59 Commits

Author SHA1 Message Date
naddy
6bb8d0674b Drop USE_GROFF from ports where the formatting differences are acceptable
or mandoc provides the more useful output.
2015-02-16 22:57:07 +00:00
sthen
220181f344 Drop some patches; libressl renamed SSL_CTX_use_certificate_chain to
SSL_CTX_use_certificate_chain_mem (libssl/src/ssl/ssl.h r1.79 et al) so
this no longer conflicts.
2015-02-06 15:19:01 +00:00
sthen
1673a28362 sync WANTLIB to fix the -ldap flavour, as found by Joe Price
(missed during the heimdal removal because this isn't linked to the build
to avoid conflicting dependencies on apr-util and apr-util--ldap by
different ports in the tree).
2014-11-04 21:46:55 +00:00
sthen
d181616867 rename mod_ssl's (very old) internal function, SSL_CTX_use_certificate_chain,
because a function with the same name was added to libressl recently.

unbreaks 130-odd ports.
2014-10-02 17:13:28 +00:00
sthen
eda157a449 apache2 FAKE_AS_ROOT tweak. We currently install suexec2 without setuid
privileges, but the file in the fake directory is mode 4555 owned by the
user building the port, so triggering checks at package creation time
because the plist doesn't have a @mode 4555 annotation. Change the PLIST
to explicitly install this file as mode 555 (no setuid bit) to allow
packaging to succeed. This commit does not change the mode of the file
installed by the package, users wanting suexec will still need to chmod
it themselves, just allows a FAKE_AS_ROOT=No build to work.

While there, swap some /var for LOCALSTATEDIR.
2014-09-17 10:11:08 +00:00
espie
963975501d explicitly mark the few ports that don't build with FAKE_AS_ROOT=No 2014-09-16 09:07:03 +00:00
stsp
3b4d2a1f94 update to apache-httpd 2.2.29; ok sthen 2014-09-09 10:08:23 +00:00
kili
8fe8e948eb Rename rc scripts of apache-httpd to apache resp. apache2 to get rid
of a conflict with base httpd.

ok sthen@
2014-07-27 10:51:37 +00:00
sthen
b7e7b4903f instead of lynx -dump, use ftp -o- | sed to strip out html tags (for
apachectl status / fullstatus)

ok ajacoutot@
2014-07-16 14:41:19 +00:00
pascal
2c4c24a773 Fix apache after COMP removal.
ok naddy@
2014-07-12 14:11:32 +00:00
stsp
86fc6931eb Fix runtime breakage in www/apache-httpd after RAND_egd() removal; ok sthen 2014-04-27 19:15:43 +00:00
ajacoutot
ec06c7f600 Regen WANTLIB for kerberos removal. 2014-04-21 22:47:07 +00:00
sthen
a91c12da19 unbreak following removal of "chil" engine in libcrypto 2014-04-14 19:23:31 +00:00
stsp
3c8a19c25f Update www/apache-httpd to 2.2.17.
Fixes CVE-2014-0098 and CVE-2013-6438 among other changes.
ok sthen
2014-04-09 22:11:32 +00:00
sthen
52de8091f8 tweak DESCR/remove MESSAGE which are talking about base httpd 2014-03-09 20:57:40 +00:00
brad
90b644f241 This is the Apache 2.0 license. 2013-12-01 02:58:30 +00:00
stsp
5b2a68b2d6 Update to Apache HTTPD 2.2.26. Mostly rolls in patches we had already. 2013-11-25 17:00:47 +00:00
stsp
bfd94d0ce7 Add upstream patches to fix Apache HTTPD PR 55397, a regression in 2.2.25
that breaks handling of special characters in filenames for Subversion.
ok landry sthen
2013-10-17 14:05:41 +00:00
stsp
87a6165750 Add patches from upstream to fix regressions in mod_dav since httpd-2.2.25.
Unbreaks 'svn copy URL1 URL2' and restores compliance with RFC 4918 (WebDAV).
See https://issues.apache.org/bugzilla/show_bug.cgi?id=55304
and https://issues.apache.org/bugzilla/show_bug.cgi?id=55306
ok sthen
2013-10-09 12:54:16 +00:00
sthen
bfa9b1b83d regen patch; no pkg change 2013-07-15 07:40:18 +00:00
stsp
0a155c8490 Update Apache HTTPD 2 to version 2.2.25. Fixes CVE-2013-1896 and CVE-2013-1862.
ok giovanni@
2013-07-12 13:21:25 +00:00
ajacoutot
25b3041f91 Unbreak after hx509 and ntlm removal from Kerberos. 2013-06-20 06:54:36 +00:00
ajacoutot
8613536758 Some trivial WANTLIB and tweaks to unbreak after the Heimdal update.
Stop hardcoding the Kerberos libs and use krb5-config(1).
2013-06-17 19:28:36 +00:00
ajacoutot
58f1a6f9f6 USE_LIBTOOL=Yes is the default now. 2013-03-21 08:45:11 +00:00
espie
eae66e4a7b PERMIT_* / REGRESS->TEST sweep 2013-03-11 11:35:43 +00:00
sthen
f5a323c546 Don't use ${FLAVOR:L}, we only support lower-case flavours now.
OK ajacoutot@ espie@
2013-02-09 14:49:50 +00:00
giovanni
f3cf748e56 Update to 2.2.23, fixes CVE-2012-2687 and CVE-2012-0883.
ok sthen@
2012-10-18 08:12:16 +00:00
sthen
32268b7d14 Update to the Apache HTTP server 2.2.22, the current release on the 2.2 branch.
Merged from diffs from myself, Rodolfo Gouveia and with an rc script from
giovanni@.

