 2.5.1STABLE1nb1.taca2-4/+54
Apply official patches: * Small typo in dnsserver error message on DNS overload * Filter out unproxyable authentication schemes * cachemgr login & password revealed in HTTP server log files * make uninstall removes squid.conf * Segmentation fault if a external_acl helper exits prematurely * Squid rejects GET/HEAD with request entities claimint error 411 * external_acl.c compilation failure * memory leak of acl structures on "squid -k reconfigure" * Occasional corruption of objects when using aufs * Cachemgr "Total accounted:" memory statistics always report "-1" * WCCP hash assignment can sometimes be missed by the router * external_acl helper problem with spaces * --enable-async-io or --with-storeio=aufs fails to automatically enable --with-pthreads * "make addlang" fails * Specifying LDAP servers last on the command line does not work * Referer log not closed on shutdown * Many files missing from the contrib directory But the most recent patch isn't included since it content seems to be broken. * Impossible to define acls with spaces in them
2002-11-12Move libexec/squid_unix_group and man/man8/squid_unix_group.8 from PLISTtaca2-6/+4
to OPTIONAL_FILES in Makefile. This fix a problem when setting SQUID_CONFIGURE_ARGS in /etc/mk.conf without --enable-external-acl-helpers=unix_group. Noted by private mail from Tomasz Luchowski <tomasz at luchowski.com>.
2002-11-02fix some typos.grant1-3/+3
2002-10-25Fix error in make install; extra "; \" were exists.taca2-5/+5
It cause error on Solaris. (Why NetBSD's make was OK?)
2002-10-13Update squid to 2.5.1 with several patches fromtaca16-1110/+320
http://www.squid-cache.org/Versions/v2/2.5/bugs/. Now try to install more authentication modules, but those modules should be handled by proper frame work (Curretly, SASL modules aren't handled). Changes to squid-2.5 (): - Major rewrite of proxy authentication to support other schemes than basic. First in the line is NTLM support but others can easily be added (minimal digest is present). See Programmers Guide. (Robert Collins & Francesco Chemolli) - Reworked how request bodies are passed down to the protocols. Now all client side processing is inside client_side.c, and the pass and pump modules is no longer used. - Optimized searching in proxy_auth and ident ACL types. Squid should now handle large access lists a lot more efficiently. (Francesco Chemolli) - Fixed forwarding/peer loop detection code (Brian Degenhardt) - now a peer is ignored if it turns out to be us, rather than committing suicide - Changed the internal URL code to obey appendDomain for internal objects if it needs appending. This fixes weirdnesses where a machine can think it is "foo.bar.com", and "foo" is requested. (Brian Degenhardt) - Added the use of Automake to create the Makefile.in's in the squid source tree. This will allow libtool in the future, and immediately allows better dependency tracking - with or without gcc - as well as the dist-all and distcheck targets for developers which respectively build a tar.gz and a tar.bz2 distribution, and check that what will be distributed builds. - Added TOS and source address selection based on ACLs, written by Roger Venning. This allows administrators to set the TOS precedence bits and/or the source IP from a set of available IPs based upon some ACLs, generally to map different users to different outgoing links and traffic profiles. - Added 'max-conn' option to 'cache_peer' - Added SSL gatewaying support, allowing Squid to act as a SSL server in accelerator setups. - SASL authentication helper by Ian Castle - msntauth updated to v2.0.3 - no_cache now applies to cache hits as well as cache misses - the Gopher client in Squid has been significantly improved - Squid now sanity checks FTP data connections to ensure the connection is from the requested server. Can be disabled if needed by turning off the ftp_sanitycheck option. - external acl support. A mechanism where flexible ACL checks can be driven by external helpers. See the external_acl_type and acl external directives. - Countless other small things and fixes - HTML pages generated by Squid or CacheMgr as well as the ERR documents now contain a doctype declaration so that browsers know which HTML specification the document uses. In addition to that they have a new look (background-color, font) and are valid according to the HTML standards at www.w3.org. (Clemens Löser) - Login and password send to Basic auth helpers is now URL escaped to allow for spaces and other "odd" characters in logins and passwords - Proxy Authentication is no longer blindly forwarded to peer caches if not used locally. If forwarding of proxy authentication is desired then it must now be configured with the login=PASS cache_peer option. - Responses with Vary: in the header are now cached by squid. (Henrik Nordstrom). - Removed unused 'siteselect_timeout' directive.
