kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/www/ap-ssl/Makefile

101 lines
3.2 KiB
Makefile
Raw Normal View History

Move ownership of SSL-related config directories from www/apache to this package.
2002-01-01 07:12:38 +01:00
# $NetBSD: Makefile,v 1.44 2002/01/01 06:12:38 jlam Exp $
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
Update ap-ssl to 2.8.5 from the mod_ssl-2.8.5-1.3.22 distribution. Changes from version 2.8.4 include: *) Upgraded to Apache 1.3.22 *) Fixed check whether server certificate wildcard CommonName (CN) matches the configured server name. *) Fixed buffer overflow.
2001-10-17 21:17:11 +02:00
DISTNAME= mod_ssl-2.8.5-1.3.22
PKGNAME= ap-ssl-2.8.5
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
CATEGORIES= www security
MASTER_SITES= http://www.modssl.org/source/
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
MAINTAINER= jlam@netbsd.org
HOMEPAGE= http://www.modssl.org/
Update to new COMMENT style: COMMENT var in Makefile instead of pkg/COMMENT.
2001-02-17 18:21:28 +01:00
COMMENT= SSL/TLS protocols module for Apache
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
Update ap-ssl to 2.8.5 from the mod_ssl-2.8.5-1.3.22 distribution. Changes from version 2.8.4 include: *) Upgraded to Apache 1.3.22 *) Fixed check whether server certificate wildcard CommonName (CN) matches the configured server name. *) Fixed buffer overflow.
2001-10-17 21:17:11 +02:00
DEPENDS+= apache>=1.3.22:../../www/apache
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
# For "apxs":
Update ap-ssl to 2.8.2. Relevant changes from version 2.8.1: *) Moved the Shared Memory Cyclic Buffer (SHMCB) session cache variant from "experimental" state to "production" by removing the `#ifdef SSL_EXPERIMENTAL_SHMCB ...#endif' wrappers. This means that now `SSLSessionCache shmcb:...' is unconditionally available. *) Made the mutex handling more robust by retrying the semaphore-based operations in interrupt situations (errno == EINTR). *) Also log the OpenSSL error message if the RSA temporary key(s) cannot be generated. *) Fixed mod_ssl Auth handler: it now returns DECLINED instead of OK if authentication is passed successfully to allow other modules (usually mod_auth) to still deny the request. *) Fixed certificate DN handling under EBCDIC platforms.
2001-04-29 22:36:47 +02:00
BUILD_DEPENDS+= perl>=${PERL5_REQD}:../../lang/perl5
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
Mechanical changes to 375 files to change dependency patterns of the form foo-* to foo-[0-9]*. This is to cause the dependencies to match only the packages whose base package name is "foo", and not those named "foo-bar". A concrete example is p5-Net-* matching p5-Net-DNS as well as p5-Net. Also change dependency examples in Packages.txt to reflect this.
2001-09-28 01:17:41 +02:00
CONFLICTS= apache-1.3.[0-9] apache-*modssl-[0-9]* apache6-[0-9]*
Update to mod_ssl-2.3.8-1.3.9 so that this works again with the updated Apache server and OpenSSl-0.9.4. Makefile: Take advantage of the working configure script. patches/patch-aa: replace this with a gross hack that finds the libssl shared library with our current version of the OpenSSL pkg.
1999-12-01 02:00:17 +01:00
Update ap-ssl to 2.8.5 from the mod_ssl-2.8.5-1.3.22 distribution. Changes from version 2.8.4 include: *) Upgraded to Apache 1.3.22 *) Fixed check whether server certificate wildcard CommonName (CN) matches the configured server name. *) Fixed buffer overflow.
2001-10-17 21:17:11 +02:00
HAS_CONFIGURE= YES
USE_BUILDLINK_ONLY= YES
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
.include "../../mk/bsd.prefs.mk" early, so that USE_RSAREF2 can be defined in /etc/mk.conf
1998-12-28 08:56:35 +01:00
.include "../../mk/bsd.prefs.mk"
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
CONFIGURE_ARGS+= --with-apxs=${PREFIX}/sbin/apxs
Update ap-ssl to 2.8.5 from the mod_ssl-2.8.5-1.3.22 distribution. Changes from version 2.8.4 include: *) Upgraded to Apache 1.3.22 *) Fixed check whether server certificate wildcard CommonName (CN) matches the configured server name. *) Fixed buffer overflow.
