pkgsrc/www/lighttpd/Makefile

82 lines
2.5 KiB
Makefile
Raw Normal View History

lighttpd: Update to 1.4.54. pkgsrc changes: Replace use of legacy GeoIP library with libmaxminddb. Uses a different module. Changes: Highlights behavior change: strict URL parsing and normalization (configurable) behavior change: mod_webdav now rejects partial PUT (configurable) mod_auth: HTTP Auth Digest algorithm=SHA-256 mod_webdav: major rewrite: robustness, performance, RFC compliance mod_maxminddb: new; obsoletes discontinued mod_geoip Changes from 1.4.53 [mod_evhost] handle IPv6 literal addr; add tests [core] separate server_main_loop() func, mark hot [core] mark startup/shutdown funcs cold [core] some server_main_loop() cleanup [core] fdevent_process() [core] srv→max_fds_lowat and srv→max_fds_hiwat [core] remove server.h [mod_staticfile] search ext array if not empty [core] store joblist pointer on stack [core] quickly clear request buffer for reuse [core] helper funcs for connection_state_machine() [core] perf: optimize connection_read_header() [core] parse request in connection_read_header() [core] log_request_header_on_error in one place [core] copy request only if might need for logging [core] make parse_request,request.request same buf [core] prefer buffer_caseless_compare() [core] pass req hdrs buffer to http_request_parse [core] replace con→response.keep_alive [core] mark log_error_write*() funcs cold [core] http_request_parse() mark error paths cold [core] lift code out of request line parse loop [core] get_http_method_key() match by strlen first [core] RFC7230 HTTP-version parse [mod_accesslog] attempt to reconstruct req line [multiple] minor: remove duplicated conditions [mod_deflate] honor request for x-gzip, x-bzip2 [mod_auth] minor: adjust config validation [core] discard oversized trailers [core] no keep-alive if POLLRDHUP,empty read queue [core] fix gw_backend spelling of directive in err [multiple] reduce code dup in list resizing [core] con→is_ssl_sock [core] connection_handle_write() updates con state [core] skip plugins_call_cleanup if not init’ed [core] simpler loops to run plugin hooks [core] fix mixed use of srv→split_vals array (fixes #2932) [core] dispatch events from within event framework [core] don’t call fd event handlers more than once, they might already be gone (fixes segfault) [core] poll: fdarray uses fd as index, not fde_ndx [core] map FDEVENT_* to OS system event frameworks [core] prefer memchr() over strchr() [core] use openssl to read,discard request body [mod_openssl] inherit cipherlist from global scope [mod_openssl] default: ssl.cipher-list = “HIGH” [mod_proxy] pass Content-Length to backend if > 0 [core] config option to allow GET w/ request body [core] some fdevent code streamlining [core] remove fde_ndx member outside fdevents [core] remove redundant check for allow_http11 [mod_openssl] use 16k static buffer instead of 64k [core] pull server load checks out of main loop [core] isolate fdevent processing [core] release empty chunk buf when nothing read [core] perf: pass (fdnode *) to epoll and kqueue [core] modify config parser to handle multiple } [core] pass (fdnode *) for registered fdevent fd [mod_auth] http_auth_digest_hex2bin() [mod_auth] http_auth_info_t digest abstraction [mod_auth] pass http_auth_require_t for 401 Unauth [core] no SOCK_NONBLOCK on QNX 7.0 [mod_auth] HTTP Auth Digest algorithm=SHA-256 [core] silence coverity warning [mod_magnet] fix invalid script return-type crash (fixes #2938) [build] remove -Wdeclaration-after-statement [core] pass conf.follow_symlink in more places [core] fix assertion with server.error-handler (fixes #2941) [core] extend dir redirection to take HTTP status [doc] minor adjust create-mime.conf.pl regex match (#2942) [core] attribute((fallthrough)) for GCC 7.0 [core] fdevent_mkstemp_append() (shared) [core] off_t upload_temp_file_size [core] clear FDEVENT_RDHUP if no POLLRDHUP [mod_wstunnel] fix ping-interval for big-endian (fixes #2944) [core] fix abort in http-parseopts (fixes #2945) [core] remove repeated slashes in http-parseopts [core] fix 1.4.52 regression in mem use with POST (fixes #2948) [multiple] cleaner calloc use in SETDEFAULTS_FUNC [core] add const to some etag prototypes [core] attribute((format …)) [core] struct log_error_st for error logging [core] log_error, log_perror using printf-like fmt [core] new worker_init hook to follow parent fork [core] replace open() with fdevent_open_cloexec() [mod_webdav] major rewrite (fixes #1818) [core] 200 for OPTIONS /non-existent/path HTTP/1.1 (fixes #2939) [mod_webdav] surround Lock-Token with “<…>” [mod_webdav] fix uuid detection macro [mod_webdav] fix misbehavior on blank nodes in PROPPATCH [mod_webdav] clean up resources after do{}while(0) [mod_webdav] check If-Match, If-Unmodified-Since (#1818) [mod_webdav] deprecated unsafe partial PUT compat [mod_webdav] provide ETag in more responses [mod_webdav] platform portability fixes [mod_webdav] disable elftc_copyfile() on FreeBSD [mod_webdav] special-case If: () [mod_webdav] check If-None-Match (#1818) [stat_cache] separate func for symlink policy chk [stat_cache] separate symlink pol from data struct [stat_cache] store entries without trailing slash [stat_cache] pass age param for stat cache cleanup [stat_cache] remove splaytree ins/del debug code [stat_cache] FAM: reduce string copying [stat_cache] FAM: check FAMNextEvent() return code [stat_cache] FAM: use entry hash index as userdata [stat_cache] FAM: improve handling modified file [stat_cache] FAM: ignore follow-symlink config [stat_cache] FAM: check hash collision before add [stat_cache] FAM: ignore event with no