cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
openbsd-ports/www/squid/Makefile

82 lines
1.9 KiB
Makefile
Raw Normal View History

SECURITY FIX for CVE-2010-0308, "Squid DNS Packet Processing Denial of Service Vulnerability" brad (MAINTAINER) came up with the same diff ok ajacoutot@ sthen@
2010-02-03 06:41:17 +00:00
# $OpenBSD: Makefile,v 1.101 2010/02/03 06:41:17 jasper Exp $
www: integrate COMMENT, bump NEED_VERSION.
2001-05-06 04:22:45 +00:00
Change Brads email address for now, so people can reach him instead of getting bounces or 550s. Bump pkgnames. While here, remove quotes from comments. prompted by espie@
2007-09-01 20:11:21 +00:00
COMMENT= WWW and FTP proxy cache and accelerator
squid port from d@openbsd.org
1998-09-14 01:36:52 +00:00
update to the latest bug fix release in the 2.7 branch. From Brad (maintainer).
2009-10-30 00:56:57 +00:00
DISTNAME= squid-2.7.STABLE7
SECURITY FIX for CVE-2010-0308, "Squid DNS Packet Processing Denial of Service Vulnerability" brad (MAINTAINER) came up with the same diff ok ajacoutot@ sthen@
2010-02-03 06:41:17 +00:00
PKGNAME= ${DISTNAME}p0
squid port from d@openbsd.org
1998-09-14 01:36:52 +00:00
CATEGORIES= www
Security fix for CVE-2009-2855 ok brad (MAINTAINER)
2009-08-30 21:52:44 +00:00
MASTER_SITES= ${HOMEPAGE}/Versions/v2/2.7/
- bump NEED_VERSION - fix MASTER_SITES URLs, squid.nlanr.net -> www.squid-cache.org - use DIST_SUBDIR - YES -> Yes - remove unnecessary CONFIGURE_ARGS option - remove STRIP variable since INSTALL_PROGRAM has used INSTALL_STRIP for awhile now, better fix coming soon
2000-03-30 21:59:26 +00:00
DIST_SUBDIR= squid
squid port from d@openbsd.org
1998-09-14 01:36:52 +00:00
correct HOMEPAGE URL
2000-06-10 06:27:25 +00:00
HOMEPAGE= http://www.squid-cache.org/
Change Brads email address for now, so people can reach him instead of getting bounces or 550s. Bump pkgnames. While here, remove quotes from comments. prompted by espie@
2007-09-01 20:11:21 +00:00
MAINTAINER= Brad Smith <brad@comstyle.com>
squid port from d@openbsd.org
1998-09-14 01:36:52 +00:00
- update squid to 2.6STABLE20 - update license marker - remove transparent flavor - add ldap flavor from brad@ (MAINTAINER), testing by several users
2008-05-31 10:07:45 +00:00
# GPLv2+
- bump NEED_VERSION - fix MASTER_SITES URLs, squid.nlanr.net -> www.squid-cache.org - use DIST_SUBDIR - YES -> Yes - remove unnecessary CONFIGURE_ARGS option - remove STRIP variable since INSTALL_PROGRAM has used INSTALL_STRIP for awhile now, better fix coming soon
2000-03-30 21:59:26 +00:00
PERMIT_PACKAGE_CDROM= Yes
PERMIT_PACKAGE_FTP= Yes
PERMIT_DISTFILES_CDROM= Yes
PERMIT_DISTFILES_FTP= Yes
- update squid to 2.6STABLE20 - update license marker - remove transparent flavor - add ldap flavor from brad@ (MAINTAINER), testing by several users
2008-05-31 10:07:45 +00:00
WANTLIB= asn1 c com_err crypto krb5 gssapi m pthread ssl
gpl licenses
2000-02-12 08:02:07 +00:00
upgrade to Squid 2.5.PRE4 - The port now runs as uid/gid of nobody:nobody instead of www:www - This needs some testing, especially the transparent proxy support for PF
2002-02-20 01:17:03 +00:00
SQUIDDIR?= /var/squid
SUBST_VARS= SQUIDDIR
add 3 distribution patches; squid-2.2.stable5-newlines_in_auth.patch After decoding the base64 encoded "user:password" pair given by the client, squid doesn't strip out any '\n' found in the resulting string. Given such a string, any external authenticator will receive two lines instead of one, and most probably send two results. Now, any subsequent authentification exchange will have its answer shifted by one. Therefore, a malicious user can gain access to sites they should not have access to. squid-2.2.stable5-ipcache_negative.patch The IP cache immediately removes entries that should be negatively cached. This appears to be due to some changes made for retrying failed connections. squid-2.2.stable5-no_cache.patch A missing no_cache list is treated the same as no_cache deny all.
1999-12-09 19:48:17 +00:00
- update squid to 2.6STABLE20 - update license marker - remove transparent flavor - add ldap flavor from brad@ (MAINTAINER), testing by several users
2008-05-31 10:07:45 +00:00
FLAVORS= ldap snmp
upgrade to Squid 2.5.PRE4 - The port now runs as uid/gid of nobody:nobody instead of www:www - This needs some testing, especially the transparent proxy support for PF
2002-02-20 01:17:03 +00:00
FLAVOR?=
add heap FLAVOR, enables alternate cache object replacement algorithms. -- Requested by: J Shoemaker <shoemaker@softhome.net>
2001-01-17 02:38:20 +00:00
- add some distribution patches. From: Robert Nagy <thuglife at bsd dot hu> - only apply optimization workaround for gcc if using 2.95
2004-04-13 00:40:47 +00:00
.include <bsd.own.mk>
USE_GCC3?= No
# optimization workaround for gcc 2.95
.if ${USE_GCC3:L} == "no"
PATCH_LIST= patch-* gcc-*
.endif
- update squid to 2.6STABLE20 - update license marker - remove transparent flavor - add ldap flavor from brad@ (MAINTAINER), testing by several users
2008-05-31 10:07:45 +00:00
BASIC_AUTH= NCSA YP
DIGEST_AUTH= password
EXTERNAL_ACL= ip_user unix_group
STOREIO= aufs ufs diskd null
enable SEPARATE_BUILD
2002-03-16 18:18:30 +00:00
SEPARATE_BUILD= concurrent
bug fix update to Squid 2.7-STABLE6, from Brad.