2001-10-17 21:17:11 +02:00
CONFIGURE_ARGS+= --with-ssl=${BUILDLINK_DIR}
MAKE_ENV+= SSL_RPATH_LDFLAGS="-R${SSLBASE}/lib"
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
PKG_SYSCONFDIR is where the configuration files for a package may be found. This value may be customized in various ways: PKG_SYSCONFBASE is the main config directory under which all package configuration files are to be found. PKG_SYSCONFSUBDIR is the subdirectory of PKG_SYSCONFBASE under which the configuration files for a particular package may be found. PKG_SYSCONFDIR.${PKGBASE} overrides the value of ${PKG_SYSCONFDIR} for a particular package. Users will typically want to set PKG_SYSCONFBASE to /etc, or accept the default location of ${PREFIX}/etc. This obsoletes the use of CONFDIR, which was active for only 6 days, so no need to have a workaround to still accept old CONFDIR settings.
2001-11-25 19:59:45 +01:00
PKG_SYSCONFSUBDIR?= httpd
Adapt to use shared INSTALL/DEINSTALL scripts by using the logic in bsd.pkg.install.mk: * Remove old DEINSTALL/INSTALL scripts. * Move some text printed at POST-INSTALL time into the MESSAGE file. * Adjust rc.d scripts to respect rc.conf settings, so that the script may be directly copied into /etc/rc.d.
2001-11-19 17:23:08 +01:00
Move ownership of SSL-related config directories from www/apache to this package.
2002-01-01 07:12:38 +01:00
EGDIR= ${PREFIX}/share/examples/mod_ssl
OWN_DIRS= ${PKG_SYSCONFDIR}/ssl.crl
OWN_DIRS+= ${PKG_SYSCONFDIR}/ssl.crt
OWN_DIRS+= ${PKG_SYSCONFDIR}/ssl.csr
OWN_DIRS+= ${PKG_SYSCONFDIR}/ssl.prm
OWN_DIRS_PERMS= ${PKG_SYSCONFDIR}/ssl.key \
${ROOT_USER} ${ROOT_GROUP} 0700
CONF_FILES= ${EGDIR}/apache_start.conf \
${PKG_SYSCONFDIR}/apache_start.conf
SUPPORT_FILES= # empty
SUPPS= ssl.crl/Makefile.crl ssl.crl/README.CRL \
ssl.crt/Makefile.crt ssl.crt/README.CRT \
ssl.crt/ca-bundle.crt ssl.crt/README.CSR \
ssl.key/README.KEY ssl.prm/README.PRM
.for FILE in ${SUPPS}
SUPPORT_FILES+= ${EGDIR}/${FILE} ${PKG_SYSCONFDIR}/${FILE}
.endfor
Update ap-ssl to 2.8.4 using mod_ssl-2.8.4-1.3.20. The only relevant change from version 2.8.3 is upgrading the mod_ssl sources to patch against Apache 1.3.20. The pkgsrc changes include unifying repeated SED replacement info for various files into one location, FILES_SUBST.
2001-06-09 08:50:23 +02:00
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
post-extract:
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.contrib; ${MV} -f loadcacert.cgi loadcacert.cgi.in
cd ${WRKSRC}/pkg.sslsup; ${MV} -f mkcert.sh mkcert.sh.in
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
post-build:
Move ownership of SSL-related config directories from www/apache to this package.
2002-01-01 07:12:38 +01:00
@${SED} -e "s|^#!/.*|#!${PERL5}|g" \
Update ap-ssl to 2.8.2. Relevant changes from version 2.8.1: *) Moved the Shared Memory Cyclic Buffer (SHMCB) session cache variant from "experimental" state to "production" by removing the `#ifdef SSL_EXPERIMENTAL_SHMCB ...#endif' wrappers. This means that now `SSLSessionCache shmcb:...' is unconditionally available. *) Made the mutex handling more robust by retrying the semaphore-based operations in interrupt situations (errno == EINTR). *) Also log the OpenSSL error message if the RSA temporary key(s) cannot be generated. *) Fixed mod_ssl Auth handler: it now returns DECLINED instead of OK if authentication is passed successfully to allow other modules (usually mod_auth) to still deny the request. *) Fixed certificate DN handling under EBCDIC platforms.
