NGINX is a high performance edge web server with the lowest memory footprint
and the key features to build modern and efficient web infrastructure.
NGINX functionality includes HTTP server, HTTP and mail reverse proxy, caching,
load balancing, compression, request throttling, connection multiplexing and
reuse, SSL offload and HTTP media streaming.
See also: https://nginx.org/
Reason:
Following the rename of security/openssl35 to security/openssl, the
HTTPV3_OSSL35 option has been renamed to HTTPV3_OSSL.
The saved setting does not carry over. If you had the old option
enabled, select the new one and rebuild the port:
# make -C /usr/ports/www/nginx-devel config
Number of commits found: 1303 (showing only 100 on this page) #
www/nginx-devel: is able to build with OpenSSL compatibility layer now
Here's the quote from README file.
A library that provides QUIC support is recommended to build nginx,
there are several of those available on the market:
o) BoringSSL
o) LibreSSL
o) QuicTLS
Alternatively, nginx can be configured with OpenSSL compatibility
layer, which emulates BoringSSL QUIC API for OpenSSL. This mode is
enabled by default if native QUIC support is not detected.
0-RTT is not supported in OpenSSL compatibility mode.
Bump PORTREVISION.
www/nginx-devel: update from 1.23.3 to 1.23.4
<Changelog>
*) Change: now TLSv1.3 protocol is enabled by default.
*) Change: now nginx issues a warning if protocol parameters of a
listening socket are redefined.
*) Change: now nginx closes connections with lingering if pipelining was
used by the client.
*) Feature: byte ranges support in the ngx_http_gzip_static_module.
*) Bugfix: port ranges in the "listen" directive did not work; the bug
(Only the first 15 lines of the commit message are shown above )
*/*: update NGINX JavaScript 0.7.10 -> 0.7.11
While I'm here drop pcre flavor support for lang/njs.
Bump PORTREVISION for www/nginx-devel.
<ChangeLog>
nginx modules:
*) Bugfix: added missed linking with libxml2 for the dynamic module.
The bug was introduced in 0.7.10.
Core:
*) Feature: added XMLNode API to modify XML documents.
(Only the first 15 lines of the commit message are shown above )
www/nginx-devel: switch to pcre2
The pcre library 8.45 has been released Jun 22nd, 2021 and is not
officially supported anymore.
The pcre2 support in nginx was introduced in 1.21.5, it's been
released Dec 28th, 2021. There're few modules are still require
devel/pcre, but since devel/pcre and devel/pcre2 can be coexist
and those few modules are happy with that, let's switch to pcre2
by default.
Also, while I'm here update third-party lua module to its
recent version - 0.10.23.
Bump PORTREVISION.
www/nginx-devel: unbreak build after 18c6e1827669 (+)
Changes in framework need adjustment for declared options.
*_USE=ruby now became as *_USES=ruby
Approved by: portmgr blanket
www/nginx-devel: update from 1.23.2 to 1.23.3
Update HTTPv3/QUIC patch.
<Changelog>
*) Bugfix: an error might occur when reading PROXY protocol version 2
header with large number of TLVs.
*) Bugfix: a segmentation fault might occur in a worker process if SSI
was used to process subrequests created by other modules.
Thanks to Ciel Zhao.
*) Workaround: when a hostname used in the "listen" directive resolves
to multiple addresses, nginx now ignores duplicates within these
addresses.
*) Bugfix: nginx might hog CPU during unbuffered proxying if SSL
connections to backends were used.
</Changelog>
*/*: update NGINX JavaScript 0.7.8 -> 0.7.9
Bump PORTREVISION for www/nginx-devel.
<ChangeLog>
*) Bugfix: fixed Fetch Response prototype reinitialization.
When at least one js_import directive was declared in both HTTP
and Stream, ngx.fetch() returned inapproriate response in Stream.
The bug was introduced in 0.7.7.
Core:
*) Bugfix: fixed String.prototype.replace(re) if re.exec() returns
non-flat array.
(Only the first 15 lines of the commit message are shown above )
www/nginx-devel: update HTTPv3/QUIC patch
It's possible now to build NGINX HTTPv3/QUIC implementation with
another the LibreSSL 3.6.0.
Bump PORTREVISION.
www/nginx-devel: security update from 1.23.1 to 1.23.2
<Changelog>
*) Security: processing of a specially crafted mp4 file by the
ngx_http_mp4_module might cause a worker process crash, worker
process memory disclosure, or might have potential other impact
(CVE-2022-41741, CVE-2022-41742).
*) Feature: the "$proxy_protocol_tlv_..." variables.
*) Feature: TLS session tickets encryption keys are now automatically
rotated when using shared memory in the "ssl_session_cache"
directive.