2002-10-07Add a note about SYSV IPC kernel paramters for diskd. Fixes PR pkg/18558bouyer1-1/+16
2002-09-27* Add "createdirs" command to create initial cache directories.grant1-8/+18
* s/echo/@ECHO@/ for portability. ok'd by seb.
2002-09-24Complete standardization of messages according to latest pkglint.wiz1-3/+3
2002-09-20Make these scripts more portable by taking advantage of automatic rc.dgrant1-2/+2
script handling and using @RCD_SCRIPTS_SHELL@. as discussed with jlam.
2002-09-19Take advantage of the auto-generation and installation of rc.d scripts.jlam1-5/+1
2002-09-15* make use of PKG_SYSCONFDIR in rc script.grant5-53/+27
* use bsd.pkg.install.mk for rc script and config file installation. Checked by Stoned Elipot <seb@netbsd.org>.
2002-08-26deprecate SQUID_SYSCONFDIR in favour of PKG_SYSCONFDIR.squidgrant1-10/+9
2002-07-24Change explicit build dependencies on perl into "USE_PERL5=build". Thisjlam1-2/+2
makes these packages build correctly on Darwin where perl>=5.8.0 is required.
2002-07-04Update "squid" package to version 2.4STABLE7. Changes since versiontron2-6/+6
2.4STABLE6: - Squid now drops any requests using transfer-encoding. Squid is a HTTP/1.0 proxy and as such do not support the use of transfer-encoding. - The MSNT auth helper has been updated to v2.0.3+fixes for buffer overflow security issues found in this helper. - A security issue in how Squid forwards proxy authentication credentials has been fixed - Minor changes to support Apple MAC OS X and some other platforms more easily. - The client -T option has been implemented - HTCP related bugfixes in "squid -k reconfigure" - Several bugfixes and cleanup of the Gopher client, both to correct some security issues and to make Squid properly render certain Gopher menus. - FTP data channels are now sanity checked to match the address of the requested FTP server. This to prevent theft or injection of data. See the new ftp_sanitycheck directive if this is not desired. - Security fixes in how Squid parses FTP directory listings into HTML
2002-06-26Substitute a couple of `mkdir' by `${MKDIR}'.seb1-2/+2
Remove `-p' from mkdir arguments, it is already part of ${MKDIR}. While here substitute a couple of ${PREFIX} by `%D' in `@exec ${MKDIR} ...' lines and add a couple of missing `%D' in such lines too!
2002-03-23Fix for PKG_SYSCONFDIR -- the compiled-in paths should now be correct.kim2-14/+6
2002-03-22Change "squid" package to honor "PKG_SYSCONFDIR" completely. This fixestron5-21/+22
PR pkg/15775 by Kimmo Suominen.
2002-03-20Update squid package to 2.4.6 (squid-2.4.STABLE6).taca2-7/+6
This fixes squid's potential security problem. Changes to Squid-2.4.STABLE6 (March 19, 2002): - The patch for 2.4.STABLE5 was insufficnetly tested and introduced a bug that causes frequent assertions when handling DNS PTR answers. Changes to Squid-2.4.STABLE5 (March 15, 2002): - Fixed an array bounds bug in lib/rfc1035.c. This bug could allow a malicious DNS server to send bogus replies and corrupt the heap memory.
2002-03-18Fix thinko in last commit.tron1-2/+2
2002-03-18Define "start_cmd" so that this script works under NetBSD 1.4.x. Problemtron1-1/+2
noted by Mipam in private e-mail.
2002-03-03Include HAVE_SETPROCTITLE in autoconf.h.in. Thought setproctitle() istaca3-2/+18
already checked in configure script, but it is need to define/undef in a generated header file. Bump to squid 2.4.4nb1.
