summaryrefslogtreecommitdiffstats
path: root/package/lighttpd
Commit message (Collapse)AuthorAgeFilesLines
* package/lighttpd: bump to version 1.4.53Peter Korsgaard2019-01-272-3/+3
| | | | Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/lighttpd: adjust hash comment after 1.4.52 bumpPeter Korsgaard2019-01-101-1/+1
| | | | | | | Commit ec69d3820f (package/lighttpd: bump to version 1.4.52) bumped the lighttpd version but forgot to adjust the upstream hash comment. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/lighttpd: bump to version 1.4.52Peter Korsgaard2019-01-102-2/+2
| | | | | | | | | | Fixes location header parsing regression introduced in 1.4.51: https://redmine.lighttpd.net/issues/2918 Fixes header setting regression introduced in 1.4.51: https://redmine.lighttpd.net/issues/2919 Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* lighttpd: adjust Config.in to make check-package happyThomas Petazzoni2018-10-311-5/+5
| | | | | | | | | | | | | | | | | Commit b9d75c717e01aed474b7567c969236418e87eda8 ("lighttpd: add optional pam support") introduced a new Config.in option, but check-package was not happy about it: package/lighttpd/Config.in:30: should be indented with one tab (http://nightly.buildroot.org/#_config_files) package/lighttpd/Config.in:31: should be indented with one tab (http://nightly.buildroot.org/#_config_files) package/lighttpd/Config.in:32: attributes order: type, default, depends on, select, help (http://nightly.buildroot.org/#_config_files) package/lighttpd/Config.in:32: should be indented with one tab (http://nightly.buildroot.org/#_config_files) package/lighttpd/Config.in:33: should be indented with one tab (http://nightly.buildroot.org/#_config_files) package/lighttpd/Config.in:34: help text: <tab><2 spaces><62 chars> (http://nightly.buildroot.org/#writing-rules-config-in) This commit fixes those indentation and ordering issues. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* lighttpd: add optional pam supportPeter Korsgaard2018-10-312-1/+14
| | | | | | | | Let the option depend on linux-pam as pam has quite some dependencies and this is unlikely to be used if pam isn't explicitly enabled. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* lighttpd: security bump to version 1.14.51Peter Korsgaard2018-10-302-3/+5
| | | | | | | | | | | | | | | | | | | Fixes the following security issues: 1.4.50: [mod_alias] security: potential path traversal with specific configs [core] security: use-after-free invalid Range req [mod_alias] security: path traversal in mod_alias (in some use cases) (fixes #2898) [core] security: use-after-free after invalid Range request (fixes #2899) 1.4.51: [core,security] process headers after combining folded headers [mod_userdir] security: skip username “.” and “..” 1.4.51 brings optional pam and wolfssl support. Explicitly disable these options for now. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* lighttpd: Add systemd tmpfile to fix lighttpd systemd bootLaurent Hartanerot2018-08-142-0/+5
| | | | | | | | | | | | | | | | | | | | | Problem starting lighttpd application with systemd. /usr/sbin/lighttpd -D -f /etc/lighttpd/lighttpd.conf 2018-06-22 11:21:34: (server.c.733) opening errorlog '/var/log/lighttpd-error.log' failed: Permission denied 2018-06-22 11:21:34: (server.c.1420) Opening errorlog failed. Going down. Lighttpd can not write the 'lighttpd-access.log' and 'lighttpd-error.log' files to the directory '/var/log/'. When using systemd the directory '/var/log' does not allow the user www-data to write. To correct the problem, we add /usr/lib/tmpfiles.d/lighttpd.conf. This file create the 'lighttpd-access.log' and 'lighttpd-error.log' files with the permission Signed-off-by: Laurent Hartanerot <laurent.hartanerot@atos.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* lighttpd: bump to version 1.4.49Baruch Siach2018-06-122-3/+3
| | | | | | Cc: Matt Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* lighttpd: add hash for the license filePeter Korsgaard2018-01-251-0/+2
| | | | Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package: lighttpd: bump to version 1.4.48Petr Kulhavy2018-01-252-2/+2
| | | | | Signed-off-by: Petr Kulhavy <brain@jikos.cz> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/l*: fix wrapping of Config.in help textAdam Duskett2017-07-311-7/+8
| | | | | | | | | | | | | | The check-package script when ran gives warnings on text wrapping on all of these Config files. This patch cleans up all warnings related to the text wrapping for the Config files starting with the letter l in the package directory. The appropriate indentation is: <tab><2 spaces><62 chars> See http://nightly.buildroot.org/#writing-rules-config-in for more information. Signed-off-by: Adam Duskett <aduskett@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* boot, package: use SPDX short identifier for BSD-3cRahul Bedarkar2017-04-011-1/+1
| | | | | | | | | | | We want to use SPDX identifier for license string as much as possible. SPDX short identifier for BSD-3c is BSD-3-Clause. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/BSD-3c/BSD-3-Clause/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* lighttpd: source default file from startup scriptPhilipp Skadorov2017-03-091-0/+2
| | | | | | | | | | | lighttpd server runs cgi application that has no way to get environment variables that are set up for it. S50lighttpd is changed to source /etc/default/lighttpd file where these environment variables can be set up. Signed-off-by: Philipp Skadorov <philipp.skadorov@savoirfairelinux.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* lighttpd: carry common keywords out to variablesPhilipp Skadorov2017-03-091-2/+6
