summaryrefslogtreecommitdiff
path: root/www/apache22 (follow)
Commit message (Collapse)AuthorAgeFilesLines
* www/mod_antilorisBernard Spil2018-04-1642-4070/+0
| | | | | | | | | | | | | | | | | | | | | | | | www/mod_auth_imap2 www/mod_authn_sasl www/mod_bw www/mod_cband www/mod_clamav www/mod_extract_forwarded www/mod_hosts_access www/mod_log_config-st www/mod_log_mysql www/mod_log_sql2-dtc www/mod_macro22 www/mod_musicindex www/mod_ntlm2 www/mod_proxy_html www/mod_remoteip www/mod_spdy www/mod_uid www/mod_vhost_ldap www/mod_whatkilledus www/mod_xml2enc 2017-07-01 www/apache22: Upstream propose EoL of apache 2.2.x during the next 12 months
* devel/apr1: Bump portrevisionBernard Spil2018-03-211-1/+1
| | | | | | | - Repair my rookie mistake of earlier today - Bump revision of dependent ports (again) Reported by: antoine
* devel/apr1: Fix runtime issues of dependent portBernard Spil2018-03-211-1/+1
| | | | | | | | | | - iconv is in base in all supported FreeBSD versions - Fix build with MariaDB 10.2 [2] - Bump portrevision in dependencies PR: 226705 [1], 226026 [2] With hat: apache Approved by: joneum (apache)
* Mk/Uses/apache.mk: Migrate Mk/bsd.apache.mk to UsesBernard Spil2018-03-112-8/+4
| | | | | | | | | | | | | - Chase required changes in framework (bsd.sanity.mk, bsd.port.mk) - Chase required changes in ports (version checks) - Chase required changes in PHP ports (include bsd.apache.mk) - exp-run by antoine, brnrd, joneum PR: 223691 (exp-run) Reviewed by: joneum (hat apache), mat (portmgr), antoine (portmgr) Approved by: joneum (hat apache) Approved by: portmgr With hat: apache
* www/apache22: Add upstream fixBernard Spil2018-02-242-1/+28
| | | | | - Upstream fixes no longer released as point versions - Register BROKEN with various libssl providers
* - Add backport of patch for CVE-2017-9798Ryan Steinmetz2017-09-192-1/+22
| | | | | | | - Bump PORTREVISION Approved by: ports-secteam (with hat) Security: 76b085e2-9d33-11e7-9260-000c292ee6b8
* www/apache22: Update to 2.2.34Bernard Spil2017-07-122-4/+5
| | | | | | | | - Security update to 2.2.34 MFH: 2017Q3 Security: 0c2db2aa-5584-11e7-9a7d-b499baebfeaf Differential Revision: https://reviews.freebsd.org/D11285
* www/apache22: Update to 2.2.32Mark Felder2017-06-096-174/+97
| | | | | | | | | | Does not build with OpenSSL 1.1.x or LibreSSL 2.5.x which is a known issue. Changelog: http://www.apache.org/dist/httpd/CHANGES_2.2.32 PR: 219720 MFH: 2017Q2 Security: CVE-2016-8743
* - Add LICENSESunpoet Po-Chuan Hsieh2016-11-051-0/+3
| | | | Approved by: portmgr (blanket)
* - Remove trailing dot in COMMENT and/or reword it accordinglyAlexey Dokuchaev2016-10-281-1/+1
| | | | - Prefer standard option descriptions, and trim one long line
* - add lost condition to apply the extra patchOlli Hauer2016-07-181-0/+4
| | | | | | for reproducible build MFH: 2016Q3
* - allow reproducible buildOlli Hauer2016-07-182-0/+18
| | | | | | | - set EXPIRATION_DATE to 2017-07-01 [1] [1] Upstream propose EoL of apache 2.2.x during the next 12 months See discussion on dev@apache list.