2001-04-29 22:36:47 +02:00
${WRKSRC}/pkg.contrib/loadcacert.cgi.in \
> ${WRKSRC}/pkg.contrib/loadcacert.cgi
Move ownership of SSL-related config directories from www/apache to this package.
2002-01-01 07:12:38 +01:00
@${SED} ${FILES_SUBST_SED} \
Update ap-ssl to 2.8.2. Relevant changes from version 2.8.1: *) Moved the Shared Memory Cyclic Buffer (SHMCB) session cache variant from "experimental" state to "production" by removing the `#ifdef SSL_EXPERIMENTAL_SHMCB ...#endif' wrappers. This means that now `SSLSessionCache shmcb:...' is unconditionally available. *) Made the mutex handling more robust by retrying the semaphore-based operations in interrupt situations (errno == EINTR). *) Also log the OpenSSL error message if the RSA temporary key(s) cannot be generated. *) Fixed mod_ssl Auth handler: it now returns DECLINED instead of OK if authentication is passed successfully to allow other modules (usually mod_auth) to still deny the request. *) Fixed certificate DN handling under EBCDIC platforms.
2001-04-29 22:36:47 +02:00
${WRKSRC}/pkg.sslsup/mkcert.sh.in \
> ${WRKSRC}/pkg.sslsup/mkcert.sh
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
Update ap-ssl to 2.8.2. Relevant changes from version 2.8.1: *) Moved the Shared Memory Cyclic Buffer (SHMCB) session cache variant from "experimental" state to "production" by removing the `#ifdef SSL_EXPERIMENTAL_SHMCB ...#endif' wrappers. This means that now `SSLSessionCache shmcb:...' is unconditionally available. *) Made the mutex handling more robust by retrying the semaphore-based operations in interrupt situations (errno == EINTR). *) Also log the OpenSSL error message if the RSA temporary key(s) cannot be generated. *) Fixed mod_ssl Auth handler: it now returns DECLINED instead of OK if authentication is passed successfully to allow other modules (usually mod_auth) to still deny the request. *) Fixed certificate DN handling under EBCDIC platforms.
2001-04-29 22:36:47 +02:00
pre-install:
Update ap-ssl to 2.8.4 using mod_ssl-2.8.4-1.3.20. The only relevant change from version 2.8.3 is upgrading the mod_ssl sources to patch against Apache 1.3.20. The pkgsrc changes include unifying repeated SED replacement info for various files into one location, FILES_SUBST.
2001-06-09 08:50:23 +02:00
${SED} ${FILES_SUBST_SED} \
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
${FILESDIR}/README.mkcert > ${WRKDIR}/README.mkcert
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
Update ap-ssl to 2.8.2. Relevant changes from version 2.8.1: *) Moved the Shared Memory Cyclic Buffer (SHMCB) session cache variant from "experimental" state to "production" by removing the `#ifdef SSL_EXPERIMENTAL_SHMCB ...#endif' wrappers. This means that now `SSLSessionCache shmcb:...' is unconditionally available. *) Made the mutex handling more robust by retrying the semaphore-based operations in interrupt situations (errno == EINTR). *) Also log the OpenSSL error message if the RSA temporary key(s) cannot be generated. *) Fixed mod_ssl Auth handler: it now returns DECLINED instead of OK if authentication is passed successfully to allow other modules (usually mod_auth) to still deny the request. *) Fixed certificate DN handling under EBCDIC platforms.
2001-04-29 22:36:47 +02:00
post-install:
Adapt to use shared INSTALL/DEINSTALL scripts by using the logic in bsd.pkg.install.mk: * Remove old DEINSTALL/INSTALL scripts. * Move some text printed at POST-INSTALL time into the MESSAGE file. * Adjust rc.d scripts to respect rc.conf settings, so that the script may be directly copied into /etc/rc.d.
