2013-03-26 22:35:33 +01:00
|
|
|
# $FreeBSD$
|
|
|
|
|
|
|
|
|
|
PORTNAME= apache24
|
- update to 2.4.18
- backport r1719967
mod_ssl: fix build with openssl < 0.9.8m (missing semicolon).
This release also contains the patch for FreeBSD PR 204304
Make the fix for fully qualifying REDIRECT_URL from PR#57785 opt-in.
http://svn.apache.org/viewvc?view=revision&revision=1712268
Changes with Apache 2.4.18
*) mod_ssl: for all ssl_engine_vars.c lookups, fall back to master connection
if conn_rec itself holds no valid SSLConnRec*. Fixes PR58666.
[Stefan Eissing]
*) mod_http2: connection level window for flow control is set to protocol
maximum of 2GB-1, preventing window exhaustion when sending data on many
streams with higher cumulative window size.
Reducing write frequency unless push promises need to be flushed.
[Stefan Eissing]
*) mod_http2: required minimum version of libnghttp2 is 1.2.1
[Stefan Eissing]
*) mod_proxy_fdpass: Fix AH01153 error when using the default configuration.
In earlier version of httpd, you can explicitelly set the 'flusher' parameter
to 'flush' as a workaround. (i.e. flusher=flush)
Add documentation for the 'flusher' parameter when defining a proxy worker.
[Christophe Jaillet]
*) mod_ssl: For the "SSLStaplingReturnResponderErrors off" case, make sure
to only staple responses with certificate status "good". [Kaspar Brand]
*) mod_http2: new directive 'H2PushPriority' to allow priority specifications
on server pushed streams according to their content-type.
[Stefan Eissing]
*) mod_http2: fixes crash on connection abort for a busy connection.
fixes crash on a request that did not produce any response.
[Stefan Eissing]
*) mod_http2: trailers are sent after reponse body if set in request_rec
trailers_out before the end-of-request bucket is sent through the
output filters. [Stefan Eissing]
*) mod_http2: incoming trailers (headers after request body) are properly
forwarded to the processing engine. [Stefan Eissing]
*) mod_http2: new directive 'H2Push' to en-/disable HTTP/2 server
pushes a server/virtual host. Pushes are initiated by the presence
of 'Link:' headers with relation 'preload' on a response. [Stefan Eissing]
*) mod_http2: write performance of http2 improved for larger resources,
especially static files. [Stefan Eissing]
*) core: if the first HTTP/1.1 request on a connection goes to a server that
prefers different protocols, these protocols are announced in a Upgrade:
header on the response, mentioning the preferred protocols.
[Stefan Eissing]
*) mod_http2: new directives 'H2TLSWarmUpSize' and 'H2TLSCoolDownSecs'
to control TLS record sizes during connection lifetime.
[Stefan Eissing]
*) mod_http2: new directive 'H2ModernTLSOnly' to enforce security
requirements of RFC 7540 on TLS connections. [Stefan Eissing]
*) core: add ap_get_protocol_upgrades() to retrieve the list of protocols
that a client could possibly upgrade to. Use in first request on a
connection to announce protocol choices. [Stefan Eissing]
*) mod_http2: reworked deallocation on connection shutdown and worker
abort. Separate parent pool for all workers. worker threads are joined
on planned worker shutdown. [Yann Ylavic, Stefan Eissing]
*) mod_ssl: when receiving requests for other virtual hosts than the handshake
server, the SSL parameters are checked for equality. With equal
configuration, requests are passed for processing. Any change will trigger
the old behaviour of "421 Misdirected Request".
SSL now remembers the cipher suite that was used for the last handshake.
This is compared against for any vhost/directory cipher specification.
Detailed examination of renegotiation is only done when these do not
match.
Renegotiation is 403ed when a master connection is present. Exact reason
is given additionally in a request note. [Stefan Eissing]
*) core: Fix scoreboard crash (SIGBUS) on hardware requiring strict 64bit
alignment (SPARC64, PPC64). [Yann Ylavic]
*) mod_cache: Accept HT (Horizontal Tab) when parsing cache related header
fields as described in RFC7230. [Christophe Jaillet]
*) core/util_script: making REDIRECT_URL a full URL is now opt-in
via new 'QualifyRedirectURL' directive.
