| Commit History - (may be incomplete: see CVSWeb link above for full details) |
| Date | By | Description |
04 Dec 2005 00:27:20
  2.0.55
 |
clement  |
- retire www/apache2 |
01 Dec 2005 18:54:16
2.0.55
|
clement |
- Fix IGNORE quoting in Makefile.modules.3rd; unbreak www/mod_vhsH
While I'm here fix typo
PR: ports/89125
Submitted by: Ion-Mihai "IOnut" Tetcu
Pointy hat to: clement |
15 Nov 2005 06:52:12
2.0.55
|
ade |
Mass-conversion to the USE_AUTOTOOLS New World Order. The code present
in bsd.autotools.mk essentially makes this a no-op given that all the
old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in
exactly the same way as USE_AUTOTOOLS itself.
Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.
Preliminary documentation can be found at:
http://people.FreeBSD.org/~ade/autotools.txt
which is in the process of being SGMLized before introduction into the
Porters Handbook.
Light blue touch-paper. Run. |
02 Nov 2005 09:13:28
2.0.55
|
clement |
- Backport WANT_APACHE= common21 from development version of bsd.apache.mk
Now module selection in apache21 works properply |
31 Oct 2005 18:04:24
2.0.55
|
clement |
- Fix a misuse of .error. Replace it by IGNORE.
PR: ports/88281
Reported by: Lowell Gilbert <freebsd-bugs-local@be-well.ilk.org> |
30 Oct 2005 20:51:56
2.0.55
|
clement |
- Don't rerun the apache2.sh rc script on restart's, just stop and start
normally
PR: ports/86402
Submitted by: Jarrod Sayers <jarrod@netleader.com.au> |
25 Oct 2005 19:58:53
2.0.55
|
fenner |
Use the proper syntax for groups when using ${MASTER_SITE_foo}
Approved by: MAINTAINER timeout (2 weeks) |
14 Oct 2005 14:54:09
2.0.55
|
clement |
- Update to 2.0.55 |
20 Sep 2005 09:39:50
2.0.54_4
|
clement |
- Apply openssl 0.9.8 fix by default. OpenSSL 0.9.8 is now the default
from ports
Reported by: erwin |
10 Sep 2005 15:46:13
2.0.54_4
|
clement |
- remove a whitespace |
10 Sep 2005 15:26:48
2.0.54_4
|
clement |
- Fix build if WITH_OPENSSL_BETA is defined.
PR: ports/85457
Submitted by: Daniel Roethlisberger <daniel@roe.ch> |
07 Sep 2005 21:31:12
2.0.54_4
|
clement |
- Fix CAN-2005-2700
* modules/ssl/ssl_engine_kernel.c (ssl_hook_Access): Ensure that
renegotiation is performed for a transition from "SSLVerifyClient
optional" to "SSLVerifyClient require". |
05 Sep 2005 16:07:49
2.0.54_3
|
clement |
- Fix reload/restart when using profiles
Submitted by: thomas, Jarrod <jarrod@netleader.com.au> |
25 Aug 2005 21:24:53
2.0.54_3
|
clement |
- Fix CAN-2005-2491 (integer overflow in pcre)
- Fix memory leak in byterange stuff, which can lead to DoS.
http://issues.apache.org/bugzilla/show_bug.cgi?id=29962
Obtained from: Apache SVN repo
Reported by: simon
Approved by: portmgr (self) |
01 Aug 2005 11:04:19
2.0.54_2
|
clement |
- make sure SSL dependency doesn't exists if WITHOUT_MODULES_SSL is defined |
26 Jul 2005 11:10:35
2.0.54_2
|
clement |
- Add fix for CAN-2005-2088
From Changelog:
*) SECURITY: CAN-2005-2088
core: If a request contains both Transfer-Encoding and Content-Length
headers, remove the Content-Length, mitigating some HTTP Request
Splitting/Spoofing attacks. [Paul Querna, Joe Orton]
- Rename previous patch to CVE ID
- bump PORTREVISION
Security: CAN-2005-2088
Obtained From: Apache repository |
26 Jul 2005 09:25:13
2.0.54_1
|
clement |
Security: fix a buffer overrun in ssl_callback_SSLVerify_CRL()
Reported by: thierry |
01 Jun 2005 18:49:31
2.0.54
|
clement |
- Remove debug line. |
01 Jun 2005 18:47:53
2.0.54
|
clement |
- Add support for multiple instances of apache2 to startup script.