* www/apache24: Fix httpoxy vulnerability (+2.2)Bernard Spil2016-07-182-1/+64
| | | | | | | | | | | - Add upstream patch to www/apache24 - Add upstream patch to www/apache22 - Bump PORTREVISION Approved by: feld (ports-secteam) MFH: 2016Q3 Security: cf0b5668-4d1b-11e6-b2ec-b499baebfeaf Security: CVE-2016-5387
* - s/USE_OPENSSL=yes/USES=ssl/Olli Hauer2016-07-051-1/+1
|
* Remove ${PORTSDIR}/ from dependencies, categories v, w, x, y, and z.Mathieu Arnold2016-04-011-3/+3
| | | | | With hat: portmgr Sponsored by: Absolight
* - fix ab buid with OpenSSL from ports and SSL3 disabled [1]Olli Hauer2016-01-184-26/+52
| | | | | | | | | | | | (backport ab.c r1706008 from apache24) - use new $opt-target - improve kldstat check - use new defined postexec, preunexec in pkg-plist with hat apache@ PR: 206369 Submitted by: matthew@ [1]
* - fix poudriere build on FreeBSD >= 10.x with OpenSSL from portsOlli Hauer2015-09-271-4/+3
| | | | | | | | I haven't found the exact culprit but it seems build in poudriere behaves different. Fix build in poudriere by inspecting MAKE_ENV, else WITH_OPENSSL_PORT is not honored. Noted by: Philip Jocks <pj @ netzkommune.de>
* Remove UNIQUENAME and LATEST_LINK.Mathieu Arnold2015-08-171-1/+1
| | | | | | | | | | | | | | | | | UNIQUENAME was never unique, it was only used by USE_LDCONFIG and now, we won't have conflicts there. Use PKGBASE instead of LATEST_LINK in PKGLATESTFILE, the *only* consumer is pkg-devel, and it works just fine without LATEST_LINK as pkg-devel has the correct PKGNAME anyway. Now that UNIQUENAME is gone, OPTIONSFILE is too. (it's been called OPTIONS_FILE now.) Reviewed by: antoine, bapt Exp-run by: antoine Sponsored by: Absolight Differential Revision: https://reviews.freebsd.org/D3336
* - re add libressl patches (lost by last cleanup commit)Olli Hauer2015-08-034-0/+59
| | | | | | | | | | - no version bump, libressl is not the default ssl with hat: apache PR: 202047 Submitted by: mcdouga9 _at_ egr.msu.edu Patch Provided by: phil.stone _at_ gmx.com
* - update to 2.2.31Olli Hauer2015-08-0212-1162/+167
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - remove backports - minor cleanups - always rebuild configure script - add patch for acinclude.m4 [1] Changes with Apache 2.2.31 [2] *) Correct win32 build issues for mod_proxy exports, OpenSSL 1.0.x headers. [Yann Ylavic, Gregg Smith] Changes with Apache 2.2.30 (not released) *) SECURITY: CVE-2015-3183 (cve.mitre.org) core: Fix chunk header parsing defect. Remove apr_brigade_flatten(), buffering and duplicated code from the HTTP_IN filter, parse chunks in a single pass with zero copy. Limit accepted chunk-size to 2^63-1 and be strict about chunk-ext authorized characters. [Graham Leggett, Yann Ylavic] *) http: Fix LimitRequestBody checks when there is no more bytes to read. [Michael Kaufmann <mail michael-kaufmann.ch>] *) core: Allow spaces after chunk-size for compatibility with implementations using a pre-filled buffer. [Yann Ylavic, Jeff Trawick] *) mod_ssl: bring SNI behavior into better conformance with RFC 6066: no longer send warning-level unrecognized_name(112) alerts. PR 56241. [Kaspar Brand] *) http: Make ap_die() robust against any HTTP error code and not modify response status (finally logged) when nothing is to be done. PR 56035. [Yann Ylavic] *) core, modules: Avoid error response/document handling by the core if some handler or input filter already did it while reading the request (causing a double response body). [Yann Ylavic] *) FreeBSD: Disable IPv4-mapped listening sockets by default for versions 5+ instead of just for FreeBSD 5. PR 53824. [Jeff Trawick, Olli Hauer <ohauer gmx de>] *) mod_proxy: use the original (non absolute) form of the request-line's URI for requests embedded in CONNECT payloads used to connect SSL backends