*) core: Limit to ten the number of tolerated empty lines between request,
and consume them before the pipelining check to avoid possible response
delay when reading the next request without flushing. [Yann Ylavic]
*) mod_ssl: Extend expression parser registration to support ssl variables
in any expression using mod_rewrite syntax "%{SSL:VARNAME}" or function
syntax "ssl(VARNAME)". [Rainer Jung]
PR: 204304
with head apache@
2015-12-14 21:53:28 +01:00
|
|
|
PORTVERSION= 2.4.18
|
2013-03-26 22:35:33 +01:00
|
|
|
CATEGORIES= www ipv6
|
2015-05-14 12:15:04 +02:00
|
|
|
MASTER_SITES= APACHE_HTTPD
|
2013-03-26 22:35:33 +01:00
|
|
|
DISTNAME= httpd-${PORTVERSION}
|
|
|
|
|
DIST_SUBDIR= apache24
|
|
|
|
|
|
|
|
|
|
MAINTAINER= apache@FreeBSD.org
|
|
|
|
|
COMMENT= Version 2.4.x of Apache web server
|
|
|
|
|
|
2013-10-27 18:54:39 +01:00
|
|
|
LIB_DEPENDS= libexpat.so:${PORTSDIR}/textproc/expat2 \
|
2014-09-22 20:50:18 +02:00
|
|
|
libapr-1.so:${PORTSDIR}/devel/apr1 \
|
2013-10-27 18:54:39 +01:00
|
|
|
libpcre.so:${PORTSDIR}/devel/pcre
|
2013-03-26 22:35:33 +01:00
|
|
|
|
2014-07-09 00:44:48 +02:00
|
|
|
CONFLICTS_INSTALL= caudium14-1.* \
|
|
|
|
|
apache-*-2.2.* apache22-*
|
2013-03-26 22:35:33 +01:00
|
|
|
|
|
|
|
|
USE_APACHE= common24
|
2015-07-15 19:16:05 +02:00
|
|
|
USES= autoreconf cpe iconv libtool perl5 tar:bzip2
|
2013-10-27 18:54:39 +01:00
|
|
|
USE_PERL5= run
|
2013-03-26 22:35:33 +01:00
|
|
|
USE_RC_SUBR= apache24 htcacheclean
|
2015-07-15 19:16:05 +02:00
|
|
|
GNU_CONFIGURE= yes
|
2013-03-26 22:35:33 +01:00
|
|
|
|
2014-06-04 18:54:08 +02:00
|
|
|
CPE_VENDOR= apache
|
|
|
|
|
CPE_PRODUCT= http_server
|
|
|
|
|
|
2013-03-26 22:35:33 +01:00
|
|
|
PORTDOCS= *
|
2015-01-31 16:22:51 +01:00
|
|
|
SUB_FILES= pkg-install pkg-deinstall
|
|
|
|
|
|
- update to 2.4.17
- add support for HTTP/2 (RFC 7540)
- remove obsolate libressl patches [1]
In this release are some exciting new features including:
*) HTTP/2 support via mod_http2 module
*) Support for SO_REUSEPORT in MPMs for significant scalability
Changes with Apache 2.4.17
*) mod_http2: added donated HTTP/2 implementation via core module. Similar
configuration options to mod_ssl. [Stefan Eissing]
*) mod_proxy: don't recyle backend announced "Connection: close" connections
to avoid reusing it should the close be effective after some new request
is ready to be sent. [Yann Ylavic]
*) mod_substitute: Allow to configure the patterns merge order with the new
SubstituteInheritBefore on|off directive. PR 57641
[Marc.Stern <Marc.Stern approach.be>, Yann Ylavic, William Rowe]
*) mod_proxy: Fix ProxySourceAddress binding failure with AH00938.
PR 56687. [Arne de Bruijn <apache arbruijn.dds.nl>
*) mod_ssl: Support compilation against libssl built with OPENSSL_NO_SSL3,
and change the compiled-in default for SSL[Proxy]Protocol to "all -SSLv3",
in accordance with RFC 7568. PR 58349, PR 57120. [Kaspar Brand]
*) mod_ssl: append :!aNULL:!eNULL:!EXP to the cipher string settings,
instead of prepending !aNULL:!eNULL:!EXP: (as was the case in 2.4.7
and later). Enables support for configuring the SUITEB* cipher
strings introduced in OpenSSL 1.0.2. PR 58213. [Kaspar Brand]
*) mod_ssl: Add support for extracting the msUPN and dnsSRV forms
of subjectAltName entries of type "otherName" into
SSL_{CLIENT,SERVER}_SAN_OTHER_{msUPN,dnsSRV}_n environment
variables. Addresses PR 58020. [Jan Pazdziora <jpazdziora redhat.com>,
Kaspar Brand]
*) mod_logio: Fix logging of %^FB (time to first byte) on the first request on
an SSL connection. PR 58454.
