Squid is a fully-featured HTTP/1.0 proxy which is almost (but not quite)
HTTP/1.1 compliant. Squid offers a rich access control, authorization and
logging environment to develop web proxy and content serving applications.
===> The following configuration options are available for squid-7.7:
ARP_ACL=on: ARP/MAC/EUI based authentification
CACHE_DIGESTS=on: Use cache digests
DEBUG=off: Build with extended debugging support
DELAY_POOLS=on: Delay pools (bandwidth limiting)
DOCS=on: Build and/or install documentation
ECAP=off: Loadable content adaptation modules
EXAMPLES=on: Build and/or install examples
FOLLOW_XFF=on: Support for the X-Following-For header
FS_AUFS=on: AUFS (threaded-io) support
FS_DISKD=on: DISKD storage engine controlled by separate service
FS_ROCK=on: ROCK storage engine
HTCP=on: HTCP support
ICAP=on: the ICAP client
ICMP=on: ICMP pinging and network measurement
IPV6=on: IPv6 protocol support
KQUEUE=on: Kqueue(2) support
LARGEFILE=on: Support large (>2GB) cache and log files
LAX_HTTP=on: Do not enforce strict HTTP compliance
NETTLE=off: Nettle MD5 algorithm support
SNMP=on: SNMP support
SSL=on: SSL gatewaying support
SSL_CRTD=on: Use ssl_crtd to handle SSL cert requests
STACKTRACES=off: Enable automatic backtraces on fatal errors
TDB=off: TrivialDB support required for session and time quota external helpers
VIA_DB=on: Forward/Via database
WCCP=on: Web Cache Coordination Protocol
WCCPV2=on: Web Cache Coordination Protocol v2
====> Authentication helpers
AUTH_LDAP=off: Install LDAP authentication helpers
AUTH_NIS=on: Install NIS/YP authentication helpers
AUTH_SASL=off: Install SASL authentication helpers
AUTH_SMB=off: Install SMB auth. helpers (req. Samba)
AUTH_SQL=off: Install SQL based auth
====> GSSAPI Security API support: you have to select exactly one of them
GSSAPI_BASE=on: GSSAPI support via base system (needs Kerberos)
GSSAPI_HEIMDAL=off: GSSAPI support via security/heimdal
GSSAPI_MIT=off: GSSAPI support via security/krb5
GSSAPI_NONE=off: Disable GSSAPI support
====> Options available for the radio FW: you can only select none or one of them
TP_IPF=off: Transparent proxying with IPFilter
TP_IPFW=on: Transparent proxying with IPFW
TP_PF=off: Transparent proxying with PF
===> Use 'make config' to modify these settings
www/squid: Update 7.3 => 7.4
Changelog:
https://github.com/squid-cache/squid/releases/tag/SQUID_7_4
- Rework GSSAPI option a bit to make them more reliable.
- Update files/patch-configure to follow upstream changes.
- Split post-install - create post-install-*-on.
PR: 292732
www/squid: Fix LDAP SASL NETTLE build options
LDAP, SASL and NETTLE needs USES pkgconfig:build to be built.
Since pkgconfig is required for build with several other options, move
it to the general USES.
PR: 292070
www/squid: Fix build with MIT KRB5 in 15-PRERELEASE
15-CURRENT has replaced Heimdal 1.5.2 with MIT KRB5 1.21 (soon to be
1.22). Detect MIT KRB5 and adjust accordingly.
*/*: Update ports so they use SAMBA_*_PORT variables in LIB_DEPENDS
* Update ports that work with Samba and depend on either of talloc,
tdb and tevent so they use SAMBA_*_PORT variables in LIB_DEPENDS.
* Bump PORTREVISION.
* While here, update WINBIND_CONFIGURE_ON in net/freeradius3/Makefile
so it uses SAMBA_INCLUDEDIR and SAMBA_LIBDIR.
