NGINX is a high performance edge web server with the lowest memory footprint
and the key features to build modern and efficient web infrastructure.
NGINX functionality includes HTTP server, HTTP and mail reverse proxy, caching,
load balancing, compression, request throttling, connection multiplexing and
reuse, SSL offload and HTTP media streaming.
See also: https://nginx.org/
Reason:
Following the rename of security/openssl35 to security/openssl, the
HTTPV3_OSSL35 option has been renamed to HTTPV3_OSSL.
The saved setting does not carry over. If you had the old option
enabled, select the new one and rebuild the port:
# make -C /usr/ports/www/nginx-devel config
Number of commits found: 1310 (showing only 100 on this page) #
Upgrade from 1.13.8 to 1.13.9.
Upgrade third-party modules to their recent version.
Remove needless patches.
<ChangeLog>
*) Feature: HTTP/2 server push support; the "http2_push" and
"http2_push_preload" directives.
*) Bugfix: "header already sent" alerts might appear in logs when using
cache; the bug had appeared in 1.9.13.
*) Bugfix: a segmentation fault might occur in a worker process if the
"ssl_verify_client" directive was used and no SSL certificate was
specified in a virtual server.
*) Bugfix: in the ngx_http_v2_module.
*) Bugfix: in the ngx_http_dav_module.
</ChangeLog>
Upgrade from 1.13.7 to 1.13.8.
While I'm here remove needless patch.
<ChangeLog>
*) Feature: now nginx automatically preserves the CAP_NET_RAW capability
in worker processes when using the "transparent" parameter of the
"proxy_bind", "fastcgi_bind", "memcached_bind", "scgi_bind", and
"uwsgi_bind" directives.
*) Feature: improved CPU cache line size detection.
Thanks to Debayan Ghosh.
*) Feature: new directives in vim syntax highlighting scripts.
(Only the first 15 lines of the commit message are shown above )
Use @postexec keyword instead of deprecated @exec one in pkg-plist.
Bump PORTREVISION.
While I'm here upgrade third-party fancyindex module to the latest
version - 0.4.2.
Upgrade next third-party modules to their recent versions:
o) njs;
o) echo;
o) lua;
o) nchan;
o) redis2;
o) srcache;
o) tarantul;
o) vod.
Remove needless patches cause most of them have been added to their
upstreams.
Switch to fork that uses new brotli ABI.
Thanks to: Evgenii Kliuchnikov <eustas@google.com>
PR: 224000
While I'm here add CONFLICTS_INSTALL and PORTSCOUNT.
Bump PORTREVISION.
Upgrade from 1.13.6 to 1.13.7.
<ChangeLog>
*) Bugfix: in the $upstream_status variable.
*) Bugfix: a segmentation fault might occur in a worker process if a
backend returned a "101 Switching Protocols" response to a
subrequest.
*) Bugfix: a segmentation fault occurred in a master process if a shared
memory zone size was changed during a reconfiguration and the
reconfiguration failed.
*) Bugfix: in the ngx_http_fastcgi_module.
(Only the first 15 lines of the commit message are shown above )
Upgrade from 1.13.5 to 1.13.6.
<ChangeLog>
*) Bugfix: switching to the next upstream server in the stream module
did not work when using the "ssl_preread" directive.
*) Bugfix: in the ngx_http_v2_module.
Thanks to Piotr Sikora.
*) Bugfix: nginx did not support dates after the year 2038 on 32-bit
platforms with 64-bit time_t.
*) Bugfix: in handling of dates prior to the year 1970 and after the
year 10000.
(Only the first 15 lines of the commit message are shown above )
Do the port clean-up:
o) replace `!empty(PORT_OPTIONS:M...)' with `${PORT_OPTIONS:M...}';
o) http_accesskey was removed in r439844, cleanup it.
Do not bump PORTREVISION.
PR: 222338
- www/nginx-devel: Update from 1.13.4 to 1.13.5
- Changelog:
*) Feature: the $ssl_client_escaped_cert variable.
*) Bugfix: the "ssl_session_ticket_key" directive and the "include"
parameter of the "geo" directive did not work on Windows.
*) Bugfix: incorrect response length was returned on 32-bit platforms
when requesting more than 4 gigabytes with multiple ranges.
*) Bugfix: the "expires modified" directive and processing of the
"If-Range" request header line did not use the response last
modification time if proxying without caching was used.