It's a little bit experimental, but it works. |
17 Apr 2005 21:38:54
2.0.54
|
clement |
- Update to 2.0.54 |
17 Mar 2005 21:09:56
2.0.53_1
|
clement |
- Correct misuse of APXS_PREFIX |
15 Mar 2005 22:18:54
2.0.53_1
|
clement |
- Fix memory leak
*) core_input_filter: Move buckets to a persistent brigade instead of
creating a new brigade. This stop a memory leak when proxying a
Streaming Media Server.
Obtained from: Apache httpd repository |
01 Mar 2005 13:36:30
2.0.53
|
clement |
- promote kqueue to not-so-experiemental status.
Please use WITH_KQUEUE_SUPPORT instead.
Success story reported by: pav |
24 Feb 2005 09:52:29
2.0.53
|
clement |
- Backport PORTDOCS fix from www/apache21.
Recent changes in bsd.port.mk prevent from using PORTDOCS= # |
11 Feb 2005 15:46:11
2.0.53
|
clement |
- backout previous commit.
I blindly committed a change from my dev tree. Since USE_APACHE design
is flacky, it had a very annoying impact.
PR: ports/77391 [1]
Also reported by: pointyhat via kris,
Scot Hetzel <swhetzel@gmail.com> [1]
Pointy hat to: clement |
08 Feb 2005 21:40:06
2.0.53
|
clement |
- I want to keep APACHE_PORT overridable even with apache2. |
08 Feb 2005 15:17:06
2.0.53
|
clement |
- Update to 2.0.53
- Download bz2'd tarball [1]
- Add print-closest-mirrors target.
It allows you to find the 6 (3 http/3 ftp) closest mirror,
base on http://www.apache.org/dyn/closer.cgi/httpd/
make print-closest-mirrors >> /etc/make.conf automatically add
the six closest mirror to the head of ${MASTER_SITE_APACHE_HTTPD}.
Requested by: delphij |
26 Jan 2005 14:06:35
2.0.52_4
|
clement |
- Fix non DSO apache detection
Noticed by: Xavier Beaudouin <kiwi@oav.net> |
26 Jan 2005 10:00:11
2.0.52_4
|
clement |
Changes in Makefile.modules.3rd
o Major change(s)
- in some cases, modules are still built as static modules, making
modules selection useless and generate a non-desired httpd
o Minor change(s)
- apxs detection is done only if port isn't a server one.
- Mark modules ports as IGNORED if apaxhe is built statically
- fix make show-modules when when WITH_ALL_STATIC_MODULES is defined
Most issues discovered by: Jason Mealins <jason_mealins@bigfix.com> |
25 Jan 2005 10:11:34
2.0.52_4
|
clement |
- make WITHOUT_<CATEGORY>_MODULES really works.
(it was still stuck with WITHOUT_<CATEGORY>)
Noticed by: Jason Mealins <jason_mealins@bigfix.com> |
17 Jan 2005 20:30:08
2.0.52_4
|
clement |
- Add support for databases/db43 in apache2[1] and apache21.
- rename files/patch-srclib:apr-utils:build:dbm.m4 to
files/patch-srclib:apr-util:build:dbm.m4
Based on PR: ports/76152 [1]
Submitted by: Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net> [1] |
11 Jan 2005 13:45:05
2.0.52_4
|
clement |
o startup script:
- Use apache{2,21}flags variable in apache{2,21}_checkconfig().
It fixes restart when apache2ssl_enable is set to YES in rc.conf
and httpd.conf is "old" (i.e. non -DSSL safe) [1]
o Makefile
- split post-install target to add install-startup-script:
User can now upgrade startup script without reinstalling apache2.
NOTE: this is NOT package-safe and NOT supported, even if in most of
cases they're no risk.
