The NetBSD Project

CVS log for pkgsrc/www/lighttpd/

[BACK] Up to [] / pkgsrc / www / lighttpd

Request diff between arbitrary revisions

Default branch: MAIN

Revision 1.27 / (download) - annotate - [select for diffs], Wed Jan 19 21:41:48 2022 UTC (12 months, 1 week ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2022Q4-base, pkgsrc-2022Q4, pkgsrc-2022Q3-base, pkgsrc-2022Q3, pkgsrc-2022Q2-base, pkgsrc-2022Q2, pkgsrc-2022Q1-base, pkgsrc-2022Q1, HEAD
Changes since 1.26: +3 -28 lines
Diff to previous 1.26 (colored)

Update to 1.4.64. From the changelog:

## Important changes

* remove deprecated modules, bugfixes, CVE-2022-22707 (rare configs)

## Behavior Changes

(previously announced and scheduled)

* graceful restart/shutdown timeout changed from 0 (disabled) to 8 seconds
  configure an alternative with:
  server.feature-flags += ("server.graceful-shutdown-timeout" => 8)

* build: lighttpd defaults to --with-pcre2 instead of --with-pcre
  pcre2 is current. pcre is no longer maintained.
  Explicitly specify --with-pcre in build to use pcre instead of pcre2.

* deprecated modules (previously announced) have been removed
  * mod_authn_mysql
  * mod_mysql_vhost
  * mod_cml
  * mod_flv_streaming
  * mod_geoip
  * mod_trigger_b4_dl

## Changes from 1.4.63

* [core] fix trace issued for loading mod_auth (fixes #3121)
* [meson] need -lrt with glibc < 2.17 (fixes #3120)
* [core] adjust time jump detection (fixes #3123)
* [core] make setrlimit() warn, not fatal
* [core] add remote IP to some error msgs (fixes #3122)
* [mod_webdav] If-None-Match on non-existent entity
* [build] check getxattr before attr_get and -lattr
* [doc] SELinux: setsebool -P httpd_setrlimit on
* [build] create sha512sum file with release
* [build] CI builds now use make -j 2
* [core] http_response_send_file() takes const path
* [core] use ETag response header to check cachable
* [core] add more const to stat_cache_update_entry()
* [multiple] remove r->physical.etag
* [mod_magnet] interface to http_response_send_file
* [build] add headers for sendfile() detect on MacOS
* [core] http_response_write_prepare optimization
* [core] define static_assert for uClibc (fixes #3127)
* [build] -Wno-implicit-fallthrough for ls-hpack
* [core] ignore pcre2 "bad JIT option" warning
* [build] pcre2: use pkg-config before pcre2-config
* [core] http_response_has_error_handler()
* [core] consolidate request restart loop check
* [core] defer retrieving Last-Modified until needed
* [mod_dirlisting] fix logic inversion in cache
* [core] mark expect cond in http_response_send_file
* [core] connection_handle_read_state() tweak
* [core] connection_state_machine_loop() tweaks
* [core] connection_state_machine_h2() tweaks
* [core] quiet coverity noise
* [core] use lower limit for max-fds if !setrlimit
* [build] do not check for prctl; HAVE_PRCTL unused
* [core] server.core-files support on FreeBSD (fixes #3128)
* [mod_extforward] support longer PROXY v2 TLV vec
* [mod_webdav] detect truncated copy_file_range()
* [mod_webdav] copy_file_range() new in FreeBSD 13
* [mod_webdav] copy_file_range() new in FreeBSD 13
* [build] feature consistency between build types
* [build] cmake build now defaults to C11
* [core] CCRandomGenerateBytes() for rand on macOS (fixes #3129)
* [multiple] remove long-deprecated modules
* [build] default --with-pcre2 unless --with-pcre
* [core] "server.graceful-shutdown-timeout" => 8
* [build] adjust trace for regex-conditionals
* [build] update tests/SConscript
* [core] errno_t detection on Illumos
* [build] cmake build now defaults to C11
* [build] meson: find pcre2 w/o pkg-config
* [core] define _EXTENSIONS_ on Illumos
* [build] cmake,meson socket libs for win32, Illumos (fixes #3130)
* [core] hide bsd_accept_filter code on OpenBSD (fixes #3131)
* [core] errno_t and rsize_t detection on Illumos
* [mod_webdav] copy acceleration
* [mod_webdav] define HAVE_RENAMEAT2 earlier
* [build] meson misdetects mempcpy on some platforms
* [build] cmake: skip "-Wl,-export-dynamic" Illumos
* [build] adjust .gitignore for macOS
* [build] meson crypt and dl detection on *BSD (fixes #3133)
* [core] /dev/null is a symlink on Illumos (fixes #3132)
* [core] server.core-files support for solaris (fixes #3135)
* [build] feature consistency between build types
* [build] Haiku build fix (fixes #3136)
* [lemon] silence coverity warnings
* [cmake] raise minimum version to 3.7
* [cmake] add address/undefined sanitize compile options
* [asan tests] fix memory leaks
* [array] use speaking names for array "fn" vtables for better debugging experience
* [ci] add cmake-asan build type
* [core] buffer_copy_string() use "" if s is NULL
* [mod_authn_gssapi] code reuse: fdevent_mkostemp()
* [mod_authn_gssapi] reduce KRB5CCNAME mem alloc
* [build] adjust help strings for pcre2 default
* [core] (const char *) for srvconf.modules_dir
* [multiple] remove buffer_init_string()
* [multiple] remove buffer_init_buffer()
* [mod_extforward] fix out-of-bounds (OOB) write (fixes #3134)
* [build] use -fstack-protector-strong w/ extra warn
* [build] collect Sun-specific headers and funcs
* [build] collect Sun-specific headers and funcs
* [build] rm redundant check for -lnetwork on Haiku
* [build] check headers before some funcs
* [core] allow LISTEN_PID to be ppid if TRACEME (fixes #3137)
* [core] allow tests/tmp/bind.conf override (#3137)
* [mod_webdav] no sys/ioctl.h on _WIN32
* [tests] _WIN32 adjustments in
* [tests] revert _WIN32 adjustments in
* [mod_gnutls] lift size check out of DN loop
* [mod_mbedtls] lift size check out of DN loop
* [mbedtls] save (mbedtls_ssl_config *) in hctx
* [multiple] permit UTF-8 in SSL_CLIENT_S_DN_*
* [mod_openssl] do not esc UTF-8 in cert subject
* [mod_mbedtls] reconstruct SSL_CLIENT_S_DN
* [mod_mbedtls] changes to build with mbedtls 3.0.0
* [mod_mbedtls] remove use of out_left in mbedtls 3
* [mod_mbedtls] mbedtls_ssl_conf_groups for 3.1.0