| | | | | | | | S50lighttpd contains repeating keywords that are worth carrying out as variables: pid file name, daemon name, config file name. Signed-off-by: Philipp Skadorov <philipp.skadorov@savoirfairelinux.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* lighttpd: bump version to 1.4.45Vicente Olivert Riera2017-01-162-2/+2
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* lighttpd: bump to version 1.4.44Gustavo Zacarias2016-12-272-2/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* lighttpd: bump version to 1.4.43Vicente Olivert Riera2016-11-012-2/+2
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* lighttpd: bump version to 1.4.42Vicente Olivert Riera2016-10-162-2/+2
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* lighttpd: security bump version to 1.4.41Peter Korsgaard2016-08-013-159/+2
| | | | | | | | | | | | | Security fixes and fixes for bugs introduced in 1.4.40. Drop 0002-autobuild-clock_gettime-lrt-with-glibc-2.17.patch, which is now upstream. Due to the patch removal, autoreconf is no longer needed. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> [Thomas: remove autoreconf, no longer needed.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* lighttpd: add clock_gettime patchGustavo Zacarias2016-07-232-0/+157
| | | | | | | | | | Fixes: http://autobuild.buildroot.net/results/590/5901153a345c69d0a041309cfb79329bb42ff98d/ Patch status: upstream. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* lighttpd: webdav locks require libuuidGustavo Zacarias2016-07-231-1/+7
| | | | | | | | | Since 1.4.40 webdav locks require libuuid from util-linux, so make it an automatic dependency. Fixes: http://autobuild.buildroot.net/results/b14/b14484300b4acfcaa18593b097167cef14330898/ Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* lighttpd: bump to version 1.4.40Gustavo Zacarias2016-07-163-1400/+2
| | | | | | | Drop upstream patch. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* lighttpd: fix lua compatibility with 5.2.x / 5.3.xFrancois Perrad2016-01-191-0/+1398
| | | | | | | | | | | By backporting a fix from upstream. Fixes: http://autobuild.buildroot.net/results/13f/13faa9ebce00359b8943775364a432ce422fe8b8/ [Peter: tweak commit description] Signed-off-by: Francois Perrad <francois.perrad@gadz.org> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* lighttpd: bump to version 1.4.39Gustavo Zacarias2016-01-042-2/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/lighttpd: do not select Lua, depend on itYann E. MORIN2015-12-181-1/+1
| | | | | | | | | | | Lua is a provider for the virtual package lua-interpreter, so it cannot be selected, as explained in the manual. Turn the 'select' into a 'depends on'. Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* lighttpd: bump version to 1.4.38Vicente Olivert Riera2015-12-072-2/+2
| | | | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Reviewed-by: Alexander Dahl <post@lespocky.de> Acked-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package: Replace 'echo -n' by 'printf'Maxime Hadjinlian2015-10-041-2/+2
| | | | | | | | | | | | 'echo -n' is not a POSIX construct (no flag support), we shoud use 'printf', especially in init script. This patch was generated by the following command line: git grep -l 'echo -n' -- `git ls-files | grep -v 'patch'` | xargs sed -i 's/echo -n/printf/' Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* lighttpd: bump to version 1.4.37Gustavo Zacarias2015-09-043-17/+19
| | | | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Reviewed-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Tested-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* lighttpd: bump to version 1.4.36Gustavo Zacarias2015-07-272-2/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* lighttpd: fix systemd service activation symlinkAurélien Chabot2015-07-131-1/+1
| | | | | Signed-off-by: Aurélien Chabot <aurelien@chabot.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* lighttpd: run as non-privileged user www-dataFloris Bos2015-05-011-2/+2
| | | | | | | | | | Previously the stock lighttpd configuration was patched to run as user root, because we do not have a lighttpd user. Patch it to use www-data instead, which is a user available in the default skeleton, and is the same other webserver packages (like nginx) use. Signed-off-by: Floris Bos <bos@je-eigen-domein.nl> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages: remove (non-)lfs dependencies and tweaksGustavo Zacarias2015-04-011-2/+1
| | | | | | | | Now that largefile is mandatory removes package dependencies and conditionals. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* lighttpd: use upstream systemd service fileMike Williams2015-03-202-13/+3
| | | | | Signed-off-by: Mike Williams <mike@mikebwilliams.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/*: rename patches according to the new policyPeter Korsgaard2015-02-031-0/+0
| | | | | | | Autogenerated from rename-patch.py (http://patchwork.ozlabs.org/patch/403345) Signed-off-by: Samuel Martin <s.martin49@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* Rename BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBSThomas Petazzoni2014-12-111-2/+2
| | | | | | | | | | | | | | | | | | | | | | | Since a while, the semantic of BR2_PREFER_STATIC_LIB has been changed from "prefer static libraries when possible" to "use only static libraries". The former semantic didn't make much sense, since the user had absolutely no control/idea of which package would use static libraries, and which packages would not. Therefore, for quite some time, we have been starting to enforce that BR2_PREFER_STATIC_LIB should really build everything with static libraries. As a consequence, this patch renames BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBS, and adjust the Config.in option accordingly. This also helps preparing the addition of other options to select shared, shared+static or just static. Note that we have verified that this commit can be reproduced by simply doing a global rename of BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBS plus adding BR2_PREFER_STATIC_LIB to Config.in.legacy. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