[Konstantin J. Chernov <k.j.chernov gmail.com>]
*) mod_cache: r->err_headers_out is not merged into
r->headers when mod_cache is enabled and the response
is cached for the first time. [Edward Lu]
*) mod_slotmem_shm: Fix slots/SHM files names on restart for systems that
can't create new (clear) slots while previous children gracefully stopping
still use the old ones (e.g. Windows, OS2). mod_proxy_balancer failed to
restart whenever the number of configured balancers/members changed during
restart. PR 58024. [Yann Ylavic]
*) core/util_script: make REDIRECT_URL a full URL. PR 57785. [Nick Kew]
*) MPMs: Support SO_REUSEPORT to create multiple duplicated listener
records for scalability. [Yingqi Lu <yingqi.lu@intel.com>,
Jeff Trawick, Jim Jagielski, Yann Ylavic]
*) mod_proxy: Fix a race condition that caused a failed worker to be retried
before the retry period is over. [Ruediger Pluem]
*) mod_autoindex: Allow autoindexes when neither mod_dir nor mod_mime are
loaded. [Eric Covener]
*) mod_rewrite: Allow cookies set by mod_rewrite to contain ':' by accepting
';' as an alternate separator. PR47241.
[<bugzilla schermesser com>, Eric Covener]
*) apxs: Add HTTPD_VERSION and HTTPD_MMN to the variables available with
apxs -q. PR58202. [Daniel Shahaf <danielsh apache.org>]
*) mod_rewrite: Avoid a crash when lacking correct DB access permissions
when using RewriteMap with MapType dbd or fastdbd. [Christophe Jaillet]
*) mod_authz_dbd: Avoid a crash when lacking correct DB access permissions.
PR 57868. [Jose Kahan <jose w3.org>, Yann Ylavic]
*) mod_socache_memcache: Add the 'MemcacheConnTTL' directive to control how
long to keep idle connections with the memcache server(s).
Change default value from 600 usec (!) to 15 sec. PR 58091
[Christophe Jaillet]
*) mod_dir: Prevent the internal identifier "httpd/unix-directory" from
appearing as a Content-Type response header when requests for a directory
are rewritten by mod_rewrite. [Eric Covener]
[1] tested by brnrd@
2015-10-13 20:17:28 +02:00
|
|
|
# XXX: before running makepatch please run the command
|
|
|
|
|
# `$SED -e 's/PATCH_PATH_SEPARATOR=/PATCH_PATH_SEPARATOR?=/' Mk/bsd.port.mk
|
|
|
|
|
PATCH_PATH_SEPARATOR= __
|
|
|
|
|
|
2015-01-31 16:22:51 +01:00
|
|
|
# Fallback MPM after switching from static to modular MPM
|
|
|
|
|
SUB_LIST+= MPMF="000_mpm_prefork_fallback.conf"
|
2013-03-26 22:35:33 +01:00
|
|
|
|
|
|
|
|
USERS= www
|
|
|
|
|
GROUPS= www
|
|
|
|
|
|
|
|
|
|
# for slave ports
|
|
|
|
|
.if !defined(MASTERDIR)
|
|
|
|
|
APACHEDIR= ${.CURDIR}
|
|
|
|
|
.else
|
|
|
|
|
APACHEDIR= ${MASTERDIR}
|
|
|
|
|
.endif
|
|
|
|
|
|
|
|
|
|
WITH_HTTP_PORT?= 80
|
|
|
|
|
WITH_SSL_PORT?= 443
|
|
|
|
|
|
|
|
|
|
.include "${APACHEDIR}/Makefile.options"
|
|
|
|
|
.include "${APACHEDIR}/Makefile.options.desc"
|
2013-10-27 18:54:39 +01:00
|
|
|
|
|
|
|
|
AUTHNZ_LDAP_CONFIGURE_ON= --enable-authnz-ldap
|
|
|
|
|
|
|
|
|
|
# http://httpd.apache.org/docs/2.4/bind.html
|
2014-06-21 15:54:14 +02:00
|
|
|
IPV4_MAPPED_CONFIGURE_ENABLE= v4-mapped
|
2013-10-27 18:54:39 +01:00
|
|
|
|
|
|
|
|
LDAP_CONFIGURE_ON= --enable-ldap=shared
|
|
|
|
|
|
2015-11-04 19:38:58 +01:00
|
|
|
HTTP2_CONFIGURE_ON= --with-nghttp2=${LOCALBASE}
|
- update to 2.4.17
- add support for HTTP/2 (RFC 7540)
- remove obsolate libressl patches [1]
In this release are some exciting new features including:
*) HTTP/2 support via mod_http2 module
*) Support for SO_REUSEPORT in MPMs for significant scalability
Changes with Apache 2.4.17
*) mod_http2: added donated HTTP/2 implementation via core module. Similar
configuration options to mod_ssl. [Stefan Eissing]
*) mod_proxy: don't recyle backend announced "Connection: close" connections
to avoid reusing it should the close be effective after some new request
is ready to be sent. [Yann Ylavic]
*) mod_substitute: Allow to configure the patterns merge order with the new
SubstituteInheritBefore on|off directive. PR 57641
[Marc.Stern <Marc.Stern approach.be>, Yann Ylavic, William Rowe]
*) mod_proxy: Fix ProxySourceAddress binding failure with AH00938.