valid match [stat_cache] FAM: funcs to invalidate entries [stat_cache] interfaces to invalidate entries [mod_webdav] update stat_cache after file mod [core] use high precision stat timestamp in etag [scons] adjustment for static build under CentOS [core] emit trace using path before clearing path [core] http_chunk_append_file_fd() [multiple] open target file earlier in some cases [stat_cache] no longer stat() and open() for stat [stat_cache] FAM: improve monitoring, cache 16 sec [stat_cache] FAM: separate routine for FDEVENT_IN [stat_cache] FAM: whitespace-only change [mod_webdav] quiet coverity warnings [doc] highlight relevance of module load order (fixes #2946) [core] behavior change: stricter URL normalization [stat_cache] fix compilation error for cmake [cmake] help cmake on FreeBSD find sys/event.h [scons] help scons on FreeBSD find sys/event.h [build] detect FreeBSD elftc_copyfile() [mod_openssl] use SSL_CTX_set_client_hello_cb() [core] support weak etags with If-None-Match [core] store log_state_handling flag on stack [core] check if splay_tree NULL before invalidate [mod_webdav] workaround Microsoft-WebDAV-MiniRedir [mod_webdav] doc Microsoft-WebDAV-MiniRedir bugs [mod_webdav] invalidate parent dir in stat_cache [doc] systemd socket activation config example [core] chunkqueue perf: code reuse [core] chunkqueue perf: specialized buffer.h funcs [core] chunkqueue perf: skip opening 0-length file [core] chunkqueue perf: read small files into mem [core] buffer_reset() should not be passed NULL [tests] has_feature() helper func [tests] skip mod-secdownload HMAC-SHA1,HMAC-SHA256 [core] use high precision stat timestamp on OS X [mod_magnet] expose server addr (local IP) to lua [core] adjust http_chunk read() retry loop [mod_maxminddb] MaxMind GeoIP2 support [mod_authn_ldap] ldap_set_option LDAP_OPT_RESTART (fixes #2940)
2019-05-29 12:01:28 +02:00
# $NetBSD: Makefile,v 1.83 2019/05/29 10:01:28 nia Exp $
lighttpd: Update to 1.4.54. pkgsrc changes: Replace use of legacy GeoIP library with libmaxminddb. Uses a different module. Changes: Highlights behavior change: strict URL parsing and normalization (configurable) behavior change: mod_webdav now rejects partial PUT (configurable) mod_auth: HTTP Auth Digest algorithm=SHA-256 mod_webdav: major rewrite: robustness, performance, RFC compliance mod_maxminddb: new; obsoletes discontinued mod_geoip Changes from 1.4.53 [mod_evhost] handle IPv6 literal addr; add tests [core] separate server_main_loop() func, mark hot [core] mark startup/shutdown funcs cold [core] some server_main_loop() cleanup [core] fdevent_process() [core] srv→max_fds_lowat and srv→max_fds_hiwat [core] remove server.h [mod_staticfile] search ext array if not empty [core] store joblist pointer on stack [core] quickly clear request buffer for reuse [core] helper funcs for connection_state_machine() [core] perf: optimize connection_read_header() [core] parse request in connection_read_header() [core] log_request_header_on_error in one place [core] copy request only if might need for logging [core] make parse_request,request.request same buf [core] prefer buffer_caseless_compare() [core] pass req hdrs buffer to http_request_parse [core] replace con→response.keep_alive [core] mark log_error_write*() funcs cold [core] http_request_parse() mark error paths cold [core] lift code out of request line parse loop [core] get_http_method_key() match by strlen first [core] RFC7230 HTTP-version parse [mod_accesslog] attempt to reconstruct req line [multiple] minor: remove duplicated conditions [mod_deflate] honor request for x-gzip, x-bzip2 [mod_auth] minor: adjust config validation [core] discard oversized trailers [core] no keep-alive if POLLRDHUP,empty read queue [core] fix gw_backend spelling of directive in err [multiple] reduce code dup in list resizing [core] con→is_ssl_sock [core] connection_handle_write() updates con state [core] skip plugins_call_cleanup if not init’ed [core] simpler loops to run plugin hooks [core] fix mixed use of srv→split_vals array (fixes #2932) [core] dispatch events from within event framework [core] don’t call fd event handlers more than once, they might already be gone (fixes segfault) [core] poll: fdarray uses fd as index, not fde_ndx [core] map FDEVENT_* to OS system event frameworks [core] prefer memchr() over strchr() [core] use openssl to read,discard request body [mod_openssl] inherit cipherlist from global scope [mod_openssl] default: ssl.cipher-list = “HIGH” [mod_proxy] pass Content-Length to backend if > 0 [core] config option to allow GET w/ request body [core] some fdevent code streamlining [core] remove fde_ndx member outside fdevents [core] remove redundant check for allow_http11 [mod_openssl] use 16k static buffer instead of 64k [core] pull server load checks out of main loop [core] isolate fdevent processing [core] release empty chunk buf when nothing read [core] perf: pass (fdnode *) to epoll and kqueue [core] modify config parser to handle multiple } [core] pass (fdnode *) for registered fdevent fd [mod_auth] http_auth_digest_hex2bin() [mod_auth] http_auth_info_t digest abstraction [mod_auth] pass http_auth_require_t for 401 Unauth [core] no SOCK_NONBLOCK on QNX 7.0 [mod_auth] HTTP Auth Digest algorithm=SHA-256 [core] silence coverity warning [mod_magnet] fix invalid script return-type crash (fixes #2938) [build] remove -Wdeclaration-after-statement [core] pass conf.follow_symlink in more places [core] fix assertion with server.error-handler (fixes #2941) [core] extend dir redirection to take HTTP status [doc] minor adjust create-mime.conf.pl regex match (#2942) [core] attribute((fallthrough)) for