via a ProxyRemote forward-proxy. PR 55892. [Hendrik Harms <hendrik.harms gmail com>, William Rowe, Yann Ylavic] *) mpm_winnt: Accept utf-8 (Unicode) service names and descriptions for internationalization. [William Rowe] *) mod_log_config: Implement logging for sub second timestamps and request end time. [Rainer Jung] *) mod_log_config: Ensure that time data is consistent if multiple duration patterns are used in combination, e.g. %D and %{ms}T. [Rainer Jung] *) mod_log_config: Add "%{UNIT}T" format to output request duration in seconds, milliseconds or microseconds depending on UNIT ("s", "ms", "us"). [Ben Reser, Rainer Jung] *) In alignment with RFC 7525, the default recommended SSLCipherSuite and SSLProxyCipherSuite now exclude RC4 as well as MD5. Also, the default recommended SSLProtocol and SSLProxyProtocol directives now exclude SSLv3. Existing configurations must be adjusted by the administrator. [William Rowe] *) core: Avoid potential use of uninitialized (NULL) request data in request line error path. [Yann Ylavic] *) mod_proxy_http: Use the "Connection: close" header for requests to backends not recycling connections (disablereuse), including the default reverse and forward proxies. [Yann Ylavic] *) mod_proxy: Add ap_connection_reusable() for checking if a connection is reusable as of this point in processing. [Jeff Trawick] *) mod_proxy: Reuse proxy/balancer workers' parameters and scores across graceful restarts, even if new workers are added, old ones removed, or the order changes. [Jan Kaluza, Yann Ylavic] *) mod_ssl: 'SSLProtocol ALL' was being ignored in virtual host context. PR 57100. [Michael Kaufmann <apache-bugzilla michael-kaufmann.ch>, Yann Ylavic] *) mod_ssl: Improve handling of ephemeral DH and ECDH keys by allowing custom parameters to be configured via SSLCertificateFile, and by adding standardized DH parameters for 1024/2048/3072/4096 bits. Unless custom parameters are configured, the standardized parameters are applied based on the certificate's RSA/DSA key size. [Kaspar Brand] *) mod_ssl: drop support for export-grade ciphers with ephemeral RSA keys, and unconditionally disable aNULL, eNULL and EXP ciphers (not overridable via SSLCipherSuite). [Kaspar Brand] *) mod_ssl: Add support for configuring persistent TLS session ticket encryption/decryption keys (useful for clustered environments). [Paul Querna, Kaspar Brand] *) SSLProtocol and SSLCipherSuite recommendations in the example/default conf/extra/httpd-ssl.conf file are now global in scope, affecting all VirtualHosts (matching 2.4 default configuration). [William Rowe] *) mod_authn_dbd: Fix lifetime of DB lookup entries independently of the selected DB engine. PR 46421. [Jan Kaluza]. *) Turn static function get_server_name_for_url() into public ap_get_server_name_for_url() and use it where appropriate. This fixes mod_rewrite generating invalid URLs for redirects to IPv6 literal addresses. PR 52831 [Stefan Fritsch] *) dav_validate_request: avoid validating locks and ETags when there are no If headers providing them on a resource we aren't modifying. [Ben Reser] *) mod_ssl: New directive SSLSessionTickets (On|Off). The directive controls the use of TLS session tickets (RFC 5077), default value is "On" (unchanged behavior). Session ticket creation uses a random key created during web server startup and recreated during restarts. No other key recreation mechanism is available currently. Therefore using session tickets without restarting the web server with an appropriate frequency (e.g. daily) compromises perfect forward secrecy. [Rainer Jung] *) mod_deflate: Define APR_INT32_MAX when it is missing so to be able to compile against APR-1.2.x (minimum required version). [Yann Ylavic] *) mod_reqtimeout: Don't let pipelining checks interfere with the timeouts computed for subsequent requests. PR 56729. [Eric Covener] [1] https://issues.apache.org/bugzilla/show_bug.cgi?id=58126 [2] http://www.apache.org/dist/httpd/CHANGES_2.2.31 With Head apache@ MFH: 2015Q3 ( in case no new issues are reported during the next 7 days )
