Squid is a fully-featured HTTP/1.0 proxy which is almost (but not quite)
HTTP/1.1 compliant. Squid offers a rich access control, authorization and
logging environment to develop web proxy and content serving applications.
===> The following configuration options are available for squid-devel-5.0.6:
ARP_ACL=on: ARP/MAC/EUI based authentification
CACHE_DIGESTS=on: Use cache digests
DEBUG=off: Build with extended debugging support
DELAY_POOLS=on: Delay pools (bandwidth limiting)
DOCS=on: Build and/or install documentation
ECAP=off: Loadable content adaptation modules
ESI=off: ESI support
EXAMPLES=on: Build and/or install examples
FOLLOW_XFF=on: Support for the X-Following-For header
FS_AUFS=on: AUFS (threaded-io) support
FS_DISKD=on: DISKD storage engine controlled by separate service
FS_ROCK=on: ROCK storage engine
HTCP=on: HTCP support
ICAP=on: the ICAP client
ICMP=on: ICMP pinging and network measurement
IDENT=on: Ident lookups (RFC 931)
IPV6=on: IPv6 protocol support
KQUEUE=on: Kqueue(2) support
LARGEFILE=on: Support large (>2GB) cache and log files
LAX_HTTP=on: Do not enforce strict HTTP compliance
NETTLE=off: Nettle MD5 algorithm support
SNMP=on: SNMP support
SSL=on: SSL gatewaying support
SSL_CRTD=on: Use ssl_crtd to handle SSL cert requests
STACKTRACES=off: Enable automatic backtraces on fatal errors
TDB=off: TrivialDB support required for session and time quota external helpers
VIA_DB=on: Forward/Via database
WCCP=on: Web Cache Coordination Protocol
WCCPV2=on: Web Cache Coordination Protocol v2
====> Authentication helpers
AUTH_LDAP=off: Install LDAP authentication helpers
AUTH_NIS=on: Install NIS/YP authentication helpers
AUTH_SASL=off: Install SASL authentication helpers
AUTH_SMB=off: Install SMB auth. helpers (req. Samba)
AUTH_SQL=off: Install SQL based auth
====> GSSAPI Security API support: you have to select exactly one of them
GSSAPI_NONE=off: Disable GSSAPI support
GSSAPI_BASE=on: GSSAPI support via base system (needs Kerberos)
GSSAPI_HEIMDAL=off: GSSAPI support via security/heimdal
GSSAPI_MIT=off: GSSAPI support via security/krb5
====> Options available for the radio FW: you can only select none or one of them
TP_IPF=off: Transparent proxying with IPFilter
TP_IPFW=on: Transparent proxying with IPFW
TP_PF=off: Transparent proxying with PF
===> Use 'make config' to modify these settings
o You can find the configuration files for this package in the
directory /usr/local/etc/squid.
o The default cache directory is /var/squid/cache/.
The default log directory is /var/log/squid/.
Note:
You must initialize new cache directories before you can start
squid. Do this by running "squid -z" as 'root' or 'squid'.
If your cache directories are already initialized (e.g. after an
upgrade of squid) you do not need to initialize them again.
o When using DiskD storage scheme remember to read documentation:
http://wiki.squid-cache.org/Features/DiskDaemon
and alter your kern.ipc defaults in /boot/loader.conf. DiskD will not
work reliably without this. Last recomendations were:
kern.ipc.msgmnb=8192
kern.ipc.msgssz=64
kern.ipc.msgtql=2048
o The default configuration will deny everyone but the local host and
local networks as defined in RFC 1918 for IPv4 and RFCs 4193 and
4291 for IPv6 access to the proxy service. Edit the "http_access
allow/deny" directives in /usr/local/etc/squid/squid.conf
to suit your needs.
o If AUTH_SQL option is set, please, don't forget to install one of
following perl modules depending on database you like:
databases/p5-DBD-mysql
databases/p5-DBD-Pg
databases/p5-DBD-SQLite
To enable Squid, set squid_enable=yes in either
/etc/rc.conf, /etc/rc.conf.local or /etc/rc.conf.d/squid
Please see /usr/local/etc/rc.d/squid for further details.
Note:
If you just updated your Squid installation from an earlier version,
make sure to check your Squid configuration against the 3.4 default
configuration file /usr/local/etc/squid/squid.conf.sample.
/usr/local/etc/squid/squid.conf.documented is a fully annotated
configuration file you can consult for further reference.
Additionally, you should check your configuration by calling
'squid -f /path/to/squid.conf -k parse' before starting Squid.
www/squid-devel: Deprecate port
This port is not used anymore to create rc-state releases of www/squid.
PR: 272579
Reported by: timp87@gmail.com (maintainer)
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap
Convert the USE_LDAP=yes to USES=ldap and adds the following features:
- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features
Reviewed by: delphij
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D38233
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
www/{squid,squid-devel}: Remove PCRE option
This option was added in 2017 and worked as is expected at the
time. But it doesn't work any more. So remove it from squid ports.