GCC 7.0 [core] fdevent_mkstemp_append() (shared) [core] off_t upload_temp_file_size [core] clear FDEVENT_RDHUP if no POLLRDHUP [mod_wstunnel] fix ping-interval for big-endian (fixes #2944) [core] fix abort in http-parseopts (fixes #2945) [core] remove repeated slashes in http-parseopts [core] fix 1.4.52 regression in mem use with POST (fixes #2948) [multiple] cleaner calloc use in SETDEFAULTS_FUNC [core] add const to some etag prototypes [core] attribute((format …)) [core] struct log_error_st for error logging [core] log_error, log_perror using printf-like fmt [core] new worker_init hook to follow parent fork [core] replace open() with fdevent_open_cloexec() [mod_webdav] major rewrite (fixes #1818) [core] 200 for OPTIONS /non-existent/path HTTP/1.1 (fixes #2939) [mod_webdav] surround Lock-Token with “<…>” [mod_webdav] fix uuid detection macro [mod_webdav] fix misbehavior on blank nodes in PROPPATCH [mod_webdav] clean up resources after do{}while(0) [mod_webdav] check If-Match, If-Unmodified-Since (#1818) [mod_webdav] deprecated unsafe partial PUT compat [mod_webdav] provide ETag in more responses [mod_webdav] platform portability fixes [mod_webdav] disable elftc_copyfile() on FreeBSD [mod_webdav] special-case If: () [mod_webdav] check If-None-Match (#1818) [stat_cache] separate func for symlink policy chk [stat_cache] separate symlink pol from data struct [stat_cache] store entries without trailing slash [stat_cache] pass age param for stat cache cleanup [stat_cache] remove splaytree ins/del debug code [stat_cache] FAM: reduce string copying [stat_cache] FAM: check FAMNextEvent() return code [stat_cache] FAM: use entry hash index as userdata [stat_cache] FAM: improve handling modified file [stat_cache] FAM: ignore follow-symlink config [stat_cache] FAM: check hash collision before add [stat_cache] FAM: ignore event with no valid match [stat_cache] FAM: funcs to invalidate entries [stat_cache] interfaces to invalidate entries [mod_webdav] update stat_cache after file mod [core] use high precision stat timestamp in etag [scons] adjustment for static build under CentOS [core] emit trace using path before clearing path [core] http_chunk_append_file_fd() [multiple] open target file earlier in some cases [stat_cache] no longer stat() and open() for stat [stat_cache] FAM: improve monitoring, cache 16 sec [stat_cache] FAM: separate routine for FDEVENT_IN [stat_cache] FAM: whitespace-only change [mod_webdav] quiet coverity warnings [doc] highlight relevance of module load order (fixes #2946) [core] behavior change: stricter URL normalization [stat_cache] fix compilation error for cmake [cmake] help cmake on FreeBSD find sys/event.h [scons] help scons on FreeBSD find sys/event.h [build] detect FreeBSD elftc_copyfile() [mod_openssl] use SSL_CTX_set_client_hello_cb() [core] support weak etags with If-None-Match [core] store log_state_handling flag on stack [core] check if splay_tree NULL before invalidate [mod_webdav] workaround Microsoft-WebDAV-MiniRedir [mod_webdav] doc Microsoft-WebDAV-MiniRedir bugs [mod_webdav] invalidate parent dir in stat_cache [doc] systemd socket activation config example [core] chunkqueue perf: code reuse [core] chunkqueue perf: specialized buffer.h funcs [core] chunkqueue perf: skip opening 0-length file [core] chunkqueue perf: read small files into mem [core] buffer_reset() should not be passed NULL [tests] has_feature() helper func [tests] skip mod-secdownload HMAC-SHA1,HMAC-SHA256 [core] use high precision stat timestamp on OS X [mod_magnet] expose server addr (local IP) to lua [core] adjust http_chunk read() retry loop [mod_maxminddb] MaxMind GeoIP2 support [mod_authn_ldap] ldap_set_option LDAP_OPT_RESTART (fixes #2940)
2019-05-29 12:01:28 +02:00
DISTNAME= lighttpd-1.4.54
CATEGORIES= www
MASTER_SITES= http://download.lighttpd.net/lighttpd/releases-1.4.x/
Changes 1.4.32: mod_fastcgi: fix mix up of “mode” => “authorizer” in other fastcgi configs (fixes 2465, thx peex) fix handling of If-Modified-Since if If-None-Match is present (don’t return 412 for date parsing errors); follow current draft for HTTP/1.1, which tells us to ignore If-Modified-Since if we have matching etags. [mod_fastcgi,log] support multi line logging (fixes 2252) call ERR_clear_error only for ssl connections in CON_STATE_ERROR reject non ASCII characters in HTTP header names [mod_auth] use crypt() on encrypted password instead of extracting salt first (fixes 2483) [mod_auth] add htpasswd -s (SHA1) support if openssl is used (needs openssl for SHA1). This doesn’t use any salt, md5 with salt is probably better. [mod_auth] fix base64_decode (2484) fix some bugs found with canalyze (fixes 2484, thx Zhenbo Xu) fix undefined stuff found with clang [cmake] Use TARGET_LINK_LIBRARIES instead of LINK_FLAGS for library dependencies, also add Wl,-as-needed to extra warnings (fixes 2448) [mod_auth] fix invalid read in digest qop=auth-int handling (fixes 2478) [auto* build] simplify autogen.sh, handle automake 1.13 test running (fixes 2490) [mod_userdir] add userdir.active option, “enabled” by default [core] return 501 Not Implemented in static file mode for all methods except GET/POST/HEAD/OPTIONS [core] recognize more http methods to forward to backends (fixes 2346) [ssl] use DH only if openssl supports it (fixes 2479) [network] use constants available at compile time for maximum number of chunks for writev instead of calling sysconf (fixes 2470) [ssl] Fix $HTTP[“scheme”] conditional, could be “http” for ssl connections if the ssl $SERVER[“socket”] conditional was nested (fixes 2501) [ssl] accept ssl renegotiations if they are not disabled (fixes 2491) [ssl] add option ssl.empty-fragments, defaulting to disabled (fixes 2492) [auth] put REMOTE_USER into cgi environment, making it accessible to lua via lighty.req_env (fixes 2495) [auth] new method “extern” to use already present REMOTE_USER (from magnet, ssl, …) (fixes 2436) [core] remove requirement that default doc-root has to exist, there are reasonable scenarios not requiring static files at all [core] check whether server.chroot exists [mod_simple_vhost] fix cache; skip module if simple-vhost.server-root is empty (thx rm for reporting) [mod_accesslog] add accesslog.syslog-level option (fixes 2480) [core] allow files to be used as document-root (fixes 2475) [core] set signal handlers before forking child processes in modules/plugins_call_set_defaults (fixes 2502)