2002-02-24Fix build problems on systems without setproctitle(3).veego4-22/+862
Check setproctitle in the configure script and remove the define in patch-ba.
2002-02-22Update "squid" package to version 2.4STABLE4. Changes since versiontron2-19/+6
2.4STABLE3: - htcp_port 0 now properly disables htcp - Fixed problem with certain non-anonymous ftp:// style URL's - SNMP bugfixes including several memory leaks
2002-02-19squid-2.4.STABLE3-SNMP_memory_leaks.patch has been updated and checks out thejmc1-3/+3
same from all 3 master sites. Updating distinfo
2002-02-18Update squid to squid-2.4.3nb1.taca4-29/+118
- replace a hack adding fd_mask definition in autoconf.h with re-writing configure script. It cause to run configure twice and result "no fd_mask". - Incorporate three official patches from http://www.squid-cache.org/Versions/v2/2.4/bugs/. o SNMP memory leaks synopsis The SNMP implementation in Squid had several memory leaks possibly causing an denial of service. workaround Disable the SNMP port if enabled by using "snmp_port 0" in squid.conf. Or if you only use SNMP for MRTG data collection running on the same host then use "snmp_incoming_address 127.0.0.1" to limit reachability of the SNMP port to only localhost or some other trusted network. o Coredump on certain ftp:// style URL's synopsis If certain constructed ftp:// style URL's are received then squid crashes, causing a denial of service and maybe even remote execution of code. workaround Deny forwarding of non-anonymous FTP URLs by inserting the following rules at the top of squid.conf, prior to any http_access allow lines. acl non_anonymous_ftp url_regex -i ftp://[^/@]*@ http_access deny non_anonymous_ftp o "htcp_port 0" fails to disable the HTCP port synopsis "htcp_port 0" fails to completely disable the HTCP port as documented in squid.conf, instead HTCP will be listening on a random port number.
2002-02-10Create ${PREFIX}/etc/squid during pre-install, so copying the defaultveego1-1/+2
config file doesn't fail.
2001-12-12Update squid to 2.4.3 (squid-2.4.STABLE3), referring to tech-pkg's mailtaca8-27/+110
from "Ciarcinski, Adam \(ISS Brussels\)" <ACiarcinski@iss.net>. From ChangeLog: Changes to Squid-2.4.STABLE3 (Nov 28, 2001): - Fixed bug #255: core dump on SSL/CONNECT if access denied by miss_access - Fixed bug #246: corrupt on-disk meta information preventing rebuilds of lost swap.state files - Fixed bug #243: squid_ldap_auth now supports spaces in passwords - Fixed a coredump when creating FTP directories - Fixed a compile time problem with statHistDump prototype mistmatch, reported by some compilers - Fixed a potential coredump situation on snmpwalk in certain configurations - Fixed bug #229: filedescriptor leakage in the "aufs" cache_dir store implementation - Serbian error message translations I added following changes, too. o honor PKG_SYSCONFDIR keep SQUID_SYSCONFDIR effective. o Add --disable-internal-dns. This made external dnsserver available. External dnsserver could be disabled with configuration file. o Enable optimization with "-O". o Fix a problem to access nat device when transparent proxy enabled. This fix will be contained in squid 2.5 release. o setproctitle() hack for external dnsserver from daemonnews's article.
2001-11-23Fix problems caused by recent changes: the example configuration files gettron5-22/+38
installed into "etc/squid" (and are not moved arround after installation). The message of the install script matches the actual layout again and is adapted to changes to "SQUID_SYSCONFDIR".
2001-11-17Config files cannot be forced into ${PREFIX}.kim2-7/+12
2001-11-08Correct path for configuration files in installation instructions. Problemtron1-2/+2
noted by Hubert Feyrer in private e-mail.
2001-11-06Use "--enable-storeio=ufs,diskd" instead of "--enable-storeio=diskd" totron1-2/+2
get "ufs" storage type build again because we will otherwise break lots of existing configurations. Problem pointed out by Simon Burge via e-mail.