(Only the first 15 lines of the commit message are shown above )
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
*/*: update NGINX JavaScript 0.7.6 -> 0.7.7
Bump PORTREVISION for www/nginx-devel.
<ChangeLog>
nginx modules:
*) Feature: the number of nginx configuration contexts where
js directives can be specified is extended.
HTTP: js_import, js_path, js_set and js_var are allowed
in server and location contexts. js_content, js_body_filter
and js_header_filter are allowed in 'if' context.
(Only the first 15 lines of the commit message are shown above )
www: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
*
* <hvo.pm@xs4all.nl>
* Aaron Dalton <aaron@FreeBSD.org>
* Aaron Dalton <aaron@daltons.ca>
* Aaron LI <aly@aaronly.me>
* Aaron Zauner <az_mail@gmx.at>
* Abel Chow <achow@transoft.net>
* Adam Weinberger <adamw@FreeBSD.org>
* Ade Lovett <ade@FreeBSD.org>
* Adrian Steinmann <ast@marabu.ch>
* Akinori MUSHA aka knu <knu@idaemons.org>
(Only the first 15 lines of the commit message are shown above )
*/*: update NGINX JavaScript module 0.7.5 -> 0.7.6
<ChangeLog>
nginx modules:
*) Feature: improved r.args object. Added support for multiple
arguments with the same key. Added case sensitivity for
keys. Keys and values are percent-decoded now.
*) Bugfix: fixed r.headersOut setter for special headers.
Core:
*) Feature: added Symbol.for() and Symbol.keyfor().
(Only the first 15 lines of the commit message are shown above )
www/nginx-devel: update from 1.23.0 to 1.23.1
Update the HTTPv3/QUIC patch.
<Changelog>
*) Feature: memory usage optimization in configurations with SSL
proxying.
*) Feature: looking up of IPv4 addresses while resolving now can be
disabled with the "ipv4=off" parameter of the "resolver" directive.
*) Change: the logging level of the "bad key share", "bad extension",
"bad cipher", and "bad ecpoint" SSL errors has been lowered from
"crit" to "info".
*) Bugfix: while returning byte ranges nginx did not remove the
"Content-Range" header line if it was present in the original backend
response.
*) Bugfix: a proxied response might be truncated during reconfiguration
on Linux; the bug had appeared in 1.17.5.
</Changelog>
www/nginx-devel: manage third-party modules
Remove third-party http_response module, no updates since Jan 10, 2011.
Update third-party upload_progress module to its recent version,
a patch still requires to build with 1.23.0.
Bump PORTREVISION.
www/nginx-devel: update third-party naxsi module to its recent commit
Update third-party naxsi module to 29793dc, it's compatible with
nginx 1.23.0 now, also now it's possible to build the module with
PCRE2 support.
Bump PORTREVISION.
www/nginx-devel: update JavaScript module to 0.7.5
Bump PORTREVISION.
<ChangeLog>
nginx modules:
*) Change: adapting to changes in nginx header structures.
*) Bugfix: fixed r.headersOut special getters when value
is absent.
*) Change: returning undefined value instead of an empty string
for Content-Type when the header is absent.
(Only the first 15 lines of the commit message are shown above )
www/nginx-devel: update NGINX JavaScript module to 0.7.3
Bump PORTREVISION.
<ChangeLog>
Core:
*) Feature: added support of module resolution callback.
This feature allows a host environment to control
how imported modules are loaded.
*) Bugfix: fixed backtraces while traversing imported user
modules.
*) Bugfix: fixed Array.prototype.concat() when "this" is a slow
array.
*) Bugfix: fixed frame allocation from an awaited frame.
*) Bugfix: fixed allocation of large array literals.
*) Bugfix: fixed interpreter when "toString" conversion fails.
</ChangeLog>
*/*: add new port NGINX JavaScript (njs) command line utility
NGINX JavaScript, also knows as njs, is a subset of the JavaScript
language that allows extending nginx functionality. njs is created
in compliance with ECMAScript 5.1 (strict mode) with some ECMAScript 6
and later extensions. It's easy to use njs command line utility to
develop and debug additional functionality. Also, it's light-weight
and very useful as a shebang in some cases as the nodejs substitutor.
Remove build of njs command-line utlity from the www/nginx-devel (*)
process.
Bump PORTREVISION. (*)
www/nginx-devel: update third-party spnego-http-auth module
The Kerberos MIT implementation is the only one is supported by the
third-party spnego module, so remove needless staff.
Bump PORTREVISION.
www/nginx-devel: update from 1.21.5 to 1.21.6.
<Changelog>
*) Bugfix: when using EPOLLEXCLUSIVE on Linux client connections were
unevenly distributed among worker processes.