2013-10-29 20:54:11 +01:00
EXTRACT_SUFX= .tar.xz
MAINTAINER= pkgsrc-users@NetBSD.org
HOMEPAGE= http://www.lighttpd.net/
2005-09-28 14:26:54 +02:00
COMMENT= Fast, light-footprint HTTP server
Changes 1.4.28: * Rename fdevent_event_add to _set to reflect what the function does. Fix some handlers. * Fix buffer.h to include stdio.h as it is needer for SEGFAULT() Changes 1.4.27: * Fix handling return value of SSL_CTX_set_options * Fix mod_proxy HUP handling (send final chunk, fix usage counter) * mod_proxy: close connection on write error * Check uri instead of physical path for directory redirect * Fix detecting git repository * [mod_compress] Fix segfault when etags are disabled * Reset uri.authority before TLS servername handling, reset all "keep-alive" data in connection_del * Print double quotes properly when dumping config file * Include IP addresses on error log on password failures * Fix stalls while reading from ssl sockets * Fix etag formatting on boxes with 32-bit longs * Fix two compiler warnings * mod_accesslog: fix %p for ipv6 sockets * mod_fastcgi: Send 502 "Bad Gateway" if we couldn't open the file for X-Sendfile * mod_staticfile: add debug output if we ignore a file with static-file.exclude-extensions * mod_cgi: fix race condition leaving response not forwarded to client * mod_accesslog: Fix var declarations mixed in source * mod_status: Add version to status page * mod_accesslog: optimize accesslog_append_escaped * openssl: silence annoying error messages for errno==0 * array.c: improve array_get_unused_element to check data type; fix mem leak if unused_element didn't find a matching entry * add check to stop loading plugins twice * cleanup fdevent code, removed linux-rtsig handler, replaced some fprintf calls * only require FDEVENT_IN bit to be set for listening connections * add libev fdevent handler: server.event-handler = "libev" * mod_proxy: return response as soon as it is available * don't overwrite global server.force-lowercase-filenames setting * bind to IPV6-only if ipv6 address was specified
2011-04-05 10:29:26 +02:00
LICENSE= modified-bsd
USE_LIBTOOL= yes
SHLIBTOOL_OVERRIDE= # empty
USE_TOOLS+= pkg-config
GNU_CONFIGURE= yes
GNU_CONFIGURE_LIBSUBDIR=${PKGBASE}
CONFIGURE_ARGS+= --with-pcre
TEST_TARGET= check
DOCDIR= ${PREFIX}/share/doc/${PKGBASE}
EGDIR= ${PREFIX}/share/examples/${PKGBASE}
PKG_SYSCONFSUBDIR= ${PKGBASE}
RCD_SCRIPTS= lighttpd
2007-11-23 20:12:08 +01:00
.include "options.mk"
Changes 1.4.28: * Rename fdevent_event_add to _set to reflect what the function does. Fix some handlers. * Fix buffer.h to include stdio.h as it is needer for SEGFAULT() Changes 1.4.27: * Fix handling return value of SSL_CTX_set_options * Fix mod_proxy HUP handling (send final chunk, fix usage counter) * mod_proxy: close connection on write error * Check uri instead of physical path for directory redirect * Fix detecting git repository * [mod_compress] Fix segfault when etags are disabled * Reset uri.authority before TLS servername handling, reset all "keep-alive" data in connection_del * Print double quotes properly when dumping config file * Include IP addresses on error log on password failures * Fix stalls while reading from ssl sockets * Fix etag formatting on boxes with 32-bit longs * Fix two compiler warnings * mod_accesslog: fix %p for ipv6 sockets * mod_fastcgi: Send 502 "Bad Gateway" if we couldn't open the file for X-Sendfile * mod_staticfile: add debug output if we ignore a file with static-file.exclude-extensions * mod_cgi: fix race condition leaving response not forwarded to client * mod_accesslog: Fix var declarations mixed in source * mod_status: Add version to status page * mod_accesslog: optimize accesslog_append_escaped * openssl: silence annoying error messages for errno==0 * array.c: improve array_get_unused_element to check data type; fix mem leak if unused_element didn't find a matching entry * add check to stop loading plugins twice * cleanup fdevent code, removed linux-rtsig handler, replaced some fprintf calls * only require FDEVENT_IN bit to be set for listening connections * add libev fdevent handler: server.event-handler = "libev" * mod_proxy: return response as soon as it is available * don't overwrite global server.force-lowercase-filenames setting * bind to IPV6-only if ipv6 address was specified
2011-04-05 10:29:26 +02:00
CNFS_cmd= ${SED} -ne "s,^share/examples/lighttpd/,,p" PLIST
CNFS= ${CNFS_cmd:sh}
.for file in ${CNFS}
CONF_FILES+= ${EGDIR}/${file:Q} ${PKG_SYSCONFDIR}/${file:Q}
.endfor