pkgsrc changes:

- Remove options 'gdbm' and 'memcached', no longer used

Revision 1.26 / (download) - annotate - [select for diffs], Fri May 14 11:11:00 2021 UTC (20 months, 2 weeks ago) by nia
Branch: MAIN
CVS Tags: pkgsrc-2021Q4-base, pkgsrc-2021Q4, pkgsrc-2021Q3-base, pkgsrc-2021Q3, pkgsrc-2021Q2-base, pkgsrc-2021Q2
Changes since 1.25: +85 -18 lines
Diff to previous 1.25 (colored)

lighttpd: improve options support

as well as adding options for other SSL libraries, disabling options
explicitly should cause less problems when the OS contains libraries used
by the options.

Revision 1.25 / (download) - annotate - [select for diffs], Tue Dec 1 09:44:12 2020 UTC (2 years, 1 month ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2021Q1-base, pkgsrc-2021Q1, pkgsrc-2020Q4-base, pkgsrc-2020Q4
Changes since 1.24: +16 -3 lines
Diff to previous 1.24 (colored)

Enable --with-nettle as recommended in the release announcement; we'll
add options for other SSL libraries later. Add 'libdbi' option to enable
mod_vhostdb_dbi and the new mod_authn_dbi module, off by default. Bump

Revision 1.24 / (download) - annotate - [select for diffs], Mon Nov 30 10:28:33 2020 UTC (2 years, 2 months ago) by schmonz
Branch: MAIN
Changes since 1.23: +13 -4 lines
Diff to previous 1.23 (colored)

Update to 1.4.56. From the changelog:

# Highlights

- HTTP/2 support
  - must be enabled in lighttpd.conf in lighttpd 1.4.56;
    may be enabled by default in a future release
  - `server.feature-flags += ("server.h2proto" => "enable", "server.h2c" => "enable")`
- TLS library options: OpenSSL, mbedTLS, wolfSSL, GnuTLS, NSS
  - mod_openssl (existing)
  - mod_mbedtls (experimental)
  - mod_wolfssl (experimental)
  - mod_gnutls (experimental)
  - mod_nss (experimental)
- TLS OCSP stapling
  (except mbedTLS; not currently supported by mbedTLS)
- TLS session ticket key rotation control
  (except NSS; API limitation in NSS)
- mod_deflate brotli support
- mod_proxy makes HTTP/1.1 requests to backends (change from HTTP/1.0)
- RFC 8297 support for 103 Early Hints produced by backends (scripts)
- graceful restart option to transfer listen fds (minimal pause)
  - `server.systemd-socket-activation = "enable"`
  - `server.feature-flags += ("server.graceful-restart-bg" => "enable", "server.graceful-shutdown-timeout" => "15")`

# Behavior Changes

- mod_openssl
  - default MinProtocol TLSv1.2
    TLSv1 and TLSv1.1 are deprecated and no longer supported by major browsers.
    If prior behavior is required, configure:
    `ssl.openssl.ssl-conf-cmd = ("MinProtocol" => "TLSv1")`
    If using openssl <= 1.0.2 (end-of-life)
    `ssl.openssl.ssl-conf-cmd = ("Protocol" => "-ALL, TLSv1, TLSv1.1, TLSv1.2")`
  - (internal) TLS session cache is disabled by default,
    replaced by lighttpd robust TLSv1.2 session ticket support
    If backward compatibility is needed:
    `server.feature-flags += ("ssl.session-cache" => "enable")`
  - (internal) openssl creates a session ticket encryption key per SSL_CTX.
    lighttpd 1.4.56 and later assigns a single session ticket encryption key
    for the lighttpd server (across all SSL_CTX) for consistency.
  - behavior change with (uncommon); applies to client
    certificate verification and (uncommon)
    If client certificate verification is enabled
    (ssl.verifyclient.activate = "enable"),
    all CAs used for client certificate verification must be present in This is the typical use case when client certificate
    verification is enabled. Certificates in (optional)
    are used to send issuer names to client when the server sends a
    client certificate request. These names are use by the client
    during certificate selection, and the server requires that the
    certificate sent by the client be issued by one of the subjects
    (Prior behavior merged and for trusted CAs.
    New behavior requires all trusted CAs be listed in,
    and a subset be duplicated into to specify allowed
    client cert issuer.)
- mod_deflate: support for bzip2 is now disabled by default in the build
  - (enable using `./configure --with-bzip2`)
    bzip2 Content-Encoding is not widely supported
    Prefer to build `--with-brotli`
    brotli Content-Encoding is more widely supported than bzip2