2009-02-08 15:04:33 +00:00
AUTOCONF_VERSION= 2.62
upgrade to Squid 2.5.PRE4 - The port now runs as uid/gid of nobody:nobody instead of www:www - This needs some testing, especially the transparent proxy support for PF
2002-02-20 01:17:03 +00:00
CONFIGURE_STYLE= autoconf
fix up MODGNU_CONFIG_GUESS_DIRS
2004-08-04 16:12:14 +00:00
MODGNU_CONFIG_GUESS_DIRS=${WRKSRC}/cfgaux
- add 2 more distribution patches - add snmp FLAVOR from Joel CARNAT <joel at carnat dot net> - add some auth types and auth/acl helpers - add NTLM auth SMB patch even though the default port does NOT compile this support in
2004-06-11 08:00:35 +00:00
CONFIGURE_ARGS+=--datadir="${PREFIX}/share/squid" \
--enable-auth="basic digest" \
upgrade to 2.6.STABLE4 Squid 2.6 supports kqueue and hw accelerated SSL via OpenSSL, as well as many other improvements.
2006-10-03 05:00:49 +00:00
--enable-arp-acl \
- update squid to 2.6STABLE20 - update license marker - remove transparent flavor - add ldap flavor from brad@ (MAINTAINER), testing by several users
2008-05-31 10:07:45 +00:00
--enable-basic-auth-helpers="${BASIC_AUTH}" \
--enable-digest-auth-helpers="${DIGEST_AUTH}" \
--enable-delay-pools \
--enable-external-acl-helpers="${EXTERNAL_ACL}" \
--enable-forw-via-db \
--enable-negotiate-auth-helpers="squid_kerb_auth" \
--enable-pf-transparent \
- add 2 more distribution patches - add snmp FLAVOR from Joel CARNAT <joel at carnat dot net> - add some auth types and auth/acl helpers - add NTLM auth SMB patch even though the default port does NOT compile this support in
2004-06-11 08:00:35 +00:00
--enable-removal-policies="lru heap" \
upgrade to Squid 2.5.STABLE3 throw in the SSL gatewaying support, this is not enabled by default.
2003-07-07 17:44:43 +00:00
--enable-ssl \
- update squid to 2.6STABLE20 - update license marker - remove transparent flavor - add ldap flavor from brad@ (MAINTAINER), testing by several users
2008-05-31 10:07:45 +00:00
--enable-storeio="${STOREIO}" \
update to 2.6.STABLE17 from maint; works and builds ok for me
2007-12-04 01:27:13 +00:00
--with-pthreads \
enable the "X-Forwarded-For" headers support which has been added in Squid 2.6. It's not the default in squid.conf but can be enabled, and it's useful e.g. when you are using squid through dansguardian, in order to keep/show the source address of the client in the logs (otherwise, squid thinks that everything comes from dansguardian). ok brad@
2007-10-08 07:04:50 +00:00
--localstatedir="${SQUIDDIR}" \
--enable-follow-x-forwarded-for
enable SEPARATE_BUILD
2002-03-16 18:18:30 +00:00
- update squid to 2.6STABLE20 - update license marker - remove transparent flavor - add ldap flavor from brad@ (MAINTAINER), testing by several users
2008-05-31 10:07:45 +00:00
.if ${FLAVOR:L:Mldap}
BASIC_AUTH+= LDAP
DIGEST_AUTH+= ldap
EXTERNAL_ACL+= ldap_group
LIB_DEPENDS+= ldap,lber::databases/openldap
CONFIGURE_ENV+= CPPFLAGS="-I${LOCALBASE}/include" \
LDFLAGS="-L${LOCALBASE}/lib"
- add 2 more distribution patches - add snmp FLAVOR from Joel CARNAT <joel at carnat dot net> - add some auth types and auth/acl helpers - add NTLM auth SMB patch even though the default port does NOT compile this support in
2004-06-11 08:00:35 +00:00
.endif
.if${FLAVOR:L:Msnmp}
CONFIGURE_ARGS+=--enable-snmp
upgrade to Squid 2.5.PRE4 - The port now runs as uid/gid of nobody:nobody instead of www:www - This needs some testing, especially the transparent proxy support for PF
2002-02-20 01:17:03 +00:00
.endif
post-install:
upgrade to Squid 2.5.PRE6 - PF patches integrated
2002-04-17 18:03:21 +00:00
@chown -R ${SHAREOWN}:${SHAREGRP} ${PREFIX}/share/examples/squid
add 29 of the latest distribution patches.
2004-02-16 10:21:20 +00:00
@find ${PREFIX}/share/examples/squid/errors \
-name '*.orig' -print0 | xargs -0 rm -f
squid port from d@openbsd.org
1998-09-14 01:36:52 +00:00
.include <bsd.port.mk>
Reference in New Issue Copy Permalink