Update www/lighttpd to 1.4.31. Changes from 1.4.30 - [ssl] fix segfault in counting renegotiations for openssl versions without TLSEXT/SNI (thx carpii for reporting) - Move fdevent subsystem includes to implementation files to reduce conflicts (fixes #2373) - [mod_compress] fix handling if etags are disabled but cache-dir is set - may lead to double response - disable mmap by default (fixes #2391) - buffer_caseless_compare: always convert letters to lowercase to get transitive results, fixing array lookups (fixes #2405) - Fix handling of empty header list entries in http_request_split_value, fixing invalid read in valgrind (fixes #2413) - Fix access log escaping of " and \\ (fixes #1551) - [mod_auth] Fix digest "md5-sess" implementation (Errata ID 1649, RFC 2617) (fixes #2410) - [auth] Add "AUTH_TYPE" environment (for * cgi), remove fastcgi specific workaround, add fastcgi test case (fixes #889) - [mod_*cgi,mod_accesslog] Fix splitting :port with ipv6 (fixes #2333, thx simoncpu) - Detect multiple -f options: show error message instead of assert (fixes #2416) - [mod_extforward] Support ipv6 addresses (fixes #1889) - [mod_redirect] Support url.redirect-code option (fixes #2247) - Fix --enable-mmap handling in configure.ac Changes from 1.4.29 - Always use our 'own' md5 implementation, fixes linking issues on MacOS (fixes #2331) - Limit amount of bytes we send in one go; fixes stalling in one connection and timeouts on slow systems. - [ssl] fix build errors when Elliptic-Curve Diffie-Hellman is disabled - Add static-file.disable-pathinfo option to prevent handling of urls like .../secret.php/image.jpg as static file - Don't overwrite 401 (auth required) with 501 (unknown method) (fixes #2341) - Fix mod_status bug: always showed "0/0" in the "Read" column for uploads (fixes #2351) - [mod_auth] Fix signedness error in http_auth (fixes #2370, CVE-2011-4362) - [ssl] count renegotiations to prevent client renegotiations - [ssl] add option to honor server cipher order (fixes #2364, BEAST attack) - [core] accept dots in ipv6 addresses in host header (fixes #2359) - [ssl] fix ssl connection aborts if files are larger than the MAX_WRITE_LIMIT (256kb) - [libev/cgi] fix waitpid ECHILD errors in cgi with libev (fixes #2324)
2012-08-01 13:25:22 +02:00
BUILD_DEFS+= VARBASE LIGHTTPD_LOGDIR LIGHTTPD_STATEDIR
2018-04-17 12:22:00 +02:00
BUILD_DEFS+= LIGHTTPD_CACHEDIR LIGHTTPD_HOMEDIR
Update www/lighttpd to 1.4.31. Changes from 1.4.30 - [ssl] fix segfault in counting renegotiations for openssl versions without TLSEXT/SNI (thx carpii for reporting) - Move fdevent subsystem includes to implementation files to reduce conflicts (fixes #2373) - [mod_compress] fix handling if etags are disabled but cache-dir is set - may lead to double response - disable mmap by default (fixes #2391) - buffer_caseless_compare: always convert letters to lowercase to get transitive results, fixing array lookups (fixes #2405) - Fix handling of empty header list entries in http_request_split_value, fixing invalid read in valgrind (fixes #2413) - Fix access log escaping of " and \\ (fixes #1551) - [mod_auth] Fix digest "md5-sess" implementation (Errata ID 1649, RFC 2617) (fixes #2410) - [auth] Add "AUTH_TYPE" environment (for * cgi), remove fastcgi specific workaround, add fastcgi test case (fixes #889) - [mod_*cgi,mod_accesslog] Fix splitting :port with ipv6 (fixes #2333, thx simoncpu) - Detect multiple -f options: show error message instead of assert (fixes #2416) - [mod_extforward] Support ipv6 addresses (fixes #1889) - [mod_redirect] Support url.redirect-code option (fixes #2247) - Fix --enable-mmap handling in configure.ac Changes from 1.4.29 - Always use our 'own' md5 implementation, fixes linking issues on MacOS (fixes #2331) - Limit amount of bytes we send in one go; fixes stalling in one connection and timeouts on slow systems. - [ssl] fix build errors when Elliptic-Curve Diffie-Hellman is disabled - Add static-file.disable-pathinfo option to prevent handling of urls like .../secret.php/image.jpg as static file - Don't overwrite 401 (auth required) with 501 (unknown method) (fixes #2341) - Fix mod_status bug: always showed "0/0" in the "Read" column for uploads (fixes #2351) - [mod_auth] Fix signedness error in http_auth (fixes #2370, CVE-2011-4362) - [ssl] count renegotiations to prevent client renegotiations - [ssl] add option to honor server cipher order (fixes #2364, BEAST attack) - [core] accept dots in ipv6 addresses in host header (fixes #2359) - [ssl] fix ssl connection aborts if files are larger than the MAX_WRITE_LIMIT (256kb) - [libev/cgi] fix waitpid ECHILD errors in cgi with libev (fixes #2324)
2012-08-01 13:25:22 +02:00
BUILD_DEFS+= LIGHTTPD_USER LIGHTTPD_GROUP
.include "../../mk/bsd.prefs.mk"
2018-04-17 12:22:00 +02:00
LIGHTTPD_CACHEDIR?= ${VARBASE}/cache/lighttpd
LIGHTTPD_HOMEDIR?= ${VARBASE}/lib/lighttpd
Update www/lighttpd to 1.4.31. Changes from 1.4.30 - [ssl] fix segfault in counting renegotiations for openssl versions without TLSEXT/SNI (thx carpii for reporting) - Move fdevent subsystem includes to implementation files to reduce conflicts (fixes #2373) - [mod_compress] fix handling if etags are disabled but cache-dir is set - may lead to double response - disable mmap by default (fixes #2391) - buffer_caseless_compare: always convert letters to lowercase to get transitive results, fixing array lookups (fixes #2405) - Fix handling of empty header list entries in http_request_split_value, fixing invalid read in valgrind (fixes #2413) - Fix access log escaping of " and \\ (fixes #1551) - [mod_auth] Fix digest "md5-sess" implementation (Errata ID 1649, RFC 2617) (fixes #2410) - [auth] Add "AUTH_TYPE" environment (for * cgi), remove fastcgi specific workaround, add fastcgi test case (fixes #889) - [mod_*cgi,mod_accesslog] Fix splitting :port with ipv6 (fixes #2333, thx simoncpu) - Detect multiple -f options: show error message instead of assert (fixes #2416) - [mod_extforward] Support ipv6 addresses (fixes #1889) - [mod_redirect] Support