kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/www/ap-ssl/Makefile

103 lines
3.2 KiB
Makefile
Raw Normal View History

Update to mod_ssl 2.8.25. The only change is support for apache 1.3.34.
2005-10-19 22:33:44 +02:00
# $NetBSD: Makefile,v 1.92 2005/10/19 20:33:44 bouyer Exp $
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
Update to mod_ssl 2.8.25. The only change is support for apache 1.3.34.
2005-10-19 22:33:44 +02:00
DISTNAME= mod_ssl-2.8.25-1.3.34
PKGNAME= ap-ssl-2.8.25
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
CATEGORIES= www security
Add a two mirror sites because the main site isn't that fast.
2002-06-19 09:10:59 +02:00
MASTER_SITES= http://www.modssl.org/source/ \
ftp://ftp.pca.dfn.de/pub/tools/net/mod_ssl/source/ \
Add missing "source/" to master site entries for "ftp.funet.fi".
2002-06-19 17:22:36 +02:00
ftp://ftp.funet.fi/pub/crypt/cryptography/libs/modssl/source/
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
Relinquish maintainership of packages to tech-pkg@NetBSD.org.
2004-04-25 00:46:08 +02:00
MAINTAINER= tech-pkg@NetBSD.org
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
HOMEPAGE= http://www.modssl.org/
Update to new COMMENT style: COMMENT var in Makefile instead of pkg/COMMENT.
2001-02-17 18:21:28 +01:00
COMMENT= SSL/TLS protocols module for Apache
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
Mechanical changes to 375 files to change dependency patterns of the form foo-* to foo-[0-9]*. This is to cause the dependencies to match only the packages whose base package name is "foo", and not those named "foo-bar". A concrete example is p5-Net-* matching p5-Net-DNS as well as p5-Net. Also change dependency examples in Packages.txt to reflect this.
2001-09-28 01:17:41 +02:00
CONFLICTS= apache-1.3.[0-9] apache-*modssl-[0-9]* apache6-[0-9]*
Update to mod_ssl-2.3.8-1.3.9 so that this works again with the updated Apache server and OpenSSl-0.9.4. Makefile: Take advantage of the working configure script. patches/patch-aa: replace this with a gross hack that finds the libssl shared library with our current version of the OpenSSL pkg.
1999-12-01 02:00:17 +01:00
Update to 2.8.22: Changes with mod_ssl 2.8.22 (22-Oct-2004 to 30-Oct-2004) *) Upgraded to Apache 1.3.33
2005-02-18 15:07:50 +01:00
BUILDLINK_DEPENDS.apache= apache>=1.3.33
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
bl3ify
2004-04-26 22:28:54 +02:00
USE_PKGINSTALL= yes
APACHE_MODULE= yes
.include "../../mk/bsd.prefs.mk" early, so that USE_RSAREF2 can be defined in /etc/mk.conf
1998-12-28 08:56:35 +01:00
bl3ify
2004-04-26 22:28:54 +02:00
GNU_CONFIGURE= yes
Merge packages from the buildlink2 branch back into the main trunk that have been converted to USE_BUILDLINK2.
2002-08-25 23:50:52 +02:00
CONFIGURE_ARGS+= --with-ssl=${SSLBASE}
.include "../../mk/bsd.prefs.mk"
Replace RPATH_FLAG with LINKER_RPATH_FLAG and COMPILER_RPATH_FLAG, which are the full option names used to set rpath directives for the linker and the compiler, respectively. In places were we are invoking the linker, use "${LINKER_RPATH_FLAG} <path>", where the space is inserted in case the flag is a word, e.g. -rpath. The default values of *_RPATH_FLAG are set by the compiler/*.mk files, depending on the compiler that you use. They may be overridden on a ${OPSYS}-specific basis by setting _OPSYS_LINKER_RPATH_FLAG and _OPSYS_COMPILER_RPATH_FLAG, respectively. Garbage-collect _OPSYS_RPATH_NAME and _COMPILER_LD_FLAG.
2004-08-27 08:29:06 +02:00
SSL_RPATH_LDFLAGS= ${LINKER_RPATH_FLAG} ${SSLBASE}/lib
(1) Publicly export the value of _OPSYS_RPATH_NAME as RPATH_FLAG; Makefiles simply need to use this value often, for better or for worse. (2) Create a new variable FIX_RPATH that lists variables that should be cleansed of -R or -rpath values if ${_USE_RPATH} is "no". By default, FIX_RPATH contains LIBS, X11_LDFLAGS, and LDFLAGS, and additional variables may be appended from package Makefiles.