*) Bugfix: nginx returned the "Connection: keep-alive" header line in
responses during graceful shutdown of old worker processes.
*) Bugfix: in the "ssl_session_ticket_key" when using TLSv1.3.
</Changelog>
www/nginx-devel: update NGINX JavaScript module to 0.7.2.
Bump PORTREVISION.
<ChangeLog>
Core:
*) Bugfix: fixed Array.prototype.join() when array is changed
while iterating.
*) Bugfix: fixed Array.prototype.slice() when array is changed
while iterating.
*) Bugfix: fixed Array.prototype.concat() when array is changed
(Only the first 15 lines of the commit message are shown above )
*: Fix USE_GNOME usage
USE_GNOME no longer implies USES=gnome. USE_GNOME will not have
any effect unless you add USES=gnome yourself.
Reported by: portscan
nginx-devel/Makefile: update HTTPv3 patch to the recent commit
The extra-patch-httpv3 contains the README file now, previously a
diff for that file was omitted. To avoid a rejection for the README
file the original file from nginx distribution is going to be preserved.
Bump PORTREVISION.
www/nginx-devel: fix dependences for some modules
HTTP_DAV_EXT module requires libraries, so let's define them
with a more canonical way.
While I'm here use the same way to define dependences for the
HTTP_XSLT module as well.
PR: 261134
www/nginx-devel: able to build with security/openssl-quictls
While I'm here fix a typo in a start-up template, introduced in
c42df2fcbbeccbfb2d57f4d6d7558493d512d732.
Bump PORTREVISION.
Differential Revision: https://reviews.freebsd.org/D33773
Reviewed by: pluknet
www/nginx-devel: update third-party http_substitutions_filter module
Update the third-party module to its recent version to support
both PCRE1 and PCRE2 libraries.
Bump PORTREVISION.
Idea from: http://hg.nginx.org/pkg-oss/rev/45cb552c6860
Thanks to: Mikhail Isachenkov <mikhail.isachenkov@nginx.com>
www/nginx-devel: choose PCRE library for build
NGINX 1.21.5 adds support for PCRE2 library, in addition to
support PCRE1. It's possible to choose regular expression
library for the port now.
Please note: several modules are required patching to support
PCRE2 library, so let's keep PCRE1 as default version for now.
Bump PORTREVISION.
www/nginx-devel: update from 1.21.4 to 1.21.5.
Please note: it's possible to build the recent version of nginx
with PCRE2 library, but several third-party modules have some
build issues, so let's keep www/nginx-devel depends on PCRE1
library for now, but keep in mind it needs to switched to the
modern, i.e. second, version of PCRE.
<Changelog>
Changes with nginx 1.21.5
*) Change: now nginx is built with the PCRE2 library by default.
*) Change: now nginx always uses sendfile(SF_NODISKIO) on FreeBSD.
(Only the first 15 lines of the commit message are shown above )
framework: Add new USES 'magick' for graphics/ImageMagick*
A new USES has been added to depend on ImageMagick.
USES=magick
adds a LIB_DEPENDS on graphics/ImageMagick${IMAGEMAGICK_DEFAULT}.
If a specific version is required, use for example
USES=magick:6 resp. USES=magick:7
If only a build, run or test is required, use for example
USES=magick:build resp. USES=magick:6,build,test
(Only the first 15 lines of the commit message are shown above )
www/nginx-devel: update from 1.21.3 to 1.21.4.
New kernel TLS feature is available starting with FreeBSD 13.0,
and it requires OpenSSL 3.0, compiled with "enable-ktls" option.
Further, KTLS needs to be enabled in kernel, and in OpenSSL,
either via OpenSSL configuration file or with
ssl_conf_command Options KTLS;
in nginx configuration.
To enable kernel TLS on FreeBSD 13 and above:
# kldload ktls_ocf
# sysctl kern.ipc.tls.enable=1
(Only the first 15 lines of the commit message are shown above )
www/nginx-devel: fix the Kerberos5 implementation knob name (*)
No functional changes, so do not bump PORTREVISION.
Introduced: adc7097c90ee5e8db0d063200faa689034ac91f0 (*)
www/nginx-devel: update third-party SPNEGO module to it recent commit
Notify that one of the implementation of Kerberos5 needs to be chosen.
Bump PORTREVISION.
www/nginx-devel: update from 1.21.2 to 1.21.3.
<Changelog>
*) Change: optimization of client request body reading when using
HTTP/2.
*) Bugfix: in request body filters internal API when using HTTP/2 and
buffering of the data being processed.
</Changelog>
Number of commits found: 1303 (showing only 100 on this page)