PR 56687. [Arne de Bruijn <apache arbruijn.dds.nl>
*) mod_ssl: Support compilation against libssl built with OPENSSL_NO_SSL3,
and change the compiled-in default for SSL[Proxy]Protocol to "all -SSLv3",
in accordance with RFC 7568. PR 58349, PR 57120. [Kaspar Brand]
*) mod_ssl: append :!aNULL:!eNULL:!EXP to the cipher string settings,
instead of prepending !aNULL:!eNULL:!EXP: (as was the case in 2.4.7
and later). Enables support for configuring the SUITEB* cipher
strings introduced in OpenSSL 1.0.2. PR 58213. [Kaspar Brand]
*) mod_ssl: Add support for extracting the msUPN and dnsSRV forms
of subjectAltName entries of type "otherName" into
SSL_{CLIENT,SERVER}_SAN_OTHER_{msUPN,dnsSRV}_n environment
variables. Addresses PR 58020. [Jan Pazdziora <jpazdziora redhat.com>,
Kaspar Brand]
*) mod_logio: Fix logging of %^FB (time to first byte) on the first request on
an SSL connection. PR 58454.
[Konstantin J. Chernov <k.j.chernov gmail.com>]
*) mod_cache: r->err_headers_out is not merged into
r->headers when mod_cache is enabled and the response
is cached for the first time. [Edward Lu]
*) mod_slotmem_shm: Fix slots/SHM files names on restart for systems that
can't create new (clear) slots while previous children gracefully stopping
still use the old ones (e.g. Windows, OS2). mod_proxy_balancer failed to
restart whenever the number of configured balancers/members changed during
restart. PR 58024. [Yann Ylavic]
*) core/util_script: make REDIRECT_URL a full URL. PR 57785. [Nick Kew]
*) MPMs: Support SO_REUSEPORT to create multiple duplicated listener
records for scalability. [Yingqi Lu <yingqi.lu@intel.com>,
Jeff Trawick, Jim Jagielski, Yann Ylavic]
*) mod_proxy: Fix a race condition that caused a failed worker to be retried
before the retry period is over. [Ruediger Pluem]
*) mod_autoindex: Allow autoindexes when neither mod_dir nor mod_mime are
loaded. [Eric Covener]
*) mod_rewrite: Allow cookies set by mod_rewrite to contain ':' by accepting
';' as an alternate separator. PR47241.
[<bugzilla schermesser com>, Eric Covener]
*) apxs: Add HTTPD_VERSION and HTTPD_MMN to the variables available with
apxs -q. PR58202. [Daniel Shahaf <danielsh apache.org>]
*) mod_rewrite: Avoid a crash when lacking correct DB access permissions
when using RewriteMap with MapType dbd or fastdbd. [Christophe Jaillet]
*) mod_authz_dbd: Avoid a crash when lacking correct DB access permissions.
PR 57868. [Jose Kahan <jose w3.org>, Yann Ylavic]
*) mod_socache_memcache: Add the 'MemcacheConnTTL' directive to control how
long to keep idle connections with the memcache server(s).
Change default value from 600 usec (!) to 15 sec. PR 58091
[Christophe Jaillet]
*) mod_dir: Prevent the internal identifier "httpd/unix-directory" from
appearing as a Content-Type response header when requests for a directory
are rewritten by mod_rewrite. [Eric Covener]
[1] tested by brnrd@
2015-10-13 20:17:28 +02:00
|
|
|
HTTP2_LIB_DEPENDS= libnghttp2.so:${PORTSDIR}/www/nghttp2
|
2014-07-20 22:49:32 +02:00
|
|
|
LUAJIT_LIB_DEPENDS= libluajit-5.1.so:${PORTSDIR}/lang/luajit
|
2014-06-21 15:54:14 +02:00
|
|
|
LUA_CONFIGURE_WITH= lua
|
|
|
|
|
LUA_USES= lua
|
2013-10-27 18:54:39 +01:00
|
|
|
|
|
|
|
|
SOCACHE_DC_CONFIGURE_ON= --with-distcache=${LOCALBASE}
|
2014-07-16 08:48:07 +02:00
|
|
|
SOCACHE_DC_LIB_DEPENDS= libdistcache.so:${PORTSDIR}/security/distcache
|
2013-10-27 18:54:39 +01:00
|
|
|
|
2014-06-21 15:54:14 +02:00
|
|
|
# Note:
|
2014-04-08 23:41:03 +02:00
|
|
|
# OpenSSL version (base/ports) depends how devel/apr1 was build
|