2001-11-19 17:23:08 +01:00
${INSTALL_DATA_DIR} ${EGDIR}
${INSTALL_DATA_DIR} ${EGDIR}/ssl.crl
${INSTALL_DATA_DIR} ${EGDIR}/ssl.crt
${INSTALL_DATA_DIR} ${EGDIR}/ssl.csr
${INSTALL_DATA_DIR} ${EGDIR}/ssl.key
${INSTALL_DATA_DIR} ${EGDIR}/ssl.prm
Update ap-ssl to 2.8.2. Relevant changes from version 2.8.1: *) Moved the Shared Memory Cyclic Buffer (SHMCB) session cache variant from "experimental" state to "production" by removing the `#ifdef SSL_EXPERIMENTAL_SHMCB ...#endif' wrappers. This means that now `SSLSessionCache shmcb:...' is unconditionally available. *) Made the mutex handling more robust by retrying the semaphore-based operations in interrupt situations (errno == EINTR). *) Also log the OpenSSL error message if the RSA temporary key(s) cannot be generated. *) Fixed mod_ssl Auth handler: it now returns DECLINED instead of OK if authentication is passed successfully to allow other modules (usually mod_auth) to still deny the request. *) Fixed certificate DN handling under EBCDIC platforms.
2001-04-29 22:36:47 +02:00
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${PREFIX}/lib/httpd; ${MV} -f libssl.so mod_ssl.so
Update ap-ssl to 2.8.2. Relevant changes from version 2.8.1: *) Moved the Shared Memory Cyclic Buffer (SHMCB) session cache variant from "experimental" state to "production" by removing the `#ifdef SSL_EXPERIMENTAL_SHMCB ...#endif' wrappers. This means that now `SSLSessionCache shmcb:...' is unconditionally available. *) Made the mutex handling more robust by retrying the semaphore-based operations in interrupt situations (errno == EINTR). *) Also log the OpenSSL error message if the RSA temporary key(s) cannot be generated. *) Fixed mod_ssl Auth handler: it now returns DECLINED instead of OK if authentication is passed successfully to allow other modules (usually mod_auth) to still deny the request. *) Fixed certificate DN handling under EBCDIC platforms.
2001-04-29 22:36:47 +02:00
cd ${WRKSRC}/pkg.sslsup; ${INSTALL_SCRIPT} mkcert.sh \
${PREFIX}/sbin/mkcert
Adapt to use shared INSTALL/DEINSTALL scripts by using the logic in bsd.pkg.install.mk: * Remove old DEINSTALL/INSTALL scripts. * Move some text printed at POST-INSTALL time into the MESSAGE file. * Adjust rc.d scripts to respect rc.conf settings, so that the script may be directly copied into /etc/rc.d.
2001-11-19 17:23:08 +01:00
${INSTALL_DATA} ${FILESDIR}/apache_start.conf ${EGDIR}
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
${INSTALL_DATA_DIR} ${PREFIX}/share/httpd/htdocs/manual/mod/mod_ssl
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.ssldoc; ${INSTALL_DATA} *.html *.gif *.jpg \
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
${PREFIX}/share/httpd/htdocs/manual/mod/mod_ssl
Update Apache to 1.3.6, mod_ssl to 2.2.8, and mod_perl to 1.19. mod_ssl now makes use of OpenSSL.
1999-04-30 19:05:19 +02:00
${INSTALL_DATA_DIR} ${PREFIX}/share/mod_ssl
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.contrib; ${INSTALL_SCRIPT} *.sh *.cgi \
${PREFIX}/share/mod_ssl
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
${INSTALL_DATA_DIR} ${PREFIX}/share/doc/mod_ssl
${INSTALL_DATA} ${WRKDIR}/README.mkcert ${PREFIX}/share/doc/mod_ssl
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.sslcfg; ${RM} -f server.*
cd ${WRKSRC}/pkg.sslcfg; ${INSTALL_DATA} README.CRL *.crl \
Adapt to use shared INSTALL/DEINSTALL scripts by using the logic in bsd.pkg.install.mk: * Remove old DEINSTALL/INSTALL scripts. * Move some text printed at POST-INSTALL time into the MESSAGE file. * Adjust rc.d scripts to respect rc.conf settings, so that the script may be directly copied into /etc/rc.d.