* By default libtool replaces -export-symbols <file> with -retain-symbols-fileTijl Coosemans2015-08-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | <file> on ELF systems, but this doesn't really do what -export-symbols is meant to do. On GNU ELF systems it converts <file> to a simple version script first and then uses -version-script instead of -retain-symbols-file. Let USES=libtool patch libtool scripts to do this on all systems with GNU ld(1). Bump PORTREVISION on all ports where the build log contains -export-symbols. audio/calf: This port builds a module that now exports only one function, but it also builds a number of executables that link to this module and expect to see other functions. Because it's already a bit dodgy to link to a module (libtool warns about this) let the module continue to export only one function and instead build an ordinary library from the same source that the executables can link to. Fix a number of other issues in the same Makefile.am and clean up the port Makefile. japanese/scim-honoka: Tries to hide all symbols that start with an underscore, but because this library is written in C++ all symbols start with _Z so it ends up hiding everything. Just don't hide anything at all like the textproc/scim configure script does. multimedia/schroedinger: Apply an upstream patch. textproc/scim-input-pad: Same as japanese/scim-honoka. PR: 201922 Approved by: portmgr (antoine) Exp-run by: antoine
* Backport patch for CVE and bump PORTREVISIONMark Felder2015-07-202-1/+778
| | | | | | | Approved by: pgollucci MFH: 2015Q3 Security: CVE-2015-3183 Security: 29083f8e-2ca8-11e5-86ff-14dae9d210b8
* - Cleanup logjam patch (remove -rand call to openssl to fix build for ↵Ryan Steinmetz2015-06-022-3/+72
| | | | | | | | | libressl users) - Cleanup logjam patch (ensure perl can find/replace the correct bits when re-rengerating) - Bump PORTREVISION With hat: ports-secteam
* - use @sample for conf filesOlli Hauer2015-05-3126-213/+1357
| | | | | | | - backport ab from 2.4.x - fix mode for suexec, cgi test files - adopt http-ssl.conf.in from upstream trunk - rebuild some patches
* - Generate new DH params during build to mitigate Logjam attackRyan Steinmetz2015-05-212-3/+82
| | | | | | | | - Fix deprecated USE_AUTOTOOLS - Bump PORTREVISION With hat: ports-secteam Obtained from: Winni Neessen
* MASTER_SITES cleanup.Mathieu Arnold2015-05-141-1/+1
| | | | | | | | | | | | | | | | | | | - Replace ${MASTER_SITE_FOO} with FOO. - Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9% of the time.) - Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and no hint of what it should be was present. - Fix some logic. - And generally, make things more simple and easy to understand. While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and SAMBA macros. Also, replace some EXTRACT_SUFX occurences with USES=tar:*. Checked by: make fetch-urlall-list With hat: portmgr Sponsored by: Absolight
* - Remove libtool hacks and patches that are now handled by USES=libtoolTijl Coosemans2015-04-181-2/+1
| | | | - Remove CONFIG_SHELL from CONFIGURE_ENV because bsd.port.mk handles that
* Unbreak build with LibreSSLMark Felder2015-03-018-0/+185
| | | | PR: 196256
* - make QA script happy and RMDIR empty folder below $PORTDOCSOlli Hauer2014-12-011-6/+11
| | | | | the script complans on them even PORTDOCS=* is set - do not slence INSTALL commands
* Remove a #define strtoul that is messing up with c++.Mathieu Arnold2014-10-142-1/+16