Reviewed by: 0mp, kiwi
Differential Revision: https://reviews.freebsd.org/D48859
databases/p5-DBD-mysql: Fix for MariaDB users
Add a new variable DBD_MYSQL, use that in *_DEPENDS and add mysql to USES
where required. DBD_MYSQL will automatically set the correct DBD dependency.
In cd16748194e2 databases/p5-DBD-mysql was updated to 5.x, in 5.x the
support for MariaDB was removed and only MySQL >= 8.0 is supported.
In the 4.x releases MariaDB is still supported, according to upstream 4.x
will still be supported for a while [1], so use that for now when we detect
that MYSQL_FLAVOUR is set to mariadb. databases/p5-DBD-mysql4 was added in
d95f49cb3b54.
DBD:MariaDB would be another alternative, but migrating to it might need
more analysis than just staying with the 4.x releases of p5-DBD-mysql. This
(Only the first 15 lines of the commit message are shown above )
www/squid: update to 6.5 - dumps core after updating from 6.3 to 6.4
Fixed bug in 6.4 after fix CVE.
PR: 274825
Approved by: arrowd (mentor)
MFH: 2023Q4
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap
Convert the USE_LDAP=yes to USES=ldap and adds the following features:
- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features
Reviewed by: delphij
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D38233
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
www/{squid,squid-devel}: Remove PCRE option
This option was added in 2017 and worked as is expected at the
time. But it doesn't work any more. So remove it from squid ports.
PR: 243291
Reported by: OlivierW
Approved by: maintainer timeout (about modified version)
*/*: Remove redundant '-*' from CONFLICTS definitions
The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").
Approved by: portmgr (blanket)
www/squid: Update to 4.12 among other changes
- Update to 4.12
- Remove upstreamed patches
- Enhance rc script (thanks to Walter von Entferndt for ideas!):
-- create piddir if missing (/var/run may be a tmpfs)
-- don't wait endlessly if squid can't create a pidfile
-- define squid_group
- address GREASEd (thanks to Joshua Kinard and Juraj Lutter!)
PR: 247397
Submitted by: Juraj Lutter <juraj@lutter.sk>
Reworked by: maintainer
Approved by: maintainer
MFH: 2020Q3 (bug-fix release)
Sponsored by: Rubicon Communications, LLC (Netgate)
www/squid: add CONFLICTS with incoming squid-devel and rework
- add delayer external acl helper to the build
- add eDirectory_userip external acl helper to the build if LDAP enabled
- add eDirectory and LDAP digest auth helpers to the build if LDAP enabled
- add DB log daemon helper to the build
- add LFS url rewrite helper to the build
- remove useless REINPLACE_CMD from post-patch
- remove DIST_SUBDIR as it's useless now
- simplify REINPLACE_CMD in post-patch-IPV6-off
- regenerate patches to make portlint happy
- reverse sort plist
PR: 246139
Submitted by: Pavel Timofeev <timp87@gmail.com> (maintainer)
www/squid: fix build on GCC architectures
Add --disable-strict-error-checking to CONFIGURE_ARGS for everyone. It adds
-Werror, which is against ports tree policy and causes:
Icmp6.cc: In member function 'virtual void Icmp6::SendEcho(Ip::Address&, int,
const char*, int)':
Icmp6.cc:165:72: error: converting a packed 'icmp6_hdr' pointer (alignment 1) to
a 'short unsigned int' pointer (alignment 2) may result in an unaligned pointer
value [-Werror=address-of-packed-member]
165 | icmp->icmp6_cksum = CheckSum((unsigned short *) icmp,
icmp6_pktsize);
| ^
In file included from Icmp6.h:20,
from Icmp6.cc:18:
/usr/include/netinet/icmp6.h:72:8: note: defined here
72 | struct icmp6_hdr {
| ^~~~~~~~~
At global scope:
cc1plus: error: unrecognized command line option '-Wno-deprecated-register'
[-Werror]
cc1plus: all warnings being treated as errors
PR: 241804
Approved by: timp87@gmail.com (maintainer), mentors (implicit approval)
Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.