# Future Scheduled Behavior Changes

- HTTP/2 support will be enabled by default in a future release
- graceful restart/shutdown default timeout will change from
  0 (infinite/no timeout) to 5 seconds (or some similar non-zero period)
  configure an alternative with:
  `server.feature-flags += ("server.graceful-shutdown-timeout" => 5)`
- mod_compress is DEPRECATED; use mod_deflate
  mod_compress has been subsumed by mod_deflate
  Note: mod_compress config options may be removed in a future release
- mod_geoip is DEPRECATED; use mod_maxminddb
  Note: mod_geoip will be removed from a future lighttpd release
- mod_authn_mysql is DEPRECATED; use mod_authn_dbi
  Note: mod_authn_mysql will be removed from a future lighttpd release
- mod_mysql_vhost is DEPRECATED; use mod_vhostdb_dbi or mod_vhostdb_mysql
  Note: mod_mysql_vhost will be removed from a future lighttpd release
- mod_cml is DEPRECATED; use mod_magnet
  Note: mod_cml will be removed from a future lighttpd release

Revision 1.23 / (download) - annotate - [select for diffs], Tue Jun 30 14:45:48 2020 UTC (2 years, 7 months ago) by nia
Branch: MAIN
CVS Tags: pkgsrc-2020Q3-base, pkgsrc-2020Q3
Changes since 1.22: +1 -2 lines
Diff to previous 1.22 (colored)

lighttpd: Remove incorrect LUA_VERSIONS_INCOMPATIBLE

Revision 1.22 / (download) - annotate - [select for diffs], Mon Nov 4 22:09:57 2019 UTC (3 years, 2 months ago) by rillig
Branch: MAIN
CVS Tags: pkgsrc-2020Q2-base, pkgsrc-2020Q2, pkgsrc-2020Q1-base, pkgsrc-2020Q1, pkgsrc-2019Q4-base, pkgsrc-2019Q4
Changes since 1.21: +4 -4 lines
Diff to previous 1.21 (colored)

www: align variable assignments

pkglint -Wall -F --only aligned --only indent -r

Manually excluded phraseanet since pkglint got the indentation wrong.

Revision 1.21 / (download) - annotate - [select for diffs], Wed May 29 10:01:28 2019 UTC (3 years, 8 months ago) by nia
Branch: MAIN
CVS Tags: pkgsrc-2019Q3-base, pkgsrc-2019Q3, pkgsrc-2019Q2-base, pkgsrc-2019Q2
Changes since 1.20: +3 -3 lines
Diff to previous 1.20 (colored)

lighttpd: Update to 1.4.54.

pkgsrc changes:

Replace use of legacy GeoIP library with libmaxminddb.
Uses a different module.


behavior change: strict URL parsing and normalization (configurable)
behavior change: mod_webdav now rejects partial PUT (configurable)
mod_auth: HTTP Auth Digest algorithm=SHA-256
mod_webdav: major rewrite: robustness, performance, RFC compliance
mod_maxminddb: new; obsoletes discontinued mod_geoip

