CVS log for pkgsrc/net/libfetch/Makefile

Up to [cvs.NetBSD.org] / pkgsrc / net / libfetch

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

libfetch: bump PKGREVISION for proxy fix

net/libfetch: Install pkg-config fetch.pc

It's particularly important for libfetch to have a pkg-config file since it
can conditionally depend on libssl and libcrypto. Without it downstream
software have a hard time figuring out how to link it correctly.

While here fix several pkglint errors and warnings.

Pullup ticket #6832 - requested by riastradh
net/libfetch: enable HTTPS cert validation on NetBSD 10
pkgtools/pkg_install, pkgtools/pkgin: revbump

(via patch)

   net/libfetch: Enable HTTPS certificate validation, but limit it to
   NetBSD>=10 for now.

   The switch has been flipped on for all platforms in pkgsrc-current
   with net/libfetch 2.40.  To avoid trouble with future updates to
   pkgsrc-2024Q1, the attached patch -- which is limited at
   compile-time to NetBSD>=10 -- bumps the version to 2.39nb3 instead,
   so that the version in pkgsrc-2024Q1 will appear newer.

   See
   https://mail-index.netbsd.org/pkgsrc-users/2023/12/31/msg038682.html
   https://mail-index.netbsd.org/tech-pkg/2023/12/09/msg028590.html
   for discussion.  (A future pullup might rip off the NetBSD>=10
   bandaid, but I'd like to get this part in ASAP.)

net/libfetch: update to 2.40

Validate HTTPS by default, unless environment variable
SSL_NO_VERIFY_PEER is set (from FreeBSD).

WARNING: This changes the semantics of the library in ways that may
break the functionality of existing callers, even callers that don't
ask to fetch HTTPS URLs -- because HTTP may redirect to HTTPS.

WARNING: This does not guarantee fetching HTTPS URLs will return only
authenticated data from the named host.  If the host redirects to
HTTP or FTP, libfetch will follow the redirect and return
unauthenticated data with no way for the caller to know this has
happened (short of disabling redirects altogether -- including
HTTPS-to-HTTPS redirects -- with the undocumented `A' flag).

That's OK for pkgsrc distfile fetch, since we have checksums stored
in pkgsrc for the distfiles, but makes a simple server
misconfiguration a security vulnerability with pkg_add or pkgin (even
with signed packages, because there's a lot of attack surface between
the transport layer and the package signatures).

Discussion on tech-pkg:
https://mail-index.netbsd.org/tech-pkg/2023/12/09/msg028590.html
https://mail-index.netbsd.org/tech-pkg/2023/12/22/msg028654.html

ok gdt (https://mail-index.netbsd.org/tech-pkg/2023/12/31/msg028733.html)

*: bump for openssl 3

Reset MAINTAINER

*: Recursive revision bump for openssl 1.1.1.

libfetch-2.39: Improve date parsing

Follow a redirect.

Add the necessary dependencies for safe concurrent build.

libfetch-2.38: Support proxies for https URLs.  From FreeBSD.

libfetch-2.37: Always run SSL_read first for SSL connections. It will
signal whether more input (or output) is needed, update the poll mask
accordingly.

Bump PKGREVISION for security/openssl ABI bump.

Do not use TCP_NOPUSH on Darwin, it adds a 5 second delay after the initial
handshake.  Bump PKGREVISION.

Ensure we do not try to regenerate the catpage.  Fixes occasional timing
issues where nroff isn't native.

Revert bad _GNU_SOURCE change.

Define _GNU_SOURCE by default for glibc-based systems (vasprintf(3)).
This fixes bootstrap failure on AltLinux.

Recursive PKGREVISION bump for OpenSSL API version bump.

libfetch-2.36: Support Server Name Identication.

From Michael Gmelin via FreeBSD.

Apply some explicit int casts for size_t format string arguments.

Add -D_FILE_OFFSET_BITS=64 to the largefile flags.

Bump PKGREVISION.

PKGREVISION bumps for the security/openssl 1.0.1d update.

Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.

Revert 1.43.

Revert bogus warning flags.

Pullup ticket #3937 - requested by sbd
net/libfetch: build fix

Revisions pulled up:
- net/libfetch/Makefile                                         1.43

---
   Module Name:	pkgsrc
   Committed By:	sbd
   Date:		Tue Oct  9 02:48:04 UTC 2012

   Modified Files:
   	pkgsrc/net/libfetch: Makefile

   Log Message:
   libfetch-2.34:
     On Linux libfetch needs to be built with '-fPIC' so that it can be used
     to build shared libraries.  (Fixes databases/openldap-client build.)

libfetch-2.34:
  On Linux libfetch needs to be built with '-fPIC' so that it can be used
  to build shared libraries.  (Fixes databases/openldap-client build.)

net/libfetch: Fix for gcc4.7

When building with gcc4.7, libfetch fails with the following error:
  ftp.c: In function 'unmappedaddr':
  ftp.c:149:2: error: dereferencing type-punned pointer will break
               strict-aliasing rules [-Werror=strict-aliasing]
  cc1: all warnings being treated as errors
  *** Error code 1

The code is intentionally grouping an array of four uint8_t bytes into a
uint32_t word.  Add -Wno-strict-aliasing in makefile to fix build in gcc4.7.