| | | | | | Differential Revision: https://reviews.freebsd.org/D945 Approved by: ohauer Sponsored by: Absolight
* apache24Olli Hauer2014-09-223-54/+9
| | | | | | | | - remove check if apr is build with threads - bump PORTREVISION - adopt new pkg-plist @dir @with hat apache@
* Remove unused LIBTOOLFILESTijl Coosemans2014-09-131-1/+0
|
* - update to 2.2.29Olli Hauer2014-09-036-527/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - use PTHREAD_LIBS/CFLAGS instead -pthread Changes with Apache 2.2.29 http://www.apache.org/dist/httpd/CHANGES_2.2.29 *) Corrected docs/manual pages for new MergeTrailers directive and other out of date documentation. [William Rowe] Changes with Apache 2.2.28 *) SECURITY: CVE-2014-0118 (cve.mitre.org) [1] mod_deflate: The DEFLATE input filter (inflates request bodies) now limits the length and compression ratio of inflated request bodies to avoid denial of service via highly compressed bodies. See directives DeflateInflateLimitRequestBody, DeflateInflateRatioLimit, and DeflateInflateRatioBurst. [Yann Ylavic, Eric Covener] *) SECURITY: CVE-2014-0231 (cve.mitre.org) [1] mod_cgid: Fix a denial of service against CGI scripts that do not consume stdin that could lead to lingering HTTPD child processes filling up the scoreboard and eventually hanging the server. By default, the client I/O timeout (Timeout directive) now applies to communication with scripts. The CGIDScriptTimeout directive can be used to set a different timeout for communication with scripts. [Rainer Jung, Eric Covener, Yann Ylavic] *) SECURITY: CVE-2014-0226 (cve.mitre.org) [1] Fix a race condition in scoreboard handling, which could lead to a heap buffer overflow. [Joe Orton, Eric Covener, Jeff Trawick] *) SECURITY: CVE-2013-5704 (cve.mitre.org) [2] core: HTTP trailers could be used to replace HTTP headers late during request processing, potentially undoing or otherwise confusing modules that examined or modified request headers earlier. Adds "MergeTrailers" directive to restore legacy behavior. [Edward Lu, Yann Ylavic, Joe Orton, Eric Covener] *) core: Detect incomplete request and response bodies, log an error and forward it to the underlying filters. PR 55475. [Yann Ylavic] *) mod_deflate: Handle Zlib header and validation bytes received in multiple chunks. PR 46146. [Yann Ylavic] *) mod_proxy: Don't reuse a SSL backend connection whose requested SNI differs. PR 55782. [Yann Ylavic] *) mod_deflate: Fix inflation of files larger than 4GB. PR 56062. [Lukas Bezdicka <social v3.sk>] *) mod_dav: Fix improper encoding in PROPFIND responses. PR 56480. [Ben Reser] *) mod_ssl: Extend the scope of SSLSessionCacheTimeout to sessions resumed by TLS session resumption (RFC 5077). [Rainer Jung] *) mod_proxy_ajp: Forward local IP address as a custom request attribute like we already do for the remote port. [Rainer Jung] *) mod_deflate: Don't fail when flushing inflated data to the user-agent and that coincides with the end of stream ("Zlib error flushing inflate buffer"). PR 56196. [Christoph Fausak <christoph fausak glueckkanja.com>] *) mod_cache, mod_disk_cache: With CacheLock enabled, responses with a Vary header might not get the benefit of the thundering herd protection due to an incorrect internal cache key. PR 50317. [Ruediger Pluem, Jan Kaluza, Yann Ylavic] *) mod_rewrite: Support session cookies with the CO= flag when later parameters are used. The doc for this implied the feature had been backported for quite some time. PR56014 [Eric Covener] *) mod_cache: Don't remove stale cache entries that cannot be conditionally revalidated. This prevents the thundering herd protection from serving stale responses during a revalidation. PR 50317. [Eric Covener, Jan Kaluza, Ruediger Pluem] *) core: Increase TCP_DEFER_ACCEPT socket option to from 1 to 30 seconds. PR 41270. [Dean Gaudet <dean arctic org>] [1] CVE issues already fixed since FreeBSD-ports r362845 [2] new CVE-2013-5704 issue fixed in 2.2.29 MFH: 2014Q3 Security: f927e06c-1109-11e4-b090-20cf30e32f6d Security: CVE-2013-5704