Changes from 1.4.53
[mod_evhost] handle IPv6 literal addr; add tests
[core] separate server_main_loop() func, mark hot
[core] mark startup/shutdown funcs cold
[core] some server_main_loop() cleanup
[core] fdevent_process()
[core] srvax_fds_lowat and srvax_fds_hiwat
[core] remove server.h
[mod_staticfile] search ext array if not empty
[core] store joblist pointer on stack
[core] quickly clear request buffer for reuse
[core] helper funcs for connection_state_machine()
[core] perf: optimize connection_read_header()
[core] parse request in connection_read_header()
[core] log_request_header_on_error in one place
[core] copy request only if might need for logging
[core] make parse_request,request.request same buf
[core] prefer buffer_caseless_compare()
[core] pass req hdrs buffer to http_request_parse
[core] replace conesponse.keep_alive
[core] mark log_error_write*() funcs cold
[core] http_request_parse() mark error paths cold
[core] lift code out of request line parse loop
[core] get_http_method_key() match by strlen first
[core] RFC7230 HTTP-version parse
[mod_accesslog] attempt to reconstruct req line
[multiple] minor: remove duplicated conditions
[mod_deflate] honor request for x-gzip, x-bzip2
[mod_auth] minor: adjust config validation
[core] discard oversized trailers
[core] no keep-alive if POLLRDHUP,empty read queue
[core] fix gw_backend spelling of directive in err
[multiple] reduce code dup in list resizing
[core] cons_ssl_sock
[core] connection_handle_write() updates con state
[core] skip plugins_call_cleanup if not initd
[core] simpler loops to run plugin hooks
[core] fix mixed use of srvplit_vals array (fixes #2932)
[core] dispatch events from within event framework
[core] don call fd event handlers more than once, they might already be gone (fixes segfault)
[core] poll: fdarray uses fd as index, not fde_ndx
[core] map FDEVENT_* to OS system event frameworks
[core] prefer memchr() over strchr()
[core] use openssl to read,discard request body
[mod_openssl] inherit cipherlist from global scope
[mod_openssl] default: ssl.cipher-list = שIGH[mod_proxy] pass Content-Length to backend if > 0
[core] config option to allow GET w/ request body
[core] some fdevent code streamlining
[core] remove fde_ndx member outside fdevents
[core] remove redundant check for allow_http11
[mod_openssl] use 16k static buffer instead of 64k
[core] pull server load checks out of main loop
[core] isolate fdevent processing
[core] release empty chunk buf when nothing read
[core] perf: pass (fdnode *) to epoll and kqueue
[core] modify config parser to handle multiple }
[core] pass (fdnode *) for registered fdevent fd
[mod_auth] http_auth_digest_hex2bin()
[mod_auth] http_auth_info_t digest abstraction
[mod_auth] pass http_auth_require_t for 401 Unauth
[core] no SOCK_NONBLOCK on QNX 7.0
[mod_auth] HTTP Auth Digest algorithm=SHA-256
[core] silence coverity warning
[mod_magnet] fix invalid script return-type crash (fixes #2938)
[build] remove -Wdeclaration-after-statement
[core] pass conf.follow_symlink in more places
[core] fix assertion with server.error-handler (fixes #2941)
[core] extend dir redirection to take HTTP status
[doc] minor adjust regex match (#2942)
[core] attribute((fallthrough)) for GCC 7.0
[core] fdevent_mkstemp_append() (shared)
[core] off_t upload_temp_file_size
[core] clear FDEVENT_RDHUP if no POLLRDHUP
[mod_wstunnel] fix ping-interval for big-endian (fixes #2944)
[core] fix abort in http-parseopts (fixes #2945)
[core] remove repeated slashes in http-parseopts
[core] fix 1.4.52 regression in mem use with POST (fixes #2948)
[multiple] cleaner calloc use in SETDEFAULTS_FUNC
[core] add const to some etag prototypes
[core] attribute((format )
[core] struct log_error_st for error logging
[core] log_error, log_perror using printf-like fmt
[core] new worker_init hook to follow parent fork
[core] replace open() with fdevent_open_cloexec()
[mod_webdav] major rewrite (fixes #1818)
[core] 200 for OPTIONS /non-existent/path HTTP/1.1 (fixes #2939)
[mod_webdav] surround Lock-Token with [mod_webdav] fix uuid detection macro
[mod_webdav] fix misbehavior on blank nodes in PROPPATCH
[mod_webdav] clean up resources after do{}while(0)
[mod_webdav] check If-Match, If-Unmodified-Since (#1818)
[mod_webdav] deprecated unsafe partial PUT compat
[mod_webdav] provide ETag in more responses
[mod_webdav] platform portability fixes
[mod_webdav] disable elftc_copyfile() on FreeBSD
[mod_webdav] special-case If: ()
[mod_webdav] check If-None-Match (#1818)
[stat_cache] separate func for symlink policy chk
[stat_cache] separate symlink pol from data struct
[stat_cache] store entries without trailing slash
[stat_cache] pass age param for stat cache cleanup
[stat_cache] remove splaytree ins/del debug code
[stat_cache] FAM: reduce string copying
[stat_cache] FAM: check FAMNextEvent() return code
[stat_cache] FAM: use entry hash index as userdata
[stat_cache] FAM: improve handling modified file
[stat_cache] FAM: ignore follow-symlink config
[stat_cache] FAM: check hash collision before add
[stat_cache] FAM: ignore event with no valid match
[stat_cache] FAM: funcs to invalidate entries
[stat_cache] interfaces to invalidate entries
[mod_webdav] update stat_cache after file mod
[core] use high precision stat timestamp in etag
[scons] adjustment for static build under CentOS
[core] emit trace using path before clearing path
[core] http_chunk_append_file_fd()
[multiple] open target file earlier in some cases
[stat_cache] no longer stat() and open() for stat
[stat_cache] FAM: improve monitoring, cache 16 sec
[stat_cache] FAM: separate routine for FDEVENT_IN
[stat_cache] FAM: whitespace-only change
[mod_webdav] quiet coverity warnings
[doc] highlight relevance of module load order (fixes #2946)
[core] behavior change: stricter URL normalization
[stat_cache] fix compilation error for cmake
[cmake] help cmake on FreeBSD find sys/event.h
[scons] help scons on FreeBSD find sys/event.h
[build] detect FreeBSD elftc_copyfile()
[mod_openssl] use SSL_CTX_set_client_hello_cb()
[core] support weak etags with If-None-Match
[core] store log_state_handling flag on stack
[core] check if splay_tree NULL before invalidate
[mod_webdav] workaround Microsoft-WebDAV-MiniRedir
[mod_webdav] doc Microsoft-WebDAV-MiniRedir bugs
[mod_webdav] invalidate parent dir in stat_cache
[doc] systemd socket activation config example
[core] chunkqueue perf: code reuse
[core] chunkqueue perf: specialized buffer.h funcs
[core] chunkqueue perf: skip opening 0-length file
[core] chunkqueue perf: read small files into mem
[core] buffer_reset() should not be passed NULL
[tests] has_feature() helper func
[tests] skip mod-secdownload HMAC-SHA1,HMAC-SHA256
[core] use high precision stat timestamp on OS X
[mod_magnet] expose server addr (local IP) to lua
[core] adjust http_chunk read() retry loop
[mod_maxminddb] MaxMind GeoIP2 support
[mod_authn_ldap] ldap_set_option LDAP_OPT_RESTART (fixes #2940)

Revision 1.20 / (download) - annotate - [select for diffs], Tue Jan 29 12:31:46 2019 UTC (4 years ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2019Q1-base, pkgsrc-2019Q1
Changes since 1.19: +3 -1 lines
Diff to previous 1.19 (colored)

lighttpd: Fix a pkglint warnings.

