40 Commits

Author SHA1 Message Date
sthen
3e6f016f25 Disable Apache httpd's mod_http2.so for now, as reported by
Pedro de Oliveira it isn't working on OpenBSD yet.
2016-01-15 23:40:02 +00:00
ajacoutot
4edf8e6414 Don't sample /var/www/conf/modules.samples/, let webapps do that.
Optionaly include /var/www/conf/modules/*.conf instead of /etc/apache2/modules/*.conf,
this allows the usual MESSAGE linking from modules.samples/ to modules/ to work
out-of-the-box.

ok sthen@
2015-12-30 09:59:31 +00:00
sthen
94b3768d61 As found by ajacoutot, nghttp2 was getting picked up by httpd's autoconf;
make it an explicit dependency and package mod_http2.
2015-12-01 16:45:30 +00:00
sthen
f4a0b2a055 update to apache-httpd-2.4.17, and add scaffolding to use the same type of
modules.sample mechanism as apache-httpd-openbsd
2015-10-27 18:18:17 +00:00
claudio
3fc98fa5b9 Make sure mod_cgi and mod_cgid are built and installed. Depending if apache
is prefork or threaded one or the other needs to be used to allow CGI handling.
For fast cgi mod_proxy_fcgi should be used.
OK sthen@ tested by Alessandro DE LAURENZIS
2015-10-24 12:17:50 +00:00
sthen
ecf118bf1c fix miscommit that removed @rcscript (thanks, update-plist!) 2015-09-13 12:37:49 +00:00
sthen
9843dd1bd1 Move to improved version of no_ssl3 patch for apache-httpd, thanks to
Kaspar Brand (https://bz.apache.org/bugzilla/show_bug.cgi?id=58349)
- small tweak from Kaspar's patch for 2.4 backport.
2015-09-13 12:31:45 +00:00
ajacoutot
09eb14f688 Don't own /var/www/htdocs/, it's part of mtree.
Don't ship the empty example logs directory.
2015-07-18 20:01:13 +00:00
sthen
90cbc28af4 adjust @pkgpath depending on flavour, so updates for apache-httpd--ldap work
correctly. (in reality this wasn't a big problem as we don't build the ldap
flavoured version in bulk builds anyway, due to dependence on conflicting
versions of apr-util).
2015-07-18 01:11:40 +00:00
ajacoutot
533ae8b9ab Update to apache-httpd-2.4.16.
ok sthen@
2015-07-18 00:55:09 +00:00
ajacoutot
5ecb9c4fa0 Cleanup. 2015-07-18 00:33:53 +00:00
ajacoutot
31c647ab8a Move default document root to /var/www to be able to switch between web
servers easily; idea from stsp@
Split the package into -main and -common (which holds common files for
apache 1 and 2).

discussed with stsp@ sthen@
ok stsp@
2015-07-17 23:57:58 +00:00
ajacoutot
349bd79515 Change the default user to "www".
This makes it easier to switch from one web server to the other.

discussed with stsp@ sthen@
ok sthen@
2015-07-17 19:52:06 +00:00
stsp
b016c6702e Update www/apache-httpd to 2.4.12.
Manual configuration updates might be required, see
http://httpd.apache.org/docs/2.4/upgrading.html
MPMs can now be loaded at runtime. The default config keeps using 'prefork'.
Based on an initial diff by claudio@
ok sthen@ ajacoutot@
2015-05-15 08:08:03 +00:00
sthen
eda157a449 apache2 FAKE_AS_ROOT tweak. We currently install suexec2 without setuid
privileges, but the file in the fake directory is mode 4555 owned by the
user building the port, so triggering checks at package creation time
because the plist doesn't have a @mode 4555 annotation. Change the PLIST
to explicitly install this file as mode 555 (no setuid bit) to allow
packaging to succeed. This commit does not change the mode of the file
installed by the package, users wanting suexec will still need to chmod
it themselves, just allows a FAKE_AS_ROOT=No build to work.

While there, swap some /var for LOCALSTATEDIR.
2014-09-17 10:11:08 +00:00
kili
8fe8e948eb Rename rc scripts of apache-httpd to apache resp. apache2 to get rid
of a conflict with base httpd.

ok sthen@
2014-07-27 10:51:37 +00:00
stsp
3c8a19c25f Update www/apache-httpd to 2.2.17.
Fixes CVE-2014-0098 and CVE-2013-6438 among other changes.
ok sthen
2014-04-09 22:11:32 +00:00
sthen
52de8091f8 tweak DESCR/remove MESSAGE which are talking about base httpd 2014-03-09 20:57:40 +00:00
stsp
0a155c8490 Update Apache HTTPD 2 to version 2.2.25. Fixes CVE-2013-1896 and CVE-2013-1862.
ok giovanni@
2013-07-12 13:21:25 +00:00
giovanni
f3cf748e56 Update to 2.2.23, fixes CVE-2012-2687 and CVE-2012-0883.
ok sthen@
2012-10-18 08:12:16 +00:00
sthen
32268b7d14 Update to the Apache HTTP server 2.2.22, the current release on the 2.2 branch.
Merged from diffs from myself, Rodolfo Gouveia and with an rc script from
giovanni@.