* - backport upstream security fixesOlli Hauer2014-07-244-6/+524
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - fix build with SSL from ports [1] SECURITY: CVE-2014-0118 (cve.mitre.org) mod_deflate: The DEFLATE input filter (inflates request bodies) now limits the length and compression ratio of inflated request bodies to avoid denial of sevice via highly compressed bodies. See directives DeflateInflateLimitRequestBody, DeflateInflateRatioLimit, and DeflateInflateRatioBurst. http://svn.apache.org/viewvc?view=revision&revision=1611426 SECURITY: CVE-2014-0226 (cve.mitre.org) Fix a race condition in scoreboard handling, which could lead to a heap buffer overflow. Thanks to Marek Kroemeke working with HP's Zero Day Initiative for reporting this. * include/scoreboard.h: Add ap_copy_scoreboard_worker. * server/scoreboard.c (ap_copy_scoreboard_worker): New function. * modules/generators/mod_status.c (status_handler): Use it. http://svn.apache.org/viewvc?view=revision&revision=1610515 SECURITY: CVE-2014-0231 (cve.mitre.org) mod_cgid: Fix a denial of service against CGI scripts that do not consume stdin that could lead to lingering HTTPD child processes filling up the scoreboard and eventually hanging the server. http://svn.apache.org/viewvc?view=revision&revision=1611185 [1] noted and testd by mat@ MFH: 2014Q3 Security: f927e06c-1109-11e4-b090-20cf30e32f6d CVE-2014-0118 CVE-2014-0231 CVE-2014-0226
* - reflect new preferred apache versionOlli Hauer2014-07-133-7/+7
|
* - fix strip command (use ${PREFIX} instead real path)Olli Hauer2014-07-081-2/+2
|
* - strip filesOlli Hauer2014-07-085-39/+62
| | | | | | | | | | | | - sort pkg-plist - always install DOCS (remove Makefile hack) - reflect modules.d in EXAMPLESDIR, next target will be a new keyword for pkg-plist to handle module installation. - bump PORTREVISION - add warning about default version change (2014-07-11) (pkg-message, files/HEADS_UP)
* Bump PORTREVISION on everything that depends on devel/apr1 due to theTijl Coosemans2014-06-121-1/+1
| | | | | | library version change. Approved by: portmgr (implicit)
* Add CPE information.Dag-Erling Smørgrav2014-06-041-1/+4
| | | | With hat: ports-secteam
* - /USE_AUTOTOOLS=libtool/USES=libtool/Olli Hauer2014-05-301-2/+2
| | | | with hat apache@
* - fix build against security/openssl on FreeBSD-10Olli Hauer2014-04-101-6/+8
| | | | | | | | | | | | | | | | | in case port is build with tinderbox or poudriere. openssl is registered as BUILD/RUN dependency not as LIB dependency, therefore the check for openssl fails since it will be installed in a later stage by tinderbox / poudriere. Thanks to Katsuya Higuchi who noted this issue on the apache@ mailing list. http://lists.freebsd.org/pipermail/freebsd-apache/2014-April/003490.html MFH: 2014Q2 Submitted by: Katsuya Higuchi <higuchi@jt-sys.co.jp>
* - fix build on FreeBSD-10+ with OpenSSL from portsOlli Hauer2014-04-081-1/+10
| | | | | | | | | - bump PORTVERSION because of CVE-2014-0076 / CVE-2014-0160 Special Thanks to Philip Jocks for reporting and testing! http://lists.freebsd.org/pipermail/freebsd-apache/2014-April/003483.html with hat apache@
* - revert r350271Olli Hauer2014-04-051-0/+12
|
* - remove comment from patchOlli Hauer2014-04-051-12/+0
|