PR: 243291
Reported by: OlivierW
Approved by: maintainer timeout (about modified version)
www/squid-devel: add patch to fix kerberos_ldap_group helper, fix pinger
- add patch to fix kerberos_ldap_group helper work with heimdal
- regenerate two patches to follow upstreamed versions
- fix pinger in plist and bump portrevision
PR: 246355
Submitted by: Pavel Timofeev <timp87@gmail.com> (maintainer)
www/squid-devel: add missing patches
- missed during the initial commit
PR: 246140
Submitted by: Pavel Timofeev <timp87@gmail.com> (maintainer)
Pointy hat to: pi
Fix build of www/squid and www/squid-devel with clang 8
This fixes an error with a defaulted copy constructor:
../../src/security/ServerOptions.h:38:5: error: explicitly defaulted copy
constructor is implicitly deleted [-Werror,-Wdefaulted-function-deleted]
ServerOptions(const ServerOptions &) = default;
^
../../src/security/ServerOptions.h:110:29: note: copy constructor of
'ServerOptions' is implicitly deleted because field 'clientCaStack' has a
deleted copy constructor
X509_NAME_STACK_Pointer clientCaStack;
^
/usr/include/c++/v1/memory:2494:3: note: copy constructor is implicitly deleted
because 'unique_ptr<stack_st_X509_NAME,
Security::ServerOptions::sk_X509_NAME_free_wrapper>' has a user-declared move
constructor
unique_ptr(unique_ptr&& __u) noexcept
^
The copy constructor can instead be deleted.
Approved by: timp87@gmail.com (maintainer)
PR: 236210
MFH: 2019Q2
Bump PORTREVISION for ports depending on the canonical version of GCC
defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t
GCC 8.2 under most circumstances.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.
PR: 231590
Switch default version of samba to 4.7
Samba 4.6 will be discontinued in a few weeks
Reviewed by: mat
Differential Revision: https://reviews.freebsd.org/D16904
Bump PORTREVISION for ports depending on the canonical version of GCC
in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which
has now moved from GCC 6 to GCC 7 by default.
This includes ports
- featuring USE_GCC=yes or USE_GCC=any,
- featuring USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and those
- with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.
PR: 222542
Fix a configure error when the IPFILTER option is selected. An example
of the error is:
checking for struct natlookup.nl_inipaddr.in6... no
checking for struct natlookup.nl_realipaddr.in6... eval: ${+...}: Bad
substitution
===> Script "configure" failed unexpectedly.
Please report the problem to timp87@gmail.com [maintainer] and attach the
"/export/wrkdir/amd64/export/home/cy/freebsd/git/ports/www/squid-devel/work/squid-4.0.25/config.log"
including the output of the failure of your make command. Also, it might be
a good idea to provide an overview of all packages installed on your system
(e.g. a /usr/local/sbin/pkg-static info -g -Ea).
*** Error code 1
Stop.
make[1]: stopped in /export/home/cy/freebsd/git/ports/www/squid-devel
*** Error code 1
Stop.
make: stopped in /export/home/cy/freebsd/git/ports/www/squid-devel
PR: 229244
Submitted by: cy
Reported by: cy
Approved by: Maintainer <timp87@gmail.com>
www/squid-devel: update to 4.0.25
While here, remove patches for building on FreeBSD 9.x
PR: 229181
Submitted by: Pavel Timofeev <timp87@gmail.com> (maintainer)
www/squid-devel: Update to 4.0.23, Fixes security vulnerabilities
- Add a patch from upstream that fixes a problem when building on i386 arch
Kid.cc:93:42: error: format specifies type 'long' but the argument has type
'time_t' (aka 'int') [-Werror,-Wformat]
theName.termedBuf(), pid, Config.hopelessKidRevivalDelay);
^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
1 error generated.
- Remove CXXFLAGS with clang, not necessary anymore
PR: 225447
Submitted by: timp87@gmail.com (maintainer)
MFH: 2018Q1
Security: d5b6d151-1887-11e8-94f7-9c5c8e75236a
Bump PORTREVISION for ports depending on the canonical version of GCC
(via Mk/bsd.default-versions.mk and lang/gcc) which has moved from
GCC 5.4 to GCC 6.4 under most circumstances.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c++11-lib, c++11-lang,
c++14-lang, c++0x, c11, or gcc-c++11-lib.
PR: 219275
Mark some ports failing on power64. In cases where the error message
was a stub, provide a real one.
While here, pet portlint.
Approved by: portmgr (tier-2 blanket)
Reported by: swills
Update to upstream version 4.0.19
Detailed maintainer log:
- Update to 4.0.19
- Make it possible to set alternative squid_krb5_config via rc script
- Unbreak build with openssl-devel
- Add bdb to USES since some helpers need it
(see http://www.squid-cache.org/Versions/v4/changesets/squid-4-15013.patch)
PR: 218505
Submitted by: timp87@gmail.com (maintainer)
MFH: 2017Q2
Bump PORTREVISIONs for ports depending on the canonical version of GCC and
lang/gcc which have moved from GCC 4.9.4 to GCC 5.4 (at least under some
circumstances such as versions of FreeBSD or platforms).
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using using Mk/bsd.octave.mk which in turn has USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c++11-lib, c++14-lang,
c++11-lang, c++0x, c11, or gcc-c++11-lib.
PR: 216707
www/squid-devel: update 4.0.11 -> 4.0.12
- Drop patch included in 4.0.12
- Also swap USE_OPENSSL=yes to USES=ssl
PR: 210812
Submitted by: Pavel Timofeev <timp87@gmail.com> (maintainer)
Switch to USES=compiler:c++11-lib rather than c++11-lang in an attempt
to improve compilability on older OS versions.
Even so, mark as broken on 9.x for now, until remaining compilation
problems can be solved.
PR: 209249
Submitted by: timp87@gmail.com (maintainer)
Squid is a fully-featured HTTP/1.0 proxy which is almost (but not quite)
HTTP/1.1 compliant. Squid offers a rich access control, authorization and
logging environment to develop web proxy and content serving applications.
WWW: http://www.squid-cache.org/
PR: 203860
Submitted by: timp87@gmail.com