Approved by: osa (maintainer)
Approved by: tz (mentor)
Differential Revision: https://reviews.freebsd.org/D12247
- www/nginx-devel: Update from 1.13.3 to 1.13.4
- pet Portlint
- Changelog:
*) Feature: the ngx_http_mirror_module.
*) Bugfix: client connections might be dropped during configuration
testing when using the "reuseport" parameter of the "listen"
directive on Linux.
*) Bugfix: request body might not be available in subrequests if it was
saved to a file and proxying was used.
*) Bugfix: cleaning cache based on the "max_size" parameter did not work
on Windows.
*) Bugfix: any shared memory allocation required 4096 bytes on Windows.
*) Bugfix: nginx worker might be terminated abnormally when using the
"zone" directive inside the "upstream" block on Windows.
Approved by: osa (maintainer)
Approved by: miwi (mentor)
MFH: 2017Q3
Differential Revision: https://reviews.freebsd.org/D11951
Upgrade from 1.13.1 to 1.13.2.
<ChangeLog>
*) Change: nginx now returns 200 instead of 416 when a range starting
with 0 is requested from an empty file.
*) Feature: the "add_trailer" directive.
Thanks to Piotr Sikora.
*) Bugfix: nginx could not be built on Cygwin and NetBSD; the bug had
appeared in 1.13.0.
*) Bugfix: nginx could not be built under MSYS2 / MinGW 64-bit.
Thanks to Orgad Shaneh.
*) Bugfix: a segmentation fault might occur in a worker process when
using SSI with many includes and proxy_pass with variables.
*) Bugfix: in the ngx_http_v2_module.
Thanks to Piotr Sikora.
</ChangeLog>
Upgrade from 1.13.0 to 1.13.1.
<ChangeLog>
*) Feature: now a hostname can be used as the "set_real_ip_from"
directive parameter.
*) Feature: vim syntax highlighting scripts improvements.
*) Feature: the "worker_cpu_affinity" directive now works on DragonFly
BSD.
Thanks to Sepherosa Ziehau.
*) Bugfix: SSL renegotiation on backend connections did not work when
using OpenSSL before 1.1.0.
(Only the first 15 lines of the commit message are shown above )
A customer has reported about an issue when unable to load a dynamic
module because of wrong order of those modules in the default confi-
guration file, so remove the auto generation of the load modules list.
Bump PORTREVISION.
Upgrade third-party http_auth_pam module from 1.2 to 1.5.1.
Change upstream to github.
It's possible to build the module as dynamic now.
Do not bump PORTREVISION.
Fix third-party lua-nginx module build with LibreSSL.
While I'm here clean-up distinfo from the checksums of legacy
third-party modules.
Do not bump PORTREVISION.
PR: 218595
Upgrade from 1.12.0 to latest "mainline" 1.13.0.
<ChangeLog>
*) Change: SSL renegotiation is now allowed on backend connections.
*) Feature: the "rcvbuf" and "sndbuf" parameters of the "listen"
directives of the mail proxy and stream modules.
*) Feature: the "return" and "error_page" directives can now be used to
return 308 redirections.
Thanks to Simon Leblanc.
*) Feature: the "TLSv1.3" parameter of the "ssl_protocols" directive.
*) Feature: when logging signals nginx now logs PID of the process which
sent the signal.
*) Bugfix: in memory allocation error handling.
*) Bugfix: if a server in the stream module listened on a wildcard
address, the source address of a response UDP datagram could differ
from the original datagram destination address.
</ChangeLog>
Remove IPV6 knob, IPv6 now compiled-in automatically if support is found.
Upgrade third-party upload module, enable it back.
Upgrade third-party http_auth_krb5 module to 0c6ff3f.
Upgrade third-party njs module to 0.1.10.
Upgrade from 1.11.9 to 1.11.10.
<ChangeLog>
*) Change: cache header format has been changed, previously cached
responses will be invalidated.
*) Feature: support of "stale-while-revalidate" and "stale-if-error"
extensions in the "Cache-Control" backend response header line.
*) Feature: the "proxy_cache_background_update",
"fastcgi_cache_background_update", "scgi_cache_background_update",
and "uwsgi_cache_background_update" directives.
*) Feature: nginx is now able to cache responses with the "Vary" header
(Only the first 15 lines of the commit message are shown above )
- Remove inclusion of bsd.default-versions.mk from ftp/curl/Makefile so
bsd.default-versions.mk can rely on ARCH being defined.
- In bsd.port.mk move inclusion of bsd.default-versions.mk from the
pre-makefile section to the options section so the variables can be used
earlier. Also put the bit of code sitting between the options section and
the pre-makefile section into the options section.