PR: 238330
www/squid: fix build with GCC-based architectures
Add -Wno-error=stringop-truncation to CFLAGS when using GCC.
PR: 237276
Approved by: timp87@gmail.com (maintainer timeout), mat (mentor)
Differential Revision: https://reviews.freebsd.org/D20104
www/squid: Fix build with GSSAPI options
In some circumstances squid's configure script cannot detect properly which
GSSAPI is being used to build with and break build. Applied patch from
upstream ticket and also passes path of desired krb5-config to be used
during build
PR: 236959
Approved by: maintainer timeout (2 weeks)
Obtained from: https://bugs.squid-cache.org/show_bug.cgi?id=4933 (based on)
Sponsored by: Rubicon Communications, LLC (Netgate)
Fix build of www/squid and www/squid-devel with clang 8
This fixes an error with a defaulted copy constructor:
../../src/security/ServerOptions.h:38:5: error: explicitly defaulted copy
constructor is implicitly deleted [-Werror,-Wdefaulted-function-deleted]
ServerOptions(const ServerOptions &) = default;
^
../../src/security/ServerOptions.h:110:29: note: copy constructor of
'ServerOptions' is implicitly deleted because field 'clientCaStack' has a
deleted copy constructor
X509_NAME_STACK_Pointer clientCaStack;
^
/usr/include/c++/v1/memory:2494:3: note: copy constructor is implicitly deleted
because 'unique_ptr<stack_st_X509_NAME,
Security::ServerOptions::sk_X509_NAME_free_wrapper>' has a user-declared move
constructor
unique_ptr(unique_ptr&& __u) noexcept
^
The copy constructor can instead be deleted.
Approved by: timp87@gmail.com (maintainer)
PR: 236210
MFH: 2019Q2
Bump PORTREVISION for ports depending on the canonical version of GCC
defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t
GCC 8.2 under most circumstances.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.
PR: 231590
www/squid: fix bug in 4.3, no connections are accepted after ECONNABORTED
- without the fix, squid locks up every couple of hours, no longer
accept(2)-ing new connections, and needs to be restarted.
PR: 231950
Submitted by: Mark.Martinec@ijs.si
Reviewed by: Oleh Hushchenkov <gor@clogic.com.ua>
Approved by: Pavel Timofeev <timp87@gmail.com> (maintainer)
Obtained from: https://bugs.squid-cache.org/show_bug.cgi?id=4889
Switch default version of samba to 4.7
Samba 4.6 will be discontinued in a few weeks
Reviewed by: mat
Differential Revision: https://reviews.freebsd.org/D16904
Bump PORTREVISION for ports depending on the canonical version of GCC
in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which
has now moved from GCC 6 to GCC 7 by default.
This includes ports
- featuring USE_GCC=yes or USE_GCC=any,
- featuring USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and those
- with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.
PR: 222542
www/squid: Fix configure errors for libssl
- Fix building with ports' OpenSSL/LibreSSL
- Use GSSAPI descriptions from Mk/Uses/gssapi.mk
- Use more OPTIONS features
PR: 208584
Submitted by: timp87@gmail.com (maintainer)
MFH: 2016Q2
Add conflicts against the new squid-devel port
Rework transparent proxy / firewall related options
PR: 203860
Submitted by: timp87@gmail.com (maintainer)
www/squid: Add all available official patches up to 14031
It fixes two annoying and long-standing problems:
- header forgery detection (using sslbump) leads to crash
- add chained certificates and signing certificate to
peek-then-bumped connections.
PR: 207901
MFH: 2016Q2
Submitted by: Pavel Timofeev <timp87@gmail.com> (maintainer)
Reported by: Christophe Anselme-Moizan <christophe.anselmemoizan@orange.com>
Number of commits found: 317 (showing only 100 on this page)