2001-11-19 17:23:08 +01:00
${EGDIR}/ssl.crl
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.sslcfg; ${INSTALL_DATA} README.CRT *.crt \
Adapt to use shared INSTALL/DEINSTALL scripts by using the logic in bsd.pkg.install.mk: * Remove old DEINSTALL/INSTALL scripts. * Move some text printed at POST-INSTALL time into the MESSAGE file. * Adjust rc.d scripts to respect rc.conf settings, so that the script may be directly copied into /etc/rc.d.
2001-11-19 17:23:08 +01:00
${EGDIR}/ssl.crt
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.sslcfg; ${INSTALL_DATA} README.CSR \
Adapt to use shared INSTALL/DEINSTALL scripts by using the logic in bsd.pkg.install.mk: * Remove old DEINSTALL/INSTALL scripts. * Move some text printed at POST-INSTALL time into the MESSAGE file. * Adjust rc.d scripts to respect rc.conf settings, so that the script may be directly copied into /etc/rc.d.
2001-11-19 17:23:08 +01:00
${EGDIR}/ssl.csr
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.sslcfg; ${INSTALL_DATA} README.KEY *.key \
Adapt to use shared INSTALL/DEINSTALL scripts by using the logic in bsd.pkg.install.mk: * Remove old DEINSTALL/INSTALL scripts. * Move some text printed at POST-INSTALL time into the MESSAGE file. * Adjust rc.d scripts to respect rc.conf settings, so that the script may be directly copied into /etc/rc.d.
2001-11-19 17:23:08 +01:00
${EGDIR}/ssl.key
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.sslcfg; ${INSTALL_DATA} README.PRM *.prm \
Adapt to use shared INSTALL/DEINSTALL scripts by using the logic in bsd.pkg.install.mk: * Remove old DEINSTALL/INSTALL scripts. * Move some text printed at POST-INSTALL time into the MESSAGE file. * Adjust rc.d scripts to respect rc.conf settings, so that the script may be directly copied into /etc/rc.d.
2001-11-19 17:23:08 +01:00
${EGDIR}/ssl.prm
Update ap-ssl to 2.8.2. Relevant changes from version 2.8.1: *) Moved the Shared Memory Cyclic Buffer (SHMCB) session cache variant from "experimental" state to "production" by removing the `#ifdef SSL_EXPERIMENTAL_SHMCB ...#endif' wrappers. This means that now `SSLSessionCache shmcb:...' is unconditionally available. *) Made the mutex handling more robust by retrying the semaphore-based operations in interrupt situations (errno == EINTR). *) Also log the OpenSSL error message if the RSA temporary key(s) cannot be generated. *) Fixed mod_ssl Auth handler: it now returns DECLINED instead of OK if authentication is passed successfully to allow other modules (usually mod_auth) to still deny the request. *) Fixed certificate DN handling under EBCDIC platforms.
2001-04-29 22:36:47 +02:00
Update ap-ssl to 2.8.5 from the mod_ssl-2.8.5-1.3.22 distribution. Changes from version 2.8.4 include: *) Upgraded to Apache 1.3.22 *) Fixed check whether server certificate wildcard CommonName (CN) matches the configured server name. *) Fixed buffer overflow.
2001-10-17 21:17:11 +02:00
.include "../../security/openssl/buildlink.mk"
Adapt to use shared INSTALL/DEINSTALL scripts by using the logic in bsd.pkg.install.mk: * Remove old DEINSTALL/INSTALL scripts. * Move some text printed at POST-INSTALL time into the MESSAGE file. * Adjust rc.d scripts to respect rc.conf settings, so that the script may be directly copied into /etc/rc.d.
2001-11-19 17:23:08 +01:00
.include "../../mk/bsd.pkg.install.mk"
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
.include "../../mk/bsd.pkg.mk"
Reference in a new issue Copy permalink