- Remove last few cases where ports set WITH_OPENSSL_PORT. This variable is
handled in bsd.default-versions.mk and some ports were setting it after
including bsd.port.options.mk. After FreeBSD 9 EoL all but a few ports,
and then only when setting non-default options, work without setting that
variable.
PR: 215996
Exp-run by: antoine
Approved by: portmgr (antoine)
Upgrade from 1.11.8 to 1.11.9.
<ChangeLog>
*) Bugfix: nginx might hog CPU when using the stream module; the bug had
appeared in 1.11.5.
*) Bugfix: EXTERNAL authentication mechanism in mail proxy was accepted
even if it was not enabled in the configuration.
*) Bugfix: a segmentation fault might occur in a worker process if the
"ssl_verify_client" directive of the stream module was used.
*) Bugfix: the "ssl_verify_client" directive of the stream module might
not work.
(Only the first 15 lines of the commit message are shown above )
Upgrade from 1.11.7 to 1.11.8.
<ChangeLog>
*) Feature: the "absolute_redirect" directive.
*) Feature: the "escape" parameter of the "log_format" directive.
*) Feature: client SSL certificates verification in the stream module.
*) Feature: the "ssl_session_ticket_key" directive supports AES256
encryption of TLS session tickets when used with 80-byte keys.
*) Feature: vim-commentary support in vim scripts.
Thanks to Armin Grodon.
(Only the first 15 lines of the commit message are shown above )
Upgrade from 1.11.6 to 1.11.7.
Upgrade njs module from 8c01042 to f8c642a.
<ChangeLog>
*) Change: now in case of a client certificate verification error the
$ssl_client_verify variable contains a string with the failure
reason, for example, "FAILED:certificate has expired".
*) Feature: the $ssl_ciphers, $ssl_curves, $ssl_client_v_start,
$ssl_client_v_end, and $ssl_client_v_remain variables.
*) Feature: the "volatile" parameter of the "map" directive.
*) Bugfix: dependencies specified for a module were ignored while
(Only the first 15 lines of the commit message are shown above )
Fix the build issues when:
o) the drizzle module can't find the libdrizzle headers;
o) the geoip2 can't find the libmaxminddb.
Do not bump PORTREVISION, those third-party modules are disabled by default.
Don't quote {} in find -exec calls.
Braces are not shell metacharacters, and they do not need to be quoted.
By the time find parses its arguments and dicovers them, the quoting
will have been removed by the shell anyway.
Sponsored by: Absolight
www/nginx: drop unused ImageMagick dependency
nginx-video-thumbextractor-module-0.7.0/README.textile:
h2(#0_5_0). v0.5.0
* remove MagickWand dependency which cause memory leak
which saved it from being BROKEN by r358176:
In file included from src/ngx_http_video_thumbextractor_module.c:3:
src/ngx_http_video_thumbextractor_module_utils.c:5:10: fatal error:
'wand/magick_wand.h' file not found
#include <wand/magick_wand.h>
^
1 error generated.
*** Error code 1
Reported by: antoine (via exp-run for www/tengine)
Upgrade from 1.11.5 to 1.11.6.
Mark following third-party modules with IGNORE, a patches require from
upstreams:
o) http_upstream_fair;
o) drizzle;
o) memc;
o) postgres;
o) redis2.
<ChangeLog>
*) Change: format of the $ssl_client_s_dn and $ssl_client_i_dn variables
has been changed to follow RFC 2253 (RFC 4514); values in the old
format are available in the $ssl_client_s_dn_legacy and
$ssl_client_i_dn_legacy variables.
(Only the first 15 lines of the commit message are shown above )
Use ImageMagick-nox11 instead of original one as it's more
convenient for the server-based product.
Do not bump PORTREVISION because this change affects disabled by
default third-party modules only.
Upgrade from 1.11.4 to 1.11.5.
Upgrade third-party njs module to its latest version ee84984.
<ChangeLog>
*) Change: the --with-ipv6 configure option was removed, now IPv6
support is configured automatically.
*) Change: now if there are no available servers in an upstream, nginx
will not reset number of failures of all servers as it previously
did, but will wait for fail_timeout to expire.
*) Feature: the ngx_stream_ssl_preread_module.
*) Feature: the "server" directive in the "upstream" context supports
(Only the first 15 lines of the commit message are shown above )
Upgrade from 1.11.3 to 1.11.4.
