08:44 Jochen Neumeister (joneum) 

www/nginx: Update 3rd-party module

Resurrect GSSAPI radio button for http_auth_krb5 module, last one
builds just fine with both implementations now.

Obtained from:	nginx-devel
Sponsored by:	Netzkommune GmbH

    baa4dee

10:20 Jochen Neumeister (joneum) 

www/nginx: Update to 1.24.0

Update NGINX to 1.24.0
Overview of the changes from nginx-devel. Osa has made many good changes in the
last devel phases. These have been adopted into the nginx port (httpv3 ....).
Also all modules were updated to the latest version

Sponsored by:	Netzkommune GmbH

    364b314

16:10 Jochen Neumeister (joneum) 

www/nginx: Fix Typo

PR:	262063
Sponsored by:	Netzkommune GmbH

    efc9fa6

16:53 Jochen Neumeister (joneum) 

www/nginx: update third-party spnego-http-auth module

There was an error when loading the module in nginx.conf. This update also fixes
this error:
nginx: [emerg] dlopen()
"/usr/local/libexec/nginx/ngx_http_auth_spnego_module.so" failed
(/usr/local/libexec/nginx/ngx_http_auth_spnego_module.so: Undefined symbol
"__gss_krb5_mechanism_oid_desc") in /usr/local/etc/nginx/nginx.conf:7
nginx: configuration file /usr/local/etc/nginx/nginx.conf test failed

PR:	261810
Sponsored by:	Netzkommune GmbH

    7ab2abf

11:34 joneum 

Update third-party spnego-http-auth module

Add the corresponding library path to the patch for the
third-party http_auth_spnego module.

The third-party http_auth_spnego module may not work with
in-base Kerberos implementation because of gss_locaname()
function usage, so remove the GSSAPI_BASE option from the
GSSAPI radio button. (merge from www/nginx-devel in r546696)

Sponsored by:	Netzkommune GmbH

 

10:17 joneum 

- Add support for FreeBSD accept filters [1]
- Fix build with HTTP_AUTH_KRB5 after r518471 [2]
- Update 3rd party Modul

PR:	238739 [1], 242256 [2]
Sponsored by:	Netzkommune GmbH

 

14:59 joneum 

HTTP_AUTH_KRB5 option is not fully implemented. This patch makes it build with
security/krb5 and security/heimdal

PR:		226044
Reviewed by:	brnrd
Differential Revision:	https://reviews.freebsd.org/D14973

 

23:18 osa 

Upgrade from 1.10.3 to 1.12.0.

ChangeLog:	http://nginx.org/en/CHANGES-1.12

Remove IPV6 knob, IPv6 now compiled-in automatically if support is found.
Also, remove third-party modules:
o) udplog
o) statsd

Enable third_party mod_zip module back by changing upstream.

Upgrade third-party modules:
o) lua to 0.10.8
o) upstream_fair to b5be36f (upstream has been changed)
o) upload to 72ec037 (upstream has been changed).
o) http_auth_krb5 to 0c6ff3f.
o) party njs to 0.1.10.

Please see this comment in case of the production use of the lua module:
https://github.com/openresty/lua-nginx-module/pull/1017#issuecomment-294076002

Patches obtained from:
o)
https://github.com/openresty/lua-nginx-module/commit/0459a285ca0159d45e73da8bd1164edb5c57cde3
o)
https://github.com/SpiderLabs/ModSecurity/pull/1373/commits/d19df159043106a4d6dfd113696900b5b0dae24b

 

14:03 osa 

Upgrade third-party auth_krb5 module from f76d5d9 to c85a38c revision.

 

08:28 philip 

Update third-party KRB5/SPNEGO module to the latest upstream version.

Approved by:	osa (maintainer)

 

18:11 osa 

Add third-party SPNEGO authentication module.

PR:	192904