2003-03-14 20:37:30 +01:00
FIX_RPATH+= SSL_RPATH_LDFLAGS
MAKE_ENV+= SSL_RPATH_LDFLAGS="${SSL_RPATH_LDFLAGS}"
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
Bump PKGREVISION of ap-ssl: no longer install apache_start.conf; Apache/SSL users should just add: apache_start="startssl" to /etc/rc.conf.
2002-11-20 00:03:53 +01:00
PKG_SYSCONFVAR= apache
PKG_SYSCONFDIR is where the configuration files for a package may be found. This value may be customized in various ways: PKG_SYSCONFBASE is the main config directory under which all package configuration files are to be found. PKG_SYSCONFSUBDIR is the subdirectory of PKG_SYSCONFBASE under which the configuration files for a particular package may be found. PKG_SYSCONFDIR.${PKGBASE} overrides the value of ${PKG_SYSCONFDIR} for a particular package. Users will typically want to set PKG_SYSCONFBASE to /etc, or accept the default location of ${PREFIX}/etc. This obsoletes the use of CONFDIR, which was active for only 6 days, so no need to have a workaround to still accept old CONFDIR settings.
2001-11-25 19:59:45 +01:00
PKG_SYSCONFSUBDIR?= httpd
Adapt to use shared INSTALL/DEINSTALL scripts by using the logic in bsd.pkg.install.mk: * Remove old DEINSTALL/INSTALL scripts. * Move some text printed at POST-INSTALL time into the MESSAGE file. * Adjust rc.d scripts to respect rc.conf settings, so that the script may be directly copied into /etc/rc.d.
2001-11-19 17:23:08 +01:00
Move ownership of SSL-related config directories from www/apache to this package.
2002-01-01 07:12:38 +01:00
EGDIR= ${PREFIX}/share/examples/mod_ssl
OWN_DIRS= ${PKG_SYSCONFDIR}/ssl.crl
OWN_DIRS+= ${PKG_SYSCONFDIR}/ssl.crt
OWN_DIRS+= ${PKG_SYSCONFDIR}/ssl.csr
OWN_DIRS+= ${PKG_SYSCONFDIR}/ssl.prm
OWN_DIRS_PERMS= ${PKG_SYSCONFDIR}/ssl.key \
${ROOT_USER} ${ROOT_GROUP} 0700
Merge CONF_FILES/SUPPORT_FILES and CONF_FILES_PERMS/SUPPORT_FILES_PERMS as the INSTALL and DEINSTALL scripts no longer distinguish between the two types of files. Drop SUPPORT_FILES{,_PERMS} and modify the packages in pkgsrc accordingly.
2005-08-19 20:12:36 +02:00
CONF_FILES= # empty
CONFS= ssl.crl/Makefile.crl ssl.crl/README.CRL \
Move ownership of SSL-related config directories from www/apache to this package.
2002-01-01 07:12:38 +01:00
ssl.crt/Makefile.crt ssl.crt/README.CRT \
updated mod_ssl to 2.8.18. - fix installation of example README.CSR. Changes with mod_ssl 2.8.18 (11-May-2004 to 27-May-2004) *) Fix buffer overflow in "SSLOptions +FakeBasicAuth" implementation if the Subject-DN in the client certificate exceeds 6KB in length. (CVE CAN-2004-0488). *) Handle the case of OpenSSL retry requests after interrupted system calls during the SSL handshake phase. *) Remove some unused functions.
2004-05-30 12:29:00 +02:00
ssl.csr/README.CSR ssl.csr/README.CSR \
Move ownership of SSL-related config directories from www/apache to this package.
2002-01-01 07:12:38 +01:00
ssl.key/README.KEY ssl.prm/README.PRM
Merge CONF_FILES/SUPPORT_FILES and CONF_FILES_PERMS/SUPPORT_FILES_PERMS as the INSTALL and DEINSTALL scripts no longer distinguish between the two types of files. Drop SUPPORT_FILES{,_PERMS} and modify the packages in pkgsrc accordingly.
2005-08-19 20:12:36 +02:00
.for FILE in ${CONFS}
CONF_FILES+= ${EGDIR}/${FILE} ${PKG_SYSCONFDIR}/${FILE}
Move ownership of SSL-related config directories from www/apache to this package.
