08:07 Alexander Leidinger (netchild) 

www/apache24: make the start script service jails ready

The setup I've chosen is to allow ipv4/ipv6 access. It does not allow
to use sysv IPC in a jail. If you want to use this possibility, the
config would need to be changed to "net_basic sysvipc" instead.
More advanced use cases may need different service jail options.
The config can be overridden in rc.conf.

See also:
  https://docs.freebsd.org/en/books/handbook/jails/#service-jails
  https://docs.freebsd.org/en/articles/rc-scripting/#rcng-service-jails

Some notes:
 - There are special apache24_limits_* stuff which is different from
   the name_limits stuff as part of the rc framework.
 - The limits part in the precmd will probably not work in a service
   jail, as the start command will be executed in a jail and the precmd
   outside the jail.
 - While the patch is taking the profiles into account, it may fail when
   the jail is started, as the name of the service jail is derived from
   the name of the rc script (assuming "profiles" means different
   instances of apache are started for each profile).
   The tomcat/oauth2-proxy/openhab ports use a way to have different
   instances of the software running in parallel which is based upon the
   name of the rc script (via links to the original rc script). That way
   works well with service jails.

Approved by:	maintainer timeout
PR:		279494

    a3fbcae

10:55 Vladimir Druzenko (vvd) 

www/apache24: workaround for bug "opcache + ASLR turned on crashes Apache if
used www/mod_php8{0,1,2,3}"

PR:		268318
Approved by:	joneum (apache@), tcberner (mentor)
MFH:		2023Q4

    688bfd0

14:31 Mathieu Arnold (mat) 

all: Remove all other $FreeBSD keywords.

    135fdee

19:44 ohauer 

- use new $opt-target
- improve kldstat check
- use new defined postexec, preunexec in pkg-plist

with hat apache@

 

20:49 ohauer 

- security update to release 2.4.10

- add OPTION for new mod_authnz_fcgi module

- s/libluajit.so/libluajit-5.1.so/ (there is no libluajit.so)

- backport for mod_lua: Don't quote values in cookies
   Make IE happy again [#56734]
   http://svn.apache.org/viewvc?view=revision&revision=1611744

- disable sanity check on demand [1]

Release Notes:
 http://www.apache.org/dist/httpd/CHANGES_2.4.10

PR:		191398 [1]
Submitted by:	Robert Schulze <rs@bytecamp.net>
MFH:		2014Q3
Security:	4364e1f1-0f44-11e4-b090-20cf30e32f6d
		CVE-2014-0117
		CVE-2014-3523
		CVE-2014-0226
		CVE-2014-0118
		CVE-2014-0231

 

21:35 ohauer 

- new port www/apache24

The Apache HTTP Server Project is an effort to develop and maintain an
open-source HTTP server for various modern desktop and server operating
systems, such as UNIX and Windows NT. The goal of this project is to
provide a secure, efficient and extensible server which provides HTTP
services in sync with the current HTTP standards.
The 2.x branch of Apache Web Server includes several improvements like
threading, use of APR, native IPv6 and SSL support, and many more.

WWW: http://httpd.apache.org/

Note:
 Since apache24 does not enable every module by default in httpd.conf the
 list of modules to build was preselected to match build param

(Only the first 15 lines of the commit message are shown above )