|
|
|
|
# apu-1-config --(includes|ldflags) and apr_rules.mk
|
2013-10-27 18:54:39 +01:00
|
|
|
SSL_CFLAGS= -I${OPENSSLINC}
|
|
|
|
|
SSL_CONFIGURE_ON= --with-ssl=${OPENSSLBASE}
|
|
|
|
|
SSL_LDFLAGS= -L${OPENSSLLIB}
|
|
|
|
|
SSL_USE= OPENSSL=yes
|
|
|
|
|
|
2013-03-26 22:35:33 +01:00
|
|
|
.include <bsd.port.options.mk>
|
|
|
|
|
|
2013-11-24 21:09:07 +01:00
|
|
|
ETC_SUBDIRS= Includes envvars.d extra modules.d
|
2013-10-27 18:54:39 +01:00
|
|
|
|
2013-03-26 22:35:33 +01:00
|
|
|
APR_CONFIG?= ${LOCALBASE}/bin/apr-1-config
|
|
|
|
|
APU_CONFIG?= ${LOCALBASE}/bin/apu-1-config
|
|
|
|
|
|
|
|
|
|
# APU modules used by AUTHN_DBD DBD
|
|
|
|
|
APU_DBD_MYSQL?= ${LOCALBASE}/lib/apr-util-1/apr_dbd_mysql.so
|
|
|
|
|
APU_DBD_PGSQL?= ${LOCALBASE}/lib/apr-util-1/apr_dbd_pgsql.so
|
|
|
|
|
APU_DBD_SQLITE3?= ${LOCALBASE}/lib/apr-util-1/apr_dbd_sqlite3.so
|
|
|
|
|
# APU module used by AUTHNZ_LDAP LDAP
|
|
|
|
|
APU_LDAP?= ${LOCALBASE}/lib/apr-util-1/apr_ldap.so
|
|
|
|
|
# APU module used by SESSION_CRYPTO
|
|
|
|
|
APU_CRYPTO_OPENSSL?= ${LOCALBASE}/lib/apr-util-1/apr_crypto_openssl.so
|
|
|
|
|
APU_CRYPTO_NSS?= ${LOCALBASE}/lib/apr-util-1/apr_crypto_nss.so
|
|
|
|
|
|
|
|
|
|
PREFIX_RELDEST= ${PREFIX:S,^${DESTDIR},,}
|
|
|
|
|
|
2013-10-27 18:54:39 +01:00
|
|
|
CONFIGURE_ARGS+=--prefix=${PREFIX_RELDEST} \
|
2013-03-26 22:35:33 +01:00
|
|
|
--enable-layout=FreeBSD \
|
|
|
|
|
--with-port=${WITH_HTTP_PORT} \
|
|
|
|
|
--with-sslport=${WITH_SSL_PORT} \
|
|
|
|
|
--with-expat=${LOCALBASE} \
|
2013-09-07 21:49:41 +02:00
|
|
|
--with-iconv=${ICONV_PREFIX} \
|
2013-03-26 22:35:33 +01:00
|
|
|
--enable-http \
|
|
|
|
|
--with-pcre=${LOCALBASE} \
|
|
|
|
|
--with-apr=${APR_CONFIG} \
|
|
|
|
|
--with-apr-util=${APU_CONFIG}
|
|
|
|
|
|
- update to 2.4.17
- add support for HTTP/2 (RFC 7540)
- remove obsolate libressl patches [1]
In this release are some exciting new features including:
*) HTTP/2 support via mod_http2 module
*) Support for SO_REUSEPORT in MPMs for significant scalability
Changes with Apache 2.4.17
*) mod_http2: added donated HTTP/2 implementation via core module. Similar
configuration options to mod_ssl. [Stefan Eissing]
*) mod_proxy: don't recyle backend announced "Connection: close" connections
to avoid reusing it should the close be effective after some new request
is ready to be sent. [Yann Ylavic]
*) mod_substitute: Allow to configure the patterns merge order with the new
SubstituteInheritBefore on|off directive. PR 57641
[Marc.Stern <Marc.Stern approach.be>, Yann Ylavic, William Rowe]
*) mod_proxy: Fix ProxySourceAddress binding failure with AH00938.
PR 56687. [Arne de Bruijn <apache arbruijn.dds.nl>
*) mod_ssl: Support compilation against libssl built with OPENSSL_NO_SSL3,
and change the compiled-in default for SSL[Proxy]Protocol to "all -SSLv3",
in accordance with RFC 7568. PR 58349, PR 57120. [Kaspar Brand]
*) mod_ssl: append :!aNULL:!eNULL:!EXP to the cipher string settings,
instead of prepending !aNULL:!eNULL:!EXP: (as was the case in 2.4.7
and later). Enables support for configuring the SUITEB* cipher
strings introduced in OpenSSL 1.0.2. PR 58213. [Kaspar Brand]
*) mod_ssl: Add support for extracting the msUPN and dnsSRV forms
of subjectAltName entries of type "otherName" into
SSL_{CLIENT,SERVER}_SAN_OTHER_{msUPN,dnsSRV}_n environment
variables. Addresses PR 58020. [Jan Pazdziora <jpazdziora redhat.com>,
Kaspar Brand]
*) mod_logio: Fix logging of %^FB (time to first byte) on the first request on
an SSL connection. PR 58454.
