kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/www/ap-ssl/Makefile

101 lines
3.1 KiB
Makefile
Raw Normal View History

DESTDIR support
2010-02-16 17:18:14 +01:00
# $NetBSD: Makefile,v 1.110 2010/02/16 16:18:14 joerg Exp $
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
Update ap-ssl to 2.8.31. 2.8.31: For Apache 1.3.41 2.8.30: Bug Fix 2.8.29: For Apache 1.3.39
2008-02-24 06:29:21 +01:00
DISTNAME= mod_ssl-2.8.31-1.3.41
PKGNAME= ap13-ssl-2.8.31
Hack this to build against Apache 1.3.42. As 1.3.42 doesn't change anything significant in the internals, all this requires is patching the accepted version and bumping BUILDLINK_API_DEPENDS. PKGREVISION++.
2010-02-10 04:55:18 +01:00
PKGREVISION= 2
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
CATEGORIES= www security
Add a two mirror sites because the main site isn't that fast.
2002-06-19 09:10:59 +02:00
MASTER_SITES= http://www.modssl.org/source/ \
Remove Ex-MASTER_SITE. From Zafer Aydogan.
2007-12-02 13:29:02 +01:00
ftp://ftp.pca.dfn.de/pub/tools/net/mod_ssl/source/
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
Point MAINTAINER to pkgsrc-users@NetBSD.org in the case where no developer is officially maintaining the package. The rationale for changing this from "tech-pkg" to "pkgsrc-users" is that it implies that any user can try to maintain the package (by submitting patches to the mailing list). Since the folks most likely to care about the package are the folks that want to use it or are already using it, this would leverage the energy of users who aren't developers.
2006-03-04 22:28:51 +01:00
MAINTAINER= pkgsrc-users@NetBSD.org
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
HOMEPAGE= http://www.modssl.org/
Update to new COMMENT style: COMMENT var in Makefile instead of pkg/COMMENT.
2001-02-17 18:21:28 +01:00
COMMENT= SSL/TLS protocols module for Apache
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
DESTDIR support
2010-02-16 17:18:14 +01:00
PKG_DESTDIR_SUPPORT= user-destdir
Mechanical changes to 375 files to change dependency patterns of the form foo-* to foo-[0-9]*. This is to cause the dependencies to match only the packages whose base package name is "foo", and not those named "foo-bar". A concrete example is p5-Net-* matching p5-Net-DNS as well as p5-Net. Also change dependency examples in Packages.txt to reflect this.
2001-09-28 01:17:41 +02:00
CONFLICTS= apache-1.3.[0-9] apache-*modssl-[0-9]* apache6-[0-9]*
Rename all PHP 4 packages to php4-*, all PHP 5 packages to php5-*, all PEAR packages to php?-pear-* and all Apache packages to ap13-* or ap2-* respectively. Add new variables to simplify the Makefile handling. Add CONFLICTS on the old names. Reset revisions of bumped packages. ap-php will now depend on the default Apache and PHP version. All programs using it have an implicit option of the Apache version as well. OK from jlam@ and adrianp@.
2006-06-02 20:27:54 +02:00
CONFLICTS+= ap-ssl-[0-9]*
Update to mod_ssl-2.3.8-1.3.9 so that this works again with the updated Apache server and OpenSSl-0.9.4. Makefile: Take advantage of the working configure script. patches/patch-aa: replace this with a gross hack that finds the libssl shared library with our current version of the OpenSSL pkg.
1999-12-01 02:00:17 +01:00
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
bl3ify
2004-04-26 22:28:54 +02:00
APACHE_MODULE= yes
.include "../../mk/bsd.prefs.mk" early, so that USE_RSAREF2 can be defined in /etc/mk.conf
1998-12-28 08:56:35 +01:00
bl3ify
2004-04-26 22:28:54 +02:00
GNU_CONFIGURE= yes
Ran "pkglint --autofix", which corrected some of the quoting issues in CONFIGURE_ARGS.
2005-12-06 00:55:01 +01:00
CONFIGURE_ARGS+= --with-ssl=${SSLBASE:Q}
Merge packages from the buildlink2 branch back into the main trunk that have been converted to USE_BUILDLINK2.
2002-08-25 23:50:52 +02:00
.include "../../mk/bsd.prefs.mk"
Resort Apache dependency to get the more specific pattern first.
2007-06-10 10:34:25 +02:00
.include "../../www/apache/buildlink3.mk"
Hack this to build against Apache 1.3.42. As 1.3.42 doesn't change anything significant in the internals, all this requires is patching the accepted version and bumping BUILDLINK_API_DEPENDS. PKGREVISION++.