This is a security update, fixing CVE-2011-3348, CVE-2011-3368, CVE-2011-3607,
CVE-2011-4317, CVE-2012-0021, CVE-2012-0031 and CVE-2012-0053.
2012-07-18 08:45:42 +00:00
giovanni
8ecb2ff1c7 Update to latest version, fixes CVE-2011-3192
ok fkr@
2011-09-01 13:40:09 +00:00
robert
0be52ed9fc update to 2.2.15 2010-06-27 17:27:03 +00:00
bernd
a9f214f6ce Security update to apache-httpd-2.2.14. (CVE-2009-3095, CVE-2009-3094) 2009-12-01 13:38:23 +00:00
fkr
8d5431b8ad Update to 2.2.13
SECURITY: CVE-2009-2412, CVE-2009-1891, CVE-2009-1195, CVE-2009-1890,
CVE-2009-1191, CVE-2009-0023, CVE-2009-1955, CVE-2009-1956

Update the Makefile to properly depend on the mt version of apr-util
in ldap flavour. (from bernd@)

ok jasper@, ajacoutot@
2009-08-30 18:06:07 +00:00
claudio
2783510601 Enable suexec for apache2 with these config changes:
- install the binary under ${TRUEPREFIX}/sbin/suexec2
- change suexec-caller to _apache2
- log to /var/log/suexec2_log similar to the suexec in base
Inputs and OK sthen@, simon@
2009-05-15 15:46:58 +00:00
bernd
6ce3f0a929 Update to apache-httpd-2.2.11.
Lots of bugfixes and a security fix for CVE-2008-2939.

Enable usage of the threaded apr which is needed for
an upcoming port.

ok simon@
2009-04-09 18:36:00 +00:00
bernd
8ce0f5af89 Security update to apache-httpd-2.2.9. (CVE-2008-2364 and CVE-2007-6420)
http://www.apache.org/dist/httpd/CHANGES_2.2.9

Also fix LIB_DEPENDS and use the external pcre library instead of the shipped
one.

ok dlg@, simon@, merdely@ (pre-lock)
2008-09-02 22:05:23 +00:00
bernd
9573f43ea2 Security update to apache2 2.2.8.
(CVE-2007-6420, CVE-2007-6421, CVE-2007-6422, CVE-2007-6423,
CVE-2008-0005, CVE-2007-6388)

http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059626.html
http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059560.html
http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059561.html

ok dlg@
2008-01-28 19:48:47 +00:00
steven
4daf2ccd25 SECURITY update to 2.2.6
fixes various vulnerabilities:
CVE-2007-3847, CVE-2007-1863, CVE-2007-3304, CVE-2006-5752, CVE-2007-1862

more details can be found at:
http://www.apache.org/dist/httpd/CHANGES_2.2.6

ok merdely@
2007-09-19 05:47:36 +00:00
merdely
bbe11aa1ab Added ldap flavor which includes mod_authnz_ldap + mod_ldap
Removed quotes around COMMENT while here.

From Peter Hessler with tweaks by me.
Advice from Brad.  Help from deanna@, simon@.
ok dlg@, simon@
2007-09-06 07:33:53 +00:00
dlg
7dd9c0c081 enable the cache, disk_cache, and all the proxy modules. mem_cache wont
build since we arent using a threaded worker.

requested by ssehic
2007-01-09 11:18:13 +00:00
dlg
5c49bbc66e enable all the modules, and build them as shared objects. mark the port
SHARED_ONLY.

ok robert@
2007-01-09 10:47:37 +00:00
dlg
03c4a75eba move the dir with the build files out of /var/apache2 and into
/usr/local/share/apache2.

based on a suggestion from robert@
2007-01-05 22:57:11 +00:00
dlg
25265ec03a revert the part of the previous commit that removed the install of the
build dir. you can build apache 2 modules again now.
2007-01-05 22:22:04 +00:00
deanna
9e2f1377c6 - stop setting SYSCONFDIR
- put config files in /etc/apache2 instead of /var since this is not
chrooted

- make a couple of comments that refer to 'httpd' refer to 'httpd2'
instead

- don't install the build makefiles

ideas from bernd@ and steven@, ok steven@
2006-12-25 20:40:02 +00:00
deanna
772c69e01d To avoid name clashes with the system httpd, configure with program
name httpd2. Rename the support programs and their manual pages
accordingly.

bump pkgname.

ok steven@, bernd@.
2006-12-16 00:41:56 +00:00
steven
d8e1b2d90e remove indirect dependency, add libiconv module, adjust WANTLIB, sync plist 2006-12-14 10:22:03 +00:00
espie
a7f18bd243 this is wrong. You do not *ever* use @exec for trivial purposes that
can be achieved otherwise.

This probably broke the install, I don't care!

Learn how to use @owner and friends.
2006-12-14 09:31:56 +00:00
deanna
6a36f66820 Bringing this in now so that we can work on it here. Batting tarballs
back and forth in email messages doesn't make any sense when we have a
cvs tree to work in.

So, not hooked into the package builds yet.

Original work and port name from dlg.

ok robert@, dlg@
2006-12-14 07:14:20 +00:00