Noticed by: many [1] |
27 Dec 2004 20:38:37
2.0.52_4
|
clement |
- Add a note about the dangerousness of quotes in make.conf |
19 Dec 2004 19:52:44
2.0.52_4
|
clement |
- Bump PORTREVISION to refect recent changes.
Since www/mod_python3 needs envvars.d stuff to work. |
17 Dec 2004 22:24:05
2.0.52_3
|
clement |
- Fix a bug in mod_ssl. When client aborts connection, mod_ssl still try
to send its data, ad vitam eternam.
Noticed by: Didier Bringer <bringer at echo dot fr>
Patched by: Bruno Ducrot <ducrot at poupinou dot org> |
17 Dec 2004 17:52:20
2.0.52_3
|
clement |
- Remove useless APR_FROM_PORTS check in post-install
- Add support for modular sbin/envvars
You can now put your own scripts you want to execute at envvars
stage in ${PREFIX}/etc/apache2/envvars.d
Only script ending by *.env are run.
Example:
/usr/local/etc/apache2/envvars.d/mod_python3.env
Discussed with: perky on -apache@ |
13 Dec 2004 10:18:47
2.0.52_3
|
clement |
- s/INSTALLS_SHILB/INSTALLS_SHLIB/ |
12 Dec 2004 11:48:56
2.0.52_3
|
clement |
- Remove installation of unused highperformance*.conf
- Move examples config files to ${EXAMPLESDIR}
- Relax permissions on ${PREFIX}/www instead of ${PREFIX}/www/data |
11 Dec 2004 16:01:43
2.0.52_3
|
clement |
- Rename patch file. |
29 Nov 2004 09:38:45
2.0.52_3
|
clement |
- As discussed on apache@, don't create httpd.conf.bak, and remove stalled
httpd.conf.bak file at deinstall time. |
13 Nov 2004 18:23:34
2.0.52_3
|
clement |
- minor cleanups. |
10 Nov 2004 18:24:44
2.0.52_3
|
clement |
- Fix memory consumption DoS, CVE CAN-2004-0942
Reported by: josef
Obtained from: Apache CVS |
08 Nov 2004 20:50:48
2.0.52_2
|
clement |
- ldconfig'ify ${PREFIX}/lib/apache2 at install time.
PR: ports/73566
Submitted by: lev |
04 Nov 2004 11:53:42
2.0.52_2
|
clement |
- Fix previous patch :-)
Huge pointy hat to: me
Noticed by: Meno Abels <meno.abels@adviser.com> |
31 Oct 2004 09:22:21
2.0.52_2
|
clement |
Makefile was errornously committed. Revert the changes |
30 Oct 2004 20:44:41
2.0.52_2
|
clement |
- Fix apache2 build, I hope...
Noticed by: many
Committed from: EuroBSDcon Hotel's bar.
Pointy hat to: me
Under supervision from: mat, thierry, erwin (former mentor) |
30 Oct 2004 16:32:53
2.0.52_2
|
clement |
util_ald_cache_purge() fails to relink the cache entries during a cache purge.
So apply the official patch |
21 Oct 2004 08:08:46
2.0.52_1
|
clement |
- sync with real life |
19 Oct 2004 21:06:59
2.0.52_1
|
clement |
- Fix shared module building when WITH_STATIC_MODULES is defined.
Noticed by: Nicola Tiling <nti at w4w dot net> |
16 Oct 2004 15:45:40
2.0.52_1
|
clement |
- Remove WITH_APR_FROM_PORTS knob
- Add a note to UPDATING, to warn users they won't be able to build apache2
if they keep apr 0.9.x
Discussed with: Craig Rodrigues (apr maintainer), kuriyama |
16 Oct 2004 10:15:52
2.0.52_1
|
clement |
- Fix apr detection
WARNING: apache2 + apr 1.0 is BROKEN
I'm working on a small compat hack. But don't dream too much.
apache 2.0.x is not designed to work with apr 1.x.
Forgotten by: kuriyama |
16 Oct 2004 06:03:07
2.0.52_1
|
kuriyama |
- Chase apr shlib version bump.