2010-02-10 04:55:18 +01:00
BUILDLINK_API_DEPENDS.apache+= apache>=1.3.42
Resort Apache dependency to get the more specific pattern first.
2007-06-10 10:34:25 +02:00
Replace RPATH_FLAG with LINKER_RPATH_FLAG and COMPILER_RPATH_FLAG, which are the full option names used to set rpath directives for the linker and the compiler, respectively. In places were we are invoking the linker, use "${LINKER_RPATH_FLAG} <path>", where the space is inserted in case the flag is a word, e.g. -rpath. The default values of *_RPATH_FLAG are set by the compiler/*.mk files, depending on the compiler that you use. They may be overridden on a ${OPSYS}-specific basis by setting _OPSYS_LINKER_RPATH_FLAG and _OPSYS_COMPILER_RPATH_FLAG, respectively. Garbage-collect _OPSYS_RPATH_NAME and _COMPILER_LD_FLAG.
2004-08-27 08:29:06 +02:00
SSL_RPATH_LDFLAGS= ${LINKER_RPATH_FLAG} ${SSLBASE}/lib
(1) Publicly export the value of _OPSYS_RPATH_NAME as RPATH_FLAG; Makefiles simply need to use this value often, for better or for worse. (2) Create a new variable FIX_RPATH that lists variables that should be cleansed of -R or -rpath values if ${_USE_RPATH} is "no". By default, FIX_RPATH contains LIBS, X11_LDFLAGS, and LDFLAGS, and additional variables may be appended from package Makefiles.
2003-03-14 20:37:30 +01:00
FIX_RPATH+= SSL_RPATH_LDFLAGS
Fixed pkglint warnings. The warnings are mostly quoting issues, for example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-12-05 21:49:47 +01:00
MAKE_ENV+= SSL_RPATH_LDFLAGS=${SSL_RPATH_LDFLAGS:Q}
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
Bump PKGREVISION of ap-ssl: no longer install apache_start.conf; Apache/SSL users should just add: apache_start="startssl" to /etc/rc.conf.
2002-11-20 00:03:53 +01:00
PKG_SYSCONFVAR= apache
PKG_SYSCONFDIR is where the configuration files for a package may be found. This value may be customized in various ways: PKG_SYSCONFBASE is the main config directory under which all package configuration files are to be found. PKG_SYSCONFSUBDIR is the subdirectory of PKG_SYSCONFBASE under which the configuration files for a particular package may be found. PKG_SYSCONFDIR.${PKGBASE} overrides the value of ${PKG_SYSCONFDIR} for a particular package. Users will typically want to set PKG_SYSCONFBASE to /etc, or accept the default location of ${PREFIX}/etc. This obsoletes the use of CONFDIR, which was active for only 6 days, so no need to have a workaround to still accept old CONFDIR settings.
2001-11-25 19:59:45 +01:00
PKG_SYSCONFSUBDIR?= httpd
Adapt to use shared INSTALL/DEINSTALL scripts by using the logic in bsd.pkg.install.mk: * Remove old DEINSTALL/INSTALL scripts. * Move some text printed at POST-INSTALL time into the MESSAGE file. * Adjust rc.d scripts to respect rc.conf settings, so that the script may be directly copied into /etc/rc.d.
2001-11-19 17:23:08 +01:00
Move ownership of SSL-related config directories from www/apache to this package.
2002-01-01 07:12:38 +01:00
EGDIR= ${PREFIX}/share/examples/mod_ssl
OWN_DIRS= ${PKG_SYSCONFDIR}/ssl.crl
OWN_DIRS+= ${PKG_SYSCONFDIR}/ssl.crt
OWN_DIRS+= ${PKG_SYSCONFDIR}/ssl.csr
OWN_DIRS+= ${PKG_SYSCONFDIR}/ssl.prm
OWN_DIRS_PERMS= ${PKG_SYSCONFDIR}/ssl.key \
${ROOT_USER} ${ROOT_GROUP} 0700
Merge CONF_FILES/SUPPORT_FILES and CONF_FILES_PERMS/SUPPORT_FILES_PERMS as the INSTALL and DEINSTALL scripts no longer distinguish between the two types of files. Drop SUPPORT_FILES{,_PERMS} and modify the packages in pkgsrc accordingly.
2005-08-19 20:12:36 +02:00
CONF_FILES= # empty
CONFS= ssl.crl/Makefile.crl ssl.crl/README.CRL \
Move ownership of SSL-related config directories from www/apache to this package.
