88 Commits

Author SHA1 Message Date
sthen
c04e4c6b72 libressl added ALPN support, no need for the hack 2014-12-10 16:44:32 +00:00
robert
9cb2aa9940 update to 1.7.8 2014-12-08 17:07:07 +00:00
sthen
88e5518298 fix SUBST_VARS, pointed out by Mikolaj Kucharski 2014-11-09 20:46:19 +00:00
sthen
7c6ba5c12c unbreak www/nginx, it uses TLSEXT_TYPE_application_layer_protocol_negotiation
to detect ALPN support which fails for us as libressl has added the macro but
not the functions yet.

add upstream's -W flags back in, to make the problem a compile rather than
a linker error (we're overriding cflags with our usual ones in the port).
2014-11-08 00:02:45 +00:00
robert
001e9d4de7 bugfix update to 1.7.7 2014-10-31 14:40:59 +00:00
sthen
7293399a8f Use specific flavour extensions for @pkgpath lines in each package, so that
pkg_add -u is handled without prompting each time, as noticed by myself and
jasper. Modelled on similar in mail/mutt.  ok jasper@ espie@
2014-10-23 12:13:12 +00:00
jeremy
f3764fb5aa Bump. The default FLAVOR of the passenger dependency is included in
@depend, even though it doesn't appear to be used.

Spotted by naddy@
2014-10-09 18:46:44 +00:00
jeremy
78a7ce5dc4 Use default ruby version for building ruby-passenger and nginx passenger
FLAVOR. No runtime effect for either, so no bump.

nginx part from zhuk@, with minor tweak by me to fix CONFIGURE_ARGS
and BUILD_DEPENDS
2014-10-08 02:32:43 +00:00
robert
d40be4a735 update to 1.7.6 2014-10-05 11:43:53 +00:00
robert
b6cebef04d fix and update the lua flavor 2014-09-21 14:00:16 +00:00
robert
c5fe99b6fb security update to 1.7.5:
CVE-2014-3616 - fix an SSL session reuse vulnerability
2014-09-16 18:37:57 +00:00
sthen
613dc9d33e @sample nginx config files, suggested by/ok aja@ 2014-09-09 14:05:48 +00:00
sthen
4629939628 add a README to www/nginx with clues about log-rotation, ok aja@ 2014-09-09 13:48:28 +00:00
ajacoutot
6c7faa0c70 Drop out-dated README.
ok robert@
2014-08-27 06:46:49 +00:00
robert
9baaa1e17b add @pkgpaths 2014-08-26 19:48:06 +00:00
robert
7ac41220aa - remove the devel nginx packages
- apply chroot and other patches from the base system
- update to 1.7.4
2014-08-26 19:43:58 +00:00
kili
c97e7ef241 Properly move the revision bumps to devel/Makefile (REVISION=3)
and stable/Makefile (REVISION=0) to avoid the devel packages
going back from p2 to p0.
2014-06-28 20:31:10 +00:00
jeremy
5d9fe8724b For the passenger FLAVOR, support the ruby 2.0 and 2.1 passenger versions
as RDEPs. Use ruby 2.0 as the BDEP, similar to the rest of the ports system.

Thanks to Frank Groeneveld for feedback and testing.
2014-06-24 21:47:26 +00:00
sthen
def2c3a69c Remove "fix" for CVE-2014-0088, this bug only affected nginx 1.5.10 and the
version in ports/devel/nginx is 1.5.7. Spotted by jasper@
2014-05-20 10:17:01 +00:00
william
971104747a SECURITY fix for CVE-2014-0088 and apply fix for CVE-2014-0133; ok sthen
a proper 1.5 update is in the works
2014-03-25 02:39:38 +00:00
william
257b977c44 SECURITY update to nginx-1.4.7; ok sthen. Resolves CVE-2014-0133 2014-03-25 02:38:26 +00:00
ajacoutot
eec05f5bea Build {devel,stable},naxsi
ok landry@ william@ (maintainer)
2014-01-06 16:47:32 +00:00
william
ed288679a4 SECURITY UPDATE to 1.4.4 / 1.5.7 to resolve CVE-2013-4547
- naxsi update to 0.53 and update MASTER_SITES
- enable the new auth_request_module for the devel branch
- whitespace cleanup and handle naxsi the same as for other modules (thanks sthen)
2013-11-25 04:34:27 +00:00
naddy
c2832a1290 move http://code.google.com, *.googlecode.com, and sites.google.com to https
suggested by bentley@
2013-08-07 21:31:12 +00:00
jeremy
194bf3856a For the passenger FLAVOR, force a BDEP on ruby19-passenger (removing
ruby-passenger), as CONFIGURE_ARGS specifies a directory that only
exists in ruby19-passenger.

