Time-based one-time password (TOTP) authentication for Angie.
The Time-based One-Time Password (TOTP) algorithm, provides a secure mechanism
for short-lived one-time password values, which are desirable for enhanced
security. This algorithm can be used across a wide range of network applications
ranging from remote Virtual Private Network (VPN) access, Wi-Fi network logon to
transaction-orientated Web applications.
The nginx-http-auth-totp module provides TOTP authentication for an Angie
server.
===> The following configuration options are available for angie-module-auth-totp-1.2.0_4,1:
DEBUG=on: Include debug version
===> Use 'make config' to modify these settings
www/angie: Security update to 1.12.2
This maintenance release fixes CVE-2026-90439:
When using an OpenSSL version without native HTTP/3 support (3.5.0
or earlier), if the default server for the address that accepted a
regular HTTPS request also used HTTP/3 (the listen directive with the
quic parameter, possibly on a different port), while a server block
without HTTP/3 was selected by domain name (SNI), limited worker process
memory corruption or a worker process crash could occur
(CVE-2026-90439); the fix was ported from nginx 1.31.6.
PR: 298632
Changes: https://en.angie.software/angie/docs/oss_changes/#angie-1-12-2
Security: 6cf2ff4b-b38c-11f1-a655-3497f65b111b
Sponsored by: Netzkommune GmbH
www/angie: Update 1.11.2 => 1.11.3 (fix CVE-2026-1642, possible MITM attack)
Security: An attacker in a man-in-the-middle (MITM) position before a
proxied server using TLS, given conditions beyond the attacker's
control, could inject plaintext data into the response before the TLS
handshake begins (CVE-2026-1642); the fix was ported from nginx 1.29.5.
Changelog:
https://en.angie.software/angie/docs/oss_changes/#angie-1-11-3
- Bump PORTREVISION in www/angie-module-*.
- Fix using of ANGIE_PORTREVISION in RUN_DEPENDS for modules.
- Replace INSTALL_MAN with INSTALL_DATA for documentation.
- Unroll "for" loops with 1-2 items - simplify Makefile and call
"INSTALL_*" 1 time instead of several.
PR: 293034
Security: CVE-2026-1642
MFH: 2026Q1
www/angie*: Bump PORTREVISION after www/angie update
pkg does not honor RUN_DEPENDS versions, hence it fails to re-install
module packages after updates to www/angie. The only workaround is
bumping PORTREVISION for *all* modules.
PR: 292648
www/angie: Use upstream version numbers for modules
Angie modules currently inherit the version number of the angie version
they are built against. This makes it hard and opaque to track their
actual version.
The mechanism used in the Makefile also had the unwanted side-effect of
PORTREVISION propagating from modules to the master port, which broke
the build (we found out the hard way...)
While here reduce number of of MKDIR calls.
PR: 291490
Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>
www/angie-module-auth-totp: New port: TOTP authentication for angie
The nginx-http-auth-totp module provides TOTP authentication for an
Angie server.
The Time-based One-Time Password (TOTP) algorithm, provides a secure
mechanism for short-lived one-time password values, which are desirable
for enhanced security. This algorithm can be used across a wide range of
network applications ranging from remote Virtual Private Network (VPN)
access, Wi-Fi network logon to transaction-orientated Web applications.
PR: 289369