2001-11-06Activate store type "diskd" by default as suggested by Grant Beattie intron1-3/+4
PR pkg/14476.
2001-11-01Move pkg/ files into package's toplevel directoryzuntum3-2/+2
2001-10-09Update "squid" package to 2.4.STABLE2. Changes since 2.4.STABLE1:tron2-26/+6
- Expanded configure's GCC opimization disabling check to include GCC 2.95.3 - avoid negative served_date in storeTimestampsSet(). - Made 'diskd' pathnames more configurable - Make sure squid parent dies if child is killed with KILL signal - Changed diskd offset args to off_t instead of int - Fixed bugs #102, #101, #205: various problems with useragent log files - Fixed bug #116: Large Age: values still cause problems - Fixed bug #119: Floating point exception in storeDirUpdateSwapSize() - Fixed bug #114: usernames not logged with authenticate_ip_ttl_is_strict - Fixed bug #115: squid eating up ressources (eventAdd args) - Fixed bug #125: garbage HTCP requests cause assertion - Fixed bug #134: 'virtual port' support ignores httpd_accel_port, causes a loop in httpd_accel mode - Fixed bug #135: assertion failed: logfile.c:135: "lf->offset <= lf->bufsz" - Fixed bug #137: Ranges on misses are over-done - Fixed bug #160: referer_log doesn't seem to work - Fixed bug #162: some memory leaks (SNMP, delay_pools, comm_dns_incoming histogram) - Fixed bug #165: "Store Mem Buffer" leaks badly - Fixed bug #172: Ident Based ACLs fail when applied to cache_peer_access - Fixed bug #177: LinuxPPC 2000 segfault bug due to varargs abuse - Fixed bug #182: 'config' cachemgr option dumps core with null storage - Fixed bug #185: storeDiskdDirParseQ[12]() use wrong number of args in debug/printf - Fixed bug #187: bugs in lib/base64.c - Fixed bug #184: storeDiskdShmGet() assertion; changed diskd to use bitmap instead of linked list - Fixed bug #194: Compilation fails on index() on some non-BSD plaforms - Fixed bug #197: refreshIsCachable() incorrectly checks entry->mem_obj->reply - Fixed bug #215: NULL pointer access for proxy requests in accel-only mode
2001-09-18Adapt package list to configuration options dynamically. This fixestron2-12/+15
PR pkg/13971 by David Sainty.
2001-09-18Wait upto 60 instead of 20 seconds for "squid" to terminate.tron1-4/+4
2001-07-30Remove "--enable-parent-hack" now that "squid" is invoked withouttron1-2/+1
"RunCache" again.
2001-07-30Rework startup script:tron2-17/+25
- We don't want to wait forever until "squid" terminates. Wait at most 20 seconds after a shutdown command use "kill" afterwards. - Don't use "RunCache" to start "squid", it is not necessary and only causes trouble. - Bring the "rotate" command which got lost in last update. Bump package version number to 2.4.1nb2.
2001-07-29Remove commands to create data directories which could break existingtron1-3/+1
squid installations. These directories should be created by the administrator after selecting the proper directory.
2001-07-29- Apply some of the changes suggested by Greg A. Woods in PR 13427 andtron6-69/+111
include his improved "rc.d" script. - Use the same directory structure as in the Apache package. The configuration files are now in "${PREFIX}/etc/squid" and won't be removed during deinstallation. - Remove unnecessary configuration variables "SQUID_HTTP_PORT" and "SQUID_ICP_PORT". These values can perfectly be adjusted by editing the configuration file and supporting all these variables would make the package too complex. - Bump the version number to 2.4.1nb1.
2001-05-21Add missing "Size" entries.tron1-1/+8
2001-05-10Add missing "shutdown" keyword in startup file.tron1-1/+2
2001-05-01o remove whitespace from Makefilewennmach3-4/+6
o add $NetBSD$ RCS tag to patch-ab o regen distinfo
2001-04-30Change build dependency from perl-5.* to perl>=${PERL5_REQD}.jlam1-2/+2
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-15 06:05:58 +0000