2002-01-01 07:12:38 +01:00
.endfor
Update ap-ssl to 2.8.4 using mod_ssl-2.8.4-1.3.20. The only relevant change from version 2.8.3 is upgrading the mod_ssl sources to patch against Apache 1.3.20. The pkgsrc changes include unifying repeated SED replacement info for various files into one location, FILES_SUBST.
2001-06-09 08:50:23 +02:00
bl3ify
2004-04-26 22:28:54 +02:00
.include "../../security/openssl/buildlink3.mk"
.include "../../www/apache/buildlink3.mk"
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
post-extract:
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.contrib; ${MV} -f loadcacert.cgi loadcacert.cgi.in
cd ${WRKSRC}/pkg.sslsup; ${MV} -f mkcert.sh mkcert.sh.in
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
post-build:
Move ownership of SSL-related config directories from www/apache to this package.
2002-01-01 07:12:38 +01:00
@${SED} -e "s|^#!/.*|#!${PERL5}|g" \
Update ap-ssl to 2.8.2. Relevant changes from version 2.8.1: *) Moved the Shared Memory Cyclic Buffer (SHMCB) session cache variant from "experimental" state to "production" by removing the `#ifdef SSL_EXPERIMENTAL_SHMCB ...#endif' wrappers. This means that now `SSLSessionCache shmcb:...' is unconditionally available. *) Made the mutex handling more robust by retrying the semaphore-based operations in interrupt situations (errno == EINTR). *) Also log the OpenSSL error message if the RSA temporary key(s) cannot be generated. *) Fixed mod_ssl Auth handler: it now returns DECLINED instead of OK if authentication is passed successfully to allow other modules (usually mod_auth) to still deny the request. *) Fixed certificate DN handling under EBCDIC platforms.
2001-04-29 22:36:47 +02:00
${WRKSRC}/pkg.contrib/loadcacert.cgi.in \
> ${WRKSRC}/pkg.contrib/loadcacert.cgi
Move ownership of SSL-related config directories from www/apache to this package.
2002-01-01 07:12:38 +01:00
@${SED} ${FILES_SUBST_SED} \
Update ap-ssl to 2.8.2. Relevant changes from version 2.8.1: *) Moved the Shared Memory Cyclic Buffer (SHMCB) session cache variant from "experimental" state to "production" by removing the `#ifdef SSL_EXPERIMENTAL_SHMCB ...#endif' wrappers. This means that now `SSLSessionCache shmcb:...' is unconditionally available. *) Made the mutex handling more robust by retrying the semaphore-based operations in interrupt situations (errno == EINTR). *) Also log the OpenSSL error message if the RSA temporary key(s) cannot be generated. *) Fixed mod_ssl Auth handler: it now returns DECLINED instead of OK if authentication is passed successfully to allow other modules (usually mod_auth) to still deny the request. *) Fixed certificate DN handling under EBCDIC platforms.
2001-04-29 22:36:47 +02:00
${WRKSRC}/pkg.sslsup/mkcert.sh.in \
> ${WRKSRC}/pkg.sslsup/mkcert.sh
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
Update ap-ssl to 2.8.2. Relevant changes from version 2.8.1: *) Moved the Shared Memory Cyclic Buffer (SHMCB) session cache variant from "experimental" state to "production" by removing the `#ifdef SSL_EXPERIMENTAL_SHMCB ...#endif' wrappers. This means that now `SSLSessionCache shmcb:...' is unconditionally available. *) Made the mutex handling more robust by retrying the semaphore-based operations in interrupt situations (errno == EINTR). *) Also log the OpenSSL error message if the RSA temporary key(s) cannot be generated. *) Fixed mod_ssl Auth handler: it now returns DECLINED instead of OK if authentication is passed successfully to allow other modules (usually mod_auth) to still deny the request. *) Fixed certificate DN handling under EBCDIC platforms.