2002-01-01 07:12:38 +01:00
ssl.crt/Makefile.crt ssl.crt/README.CRT \
updated mod_ssl to 2.8.18. - fix installation of example README.CSR. Changes with mod_ssl 2.8.18 (11-May-2004 to 27-May-2004) *) Fix buffer overflow in "SSLOptions +FakeBasicAuth" implementation if the Subject-DN in the client certificate exceeds 6KB in length. (CVE CAN-2004-0488). *) Handle the case of OpenSSL retry requests after interrupted system calls during the SSL handshake phase. *) Remove some unused functions.
2004-05-30 12:29:00 +02:00
ssl.csr/README.CSR ssl.csr/README.CSR \
Move ownership of SSL-related config directories from www/apache to this package.
2002-01-01 07:12:38 +01:00
ssl.key/README.KEY ssl.prm/README.PRM
Merge CONF_FILES/SUPPORT_FILES and CONF_FILES_PERMS/SUPPORT_FILES_PERMS as the INSTALL and DEINSTALL scripts no longer distinguish between the two types of files. Drop SUPPORT_FILES{,_PERMS} and modify the packages in pkgsrc accordingly.
2005-08-19 20:12:36 +02:00
.for FILE in ${CONFS}
CONF_FILES+= ${EGDIR}/${FILE} ${PKG_SYSCONFDIR}/${FILE}
Move ownership of SSL-related config directories from www/apache to this package.
2002-01-01 07:12:38 +01:00
.endfor
Update ap-ssl to 2.8.4 using mod_ssl-2.8.4-1.3.20. The only relevant change from version 2.8.3 is upgrading the mod_ssl sources to patch against Apache 1.3.20. The pkgsrc changes include unifying repeated SED replacement info for various files into one location, FILES_SUBST.
2001-06-09 08:50:23 +02:00
bl3ify
2004-04-26 22:28:54 +02:00
.include "../../security/openssl/buildlink3.mk"
Use SUBST framework, patch files directly.
2006-01-05 22:21:54 +01:00
SUBST_CLASSES+= paths perl
SUBST_FILES.paths= README.mkcert pkg.sslsup/mkcert.sh
SUBST_SED.paths= -e 's,@PREFIX@,${PREFIX},g'
SUBST_SED.paths+= -e 's,@PKG_SYSCONFDIR@,${PKG_SYSCONFDIR},g'
SUBST_SED.paths+= -e 's,@SH@,${SH},g'
SUBST_STAGE.paths= post-patch
SUBST_FILES.perl= pkg.contrib/loadcacert.cgi
SUBST_SED.perl= -e 's,^\#!/.*,\#!${PERL5},g'
SUBST_STAGE.perl= post-patch
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
Use SUBST framework, patch files directly.
2006-01-05 22:21:54 +01:00
post-extract:
${CP} ${FILESDIR}/README.mkcert ${WRKSRC}
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
DESTDIR support
2010-02-16 17:18:14 +01:00
INSTALLATION_DIRS+= lib/httpd sbin \
${EGDIR}/ssl.crl ${EGDIR}/ssl.crt ${EGDIR}/ssl.csr \
${EGDIR}/ssl.key ${EGDIR}/ssl.prm \
share/doc/mod_ssl \
share/httpd/htdocs/manual/mod/mod_ssl share/mod_ssl
do-install:
${INSTALL_LIB} ${WRKSRC}/pkg.sslmod/libssl.so \
${DESTDIR}${PREFIX}/lib/httpd/mod_ssl.so
${INSTALL_SCRIPT} ${WRKSRC}/pkg.sslsup/mkcert.sh \
${DESTDIR}${PREFIX}/sbin/mkcert
cd ${WRKSRC}/pkg.ssldoc && ${INSTALL_DATA} *.html *.gif *.jpg \
${DESTDIR}${PREFIX}/share/httpd/htdocs/manual/mod/mod_ssl
cd ${WRKSRC}/pkg.contrib && ${INSTALL_SCRIPT} *.sh *.cgi \
${DESTDIR}${PREFIX}/share/mod_ssl
${INSTALL_DATA} ${WRKSRC}/README.mkcert \
${DESTDIR}${PREFIX}/share/doc/mod_ssl
Update ap-ssl to 2.6.6. Important fixes for memory leaks and segfaults. Also make me the maintainer. Relevant changes from version 2.6.3: -) Install ${sbindir}/mkcert.sh to ease generation of SSL certificates. *) Fixed server restarts: Under non-DSO run-time situation, the OpenSSL library was shutdown (and never re-initialized) and this way caused segfaults on server restarts. This affected only installations where mod_ssl+OpenSSL were built as a static module instead of a DSO. This nasty bug was unfortunately introduced in 2.6.5 as a side-effect of an (otherwise correct) memory leak bugfix. *) Various typo fixes in user manual. *) Removed more memory leaks by freeing even more stuff from the OpenSSL toolkit on module shutdown. *) Added missing TLSv1, EXP40 and EXP56 keywords to ssl_reference's documentation of SSLCipherSuite. *) Added