mod_gnutls uses the GnuTLS library to provide SSL 3.0, TLS 1.0, TLS
1.1 and 1.2 encryption for Apache HTTPD. It is similar to mod_ssl in
purpose, but does not use OpenSSL.
www/mod_gnutls: Update to 0.13.0
Fixes CVE-2026-33307 and CVE-2026-33308. Upstream switched to Meson and
moved off the now dead mod.gnutls.org, so the port follows. 0.13.0 also
drops SRP and Monkeysphere support and enforces the client certificate
Key Purpose, see GnuTLSClientKeyPurpose.
Changelog: https://github.com/airtower-luna/mod_gnutls/releases/tag/mod_gnutls/0.13.0
Security: a7b4cdfc-9f9d-11f1-a655-3497f65b111b
Sponsored by: Netzkommune GmbH
all: remove explicit versions in USES=python for "3.x+"
The logic in USES=python will automatically convert this to 3.8+ by
itself.
Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.
finance/quickfix: mark BROKEN with PYTHON
libtool: compile: c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++
-DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable
-Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong
-fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi
-Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings
-Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x
-MT _quickfix_la-QuickfixPython.lo -MD -MP -MF
.deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp -fPIC -DPIC -o
.libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean
'-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
^~~~~~~~~~
1 warning and 1 error generated.
Reviewed by: portmgr, vishwin, yuri
Differential Revision: <https://reviews.freebsd.org/D40568>
Mk/Uses/apache.mk: Refactor after removal of older versions
apache22 and apache25 had been removed a long time ago however the
apache.mk file has never been refactored and is out of sync from the
file Mk/bsd.default-versions.mk. These changes refactors the removals of
the older versions. In addition:
- Move some keywords like USE_APACHE, USE_APACHE_BUILD, USE_APACHE_RUN
from SANITY_DEPRECATED to SANITY_UNSUPPORTED
- Remove apache versions from ports Makefiles as currently there is only
one available version in the tree. However the version checks are
still valid and should work flawlessly whenever a new version is
added. For example USES=apache:2.2+ are simply replaced with
USES=apache. As currently there are no other versions available for
test this could not be checked on it's own ground.
- Update FOO_USE=APACHE=yes to FOO_USES=apache
- Remove trailing whitespaces
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D38113
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
www/mod_gnutls: update to 0.12.0 (+)
Major change is three fixes that make mod_gnutls compatible with the
Let's Encrypt OCSP responder for OCSP stapling.
With hat: ports-secteam
Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.
PR: 238330
Bump PORTREVISION for ports depending on the canonical version of GCC
defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t
GCC 8.2 under most circumstances.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.
PR: 231590
- Replace security/gnutls with security/gnutls3 and update to 3.2.15
- Bump PORTREVISION on all ports that depend on security/gnutls and
adjust all ports that depend on security/gnutls3
- Update mail/anubis to version 4.2 which supports gnutls 3.x
- Update mail/libvmime to a development snapshot (recommended by upstream
developers)
PR: 191274
Exp-run by: antoine
Approved by: portmgr (antoine)
- USE_APACHE= s/22+/22/
- adopt new Makefile header
Port build fails on local exp-run with apache24 with
error: 'conn_rec' has no member named 'remote_ip'
or various other apache22 specific functions/parameters
with hat apache@
- The proper acronym for Apache Software License 2 is really AL2
- Thanks to crees@ for generating the initial patch
PR: ports/163521
Submitted by: Pedro Giffuni <pfg apache.org>
Hat: portmgr
Exp run by: pav
- update to version 0.5.9
Changes:
** Version 0.5.9 (2010-09-24)
- Corrected behavior in Keep-Alive connections (do not
terminate the connection prematurely)
- The GnuTLSCache variable now can be given the specific
option "gdbm" instead of "dbm". "dbm" will use the berkeley
db type of libapr while gdbm will force gdbm to be used.
sdbm is no longer being used due to serious limitations.
** Version 0.5.8 (2010-08-18)
- Session tickets are enabled by default.
PR: ports/157651
Submitted by: Fumiyuki Shimizu <fumifumi _at_ abacustech.jp> (maintainer)
mod_gnutls uses the GnuTLS library to provide SSL 3.0, TLS 1.0, TLS
1.1 and 1.2 encryption for Apache HTTPD. It is similar to mod_ssl in
purpose, but does not use OpenSSL.
WWW: http://www.outoforder.cc/projects/apache/mod_gnutls/
PR: ports/154463
Submitted by: Fumiyuki Shimizu <fumifumi at abacustech.jp>