2001-04-29 22:36:47 +02:00
pre-install:
Update www/ap-ssl to 2.8.6: *) Upgraded to Apache 1.3.23 *) Fixed a subtle indexing bug in SHMCB. Each sub-cache used an indexing structure that (correctly) used index values (and ranges) as "unsigned int", but the meta-structure in the header had these ranged as "unsigned char". *) Perform the SHMCB remove operation under mutual exclusion to prevent a inter-process synchronization problem. *) Made sure that mod_ssl does not segfault in case of SCOREBOARD_SIZE < 1024. *) Merged in the SDBM patch from Uwe Ohse which fixes a problem with sdbms .dir file, which arrises when a second .dir block is needed for the first time. read() returns 0 in that case, and the library forgot to initialize that new block. A related problem is that the calculation of db->maxbno is wrong. It just appends 4096*BYTESIZ bits, which is not enough except for small databases (.dir basically doubles everytime it's too small).
2002-02-01 17:05:15 +01:00
@${SED} ${FILES_SUBST_SED} \
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
${FILESDIR}/README.mkcert > ${WRKDIR}/README.mkcert
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
Update ap-ssl to 2.8.2. Relevant changes from version 2.8.1: *) Moved the Shared Memory Cyclic Buffer (SHMCB) session cache variant from "experimental" state to "production" by removing the `#ifdef SSL_EXPERIMENTAL_SHMCB ...#endif' wrappers. This means that now `SSLSessionCache shmcb:...' is unconditionally available. *) Made the mutex handling more robust by retrying the semaphore-based operations in interrupt situations (errno == EINTR). *) Also log the OpenSSL error message if the RSA temporary key(s) cannot be generated. *) Fixed mod_ssl Auth handler: it now returns DECLINED instead of OK if authentication is passed successfully to allow other modules (usually mod_auth) to still deny the request. *) Fixed certificate DN handling under EBCDIC platforms.
2001-04-29 22:36:47 +02:00
post-install:
Adapt to use shared INSTALL/DEINSTALL scripts by using the logic in bsd.pkg.install.mk: * Remove old DEINSTALL/INSTALL scripts. * Move some text printed at POST-INSTALL time into the MESSAGE file. * Adjust rc.d scripts to respect rc.conf settings, so that the script may be directly copied into /etc/rc.d.
2001-11-19 17:23:08 +01:00
${INSTALL_DATA_DIR} ${EGDIR}
${INSTALL_DATA_DIR} ${EGDIR}/ssl.crl
${INSTALL_DATA_DIR} ${EGDIR}/ssl.crt
${INSTALL_DATA_DIR} ${EGDIR}/ssl.csr
${INSTALL_DATA_DIR} ${EGDIR}/ssl.key
${INSTALL_DATA_DIR} ${EGDIR}/ssl.prm
Update ap-ssl to 2.8.2. Relevant changes from version 2.8.1: *) Moved the Shared Memory Cyclic Buffer (SHMCB) session cache variant from "experimental" state to "production" by removing the `#ifdef SSL_EXPERIMENTAL_SHMCB ...#endif' wrappers. This means that now `SSLSessionCache shmcb:...' is unconditionally available. *) Made the mutex handling more robust by retrying the semaphore-based operations in interrupt situations (errno == EINTR). *) Also log the OpenSSL error message if the RSA temporary key(s) cannot be generated. *) Fixed mod_ssl Auth handler: it now returns DECLINED instead of OK if authentication is passed successfully to allow other modules (usually mod_auth) to still deny the request. *) Fixed certificate DN handling under EBCDIC platforms.
2001-04-29 22:36:47 +02:00
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${PREFIX}/lib/httpd; ${MV} -f libssl.so mod_ssl.so
Update ap-ssl to 2.8.2. Relevant changes from version 2.8.1: *) Moved the Shared Memory Cyclic Buffer (SHMCB) session cache variant from "experimental" state to "production" by removing the `#ifdef SSL_EXPERIMENTAL_SHMCB ...#endif' wrappers. This means that now `SSLSessionCache shmcb:...' is unconditionally available. *) Made the mutex handling more robust by retrying the semaphore-based operations in interrupt situations (errno == EINTR). *) Also log the OpenSSL error message if the RSA temporary key(s) cannot be generated. *) Fixed mod_ssl Auth handler: it now returns DECLINED instead of OK if authentication is passed successfully to allow other modules (usually mod_auth) to still deny the request. *) Fixed certificate DN handling under EBCDIC platforms.