Pointy Hat Autumn Collection 2004 to: kuriyama |
13 Oct 2004 15:03:06
2.0.52_1
|
clement |
- Use ${WWWOWN} and ${WWWGRP} for apache's user. (instead of harcoded
www/www).
It should help to keep consistancy in www-related ports. |
13 Oct 2004 10:17:38
2.0.52_1
|
clement |
- Yet Another Security Fix
Fix CAN-2004-0885:
* modules/ssl/ssl_engine_kernel.c (ssl_hook_Access): Ensure that a
correct cipher suite has been negotiated, else deny access.
* modules/ssl/ssl_engine_init.c (ssl_init_ctx_protocol): With OpenSSL
0.9.7, prevent session resumption during a renegotiation to force the
client to negotiate a new (and acceptable) cipher suite.
Credits: Hartmut Keil, Joe Orton |
12 Oct 2004 09:27:40
2.0.52
|
clement |
- Update to 2.0.52
- Use "PORTDOCS= #" and get rid of docs entry in plist.
- Support for FreeBSD 6 in apr
- Move of cache modules from THREADS to EXPERIMENTAL category and make
sure we enable THREADS modules (cgid only) when a threaded MPM is
selected.
- Resurect WITH_EXTRA_MODULES knob
- powerlogo.gif is now hosted by FreeBSD mirrors
- WITH_<category> is definitively no longer supported.
- Add Includes dir when installed via a package [1]
PR: ports/72309 [1]
Submitted by: Christian Kratzer <ck at cksoft dot de> [1] |
10 Oct 2004 09:17:59
2.0.50_3
|
clement |
- Fix compilation with threads enabled on 5.x (due to PTHREAD_LIBS changes)
Approved by: portmgr (krion) |
15 Sep 2004 17:54:37
2.0.50_3
|
clement |
Security fixes [1]:
*) SECURITY: CAN-2004-0786 (cve.mitre.org)
Fix an input validation issue in apr-util which could be
triggered by malformed IPv6 literal addresses. [Joe Orton]
*) SECURITY: CAN-2004-0747 (cve.mitre.org)
Fix buffer overflow in expansion of environment variables in
configuration file parsing. [Andr<E9> Malo]
*) SECURITY: CAN-2004-0809 (cve.mitre.org)
mod_dav_fs: Fix a segfault in the handling of an indirect lock
refresh. PR 31183. [Joe Orton]
- Update documentation (finally!) and fix WITH_<CATEGORY>_MODULES
for special modules like LDAP or SSL [2]
Noticed by: nectar [1]
Requested by: Emile Heitor <imil at home dot imil dot net> [2]
Approved by: portmgr (marcus) |
03 Sep 2004 13:41:17
2.0.50_2
|
clement |
- make AP_GENPLIST pseudo PREFFIX-safe until I find a correct fix.
Discussed with: eik (long time ago) |
23 Aug 2004 16:44:51
2.0.50_2
|
clement |
- Add a sanity check on apache2 configuration files before reloading or
restarting apache2 (to avoid an expected failure on restart) |
19 Aug 2004 15:38:36
2.0.50_2
|
clement |
- Add support for exception hook:
* WITH_EXCEPTION_HOOK now exists
* Automatically add if WITH_DEBUG is set
* Update still-outdated-documentation
- Remove automatic debuf mode if DEBUG_FLAGS is set
Exception hook is very useful for debugging (upcoming www/mod_backtrace
and www/mod_whatkilledus modules)
Makefile.modules.3rd:
- Fix CONFIGURE_ARGS for dynamic module selection.
It's now fully usuable for apache13 ports
- Remove an useless WANT_APACHE check
- Move apxs detection at the beginning of the file, to use APXS_PREFIX
for apache major version detection [1]
The main advantage of this patch is to provide a nice way to
have multiple apache versions, without altering ${LOCALBASE}.