Revision 1.19 / (download) - annotate - [select for diffs], Tue Apr 17 20:11:15 2018 UTC (4 years, 9 months ago) by triaxx
Branch: MAIN
CVS Tags: pkgsrc-2018Q4-base, pkgsrc-2018Q4, pkgsrc-2018Q3-base, pkgsrc-2018Q3, pkgsrc-2018Q2-base, pkgsrc-2018Q2
Changes since 1.18: +4 -3 lines
Diff to previous 1.18 (colored)

Change libmemcache dependency to libmemcached


Revision 1.18 / (download) - annotate - [select for diffs], Sun Oct 29 00:34:29 2017 UTC (5 years, 3 months ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2018Q1-base, pkgsrc-2018Q1, pkgsrc-2017Q4-base, pkgsrc-2017Q4
Changes since 1.17: +2 -1 lines
Diff to previous 1.17 (colored)

Fix building without IPv6 and packaging without SSL.

Revision 1.17 / (download) - annotate - [select for diffs], Thu Jun 22 03:06:26 2017 UTC (5 years, 7 months ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2017Q3-base, pkgsrc-2017Q3, pkgsrc-2017Q2-base, pkgsrc-2017Q2
Changes since 1.16: +1 -2 lines
Diff to previous 1.16 (colored)

Remove lua buildlink, mistakenly included in previous.

Revision 1.16 / (download) - annotate - [select for diffs], Wed Jun 21 19:27:36 2017 UTC (5 years, 7 months ago) by schmonz
Branch: MAIN
Changes since 1.15: +13 -2 lines
Diff to previous 1.15 (colored)

Add "webdav" option for fuller-featured WebDAV server support.

Revision 1.15 / (download) - annotate - [select for diffs], Mon Jan 16 00:30:46 2017 UTC (6 years ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2017Q1-base, pkgsrc-2017Q1
Changes since 1.14: +4 -3 lines
Diff to previous 1.14 (colored)

Update to 1.4.45. From the changelog:

* [mod_cgi] skip local-redir handling if to self (fixes #2779, #2108)
* [mod_webdav] fix crash when plugin_ctx cleaned up (fixes #2780)
* [mod_fastcgi] detect child exit, restart proactively
* [mod_scgi] detect child exit, restart proactively
* [TLS] = "disable" for low mem (fixes #2778)

pkgsrc changes:

- Rename non-standard "memcache" option to "memcached" (retaining
  compatibility for the old option for a while)

Revision 1.14 / (download) - annotate - [select for diffs], Tue Jan 3 14:38:50 2017 UTC (6 years ago) by mef
Branch: MAIN
Changes since 1.13: +2 -10 lines
Diff to previous 1.13 (colored)

 - Correction to gdbm option, merge duplicated lines

Revision 1.13 / (download) - annotate - [select for diffs], Tue Jan 3 14:31:13 2017 UTC (6 years ago) by mef
Branch: MAIN
Changes since 1.12: +32 -3 lines
Diff to previous 1.12 (colored)

Updated www/lighttpd to 1.4.44
- 1.4.44
  * [mod_scgi] fix segfault (fixes #2762)
  * [mod_authn_gssapi] fix memory leak
  * [config] warn if mod_authn_ldap,mysql not listed
  * [mod_magnet] fix magnet_cgi_set() set of env vars (fixes #2763)
  * [mod_cgi] FreeBSD 9.3/MacOSX does not have pipe2() (fixes #2765)
  * [mod_extforward] fix crash on invalid IP (fixes #2766)
  * [mod_fastcgi] fix segfault if all backends down (fixes #2768)
  * [mod_cgi] fix out of sockets error for POST to CGI (fixes #2771)
  * [mod_auth] compile fix for Mac OS X XCode (fixes #2772)
  * [mod_authn_gssapi] better resource cleanup
  * [core] compile fix for Mac OS X 10.6 (old) (fixes #2773)
  * fix race in dynamic handler configs (reentrancy) (fixes #2774)
  * [mod_authn_mysql] close mysql_conn in cleanup
  * [mod_webdav] compile fix when locking not enabled
  * load mod_auth & mod_authn_file in sample/test.conf
  * comment out auth.backend.ldap.* in tests/*.conf
  * [mod_fastcgi,mod_scgi] warn if invalid "bin-path"
  * RAND_pseudo_bytes() is deprecated in openssl 1.1.0
  * openssl 1.1.0 init and cleanup
  * [mod_cgi] remove direct calls to network_backend*
  * [build] build network_*.c into lighttpd executable
  * suggest inclusion of mod_geoip... before mod_ssi.
  * set systemd settings similar to lighttpd2
  * [doc] remove reference to Linux rt-signals
  * [mod_authn_gssapi] fix missing error ret, coverity
  * [core] rename li_rand() to li_rand_pseudo_bytes()
  * remove #include "stream.h" where not used
  * [mod_cml] include lua headers before base.h
  * [core] combine duplicated connection reset code
  * [mod_ssi] produce content in subrequest hook
  * [core] remove srv->entropy[]
  * [core] defer li_rand_init() until first use
  * [core] permit connection-level state in modules
  * [mod_dirlisting] render dirlisting as HTML (fixes #2767)
  * [mod_proxy] replace HTTP Host sent to backend (fixes #2770)
  * [mod_ssi] basic recursive SSI include virtual (fixes #536)
  * [mod_ssi] implement, ignore <!--#comment ... -->
  * [core] consolidate duplicated read-to-close code
  * [core] fix segfault when parsing a bad config file
  * [core] support Transfer-Encoding: chunked req body (fixes #2156)
  * [autobuild] set NO_RDYNAMIC=yes for midipix
  * [mod_proxy] proxy.balance = "sticky" option (fixes #2117)
  * [mod_secdownload] warn if SHA used w/o SSL crypto
  * [build] compile fixes for AIX
  * [build] check for pipe2() at configure time
  * [mod_evhost] fix an incorrect error trace
  * [tests] mark tests/docroot/www/*.pl scripts a+x
  * [mod_cgi] fall back to pipe() if pipe2() fails
  * fix SCons fullstatic build with glibc pthreads
  * [TLS] openssl 1.1.0 makes SSL_OP_NO_SSLv2 no-op
(pkgsrc changes)
 - Add Selection on PLIST depending on options