hints about MSIE workarounds (-SSLv3, !EXP56, etc.) to the FAQ entry about MSIE errors. *) Added !EXP56 to pre-configured SSLCipherSuite in order to avoid MSIE5.x problems in advance. *) Allow spaces in ServerRoot and SSLPassPhraseDialog arguments which is especially important for the Win32 environment. *) Fixed syntax errors in ssl_howto.wml: "Deny all" -> "Deny from all" *) Removed a left-over ssl_scache_expire() call in ssl_scache_init() which made the life of vendors complicated. *) Allow more fine-tuned overriding of ap_server_root_relative calls by providing the context of the call. *) Added Equifax Secure CA certificates to ca-bundle.crt. *) Let the pass phrase dialog force the prompt to occur only once (no verification step), because mod_ssl uses the dialog only for pass phrases which are required for reading private keys. This as a side-effect should fix a problem under Win32 where a second prompt occured for unknown reasons. *) Added more compatibility to Stronghold v2's SSL_SessionCache. *) Added two more EAPI hools under SSL_VENDOR: one for overriding ap_server_root_relative calls and one for hooking into the server configuration step. *) Fixed SSL display for mod_status in `short report' situation. *) Fixed memory leak caused by not-freed SSL_CTX in the HTTPS proxy support (ssl_engine_ext.c/mod_proxy) under _NOT_ SSL_EXPERIMENTAL.
2000-09-12 16:05:16 +02:00
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.sslcfg; ${RM} -f server.*
cd ${WRKSRC}/pkg.sslcfg; ${INSTALL_DATA} README.CRL *.crl \
DESTDIR support
2010-02-16 17:18:14 +01:00
${DESTDIR}${EGDIR}/ssl.crl
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.sslcfg; ${INSTALL_DATA} README.CRT *.crt \
DESTDIR support
2010-02-16 17:18:14 +01:00
${DESTDIR}${EGDIR}/ssl.crt
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.sslcfg; ${INSTALL_DATA} README.CSR \
DESTDIR support
2010-02-16 17:18:14 +01:00
${DESTDIR}${EGDIR}/ssl.csr
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.sslcfg; ${INSTALL_DATA} README.KEY *.key \
DESTDIR support
2010-02-16 17:18:14 +01:00
${DESTDIR}${EGDIR}/ssl.key
Update ap-ssl to 2.8.0. Relevant changes from version 2.7.1: -) Rename mod_ssl.conf to apache_start.conf. *) Upgraded to Apache 1.3.17 as base version. *) Allow %{ENV:variable} in SSLRequire expressions, too. *) Make sure the user is not able to fake the client certificate based authentication by just entering an X.509 Subject DN ("/XX=YYY/XX=YYY/..") as the username and "password" as the password if "SSLVerifyClient optional" is used in combination with "SSLOptions +FakeBasicAuth".
2001-02-02 17:41:22 +01:00
cd ${WRKSRC}/pkg.sslcfg; ${INSTALL_DATA} README.PRM *.prm \
DESTDIR support
2010-02-16 17:18:14 +01:00
${DESTDIR}${EGDIR}/ssl.prm
Update ap-ssl to 2.8.2. Relevant changes from version 2.8.1: *) Moved the Shared Memory Cyclic Buffer (SHMCB) session cache variant from "experimental" state to "production" by removing the `#ifdef SSL_EXPERIMENTAL_SHMCB ...#endif' wrappers. This means that now `SSLSessionCache shmcb:...' is unconditionally available. *) Made the mutex handling more robust by retrying the semaphore-based operations in interrupt situations (errno == EINTR). *) Also log the OpenSSL error message if the RSA temporary key(s) cannot be generated. *) Fixed mod_ssl Auth handler: it now returns DECLINED instead of OK if authentication is passed successfully to allow other modules (usually mod_auth) to still deny the request. *) Fixed certificate DN handling under EBCDIC platforms.
2001-04-29 22:36:47 +02:00
Update Apache and mod_ssl using new build layout (see post to tech-pkg for details). No security fixes in Apache 1.3.3, so immediate upgrade from 1.3.2 is not necessary.
1998-12-03 18:22:01 +01:00
.include "../../mk/bsd.pkg.mk"
Reference in a new issue Copy permalink