[Konstantin J. Chernov <k.j.chernov gmail.com>]
*) mod_cache: r->err_headers_out is not merged into
r->headers when mod_cache is enabled and the response
is cached for the first time. [Edward Lu]
*) mod_slotmem_shm: Fix slots/SHM files names on restart for systems that
can't create new (clear) slots while previous children gracefully stopping
still use the old ones (e.g. Windows, OS2). mod_proxy_balancer failed to
restart whenever the number of configured balancers/members changed during
restart. PR 58024. [Yann Ylavic]
*) core/util_script: make REDIRECT_URL a full URL. PR 57785. [Nick Kew]
*) MPMs: Support SO_REUSEPORT to create multiple duplicated listener
records for scalability. [Yingqi Lu <yingqi.lu@intel.com>,
Jeff Trawick, Jim Jagielski, Yann Ylavic]
*) mod_proxy: Fix a race condition that caused a failed worker to be retried
before the retry period is over. [Ruediger Pluem]
*) mod_autoindex: Allow autoindexes when neither mod_dir nor mod_mime are
loaded. [Eric Covener]
*) mod_rewrite: Allow cookies set by mod_rewrite to contain ':' by accepting
';' as an alternate separator. PR47241.
[<bugzilla schermesser com>, Eric Covener]
*) apxs: Add HTTPD_VERSION and HTTPD_MMN to the variables available with
apxs -q. PR58202. [Daniel Shahaf <danielsh apache.org>]
*) mod_rewrite: Avoid a crash when lacking correct DB access permissions
when using RewriteMap with MapType dbd or fastdbd. [Christophe Jaillet]
*) mod_authz_dbd: Avoid a crash when lacking correct DB access permissions.
PR 57868. [Jose Kahan <jose w3.org>, Yann Ylavic]
*) mod_socache_memcache: Add the 'MemcacheConnTTL' directive to control how
long to keep idle connections with the memcache server(s).
Change default value from 600 usec (!) to 15 sec. PR 58091
[Christophe Jaillet]
*) mod_dir: Prevent the internal identifier "httpd/unix-directory" from
appearing as a Content-Type response header when requests for a directory
are rewritten by mod_rewrite. [Eric Covener]
[1] tested by brnrd@
2015-10-13 20:17:28 +02:00
|
|
|
CONFIGURE_ENV= LOCALBASE="${LOCALBASE}" \
|
|
|
|
|
CONFIG_SHELL="${SH}"
|
2013-03-26 22:35:33 +01:00
|
|
|
|
|
|
|
|
MAKE_ENV+= EXPR_COMPAT=yes \
|
|
|
|
|
INSTALL_MAN="${INSTALL_MAN}" \
|
2015-01-31 16:22:51 +01:00
|
|
|
DATADIR=${DATADIR}
|
2013-03-26 22:35:33 +01:00
|
|
|
|
|
|
|
|
#=====================================================
|
|
|
|
|
# CONFIGURE_ARGS will be handled in Makefile.modules,
|
|
|
|
|
# here we do only OPTIONS fixups
|
|
|
|
|
|
|
|
|
|
.if ${PORT_OPTIONS:MLUA}
|
2014-06-21 15:54:14 +02:00
|
|
|
CONFIGURE_ENV+= LUA_CFLAGS="-I${LUA_INCDIR}" \
|
|
|
|
|
LUA_LIBS="-L${LUA_LIBDIR} -llua-${LUA_VER}"
|
2013-03-26 22:35:33 +01:00
|
|
|
.endif
|
|
|
|
|
|
|
|
|
|
.if ${PORT_OPTIONS:MPROXY_HTML} || ${PORT_OPTIONS:MXML2ENC}
|
|
|
|
|
USE_GNOME= libxml2
|
|
|
|
|
.endif
|
|
|
|
|
|
|
|
|
|
.include <bsd.port.pre.mk>
|
|
|
|
|
.include "${APACHEDIR}/Makefile.modules"
|
|
|
|
|
|
|
|
|
|
post-extract:
|
|
|
|
|
# remove possible leftover .svn directories in the sources
|
|
|
|
|
@${FIND} ${WRKSRC} -type d -name .svn -print | ${XARGS} ${RM} -rf
|
2013-10-27 18:54:39 +01:00
|
|
|
# limit grep results ...
|
2015-01-31 16:22:51 +01:00
|
|
|
@${FIND} ${WRKSRC} -type f \( -name 'NWGNU*' -o -name '*.ds?' -o -name '*.dep' -o -name '*.mak' -o -name '*.win' -o -name '*.vbs' -o -name '*.wsf' \) -delete
|
|
|
|
|
# make sure the configure script contains our patches, preserve the original script for comparsion
|
|
|
|
|
-${MV} -v ${WRKSRC}/configure ${WRKSRC}/configure.upstream
|
2013-03-26 22:35:33 +01:00
|
|
|
|
2015-01-31 16:22:51 +01:00
|
|
|
# make stage-qa script happy, it complains on empty dirs even 'PORTDOCS=*' is set
|
|
|
|
|
# use RMDIR in case upstream ever place some files into this directories
|
2014-12-01 23:50:41 +01:00
|
|
|
.for d in xsl/util xsl lang
|
|
|
|
|
-${RMDIR} ${WRKSRC}/docs/manual/style/${d}
|
|
|
|
|
.endfor
|
|
|
|
|
|
2013-03-26 22:35:33 +01:00
|
|
|
post-patch:
|
2015-01-31 16:22:51 +01:00
|
|
|
${REINPLACE_CMD} -e 's," PLATFORM ",FreeBSD,' ${WRKSRC}/server/core.c
|
|
|
|
|
${REINPLACE_CMD} -e 's|logs/error_log|/var/log/httpd-error.log|' \
|
|
|
|
|
${WRKSRC}/include/httpd.h
|
|
|
|
|
${REINPLACE_CMD} -e 's|perlbin=.*|perlbin=${PERL}|' \
|
|
|
|
|
${WRKSRC}/configure.in
|
|
|
|
|
${RM} -f ${WRKSRC}/docs/docroot/*.bak
|
2014-12-01 23:50:41 +01:00
|
|
|
${INSTALL_DATA} ${WRKSRC}/NOTICE ${WRKSRC}/docs/manual
|
2013-03-26 22:35:33 +01:00
|
|
|
|
- update to 2.4.17
- add support for HTTP/2 (RFC 7540)
- remove obsolate libressl patches [1]
In this release are some exciting new features including:
*) HTTP/2 support via mod_http2 module
*) Support for SO_REUSEPORT in MPMs for significant scalability
Changes with Apache 2.4.17
*) mod_http2: added donated HTTP/2 implementation via core module. Similar
configuration options to mod_ssl. [Stefan Eissing]
*) mod_proxy: don't recyle backend announced "Connection: close" connections
to avoid reusing it should the close be effective after some new request
is ready to be sent. [Yann Ylavic]
*) mod_substitute: Allow to configure the patterns merge order with the new
SubstituteInheritBefore on|off directive. PR 57641
[Marc.Stern <Marc.Stern approach.be>, Yann Ylavic, William Rowe]
*) mod_proxy: Fix ProxySourceAddress binding failure with AH00938.
PR 56687. [Arne de Bruijn <apache arbruijn.dds.nl>
*) mod_ssl: Support compilation against libssl built with OPENSSL_NO_SSL3,
and change the compiled-in default for SSL[Proxy]Protocol to "all -SSLv3",
in accordance with RFC 7568. PR 58349, PR 57120. [Kaspar Brand]
*) mod_ssl: append :!aNULL:!eNULL:!EXP to the cipher string settings,
instead of prepending !aNULL:!eNULL:!EXP: (as was the case in 2.4.7
and later). Enables support for configuring the SUITEB* cipher
strings introduced in OpenSSL 1.0.2. PR 58213. [Kaspar Brand]
*) mod_ssl: Add support for extracting the msUPN and dnsSRV forms
of subjectAltName entries of type "otherName" into
SSL_{CLIENT,SERVER}_SAN_OTHER_{msUPN,dnsSRV}_n environment
variables. Addresses PR 58020. [Jan Pazdziora <jpazdziora redhat.com>,
Kaspar Brand]
*) mod_logio: Fix logging of %^FB (time to first byte) on the first request on
an SSL connection. PR 58454.
[Konstantin J. Chernov <k.j.chernov gmail.com>]
*) mod_cache: r->err_headers_out is not merged into
r->headers when mod_cache is enabled and the response
is cached for the first time. [Edward Lu]
*) mod_slotmem_shm: Fix slots/SHM files names on restart for systems that
can't create new (clear) slots while previous children gracefully stopping
still use the old ones (e.g. Windows, OS2). mod_proxy_balancer failed to
restart whenever the number of configured balancers/members changed during
restart. PR 58024. [Yann Ylavic]
*) core/util_script: make REDIRECT_URL a full URL. PR 57785. [Nick Kew]
*) MPMs: Support SO_REUSEPORT to create multiple duplicated listener
records for scalability. [Yingqi Lu <yingqi.lu@intel.com>,
Jeff Trawick, Jim Jagielski, Yann Ylavic]
*) mod_proxy: Fix a race condition that caused a failed worker to be retried
before the retry period is over. [Ruediger Pluem]
*) mod_autoindex: Allow autoindexes when neither mod_dir nor mod_mime are
loaded. [Eric Covener]
*) mod_rewrite: Allow cookies set by mod_rewrite to contain ':' by accepting
';' as an alternate separator. PR47241.
