23 Commits

Author SHA1 Message Date
sthen
868b4bdcb7 update to squid 3.4.10 and enable ssl-crtd
Fixes a segmentation fault in ACLUrlPathStrategy::match which would
occur when urlpath_regex ACL was used in access controls to test
transactions where no URL path is available. eg CONNECT or OPTIONS
requests, some WebDAV requests, etc.
2014-12-12 22:17:33 +00:00
sthen
192dd39297 Reduce warning spam during build now that we have le*toh. From sven falempin. 2014-12-09 21:44:29 +00:00
ajacoutot
d6aa8845b4 Bump daemon_timeout from 31 to 35. Default squid shutdown timeout is 30s,
but we may be a bit slow, so give us some room.

ok sthen@ (maintainer)
2014-11-17 14:02:19 +00:00
sthen
a5edcc6e38 update to squid 3.4.9 2014-11-07 01:00:01 +00:00
sthen
1a0439b56b update to squid-3.4.8, fix off by one in SNMP subsystem
3.4.8 also fixes an issue with the standalone pinger process as described
in http://www.openwall.com/lists/oss-security/2014/09/16/6, but we don't have
that enabled in the port at present.
2014-09-16 15:29:30 +00:00
sthen
546337cb98 SECURITY update to squid 3.4.7 - clients can perform a DoS due to
incorrect input validation in range checking.

http://www.squid-cache.org/Advisories/SQUID-2014_2.txt
2014-09-10 09:59:55 +00:00
ajacoutot
9ecb6ea3d9 /etc/rc.d -> ${RCDIR}
(as pedantic and useless as /usr/local vs LOCALBASE|PREFIX but well...)

ok sthen@
2014-07-19 22:36:13 +00:00
ajacoutot
bd5a8990d9 Drop local shutdown patch and set daemon_timeout="31".
prodded by sthen@
2014-07-09 14:19:58 +00:00
sthen
065fc55d2f Update to squid-3.4.6, various fixes (especially for SSL-bump but some general
ones). Includes some memory leak and segv fixes.
2014-06-26 12:54:31 +00:00
sthen
51bd12abbb add patch (committed upstrem) to fix an uninitialised use when %tg is used in
a logformat config line.
2014-05-19 11:29:01 +00:00
sthen
5102b6fb88 disable "rock" storeio backend, it doesn't currently work on OpenBSD (creates
initial db file ok, but EMSGSIZE when trying to open at normal startup)
2014-05-15 21:24:33 +00:00
sthen
0518f009de update squid/stable to 3.4.5 and squid/snapshot to 20140506-r13398.
use ports/lang/gcc to build snapshot, squid will be moving to requiring
c++11 so let's build this with it already to get more experience.
squid/stable stays with base gcc for most arch for now.
2014-05-07 20:52:06 +00:00
sthen
accef96e34 un-revert previous revert, and add a patch from upstream to fix https tunnels 2014-04-26 12:06:52 +00:00
sthen
01cf8eec5e partially revert upstream commit to fix failures with https CONNECT
introduced in 3.4.4.2

http://bugs.squid-cache.org/show_bug.cgi?id=4051
2014-04-26 10:34:04 +00:00
sthen
441a9c2a35 update squid/stable to 3.4.4.2, move some now-common pieces up into
squid/Makefile.inc, and regen PLISTs with @commented pieces from PLIST-ntlm
to avoid problems with future regens if samba is installed.
2014-04-24 14:26:21 +00:00
sthen
19137831c2 disable kerberos 2014-04-21 20:29:50 +00:00
sthen
8341c987d2 missed a bump when I moved this from snapshots/ to stable/, thanks naddy@ 2014-04-09 19:47:51 +00:00
sthen
5d4f1010d1 switch squid/stable to the 3.4 branch, and update squid/snapshot to a
recent snapshot from the 3.5 branch
2014-04-08 12:22:48 +00:00
sthen
4a6353aec2 test pod2man differently, previous version no good with perl 5.18 2014-03-21 12:46:55 +00:00
sthen
c9f8aa721c update to squid-3.3.12, security fix for CVE-2014-0128 in HTTPS request
handling, only affects users who have enabled the "ssl-bump" MITM feature.

workarounds at
http://www.squid-cache.org/Advisories/SQUID-2014_1.txt
2014-03-16 12:58:48 +00:00
sthen
0ab0266ef4 update to squid 3.3.11 2013-12-07 10:47:20 +00:00
sthen
3c95359333 oops, forgot to regen PLIST in squid/stable after disabling an auth module,
reported by naddy@.
2013-11-16 19:20:46 +00:00
sthen
85d9a928ff Update to squid-3.3.10 and reorganise the squid ports; retire squid-2.7
(it was kept separately because 3.x didn't build on some arch due to an
incomplete atomic ops autoconf check which has since been repaired) and
replace with 3.4 (devel version). Enable additional helpers and turn on
support for rock cache dirs.
2013-11-15 19:09:17 +00:00