Revision 1.12 / (download) - annotate - [select for diffs], Mon Oct 17 22:00:22 2016 UTC (6 years, 3 months ago) by nros
Branch: MAIN
CVS Tags: pkgsrc-2016Q4-base, pkgsrc-2016Q4
Changes since 1.11: +10 -2 lines
Diff to previous 1.11 (colored)

Updated lighttpd to version 1.4.42.
Added geoip build option.

  * [TLS] SSL_shutdown() only if handshake finished
  * [mod_proxy,mod_scgi] shutdown remote only if local (#2743)
  * [core] check if client half-closed TCP if POLLHUP (#2743)
  * [core] enforce wait for POLLWR after EINPROGRESS (fixes #2744)
  * [core] do not enter handler twice after read body
  * [core] proxy,scgi omit shutdown() to backend (fixes #2743)
  * [mod_dirlisting] dirlist does not handle POST
  * [mod_dirlisting] js column sort for dirlist table (fixes #613, fixes #2315)
  * [mod_auth] Digest auth fails after rewrite (fixes #2745)
  * [mod_auth] refactor out auth backend code
  * [mod_auth] extensible interface for auth backends
  * [core] better DragonFlyBSD support (fixes #2746)
  * [mod_auth] include base.h for USE_OPENSSL def
  * [mod_auth] support CRYPT-MD5-NTLM algorithm (fixes #1743)
  * [mod_auth] terminate salt for CRYPT-MD5-NTLM
  * [core] fix crash if ready events on abandoned fd (fixes #2748)
  * [mod_auth] http_auth_md5_hex2bin()
  * [mod_auth] remove empty mod_auth.h
  * [mod_auth] mod_authn_mysql.c MySQL auth backend (fixes #752, fixes #1845)
  * [mod_cgi] permit CGI exec of unreadable files (fixes #2374)
  * [mod_uploadprogress] add to default build
  * [mod_geoip] add to default build (fixes #2705, fixes #2101, fixes #2092,
    fixes #2025, fixes #1962, fixes #1938)
  * [mod_fastcgi] Authorizer support with Responder (fixes #321, fixes #322)
  * [tests] test coverage for issues (#321, #322)
  * dynamic handlers store debug flag in handler_ctx
  * [mod_fastcgi] allow authorizer, responder for same path/ext (#321)
  * backport mod_deflate to lighttpd 1.4 (fixes #1824, fixes #2753)
  * [autobuild] test_configfile might need vector.c (fixes #2752)
  * [mod_deflate] fix longjmp clobber compiler warning
  * remove unused array type TYPE_COUNT data_count
  * [mod_auth] structured data, register auth schemes
  * [mod_auth] mod_authn_gssapi Kerberos auth backend (fixes #1899)
  * [autobuild] skip two new tests if no fcgi-auth
  * [SCons] define with_krb5 for SCons build
  * [SCons] fix syntax error in SConstruct
  * [SCons] define with_geoip for SCons build
  * [CMake] fix clang -Wcast-align warnings in lemon.c
  * remove excess initializers (fix compiler warnings)
  * fix errors detected by Coverity Scan
  * performance: use Linux extended syscalls and flags
  * [mod_scgi] add uwsgi protocol support
  * [mod_auth] refactor LDAP code into smaller funcs
  * [mod_auth] HTTP Basic auth backends also do authz (#1817)
  * [mod_auth] ldap filter subst user for multiple '$' (fixes #1508)
  * [mod_auth] permit specifying ldap DN; skip search (fixes #1248)
  * [autobuild] update module/feature report
  * [cmake] build mod_authn_gssapi if WITH_KRB5
  * [mod_auth] fix printing of IP in error trace
  * [mod_mysql_vhost] support multiple '?' replacement (fixes #2163)
  * [core] make server.max-request-size scopeable (#1901)
  * [core] server.max-request-field-size (fixes #2130)
  * [core] optional condition in config "else" clause (fixes #1268)
  * [core] restrict where config "else" clauses occur (#1268)
  * silence warnings from clang ccc-analyzer
  * consistent, shared code to create CGI env
  * [TLS] replace env entries in https_add_ssl_entries
  * [TLS] set SSL_CLIENT_M_SERIAL w/ client cert SN (fixes #2268)
  * [TLS] set SSL_CLIENT_VERIFY w/ client cert (#1288, #2693)
  * [TLS] set SSL_PROTOCOL, SSL_CIPHER* (fixes #2511)
  * [core] rand.[ch] to use better RNGs when available
  * [mod_cgi] fix pipe_cloexec() when no O_CLOEXEC
  * ignore return value from fcntl() FD_CLOEXEC
  * build w/o compiler warnings if no zlib or bz2lib

Revision 1.11 / (download) - annotate - [select for diffs], Mon Aug 1 09:25:20 2016 UTC (6 years, 6 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2016Q3-base, pkgsrc-2016Q3
Changes since 1.10: +4 -4 lines
Diff to previous 1.10 (colored)

Updated lighttpd to 1.4.41.