[<bugzilla schermesser com>, Eric Covener]
*) apxs: Add HTTPD_VERSION and HTTPD_MMN to the variables available with
apxs -q. PR58202. [Daniel Shahaf <danielsh apache.org>]
*) mod_rewrite: Avoid a crash when lacking correct DB access permissions
when using RewriteMap with MapType dbd or fastdbd. [Christophe Jaillet]
*) mod_authz_dbd: Avoid a crash when lacking correct DB access permissions.
PR 57868. [Jose Kahan <jose w3.org>, Yann Ylavic]
*) mod_socache_memcache: Add the 'MemcacheConnTTL' directive to control how
long to keep idle connections with the memcache server(s).
Change default value from 600 usec (!) to 15 sec. PR 58091
[Christophe Jaillet]
*) mod_dir: Prevent the internal identifier "httpd/unix-directory" from
appearing as a Content-Type response header when requests for a directory
are rewritten by mod_rewrite. [Eric Covener]
[1] tested by brnrd@
2015-10-13 20:17:28 +02:00
|
|
|
pre-configure::
|
|
|
|
|
@${ECHO_MSG} ""
|
|
|
|
|
@${ECHO_MSG} " You can check your modules configuration by using make show-modules"
|
|
|
|
|
@${ECHO_MSG} ""
|
|
|
|
|
# silence autotools
|
|
|
|
|
-${MV} -v ${WRKSRC}/configure.in ${WRKSRC}/configure.ac
|
|
|
|
|
|
2013-03-26 22:35:33 +01:00
|
|
|
post-configure:
|
|
|
|
|
@FTPUSERS=`${EGREP} -v '^#' /etc/ftpusers| ${TR} -s "\n" " "` ;\
|
2015-01-31 16:22:51 +01:00
|
|
|
${REINPLACE_CMD} -e "s,%%FTPUSERS%%,$${FTPUSERS}," \
|
|
|
|
|
${WRKSRC}/docs/conf/extra/httpd-userdir.conf
|
|
|
|
|
${REINPLACE_CMD} -e "s,%%WWWOWN%%,${WWWOWN}," -e "s,%%WWWGRP%%,${WWWGRP}," \
|
|
|
|
|
${WRKSRC}/docs/conf/httpd.conf
|
|
|
|
|
${REINPLACE_CMD} -e "s,%%PREFIX%%,${PREFIX}," ${WRKSRC}/support/envvars-std
|
2013-03-26 22:35:33 +01:00
|
|
|
|
|
|
|
|
post-install:
|
2013-10-27 18:54:39 +01:00
|
|
|
@${MKDIR} ${ETC_SUBDIRS:S|^|${STAGEDIR}${ETCDIR}/|}
|
2013-11-24 21:09:07 +01:00
|
|
|
${INSTALL_DATA} ${FILESDIR}/no-accf.conf ${STAGEDIR}${ETCDIR}/Includes/
|
2014-12-01 23:50:41 +01:00
|
|
|
# place for 3rd party module configuration
|
2014-08-09 23:43:27 +02:00
|
|
|
${INSTALL_DATA} ${FILESDIR}/README_modules.d ${STAGEDIR}${ETCDIR}/modules.d/
|
2014-09-22 20:50:18 +02:00
|
|
|
# strip returns an error for non binary files, but we have a big mix
|
|
|
|
|
-${STRIP_CMD} ${STAGEDIR}${PREFIX}/sbin/* 2>/dev/null
|
|
|
|
|
-${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/*
|
|
|
|
|
-${STRIP_CMD} ${STAGEDIR}${PREFIX}/libexec/apache24/mod_*.so
|
2013-03-26 22:35:33 +01:00
|
|
|
|
|
|
|
|
.if ${PORT_OPTIONS:MLOG_FORENSIC}
|
2014-09-22 20:50:18 +02:00
|
|
|
${INSTALL_SCRIPT} ${WRKSRC}/support/check_forensic ${STAGEDIR}${PREFIX}/sbin
|
2013-03-26 22:35:33 +01:00
|
|
|
.endif
|
|
|
|
|
|
|
|
|
|
# maintainer only, check for new modules
|
|
|
|
|
modlist: extract
|
|
|
|
|
@${AWK} '/: checking whether to enable mod_/ \
|
|
|
|
|
{printf "%%%%%s%%%%libexec/apache24/%s.so\n", \
|
|
|
|
|
toupper($$8), $$8}' ${WRKSRC}/configure \
|
|
|
|
|
| ${TR} -d '"' \
|
|
|
|
|
| ${SORT} -u \
|
2013-10-27 18:54:39 +01:00
|
|
|
| ${GREP} -E -v '^%%MOD_(HTTP|ISAPI|LOG_CONFIG|PRIVILEGES|SO|UNIXD)%%'
|
2013-03-26 22:35:33 +01:00
|
|
|
|
|
|
|
|
.include <bsd.port.post.mk>
|
