This is Apache version 1.3 plus mod_ssl which provides strong cryptography
via the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS
v1) protocols by the help of the SSL/TLS implementation toolkit OpenSSL which
is based on SSLeay from Eric A. Young and Tim J. Hudson. The mod_ssl package
was created in April 1998 by Ralf S. Engelschall and was originally derived
from software developed by Ben Laurie for use in the Apache-SSL HTTP server
project.
As a summary, here are its main SSL/TLS-related features:
o Open-Source software (BSD-style license)
o Useable for both commercial and non-commercial use
o Available for both Unix and Win32 (Windows 95/98/NT) platforms
o 128-bit strong cryptography world-wide
o Support for SSLv2, SSLv3 and TLSv1 protocols
o Support for both RSA and Diffie-Hellman ciphers
o Clean reviewable ANSI C source code
o Clean Apache module architecture
o Integrates seamlessly into Apache through an Extended API (EAPI)
o Full Dynamic Shared Object (DSO) support
o Advanced pass-phrase handling for private keys
o X.509 certificate based authentication for both client and server
o X.509 certificate revocation list (CRL) support
o Support for per-URL renegotiation of SSL handshake parameters
o Support for explicit seeding of the PRNG from external sources
o Additional boolean-expression based access control facility
o Backward compatibility to other Apache SSL solutions
o Inter-process SSL session cache (DBM and Shared Memory based)
o Powerful dedicated SSL engine logging facility
o Simple and robust application to Apache source trees
o Fully integrated into the Apache 1.3 configuration mechanism
o Additional integration into the Apache Autoconf-style Interface (APACI)
o Assistance in X.509v3 certificate generation (both RSA and DSA)
o Experimental support for external Crypto Devices (OpenSSL ENGINE)
mod_snmp is a plug-in for apache-1.3.x to take apache status by SNMP
LICENSE: Apache License 2.0
WWW: http://www.apache.org/
LICENSE: BSD 4-clause
WWW: http://www.modssl.org/
"This product includes software developed by
Ralf S. Engelschall <rse@engelschall.com> for use in the
mod_ssl project (http://www.modssl.org/)."
LICENSE: BSD 4-clause
WWW: http://www.openssl.org/
"This product includes software developed by the OpenSSL Project
for use in the OpenSSL Toolkit (http://www.openssl.org/)"
LICENSE: BSD 4-clause
WWW: http://www.mod-snmp.com/
"This product includes software developed by Harrie Hazewinkel."
- mark apache13 FORBIDDEN (CVE-2011-3368)
* There are no patches from upstream and already existing
exploids in the wild.
- ru-apache13 ports have long outstanding issues and are far
behind last apache13 patches.
with hat apache@
Feature safe: yes
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav
- Set EXPIRATION_DATE to an actual date (9.0 is behind, so guess 2 months from
now).
- This can be changed later as needed, if at all, either way we won't remove
them
until after 9.0 is released.
With Hat: apache@
Reported by: dvl via freshports
Remove painful examples of foo="", with particular prejudice against
constructions that parse out to [ -z "$foo" ] && foo=""
These are bad examples that get copied and pasted into new code, so the
hope is that with less bad examples there will be less need for me to
bring this up in review.
In a few of these files all that were changed were comments so that next
time I search for these patterns I won't trip on the file for no reason.
In a few places, add $FreeBSD$
No functional changes, so no PORTREVISION bumps
Remove the FreeBSD KEYWORD from all rc.d scripts where it appears.
We have not checked for this KEYWORD for a long time now, so this
is a complete noop, and thus no PORTREVISION bump. Removing it at
this point is mostly for pedantic reasons, and partly to avoid
perpetuating this anachronism by copy and paste to future scripts.
- support for options:
APACHE_DATADIR,APACHE_CGIBIN_ROOT,APACHE_DOCUMENT_ROOT
- new options:
APACHE_LOCALSTATE_DIR,APACHE_LOGFILE_DIR
Submitted by: Bernard J. Treves Brown
- support for options:
DEFAULT_PATH
Now that new style rc.d scripts are being run as part of the
base rcorder, hard coded variable values in these scripts
are overriding the values in /etc/rc.conf[.local] (due to
the way that variables from the latter are read at boot time).
Therefore, change the boot scripts to set default values only
if the variable is unset in /etc/rc.conf[.local]. This will
allow the service to start at boot time if it's been enabled
as the user would expect.
This change will be a noop for users who have systems that
have not yet been upgraded to the new rc.d code in the base.
In many cases there are other variables in the scripts that
should get similar treatment, however I did not change
anything other than the _enable lines. I'll leave the rest
up to the maintainers to do as they see fit.
Bump PORTREVISION to make sure that users and packages
pick up this change.
- new option WITH_APACHE_LATESTLOG
that patches rotatelogs to always keep a hardlink to the latest log
file, but without the seconds-since-epoch integer. Just as a
convenience - when developing web apps, it makes it easier to just
check the log file.
Submitted by: Palle Girgensohn
- new option WITH_APACHE_LATESTLOG
that patches rotatelogs to always keep a hardlink to the latest log
file, but without the seconds-since-epoch integer. Just as a
convenience - when developing web apps, it makes it easier to just
check the log file.
Submitted by: Palle Girgensohn
dbmmanage doesn't recognize the $1$ md5 prefix used by FreeBSD when
checking a password using "dbmmanage passwdfile check". This patch
fixes this.
(no need to bump PORTVERSION)
Submitted by: Palle Girgensohn
- Security update to 2.8.21-1.3.32
* CAN-2004-0492 (cve.mitre.org)
Reject responses from a remote server if sent an invalid (negative)
Content-Length.
- update mod_snmp to 1.3.14.13
- fix build dependency
:
- allow build without expat, new option APACHE_WITHOUT_EXPAT
To run some (mod_perl) applications, a full expat library is needed, but the
built-in one conflicts with it. This patch allows you to build Apache without
the built-in expat so the other modules can load what they need.
PR: 66650
Submitted by: Vivek Khera
- rcNG-fy
Submitted by: nork
WARNING installing the package will overwrite your "etc/rc.d/apache.sh"
installing from port is safe
- new option WITHOUT_RC_SUBR