- 1.4.41
  * remove long-deprecated, non-functional config opts
  * [config] inherit server.use-ipv6 and server.set-v6only (fixes #678)
  * [mod_auth] fix Digest auth to be better than Basic (fixes #1844)
  * [mod_ssi] fix #config sizefmt="bytes"
  * [autobuild] move inet_pton detection later
  * [core] #include <sys/filio.h> for FIONREAD (fixes #2726)
  * [autobuild] clock_gettime() -lrt with glibc < 2.17
  * [security] do not emit HTTP_PROXY to CGI env
  * [build_cmake] clock_gettime() -lrt w/ glibc < 2.17 (fixes #2737)
  * [core] avoid spurious trace and error abort
  * [core] stay in CON_STATE_CLOSE until done with req
  * [core] $HTTP["remoteip"] must handle IPv6 w/o []
  * [mod_status] show keep-alive status w/ text output (fixes #2740)
  * do not set REDIRECT_URI in mod_magnet, mod_rewrite (#2738)
  * revert 1.4.40 swap of REQUEST_URI, REDIRECT_URI (fixes #2738)
  * [core] permit IPv6 address scope identifier
  * [TLS] better handling of SSL_ERROR_WANT_READ/WRITE
  * [TLS] read all available records from SSL_read()
  * [core] try AF_INET after AF_INET6 if use-ipv6
  * [core] set chunkqueue tempdirs at startup
  * [security] ensure gid != 0 if server.username set (fixes #2725)
  * [security] disable stat_cache if !follow-symlink (fixes #2724)
  * [core] fix buffer_copy_string_hex() assert (fixes #2742)
  * [security] encode quoting chars in HTML and XML
  * [cmake] always define _GNU_SOURCE
  * [cmake] enable warnings for GCC and Clang
  * [cmake] set cmake_minimum_required to 2.8.2

Revision 1.10 / (download) - annotate - [select for diffs], Sun Jul 26 18:24:15 2015 UTC (7 years, 6 months ago) by alnsn
Branch: MAIN
CVS Tags: pkgsrc-2016Q2-base, pkgsrc-2016Q2, pkgsrc-2016Q1-base, pkgsrc-2016Q1, pkgsrc-2015Q4-base, pkgsrc-2015Q4, pkgsrc-2015Q3-base, pkgsrc-2015Q3
Changes since 1.9: +2 -2 lines
Diff to previous 1.9 (colored)

Not compatible with Lua 5.3.

Revision 1.9 / (download) - annotate - [select for diffs], Fri Nov 1 06:44:37 2013 UTC (9 years, 3 months ago) by dholland
Branch: MAIN
CVS Tags: pkgsrc-2015Q2-base, pkgsrc-2015Q2, pkgsrc-2015Q1-base, pkgsrc-2015Q1, pkgsrc-2014Q4-base, pkgsrc-2014Q4, pkgsrc-2014Q3-base, pkgsrc-2014Q3, pkgsrc-2014Q2-base, pkgsrc-2014Q2, pkgsrc-2014Q1-base, pkgsrc-2014Q1, pkgsrc-2013Q4-base, pkgsrc-2013Q4
Changes since 1.8: +2 -1 lines
Diff to previous 1.8 (colored)

Doesn't build with Lua 5.2. (from Edgar Fuss)

Revision 1.8 / (download) - annotate - [select for diffs], Thu Jul 14 19:59:45 2011 UTC (11 years, 6 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2013Q3-base, pkgsrc-2013Q3, pkgsrc-2013Q2-base, pkgsrc-2013Q2, pkgsrc-2013Q1-base, pkgsrc-2013Q1, pkgsrc-2012Q4-base, pkgsrc-2012Q4, pkgsrc-2012Q3-base, pkgsrc-2012Q3, pkgsrc-2012Q2-base, pkgsrc-2012Q2, pkgsrc-2012Q1-base, pkgsrc-2012Q1, pkgsrc-2011Q4-base, pkgsrc-2011Q4, pkgsrc-2011Q3-base, pkgsrc-2011Q3
Changes since 1.6: +2 -2 lines
Diff to previous 1.6 (colored)

Changes 1.4.29:
* solve name conflict of md5 functions with OpenSSL lib
* mod_proxy, mod_cgi and other mod_*cgi fixes
* ssl improvements
* Native solaris ports fdevent handler olaris-eventports----------------------------
revision 1.7
date: 2010/06/27 11:18:05;  author: obache;  state: Exp;  lines: +3 -1
Exactly disable bzip2 if bzip option is off.
PR#43538 by Aleksey Cheusov.

Revision / (download) - annotate - [select for diffs], Sun Jul 4 07:28:53 2010 UTC (12 years, 7 months ago) by agc
Branch: pkgsrc-2010Q2
Changes since 1.6: +3 -1 lines
Diff to previous 1.6 (colored) next main 1.8 (colored)

Pullup previous changes on HEAD to pkgsrc-2010Q2 branch to fix branching
error, and to sync with reality.