The RDEP hasn't changed (can use either ruby-passenger or
ruby19-passenger), so no package change.
2013-05-25 23:00:49 +00:00
william
c5e70389d4 SECURITY update to 1.4.1 (stable) and 1.5.0 (devel)
- update lua module to 0.8.1
- add upstream_check module for healthchecking
- enable spdy in both stable and devel

All the heavy lifting was done by dlg -- thanks!

ok dlg jasper
2013-05-22 02:53:09 +00:00
william
5f515a9874 Allow building passenger with any installed ruby.
Requested by ajacoutot@, diff from jeremy@, thanks!

ok ajacoutot jeremy
2013-04-29 03:10:24 +00:00
jasper
8150c04c12 - update to nginx-1.2.8
ok william@ (MAINTAINER)
2013-04-18 06:42:38 +00:00
landry
ab08dcd94d Add a naxsi FLAVOR.
Naxsi is an open source, high performance, low rules maintenance, Web
Application Firewall module for Nginx.

lightly tested here with some example rules & config.
ok william@ (MAINTAINER)
2013-03-18 21:39:31 +00:00
sthen
7b10e7c633 PERMIT_* 2013-03-11 12:27:53 +00:00
espie
eae66e4a7b PERMIT_* / REGRESS->TEST sweep 2013-03-11 11:35:43 +00:00
sthen
f5a323c546 Don't use ${FLAVOR:L}, we only support lower-case flavours now.
OK ajacoutot@ espie@
2013-02-09 14:49:50 +00:00
sthen
24cab1e03f missing bumps; dep on ruby-passenger changed 2012-09-26 19:46:06 +00:00
jeremy
a0d7f3f4e8 Fix module directory to use for building passenger FLAVOR, after the
switch to use ruby 1.9 by default.  No bump as the package is not
affected.

OK jasper@
2012-09-24 19:29:05 +00:00
jasper
c3990dee0b sync after recent lua.port.mk change 2012-09-19 08:15:08 +00:00
sthen
973d4e7f63 Update nginx stable in ports to 1.2.x and add devel (1.3.x), this is
separate from the version in the base OS which deliberately does not include
the mail proxy and additional modules. rc.d/enginx script is added (not
rc.d/nginx to avoid conflicting with base). Lua module is also supported.
Most of the work done by william@, with a few tweaks by me and ok william.

README could use more work and as pointed out by ajacoutot we need to
review permissions of the tmp directory, but the diff is already long enough.
@pkgpath markers are set to update from the 1.0.x packages to 1.2.x (with or
without the passenger flavour as appropriate).
2012-09-11 16:01:45 +00:00
gsoares
edbab203e8 SECURITY UPDATE to nginx-1.0.15
resolves:
CVE-2012-2089 - Buffer overflow in the ngx_http_mp4_module

OK sthen@ jasper@ william@
2012-04-17 13:00:28 +00:00
william
a710cfe3da SECURITY FIX: upgrade to 1.0.14
contents of previously freed memory might be sent to a client if
backend returned specially crafted response.

ok sthen
2012-03-16 00:44:06 +00:00
robert
ff7f10a6d6 do not handle the same files that are handled by the in-tree nginx
and make the port use the www user so that both nginx can be used
on the same system if needed
2012-02-19 15:02:08 +00:00
sthen
c546e37e4d update to nginx 1.0.12, ok william@ 2012-02-18 16:40:18 +00:00
sthen
f806d0720b update ports nginx to 1.0.11 (src/usr.sbin/nginx was already updated)
ok jeremy@ william@
2012-01-18 10:00:52 +00:00
jeremy
a6f25334b3 Depend on either the ruby 1.8 or ruby 1.9 version of ruby-passenger
in the passenger FLAVOR.
2011-12-13 18:39:38 +00:00
sthen
88435c9249 Update to nginx 1.0.10. Bugs fixed include a segmentation fault in a worker
process if the resolver receives a large DNS response. OK robert@
2011-11-15 19:17:15 +00:00
robert
dd733330a4 trivial update to 1.0.9 to keep in sync with the in-tree one 2011-11-14 19:24:48 +00:00
jasper
ded74a253c - update to 1.0.8
ok william@ (MAINTAINER)
2011-10-13 12:09:57 +00:00
william
98a9fa7651 Long overdue update to nginx-1.0.5
Includes the manpage diff to remove a nonexistent Xr that was suggested
by jirib on ports@ ages ago

ok rpointel jasper jeremy (passenger FLAVOR)

thanks very much to the okayers for testing multiple diffs
I never got around to committing.
2011-09-06 00:54:47 +00:00
william
a1654aa6d2 bugfix update to 1.0.4; ok jasper 2011-06-14 03:08:05 +00:00
william
f8559e8825 Update to nginx-1.0.2
Originally from Piotr for 1.0.0, thanks

ok jasper
2011-05-17 03:31:00 +00:00
william
2d2d548991 Update to nginx-0.8.54 and update MAINTAINER
from Gleydson Soares, thanks

rc issue found by Piotr Sikora, fix by me, ok aja@

ok jasper
2011-04-09 01:21:55 +00:00
ajacoutot
073e9e6b72 These aren't needed either. 2011-03-09 19:37:47 +00:00