Submitted by: "ports/c0decafe.net" <ports at c0decafe dot net> [1] |
18 Aug 2004 20:40:07
2.0.50_2
|
clement |
- Backport security fixes in ssl_engine_io.c
* [SECURITY] mod_ssl: Fix potential input filter segfaults in
SPECULATIVE mode. (rollback handling for AP_MODE_SPECULATIVE)
"This issue has possible security implications; it's been assigned CVE
CAN-2004-0751 (cve.mitre.org)."
http://issues.apache.org/bugzilla/show_bug.cgi?id=30134
* [SECURITY] mod_ssl: Fix potential infinite loop.
(potential infinite loop in ssl_io_input_getline if connection is
aborted without inctx->rc being set.)
http://issues.apache.org/bugzilla/show_bug.cgi?id=27945
http://issues.apache.org/bugzilla/show_bug.cgi?id=29690
Obtained from: Apache CVS (httpd-2.0 HEAD) |
17 Aug 2004 13:41:26
2.0.50_1
|
clement |
- Bump PORTREVISION for all previous changes
- Allow access to /home if mod_userdir is loaded
- We don't need apache2libs.sh if apr is installed from ports.
- Add recent changes to UPGRADING |
07 Aug 2004 21:25:02
2.0.50
|
clement |
Remove our config.layout support. FreeBSD layout is in apache2's one
since 2.0.48 |
07 Aug 2004 20:47:16
2.0.50
|
clement |
We don't need -DFREEBSD_THREAD_HACK when using kse or thr as threading
library. |
05 Aug 2004 22:46:17
2.0.50
|
clement |
- Add ldconfig -m to apache2's apr libs (install time and boot time)
Requested by, discussed with: lev |
02 Aug 2004 14:21:36
2.0.50
|
clement |
- Fix brainless typo.
Noticed by: Roderick van Domburg <r.s.a.vandomburg@student.utwente.nl> |
02 Aug 2004 09:40:05
2.0.50
|
clement |
apache2 NG patch 2/5.
Makefile.modules:
- Export rewritten modules selection from Makefile.modules
to Makefile.modules.3rd
- Remove proxy support by default.
Makefile.modules.3rd:
- Add support for WANT_APACHE common13/common2 to share
code/functionalities between apache13 and apache2 server ports.
Rewrite of modules selection:
- WITH_MODULES and WITHOUT_MODULES are no more conflicting
WITHOUT_MODULES can be safely used internally to remove conflicting
modules
- Selection is based on modules categories to improve flexibility
- WITH_${category}[_MODULES]
- WITHOUT_${category}
- WITH_CUSTOM_${category}
- Support apache13, apache2{0,1}
This is EXPERIMENTAL. I'll test it IRL with www/apache13-ssl,
and it should be easily usuable in future bsd.apache.mk |
30 Jul 2004 18:04:47
2.0.50
|
clement |
apache2 NG patch 1/5.
o Changes in httpd.conf
- mod_userdir:
. set Userdir if mod_userdir is loaded [1]
. Userdir is denied for users from /etc/ftpusers
- set more "secure" permissions.
By default, policy is to deny access to filesystem.
You HAVE to _ENABLE_ access to your filesystem in httpd.conf.
- Add an "Includes" directory to ${PREFIX}/etc/apache2/
to make configuration more flexible
${PREFIX}/etc/apache2/*.conf files are now automatically loaded.
o apache.sh
- be closer to apachectl, apache.sh need envvars [2]
It should restore subversion behavior.
Partially submitted by:
kuriyama [1],
Gregory (Grisha) Trubetskoy <grisha at apache dot org> [2]
Future changes are mostly written, they should be committed during the
week-end.
If you're interrested in changes, feel free contact me. |
13 Jul 2004 14:32:42
2.0.50
|
clement |
- Disable mod_cgi if MPM is threaded. |
13 Jul 2004 10:53:43
2.0.50
|
clement |
- Update experimental apr/kqueue patch
Obtained from: apr CVS |
13 Jul 2004 10:32:44
2.0.50
|
clement |
- Fix hostname resolution if IPv4 are mapped. [1]
- Add WITHOUT_V4MAPPED knob and explicitly set --disable-v4-mapped
if WITHOUT_V4MAPPED or WITH_IPV6_V6ONLY
Also submitted by: Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp> [1] |