url.redirect-code option (fixes #2247) - Fix --enable-mmap handling in configure.ac Changes from 1.4.29 - Always use our 'own' md5 implementation, fixes linking issues on MacOS (fixes #2331) - Limit amount of bytes we send in one go; fixes stalling in one connection and timeouts on slow systems. - [ssl] fix build errors when Elliptic-Curve Diffie-Hellman is disabled - Add static-file.disable-pathinfo option to prevent handling of urls like .../secret.php/image.jpg as static file - Don't overwrite 401 (auth required) with 501 (unknown method) (fixes #2341) - Fix mod_status bug: always showed "0/0" in the "Read" column for uploads (fixes #2351) - [mod_auth] Fix signedness error in http_auth (fixes #2370, CVE-2011-4362) - [ssl] count renegotiations to prevent client renegotiations - [ssl] add option to honor server cipher order (fixes #2364, BEAST attack) - [core] accept dots in ipv6 addresses in host header (fixes #2359) - [ssl] fix ssl connection aborts if files are larger than the MAX_WRITE_LIMIT (256kb) - [libev/cgi] fix waitpid ECHILD errors in cgi with libev (fixes #2324)
2012-08-01 13:25:22 +02:00
LIGHTTPD_LOGDIR?= ${VARBASE}/log/lighttpd
LIGHTTPD_STATEDIR?= ${VARBASE}/run
LIGHTTPD_USER?= lighttpd
LIGHTTPD_GROUP?= lighttpd
PKG_GROUPS+= ${LIGHTTPD_GROUP}
PKG_USERS+= ${LIGHTTPD_USER}:${LIGHTTPD_GROUP}
PKG_GROUPS_VARS+= LIGHTTPD_GROUP
PKG_USERS_VARS+= LIGHTTPD_USER
Update www/lighttpd to 1.4.31. Changes from 1.4.30 - [ssl] fix segfault in counting renegotiations for openssl versions without TLSEXT/SNI (thx carpii for reporting) - Move fdevent subsystem includes to implementation files to reduce conflicts (fixes #2373) - [mod_compress] fix handling if etags are disabled but cache-dir is set - may lead to double response - disable mmap by default (fixes #2391) - buffer_caseless_compare: always convert letters to lowercase to get transitive results, fixing array lookups (fixes #2405) - Fix handling of empty header list entries in http_request_split_value, fixing invalid read in valgrind (fixes #2413) - Fix access log escaping of " and \\ (fixes #1551) - [mod_auth] Fix digest "md5-sess" implementation (Errata ID 1649, RFC 2617) (fixes #2410) - [auth] Add "AUTH_TYPE" environment (for * cgi), remove fastcgi specific workaround, add fastcgi test case (fixes #889) - [mod_*cgi,mod_accesslog] Fix splitting :port with ipv6 (fixes #2333, thx simoncpu) - Detect multiple -f options: show error message instead of assert (fixes #2416) - [mod_extforward] Support ipv6 addresses (fixes #1889) - [mod_redirect] Support url.redirect-code option (fixes #2247) - Fix --enable-mmap handling in configure.ac Changes from 1.4.29 - Always use our 'own' md5 implementation, fixes linking issues on MacOS (fixes #2331) - Limit amount of bytes we send in one go; fixes stalling in one connection and timeouts on slow systems. - [ssl] fix build errors when Elliptic-Curve Diffie-Hellman is disabled - Add static-file.disable-pathinfo option to prevent handling of urls like .../secret.php/image.jpg as static file - Don't overwrite 401 (auth required) with 501 (unknown method) (fixes #2341) - Fix mod_status bug: always showed "0/0" in the "Read" column for uploads (fixes #2351) - [mod_auth] Fix signedness error in http_auth (fixes #2370, CVE-2011-4362) - [ssl] count renegotiations to prevent client renegotiations - [ssl] add option to honor server cipher order (fixes #2364, BEAST attack) - [core] accept dots in ipv6 addresses in host header (fixes #2359) - [ssl] fix ssl connection aborts if files are larger than the MAX_WRITE_LIMIT (256kb) - [libev/cgi] fix waitpid ECHILD errors in cgi with libev (fixes #2324)
2012-08-01 13:25:22 +02:00
INSTALLATION_DIRS+= ${DOCDIR} ${EGDIR} ${EGDIR}/conf.d ${EGDIR}/vhosts.d
Changes 1.4.28: * Rename fdevent_event_add to _set to reflect what the function does. Fix some handlers. * Fix buffer.h to include stdio.h as it is needer for SEGFAULT() Changes 1.4.27: * Fix handling return value of SSL_CTX_set_options * Fix mod_proxy HUP handling (send final chunk, fix usage counter) * mod_proxy: close connection on write error * Check uri instead of physical path for directory redirect * Fix detecting git repository * [mod_compress] Fix segfault when etags are disabled * Reset uri.authority before TLS servername handling, reset all "keep-alive" data in connection_del * Print double quotes properly when dumping config file * Include IP addresses on error log on password failures * Fix stalls while reading from ssl sockets * Fix etag formatting on boxes with 32-bit longs * Fix two compiler warnings * mod_accesslog: fix %p for ipv6 sockets * mod_fastcgi: Send 502 "Bad Gateway" if we couldn't open the file for X-Sendfile * mod_staticfile: add debug output if we ignore a file with static-file.exclude-extensions * mod_cgi: fix race condition leaving response not forwarded to client * mod_accesslog: Fix var declarations mixed in source * mod_status: Add version to status page * mod_accesslog: optimize accesslog_append_escaped * openssl: silence annoying error messages for errno==0 * array.c: improve array_get_unused_element to check data type; fix mem leak if unused_element didn't find a matching entry * add check to stop loading plugins twice * cleanup fdevent code, removed linux-rtsig handler, replaced some fprintf calls * only require FDEVENT_IN bit to be set for listening connections * add libev fdevent handler: server.event-handler = "libev" * mod_proxy: return response as soon as it is available * don't overwrite global server.force-lowercase-filenames setting * bind to IPV6-only if ipv6 address was specified
2011-04-05 10:29:26 +02:00
OWN_DIRS= ${PKG_SYSCONFDIR}/conf.d