<ChangeLog>
*) Feature: the $upstream_bytes_received variable.
*) Feature: the $bytes_received, $session_time, $protocol, $status,
$upstream_addr, $upstream_bytes_sent, $upstream_bytes_received,
$upstream_connect_time, $upstream_first_byte_time, and
$upstream_session_time variables in the stream module.
*) Feature: the ngx_stream_log_module.
*) Feature: the "proxy_protocol" parameter of the "listen" directive,
the $proxy_protocol_addr and $proxy_protocol_port variables in the
(Only the first 15 lines of the commit message are shown above )
GOOGLE_CODE has gone away.
- If a port has another upstream, remove GOOGLE_CODE
- If a port only has GOOGLE_CODE mark it BROKEN
Some ports have a local mirror configured but for security reasons, it
is not considered upstream.
Sponsored by: Absolight
Upgrade third-party modules:
o) arrayvar from 0.03 to 0.05;
o) devel_kit from 0.2.19 to 0.3.0;
o) echo from 4f7aa50 to 46334b3;
o) encryptsession from 0.03 to 0.05;
o) forminput from 0.07 to 0.12;
o) iconv from 0.10 to 0.14;
o) lua from 0.10.5 to 0.10.6rc1;
o) set_misc from 6582fb4 to f808ef4;
o) sflow from 0.9.7 to 543c72a;
o) small_light from 0.6.15 to 0.8.0;
o) xss from 0.04 to 0.05.
Do not bump PORTREVISION.
Upgrade from 1.11.2 to 1.11.3.
<ChangeLog>
*) Change: now the "accept_mutex" directive is turned off by default.
*) Feature: now nginx uses EPOLLEXCLUSIVE on Linux.
*) Feature: the ngx_stream_geo_module.
*) Feature: the ngx_stream_geoip_module.
*) Feature: the ngx_stream_split_clients_module.
*) Feature: variables support in the "proxy_pass" and "proxy_ssl_name"
directives in the stream module.
*) Bugfix: socket leak when using HTTP/2.
*) Bugfix: in configure tests.
Thanks to Piotr Sikora.
</ChangeLog>
Upgrade from 1.11.1 to 1.11.2.
<ChangeLog>
*) Change: now nginx always uses internal MD5 and SHA1 implementations;
the --with-md5 and --with-sha1 configure options were canceled.
*) Feature: variables support in the stream module.
*) Feature: the ngx_stream_map_module.
*) Feature: the ngx_stream_return_module.
*) Feature: a port can be specified in the "proxy_bind", "fastcgi_bind",
"memcached_bind", "scgi_bind", and "uwsgi_bind" directives.
(Only the first 15 lines of the commit message are shown above )
Upgrade third-party tarantool module from 3599ba0 to b852195.
The size of the distro has been decreased dramatically because an rpm
directory with nginx-1.8.0.tar.gz tarball inside has been removed.
PR: 210349
Upgrade third-party modules:
o) http_auth_ldap from 8517bb0 to dbcef31;
o) brotli from 2fc6f12 to 4f08382;
o) lua from d44f8e0 to 0.10.5;
o) njs from c4a5f2b to 44fe9c1;
o) nchan (aka push) from 0.99.14 to 0.99.15.
Also, it's possible now to build third-party http_auth_ldap module
as dynamic module.
Add java category for third-party clojure module.
Do not bump PORTREVISION.
Security upgrade:
o) nginx -- from 1.10.0 to 1.10.1;
o) nginx-devel -- from 1.11.0 to 1.11.1.
<ChangeLog>
*) Security: a segmentation fault might occur in a worker process while
writing a specially crafted request body to a temporary file
(CVE-2016-4450); the bug had appeared in 1.3.9.
</ChangeLog>
Upgrade from 1.10.0 to 1.11.0.
<ChangeLog>
*) Feature: the "transparent" parameter of the "proxy_bind",
"fastcgi_bind", "memcached_bind", "scgi_bind", and "uwsgi_bind"
directives.
*) Feature: the $request_id variable.
*) Feature: the "map" directive supports combinations of multiple
variables as resulting values.
*) Feature: now nginx checks if EPOLLRDHUP events are supported by
kernel, and optimizes connection handling accordingly if the "epoll"
(Only the first 15 lines of the commit message are shown above )
Add DSO knob - an ability to build an old "good" nginx without dynamic modules.
Do not bump PORTREVISION cause functionally nothing has been changed.
PR: 209124
Number of commits found: 1310 (showing only 100 on this page)