* lighttpd: disable static buildBaruch Siach2014-12-091-0/+5
| | | | | | | | | | | | | | lighttpd modules support code requires shared libraries support. The scons based build system seems to be support static link of modules, but we currently don't use scons for lighttpd. Fixes: http://autobuild.buildroot.net/results/39c/39c027bf6b76a0f9c15a184f449dadacfaefe980/ [Peter: move to top of file to fix indentation of sub options] Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* lighttpd: install configuration files with sensible (0644) permissionsPeter Korsgaard2014-12-021-8/+8
| | | | | | | And use the same (0-prefixed) form everywhere. Reported-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* lighttpd: install init script and config file unconditionallyThomas Petazzoni2014-12-021-30/+16
| | | | | | | | | | | As discussed, users should use a rootfs overlay or a post-build script instead of a custom skeleton to override files installed by Buildroot, so there is no point in having conditions when installing init scripts or configuration files. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/.mk files: remove --localstatedir=/var from autotools packagesJörg Krause2014-10-181-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | Remove --localstatedir=/var from all autotools packages where it is no longer needed. Also remove --localstatedir=/var/lib/dhcp from package dhcp. localstatedir is used by dhcp to set the default directory for the leases files. This can also be done by setting --with-*-lease-file=/var/lib/dhcp/*, which is done in dhcp.mk. A custom --localstatedir is left in: * proftpd.mk * mysql.mk This is safe to do: One of the good thing with autoconf is that if you pass: --localstatedir=/var ... --localstatedir=/var/something Then /var/something will be used. So, we can set --localstatedir=/var by default in the infrastructure, and still have certain packages doing weird things override it. [Thanks to Thomas Petazzoni] Signed-off-by: Jörg Krause <jkrause@posteo.de> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages: rename FOO_CONF_OPT into FOO_CONF_OPTSThomas De Schampheleire2014-10-041-13/+13
| | | | | | | | | | | | To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* lighttpd: add hash fileGustavo Zacarias2014-10-011-0/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* lighttpd: security bump to version 1.4.35Gustavo Zacarias2014-03-121-1/+1
| | | | | | | Fixes lighttpd SA-2014-01 (CVE not assigned yet). Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* lighttpd: bump to version 1.4.34Gustavo Zacarias2014-01-205-449/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* Config.in files: use if/endif instead of 'depends on' for main symbolThomas De Schampheleire2013-12-251-1/+0
| | | | | | | | | | | | | | | | | | | | | | | In the Config.in file of package foo, it often happens that there are other symbols besides BR2_PACKAGE_FOO. Typically, these symbols only make sense when foo itself is enabled. There are two ways to express this: with depends on BR2_PACKAGE_FOO in each extra symbol, or with if BR2_PACKAGE_FOO ... endif around the entire set of extra symbols. The if/endif approach avoids the repetition of 'depends on' statements on multiple symbols, so this is clearly preferred. But even when there is only one extra symbol, if/endif is a more logical choice: - it is future-proof for when extra symbols are added - it allows to have just one strategy instead of two (less confusion) This patch modifies the Config.in files accordingly. Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package: add <pkg>_VERSION_MAJOR variableJerzy Grzegorek2013-12-191-2/+3
| | | | | | Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Reviewed-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* packages: remove uninstall commandsThomas De Schampheleire2013-12-061-6/+0
| | | | | Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* lighttpd: fix systemd service file permissionGustavo Zacarias2013-12-041-1/+1
| | | | | | | | Systemd service files don't need to be +x so switch the installation to mode 644. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* lighttpd: apply security patches for lighttpd-1.4.33Axel Lin2013-12-023-0/+434
| | | | | | | | | | | | | | | | | Apply security patches for lighttpd-1.4.33. Also rename these patches to follow buildroot's naming scheme. lighttpd-03-fix_fam_use_after_free.patch: http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.33_fix_fam_use_after_free.patch lighttpd-04-fix_setuid.patch: http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.33_fix_setuid.patch lighttpd-05-fix_ssl_sni.patch: http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.33_fix_ssl_sni.patch Signed-off-by: Axel Lin <axel.lin@ingics.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* lighttpd: needs mmuGustavo Zacarias2013-10-091-0/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* lighttpd: fix build failure without ipv6Gustavo Zacarias2013-10-082-0/+14
| | | | | | | | | | Reported in https://bugs.gentoo.org/show_bug.cgi?id=486426 and http://redmine.lighttpd.net/issues/2515 Autobuilders didn't hit it yet, but i did. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Reviewed-by: Markos Chandras <markos.chandras@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
OpenPOWER on IntegriCloud