OWN_DIRS+= ${PKG_SYSCONFDIR}/vhosts.d
Update www/lighttpd to 1.4.31. Changes from 1.4.30 - [ssl] fix segfault in counting renegotiations for openssl versions without TLSEXT/SNI (thx carpii for reporting) - Move fdevent subsystem includes to implementation files to reduce conflicts (fixes #2373) - [mod_compress] fix handling if etags are disabled but cache-dir is set - may lead to double response - disable mmap by default (fixes #2391) - buffer_caseless_compare: always convert letters to lowercase to get transitive results, fixing array lookups (fixes #2405) - Fix handling of empty header list entries in http_request_split_value, fixing invalid read in valgrind (fixes #2413) - Fix access log escaping of " and \\ (fixes #1551) - [mod_auth] Fix digest "md5-sess" implementation (Errata ID 1649, RFC 2617) (fixes #2410) - [auth] Add "AUTH_TYPE" environment (for * cgi), remove fastcgi specific workaround, add fastcgi test case (fixes #889) - [mod_*cgi,mod_accesslog] Fix splitting :port with ipv6 (fixes #2333, thx simoncpu) - Detect multiple -f options: show error message instead of assert (fixes #2416) - [mod_extforward] Support ipv6 addresses (fixes #1889) - [mod_redirect] Support url.redirect-code option (fixes #2247) - Fix --enable-mmap handling in configure.ac Changes from 1.4.29 - Always use our 'own' md5 implementation, fixes linking issues on MacOS (fixes #2331) - Limit amount of bytes we send in one go; fixes stalling in one connection and timeouts on slow systems. - [ssl] fix build errors when Elliptic-Curve Diffie-Hellman is disabled - Add static-file.disable-pathinfo option to prevent handling of urls like .../secret.php/image.jpg as static file - Don't overwrite 401 (auth required) with 501 (unknown method) (fixes #2341) - Fix mod_status bug: always showed "0/0" in the "Read" column for uploads (fixes #2351) - [mod_auth] Fix signedness error in http_auth (fixes #2370, CVE-2011-4362) - [ssl] count renegotiations to prevent client renegotiations - [ssl] add option to honor server cipher order (fixes #2364, BEAST attack) - [core] accept dots in ipv6 addresses in host header (fixes #2359) - [ssl] fix ssl connection aborts if files are larger than the MAX_WRITE_LIMIT (256kb) - [libev/cgi] fix waitpid ECHILD errors in cgi with libev (fixes #2324)
2012-08-01 13:25:22 +02:00
OWN_DIRS_PERMS= ${LIGHTTPD_LOGDIR} ${LIGHTTPD_USER} ${LIGHTTPD_GROUP} 0755
OWN_DIRS+= ${LIGHTTPD_STATEDIR}
SUBST_CLASSES+= path
SUBST_MESSAGE.path= Fixing config file paths
SUBST_STAGE.path= pre-configure
2018-04-17 13:27:11 +02:00
SUBST_FILES.path= doc/config/lighttpd.conf doc/lighttpd.8
Update www/lighttpd to 1.4.31. Changes from 1.4.30 - [ssl] fix segfault in counting renegotiations for openssl versions without TLSEXT/SNI (thx carpii for reporting) - Move fdevent subsystem includes to implementation files to reduce conflicts (fixes #2373) - [mod_compress] fix handling if etags are disabled but cache-dir is set - may lead to double response - disable mmap by default (fixes #2391) - buffer_caseless_compare: always convert letters to lowercase to get transitive results, fixing array lookups (fixes #2405) - Fix handling of empty header list entries in http_request_split_value, fixing invalid read in valgrind (fixes #2413) - Fix access log escaping of " and \\ (fixes #1551) - [mod_auth] Fix digest "md5-sess" implementation (Errata ID 1649, RFC 2617) (fixes #2410) - [auth] Add "AUTH_TYPE" environment (for * cgi), remove fastcgi specific workaround, add fastcgi test case (fixes #889) - [mod_*cgi,mod_accesslog] Fix splitting :port with ipv6 (fixes #2333, thx simoncpu) - Detect multiple -f options: show error message instead of assert (fixes #2416) - [mod_extforward] Support ipv6 addresses (fixes #1889) - [mod_redirect] Support url.redirect-code option (fixes #2247) - Fix --enable-mmap handling in configure.ac Changes from 1.4.29 - Always use our 'own' md5 implementation, fixes linking issues on MacOS (fixes #2331) - Limit amount of bytes we send in one go; fixes stalling in one connection and timeouts on slow systems. - [ssl] fix build errors when Elliptic-Curve Diffie-Hellman is disabled - Add static-file.disable-pathinfo option to prevent handling of urls like .../secret.php/image.jpg as static file - Don't overwrite 401 (auth required) with 501 (unknown method) (fixes #2341) - Fix mod_status bug: always showed "0/0" in the "Read" column for uploads (fixes #2351) - [mod_auth] Fix signedness error in http_auth (fixes #2370, CVE-2011-4362) - [ssl] count renegotiations to prevent client renegotiations - [ssl] add option to honor server cipher order (fixes #2364, BEAST attack) - [core] accept dots in ipv6 addresses in host header (fixes #2359) - [ssl] fix ssl connection aborts if files are larger than the MAX_WRITE_LIMIT (256kb) - [libev/cgi] fix waitpid ECHILD errors in cgi with libev (fixes #2324)
2012-08-01 13:25:22 +02:00
SUBST_VARS.path= LIGHTTPD_LOGDIR LIGHTTPD_STATEDIR LIGHTTPD_USER \
2018-04-17 12:22:00 +02:00
LIGHTTPD_CACHEDIR LIGHTTPD_HOMEDIR \
LIGHTTPD_GROUP PKG_SYSCONFDIR VARBASE
post-install:
Changes 1.4.28: * Rename fdevent_event_add to _set to reflect what the function does. Fix some handlers. * Fix buffer.h to include stdio.h as it is needer for SEGFAULT() Changes 1.4.27: * Fix handling return value of SSL_CTX_set_options * Fix mod_proxy HUP handling (send final chunk, fix usage counter) * mod_proxy: close connection on write error * Check uri instead of physical path for directory redirect * Fix detecting git repository * [mod_compress] Fix segfault when etags are disabled * Reset uri.authority before TLS servername handling, reset all "keep-alive" data in connection_del * Print double quotes properly when dumping config file * Include IP addresses on error log on password failures * Fix stalls while reading from ssl sockets * Fix etag formatting on boxes with 32-bit longs * Fix two compiler warnings * mod_accesslog: fix %p for ipv6 sockets * mod_fastcgi: Send 502 "Bad Gateway" if we couldn't open the file for X-Sendfile * mod_staticfile: add debug output if we ignore a file with static-file.exclude-extensions * mod_cgi: fix race condition leaving response not forwarded to client * mod_accesslog: Fix var declarations mixed in source * mod_status: Add version to status page * mod_accesslog: optimize accesslog_append_escaped * openssl: silence annoying error messages for errno==0 * array.c: improve array_get_unused_element to check data type; fix mem leak if unused_element didn't find a matching entry * add check to stop loading plugins twice * cleanup fdevent code, removed linux-rtsig handler, replaced some fprintf calls * only require FDEVENT_IN bit to be set for listening connections * add libev fdevent handler: server.event-handler = "libev" * mod_proxy: return response as soon as it is available * don't overwrite global server.force-lowercase-filenames setting * bind to IPV6-only if ipv6 address was specified
2011-04-05 10:29:26 +02:00
set -e; cd ${WRKSRC}/doc; \
for f in *.css outdated/*.dot outdated/*.txt; do \
Changes 1.4.28: * Rename fdevent_event_add to _set to reflect what the function does. Fix some handlers. * Fix buffer.h to include stdio.h as it is needer for SEGFAULT() Changes 1.4.27: * Fix handling return value of SSL_CTX_set_options * Fix mod_proxy HUP handling (send final chunk, fix usage counter) * mod_proxy: close connection on write error * Check uri instead of physical path for directory redirect * Fix detecting git repository * [mod_compress] Fix segfault when etags are disabled * Reset uri.authority before TLS servername handling, reset all "keep-alive" data in connection_del * Print double quotes properly when dumping config file * Include IP addresses on error log on password failures * Fix stalls while reading from ssl sockets * Fix etag formatting on boxes with 32-bit longs * Fix two compiler warnings * mod_accesslog: fix %p for ipv6 sockets * mod_fastcgi: Send 502 "Bad Gateway" if we couldn't open the file for X-Sendfile * mod_staticfile: add debug output if we ignore a file with static-file.exclude-extensions * mod_cgi: fix race condition leaving response not forwarded to client * mod_accesslog: Fix var declarations mixed in source * mod_status: Add version to status page * mod_accesslog: optimize accesslog_append_escaped * openssl: silence annoying error messages for errno==0 * array.c: improve array_get_unused_element to check data type; fix mem leak if unused_element didn't find a matching entry * add check to stop loading plugins twice * cleanup fdevent code, removed linux-rtsig handler, replaced some fprintf calls * only require FDEVENT_IN bit to be set for listening connections * add libev fdevent handler: server.event-handler = "libev" * mod_proxy: return response as soon as it is available * don't overwrite global server.force-lowercase-filenames setting * bind to IPV6-only if ipv6 address was specified
2011-04-05 10:29:26 +02:00
${INSTALL_DATA} $$f ${DESTDIR}${DOCDIR}; \
done; \
for f in config/*.conf scripts/*.sh; do \
${INSTALL_DATA} $$f ${DESTDIR}${EGDIR}; \
done; \
for f in config/conf.d/*.conf config/conf.d/mod.*; do \
${INSTALL_DATA} $$f ${DESTDIR}${EGDIR}/conf.d; \
done; \
${INSTALL_DATA} config/vhosts.d/*.template ${DESTDIR}${EGDIR}/vhosts.d
Changes 1.4.28: * Rename fdevent_event_add to _set to reflect what the function does. Fix some handlers. * Fix buffer.h to include stdio.h as it is needer for SEGFAULT() Changes 1.4.27: * Fix handling return value of SSL_CTX_set_options * Fix mod_proxy HUP handling (send final chunk, fix usage counter) * mod_proxy: close connection on write error * Check uri instead of physical path for directory redirect * Fix detecting git repository * [mod_compress] Fix segfault when etags are disabled * Reset uri.authority before TLS servername handling, reset all "keep-alive" data in connection_del * Print double quotes properly when dumping config file * Include IP addresses on error log on password failures * Fix stalls while reading from ssl sockets * Fix etag formatting on boxes with 32-bit longs * Fix two compiler warnings * mod_accesslog: fix %p for ipv6 sockets * mod_fastcgi: Send 502 "Bad Gateway" if we couldn't open the file for X-Sendfile * mod_staticfile: add debug output if we ignore a file with static-file.exclude-extensions * mod_cgi: fix race condition leaving response not forwarded to client * mod_accesslog: Fix var declarations mixed in source * mod_status: Add version to status page * mod_accesslog: optimize accesslog_append_escaped * openssl: silence annoying error messages for errno==0 * array.c: improve array_get_unused_element to check data type; fix mem leak if unused_element didn't find a matching entry * add check to stop loading plugins twice * cleanup fdevent code, removed linux-rtsig handler, replaced some fprintf calls * only require FDEVENT_IN bit to be set for listening connections * add libev fdevent handler: server.event-handler = "libev" * mod_proxy: return response as soon as it is available * don't overwrite global server.force-lowercase-filenames setting * bind to IPV6-only if ipv6 address was specified
2011-04-05 10:29:26 +02:00
.include "../../devel/pcre/buildlink3.mk"
.include "../../devel/zlib/buildlink3.mk"
.include "../../mk/dlopen.buildlink3.mk"
.include "../../mk/bsd.pkg.mk"