* - update to version 2.2.27Olli Hauer2014-03-273-4/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - fix apache-mpm-peruser graceful reload [1] Changes with Apache 2.2.27 *) SECURITY: CVE-2014-0098 (cve.mitre.org) Clean up cookie logging with fewer redundant string parsing passes. Log only cookies with a value assignment. Prevents segfaults when logging truncated cookies. [William Rowe, Ruediger Pluem, Jim Jagielski] *) SECURITY: CVE-2013-6438 (cve.mitre.org) mod_dav: Keep track of length of cdata properly when removing leading spaces. Eliminates a potential denial of service from specifically crafted DAV WRITE requests [Amin Tora <Amin.Tora neustar.biz>] *) core: draft-ietf-httpbis-p1-messaging-23 corrections regarding TE/CL conflicts. [Yann Ylavic <ylavic.dev gmail com>, Jim Jagielski] *) mod_proxy_http: Core dumped under high load. PR 50335. [Jan Kaluza <jkaluza redhat.com>] *) proxy_util: NULL terminate the right buffer in 'send_http_connect'. [Christophe Jaillet] *) mod_proxy: Remove (never documented) <Proxy ~ wildcard-url> syntax which is equivalent to <ProxyMatch wildcard-url>. [Christophe Jaillet] *) mod_ldap: Fix a potential memory leak or corruption. PR 54936. [Zhenbo Xu <zhenbo1987 gmail com>] *) mod_ssl: Do not perform SNI / Host header comparison in case of a forward proxy request. [Ruediger Pluem] *) mod_rewrite: Add mod_rewrite.h to the headers installed on Windows. PR46679 [Bob Ionescu] PR: ports/182947 [1] Submitted by: Andrew Azarov <andrew@azar-a.net> [1]
* ports in cat www where MAINTAINER=portsOlli Hauer2014-03-161-2/+1
| | | | | - USE_BZIP2 -> USES= tar:bzip2 - LICENSE=BSD -> BSD[n]CLAUSE
* Fix properties on pkg-plistBaptiste Daroussin2014-01-211-1/+0
|
* - update to 2.2.26Olli Hauer2013-11-246-56/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - add new directory for modules (APACHEETCDIR/modules.d) New modules can be registered here with a simple file that contains the LoadModule directives. Additonal Maintaines can write instructions to the conf file and keep pkg-message short. As bonus the config file can be installed like every other config file with a .sample extention so modules are not disabled during pkg upgrades. Module config files should begin with three digits followed by '_' e.g. 100_php5.conf. The load order can be controlled via the three digits. Please wait some time before adopting the new directory so users have time to update and adjust axisting configs Changes with Apache 2.2.26 *) mod_dav: dav_resource->uri treated as unencoded. This was an unnecessary ABI changed introduced in 2.2.25 PR 55397. [Ben Reser] *) mod_dav: Do not validate locks against parent collection of COPY source URI. PR 55304. [Ben Reser] *) mod_ssl: Check SNI hostname against Host header case-insensitively. PR 49491. [Mayank Agrawal <magrawal.08 gmail.com>] *) mod_ssl: enable support for ECC keys and ECDH ciphers. Tested against OpenSSL 1.0.0b3. [Vipul Gupta vipul.gupta sun.com, Sander Temme, Stefan Fritsch] *) mod_ssl: Change default for SSLCompression to off, as compression causes security issues in most setups. (The so called "CRIME" attack). [Stefan Fritsch] *) mod_ssl: Fix compilation error when OpenSSL does not contain support for SSLv2. Problem was introduced in 2.2.25. PR 55194. [Rainer Jung, Kaspar Brand] *) mod_dav: Fix double encoding of URIs in XML and Location header (caused by unintential ABI change in 2.2.25). PR 55397. [Ben Reser]
* - do not silence directory creationOlli Hauer2013-11-051-3/+3
| | | | Submitted by: mandree
* - backport upstream commit r1528718 into mod_dav [1].Olli Hauer2013-11-053-1/+55
| | | | | | | | | | | | | | | This is needed because of a bug [2] due to an incorrect implementation of RFC 4918. The symptoms are a failure to copy a svn tree via DAV: - fix package installation with old pkg tools (create empty folders in pkg-plist even staging is enabled) [1] http://svn.apache.org/viewvc?view=revision&revision=1528718 [2] https://issues.apache.org/bugzilla/show_bug.cgi?id=55306 PR: ports/183685 Submitted by: Pietro Cerutti <gahr@FreeBSD.org>
generated by cgit v1.2.3 (git 2.25.1) at 2025-11-21 17:49:08 +0000