If using fetch in FETCH_USING then fetch and libfetch cannot use checkperms.

libfetch-2.33:
Don't leak FTP connections on errors in fetch or if only stat is
requested. Reported via Xavier Chantry.

libfetch-2.32:
Fix NULL dereference after failed calloc call. From Tavian Barnes.

libfetch-2.31:

PR 43013 by Brook Milligan: fetch(3) violates RFC 1738 for ftp:// URLs
if the home directory is not the root directory.

Remember the current directory the first time a CWD / CDUP has to be
issued. Use the document as full URL if the URL started with two /
(quoted or not), otherwise append it to the initial directory.

libfetch-2.30:
HTTP keep-alive support

libfetch-2.29:
Push \r\n up to the users of fetch_putln and remove it. Use send instead
of write(v) to avoid SIGPIPE.

libfetch-2.28:
Revamp FTP connection cache. Move it to the common layer to be later
shared with HTTP (for persistent connection). The application controls
how much caching is desired. Drop the reference counting on connections.
Add a callback when the cached connection is dropped due to LRU.
Over all, this allows more than one session cached per host and sessions
cached to different servers.

libfetch-2.27:
The connection sharing didn't handle the case of active transfers
correctly and tried to close the connection in that case (PR 42607).
Correctly check if there is a transfer going on and just leave the
connection alone in that case.

libfetch-2.26:
- Add support to aggressively cache directory listenings, useful for
HTTP
- Avoid leaking memory in error cases. From Xavier from Arch Linux.

libfetch-2.24:
Fix a bug in the line reading optimisation, which could get confused if
the byte following the new line is a NUL. Adresses Arch Linux problem
report #15845.

Do not reuse a FTP connection if there is currently a transfer active.
Some FTP servers hang on the NOOP command. Reported by Manuel Bouyer.

It's not MAKE_JOBS safe.

Drop PKGREVISION and bump to libfetch-2.24 instead. (in-tree package)

Bump the PKGREVISION for ftp.c change

Use standard location for LICENSE line (in MAINTAINER/HOMEPAGE/COMMENT
block). Uncomment some commented out LICENSE lines while here.

Remove redundant NO_CHECKSUM and EXTRACT_ONLY definitions.

libfetch-2.23:
Don't leak file descriptors when iterating local directories or checking
local files for if-modified-since.

libfetch-2.22:
Allow overriding fetchRestartCalls from signal handlers by making it
volatile.

libfetch-2.21:
Add support for conditional GET using the 'i' flag. Inspired by
the HTTP support for the same feature in FreeBSD by Murray Stokely, but
mostly rewritten and extended to work for all protocols.

libfetch-2.20:
Allow HTTP basic auth to be specified in the URL. Also allow : in the
password while here.

libfetch-2.19:
Fix a conditional in my quoting code to not be always true.
This makes ~ be quoted as %7e as intended.

libfetch-2.18:
Change FTP backend to use passive mode by default and fallback to active
mode on syntax errors as discussed with and suggested by Luke Mewburn.
Retire 'p' now and introduce 'a' flag to get the old default behavior.

libfetch-2.17:
Fix line buffering to not drop content after the line we are interested
in. This magically worked for a local tnftpd that was only sending a
normal one line return message due to the challenge response protocol
always having the desired size. With the patch fetch_read will process
the remaining part of the buffer and fetch_getln will remember how much
of the data it was actually interested in, so it will now process the
complete output again.

libfetch-2.16:
- only include openssl if the openssl option is present
- include arpa/inet.h to get ntohl and friends on older platforms like
  Interix
- use new netdb.h compat code from libnbcompat
- include inttypes.h only when present
- don't name local variables err, Interix has a symbol like that in
  default namespace
- allow fetch_read to do short read and do more intelligent buffering
  for header processing; effectively don't do a system call for each
  byte read

libfetch-2.15:
Rewrite errlist processing to include the full message, not just the
first word.

libfetch-2.14:
Fix brain dead error in the quoting of unsafe characters.

libfetch-2.13:
Add a function to turn struct url back into a string.

libfetch-2.12:
Make function naming consistent before external code depend on it.
Update man page.

libfetch-2.11:
Implement full quoting support in FILE and FTP protocols.

libfetch-2.4.10:
Start URL quoting cleanup.  All URLs are now quoted correctly on parsing
and when appending URLs.  URLs without schema and starting with slash are
considered to be file:// URLs.

libfetch-2.9:
Add fetch_extract_filename to extract the unquoted filename of a URL.

libfetch-2.8:
Fix a number of small bugs introduced in the last version.

libfetch-2.7:
Add fetchCopyURL.

libfetch-2.6:
Change fetchList API to always return lists of full URLs.

libfetch-2.5:
Add basic index parsing support for HTTP based on the ftpio.c code in
pkg_install. Permission to use the 3-clause BSD license from Thomas
Klausner in private mail.

Use nbcompat.

Force depend target to run, bootstrap-mk-files doesn't have the
necessary logic for explicit dependencies as the NetBSD rules have.
Should fix build on Solaris and Darwin.

libfetch-2.4: FTP directory listenings.

On second thought, don't filter out files with . Bump to 2.3.

libfetch-2.2:
Add interface to glob a directory.

libfetch-2.1:
- remove most of the debug junk
- fix a buffer overflow in the config parser
- replace stdio usage with a simple abstract IO framework. currently
without explicit buffering, but that might be added later

Import libfetch-2.0, based on the FreeBSD version of today with a number
of smaller changes to not depend on sys/param.h. This library is
intended to replace the tnftp dependency in pkg_install.

Initial revision