2001-04-29 22:36:47 +02:00
cd ${WRKSRC}/pkg.sslsup; ${INSTALL_SCRIPT} mkcert.sh \
${PREFIX}/sbin/mkcert
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
${INSTALL_DATA_DIR} ${PREFIX}/share/httpd/htdocs/manual/mod/mod_ssl
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.ssldoc; ${INSTALL_DATA} *.html *.gif *.jpg \
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
${PREFIX}/share/httpd/htdocs/manual/mod/mod_ssl
Update Apache to 1.3.6, mod_ssl to 2.2.8, and mod_perl to 1.19. mod_ssl now makes use of OpenSSL.
1999-04-30 19:05:19 +02:00
${INSTALL_DATA_DIR} ${PREFIX}/share/mod_ssl
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.contrib; ${INSTALL_SCRIPT} *.sh *.cgi \
${PREFIX}/share/mod_ssl
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
${INSTALL_DATA_DIR} ${PREFIX}/share/doc/mod_ssl
${INSTALL_DATA} ${WRKDIR}/README.mkcert ${PREFIX}/share/doc/mod_ssl
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.sslcfg; ${RM} -f server.*
cd ${WRKSRC}/pkg.sslcfg; ${INSTALL_DATA} README.CRL *.crl \
Adapt to use shared INSTALL/DEINSTALL scripts by using the logic in bsd.pkg.install.mk: * Remove old DEINSTALL/INSTALL scripts. * Move some text printed at POST-INSTALL time into the MESSAGE file. * Adjust rc.d scripts to respect rc.conf settings, so that the script may be directly copied into /etc/rc.d.
2001-11-19 17:23:08 +01:00
${EGDIR}/ssl.crl
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.sslcfg; ${INSTALL_DATA} README.CRT *.crt \
Adapt to use shared INSTALL/DEINSTALL scripts by using the logic in bsd.pkg.install.mk: * Remove old DEINSTALL/INSTALL scripts. * Move some text printed at POST-INSTALL time into the MESSAGE file. * Adjust rc.d scripts to respect rc.conf settings, so that the script may be directly copied into /etc/rc.d.
2001-11-19 17:23:08 +01:00
${EGDIR}/ssl.crt
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.sslcfg; ${INSTALL_DATA} README.CSR \
Adapt to use shared INSTALL/DEINSTALL scripts by using the logic in bsd.pkg.install.mk: * Remove old DEINSTALL/INSTALL scripts. * Move some text printed at POST-INSTALL time into the MESSAGE file. * Adjust rc.d scripts to respect rc.conf settings, so that the script may be directly copied into /etc/rc.d.
2001-11-19 17:23:08 +01:00
${EGDIR}/ssl.csr
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.sslcfg; ${INSTALL_DATA} README.KEY *.key \
Adapt to use shared INSTALL/DEINSTALL scripts by using the logic in bsd.pkg.install.mk: * Remove old DEINSTALL/INSTALL scripts. * Move some text printed at POST-INSTALL time into the MESSAGE file. * Adjust rc.d scripts to respect rc.conf settings, so that the script may be directly copied into /etc/rc.d.
2001-11-19 17:23:08 +01:00
${EGDIR}/ssl.key
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.sslcfg; ${INSTALL_DATA} README.PRM *.prm \
Adapt to use shared INSTALL/DEINSTALL scripts by using the logic in bsd.pkg.install.mk: * Remove old DEINSTALL/INSTALL scripts. * Move some text printed at POST-INSTALL time into the MESSAGE file. * Adjust rc.d scripts to respect rc.conf settings, so that the script may be directly copied into /etc/rc.d.
2001-11-19 17:23:08 +01:00
${EGDIR}/ssl.prm
Update ap-ssl to 2.8.2. Relevant changes from version 2.8.1: *) Moved the Shared Memory Cyclic Buffer (SHMCB) session cache variant from "experimental" state to "production" by removing the `#ifdef SSL_EXPERIMENTAL_SHMCB ...#endif' wrappers. This means that now `SSLSessionCache shmcb:...' is unconditionally available. *) Made the mutex handling more robust by retrying the semaphore-based operations in interrupt situations (errno == EINTR). *) Also log the OpenSSL error message if the RSA temporary key(s) cannot be generated. *) Fixed mod_ssl Auth handler: it now returns DECLINED instead of OK if authentication is passed successfully to allow other modules (usually mod_auth) to still deny the request. *) Fixed certificate DN handling under EBCDIC platforms.
2001-04-29 22:36:47 +02:00
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
.include "../../mk/bsd.pkg.mk"
Reference in a new issue Copy permalink