Revision 1.6 / (download) - annotate - [select for diffs], Thu Feb 22 19:27:20 2007 UTC (15 years, 11 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2010Q2-base, pkgsrc-2010Q1-base, pkgsrc-2010Q1, pkgsrc-2009Q4-base, pkgsrc-2009Q4, pkgsrc-2009Q3-base, pkgsrc-2009Q3, pkgsrc-2009Q2-base, pkgsrc-2009Q2, pkgsrc-2009Q1-base, pkgsrc-2009Q1, pkgsrc-2008Q4-base, pkgsrc-2008Q4, pkgsrc-2008Q3-base, pkgsrc-2008Q3, pkgsrc-2008Q2-base, pkgsrc-2008Q2, pkgsrc-2008Q1-base, pkgsrc-2008Q1, pkgsrc-2007Q4-base, pkgsrc-2007Q4, pkgsrc-2007Q3-base, pkgsrc-2007Q3, pkgsrc-2007Q2-base, pkgsrc-2007Q2, pkgsrc-2007Q1-base, pkgsrc-2007Q1, cwrapper, cube-native-xorg-base, cube-native-xorg
Branch point for: pkgsrc-2010Q2
Changes since 1.5: +3 -3 lines
Diff to previous 1.5 (colored)

Whitespace cleanup, courtesy of pkglint.
Patch provided by Sergey Svishchev in private mail.

Revision 1.5 / (download) - annotate - [select for diffs], Mon Aug 14 22:37:21 2006 UTC (16 years, 5 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2006Q4-base, pkgsrc-2006Q4, pkgsrc-2006Q3-base, pkgsrc-2006Q3
Changes since 1.4: +2 -1 lines
Diff to previous 1.4 (colored)

Add pkg-config to tools for build with (non-default) lua option.

Revision 1.4 / (download) - annotate - [select for diffs], Wed May 31 18:22:26 2006 UTC (16 years, 8 months ago) by ghen
Branch: MAIN
CVS Tags: pkgsrc-2006Q2-base, pkgsrc-2006Q2
Changes since 1.3: +2 -2 lines
Diff to previous 1.3 (colored)

The databases/openldap package has been split in -client and -server component
packages.  Convert LDAP-based applications to depend on openldap-client, and
bump PKGREVISION for those that depend on it by default.

Revision 1.3 / (download) - annotate - [select for diffs], Mon Dec 5 23:55:23 2005 UTC (17 years, 1 month ago) by rillig
Branch: MAIN
CVS Tags: pkgsrc-2006Q1-base, pkgsrc-2006Q1, pkgsrc-2005Q4-base, pkgsrc-2005Q4
Changes since 1.2: +3 -3 lines
Diff to previous 1.2 (colored)

Ran "pkglint --autofix", which corrected some of the quoting issues in

Revision 1.2 / (download) - annotate - [select for diffs], Tue Oct 11 15:44:00 2005 UTC (17 years, 3 months ago) by joerg
Branch: MAIN
Changes since 1.1: +6 -6 lines
Diff to previous 1.1 (colored)

Update lighttpd to 1.4.6. Take maintainership.

Activate memcache option, now that devel/libmemcache is imported.

From NEWS:
- 1.4.6 - 2005-10-09

  * fixed compilation on MacOS X and cygwin
  * fixed compressed output if caching was disabled (seen in IE and
  * fixed range-request option
  * fixed mysql-vhost module (was broken in 1.4.5)
  * fixed false positive in the detection of case-insensitive FS

- 1.4.5 - 2005-10-02

  * added all DeltaV methods as known methods
  * added buffer-to-disk of request content
  * added warning for unused variables in conditionals
  * added global index-generators to mod_indexfile
  * fixed caching for remote-ip conditionals with keep-alive
  * fixed redirects with content
  * fixed infinite loop in exec-cmd in mod_ssi
  * fixed segfault in config handling for mod_mysql_vhost
  * fixed segfault on FIFOs/Sockets
  * fixed possible crash on uninit memory if If-Modified-Since was too long
  * fixed accounting of mem-chunks
  * fixed starving of connections on high load
  * fixed crc errors in mod_compress on 64bit platforms
  * fixed handling of overlapping fastcgi packets (bug added in 1.4.4)
  * fixed logic of conditionals if a header was not set
  * fixed a segfault in mod_rewrite if %1 references were used
  * fixed handling of empty request URIs in HTTP requests

- 1.4.4 - 2005-09-16
  * added support for %V in mod_accesslog
  * added a option for a FastCGI responser to send static files
  * added md5 and blowfish hashes to htpasswd
  * fixed METHOD in mod_accesslog of WebDAV methods
  * fixed check for permission before files in sent
  * fixed mod-proxy and content for non-POST requests
  * fixed compilation of mod_cml on MacOS X
  * fixed SSL errmsg after accept()
  * fixed memleak in stat-cache
  * fixed aborted connections if file was moved while in transfer
  * fixed mem-usage for large FastCGI transfers

Revision / (download) - annotate - [select for diffs] (vendor branch), Sun Sep 4 06:37:05 2005 UTC (17 years, 5 months ago) by jlam
Branch: TNF
CVS Tags: pkgsrc-base, pkgsrc-2005Q3-base, pkgsrc-2005Q3
Changes since 1.1: +0 -0 lines
Diff to previous 1.1 (colored)

Initial import of lighttpd-1.4.3 as www/lighttpd.

LightTPD is a secure, fast, compliant, and very flexible web-server
which designed and optimized for for high-performance environments.
With a small memory footprint compared to other webservers, effective
management of the CPU load, and advanced feature set (FastCGI, CGI,
Auth, Output-Compression, URL-Rewriting and many more), LightTPD is
the perfect solution for every server that is suffering load problems.

This is loosely based on the lighttpd package from pkgsrc-wip by
Piotr Stolc <>.

Revision 1.1 / (download) - annotate - [select for diffs], Sun Sep 4 06:37:05 2005 UTC (17 years, 5 months ago) by jlam
Branch: MAIN

Initial revision

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.

CVSweb <>