This is a security update, fixing CVE-2011-3348, CVE-2011-3368, CVE-2011-3607,
CVE-2011-4317, CVE-2012-0021, CVE-2012-0031 and CVE-2012-0053.
2012-07-18 08:45:42 +00:00
stsp
adb88b2247 Needs bump because of devel/apr update; don't depend on removed 'mt' flavour 2012-04-28 09:54:44 +00:00
ajacoutot
609acea29b Fix build with pcre >= 8.30 (from upstream) 2012-02-17 08:33:03 +00:00
giovanni
8ecb2ff1c7 Update to latest version, fixes CVE-2011-3192
ok fkr@
2011-09-01 13:40:09 +00:00
pea
9b749c36f3 Fix CVE-2010-1452
ok sthen@, landry@
2011-02-12 21:05:38 +00:00
espie
e50b98837f new depends 2010-11-22 08:36:47 +00:00
sthen
89d5cdea52 new-style LIB_DEPENDS/REVISION/WANTLIB 2010-11-11 12:35:09 +00:00
espie
c82c4422b0 USE_GROFF=Yes 2010-10-19 08:02:53 +00:00
robert
0be52ed9fc update to 2.2.15 2010-06-27 17:27:03 +00:00
bernd
a9f214f6ce Security update to apache-httpd-2.2.14. (CVE-2009-3095, CVE-2009-3094) 2009-12-01 13:38:23 +00:00
fkr
8d5431b8ad Update to 2.2.13
SECURITY: CVE-2009-2412, CVE-2009-1891, CVE-2009-1195, CVE-2009-1890,
CVE-2009-1191, CVE-2009-0023, CVE-2009-1955, CVE-2009-1956

Update the Makefile to properly depend on the mt version of apr-util
in ldap flavour. (from bernd@)

ok jasper@, ajacoutot@
2009-08-30 18:06:07 +00:00
claudio
2783510601 Enable suexec for apache2 with these config changes:
- install the binary under ${TRUEPREFIX}/sbin/suexec2
- change suexec-caller to _apache2
- log to /var/log/suexec2_log similar to the suexec in base
Inputs and OK sthen@, simon@
2009-05-15 15:46:58 +00:00
bernd
6ce3f0a929 Update to apache-httpd-2.2.11.
Lots of bugfixes and a security fix for CVE-2008-2939.

Enable usage of the threaded apr which is needed for
an upcoming port.

ok simon@
2009-04-09 18:36:00 +00:00
bernd
8ce0f5af89 Security update to apache-httpd-2.2.9. (CVE-2008-2364 and CVE-2007-6420)
http://www.apache.org/dist/httpd/CHANGES_2.2.9

Also fix LIB_DEPENDS and use the external pcre library instead of the shipped
one.

ok dlg@, simon@, merdely@ (pre-lock)
2008-09-02 22:05:23 +00:00
bernd
9573f43ea2 Security update to apache2 2.2.8.
(CVE-2007-6420, CVE-2007-6421, CVE-2007-6422, CVE-2007-6423,
CVE-2008-0005, CVE-2007-6388)

http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059626.html
http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059560.html
http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059561.html

ok dlg@
2008-01-28 19:48:47 +00:00
steven
4daf2ccd25 SECURITY update to 2.2.6
fixes various vulnerabilities:
CVE-2007-3847, CVE-2007-1863, CVE-2007-3304, CVE-2006-5752, CVE-2007-1862

more details can be found at:
http://www.apache.org/dist/httpd/CHANGES_2.2.6

ok merdely@
2007-09-19 05:47:36 +00:00
merdely
bbe11aa1ab Added ldap flavor which includes mod_authnz_ldap + mod_ldap
Removed quotes around COMMENT while here.

From Peter Hessler with tweaks by me.
Advice from Brad.  Help from deanna@, simon@.
ok dlg@, simon@
2007-09-06 07:33:53 +00:00
espie
d4ebcd974d more base64 checksums 2007-04-05 17:26:05 +00:00
deanna
57d706b321 Update to 2.2.4. This is principally a bugfix release. See
Changelog: http://www.apache.org/dist/httpd/CHANGES_2.2

While here, regen patches with the new diff.

ok dlg
2007-03-25 17:40:55 +00:00
deanna
27566592b4 Append a 2 to every mention of anything that exists in both the base
httpd and this port.  Hopefully we got them all.

Requested by robert@, ok dlg@.
2007-01-16 01:12:26 +00:00
dlg
7dd9c0c081 enable the cache, disk_cache, and all the proxy modules. mem_cache wont
build since we arent using a threaded worker.

requested by ssehic
2007-01-09 11:18:13 +00:00
dlg
5c49bbc66e enable all the modules, and build them as shared objects. mark the port
SHARED_ONLY.

ok robert@
2007-01-09 10:47:37 +00:00
dlg
10d98a6ab0 switch apache2 from a gnu style configure to a simple one so we can
define prefix the way apache likes it.

this is because apache2 has a different understanding of what the prefix
means, and our understanding and application of it on this port leads to
extremely confused paths in a lot of its generated files.

our understanding of prefix is to mean the path at which the binaries,
libs, manpages, and so on are stored, ie, /usr/local. apache2 understands
prefix to mean "install architecture-independent files", or in real terms
the ServerRoot. obviously using /usr/local as the server root when we want
to use /var/apache2 for that purpose is uncomfortable for it, and it leads
to things like broken paths in the default config files and builds of
modules.

ok robert@
2007-01-09 09:56:57 +00:00