summaryrefslogtreecommitdiffstats
path: root/package/nginx
Commit message (Collapse)AuthorAgeFilesLines
* packages: update sysv S* scripts to 644Matt Weber2019-02-081-0/+0
| | | | | Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* nginx: bump to version 1.15.7Peter Korsgaard2018-12-132-2/+2
| | | | | | | | | | | | | | | | | 1.15.7 contains a number of bugfixes. From the changes file: *) Bugfix: memory leak on errors during reconfiguration. *) Bugfix: in the $upstream_response_time, $upstream_connect_time, and $upstream_header_time variables. *) Bugfix: a segmentation fault might occur in a worker process if the ngx_http_mp4_module was used on 32-bit platforms. https://nginx.org/en/CHANGES Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* nginx: security bump to 1.15.6Peter Korsgaard2018-11-094-13/+17
| | | | | | | | | | | | | | Fixes the following security issues: CVE-2018-16843: Excessive memory usage in HTTP/2 CVE-2018-16844: Excessive CPU usage in HTTP/2 CVE-2018-16845: Memory disclosure in the ngx_http_mp4_module Refreshed patch 0004 + 0007 as they no longer applied cleanly. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* nginx: bump to version 1.15.0Ignacy Gawędzki2018-06-305-79/+265
| | | | | | | | | | | | | | | | | | | | | | | The following patches have been updated to apply on 1.15.0: 0003-auto-set-ngx_feature_run_force_result-for-each-featu.patch 0006-auto-lib-openssl-conf-use-pkg-config.patch The follow patch has been removed, because it was applied upstream: 0009-auto-lib-conf-fix-PCRE-condition-WRT-the-http-and-ht.patch The license file hash has changed because the copyright years were updated in the LICENSE file: - * Copyright (C) 2002-2017 Igor Sysoev - * Copyright (C) 2011-2017 Nginx, Inc. + * Copyright (C) 2002-2018 Igor Sysoev + * Copyright (C) 2011-2018 Nginx, Inc. Signed-off-by: Ignacy Gawędzki <ignacy.gawedzki@green-communications.fr> [Thomas: drop unneeded patch updates, improve commit log.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* nginx: fix patch using pkg-configIgnacy Gawędzki2017-12-292-4/+6
| | | | | | | | | | | | | | | The regular expression that drops the -I flag from the output of pkg-config --cflags-only-I doesn't work properly as it is too naive: it breaks a path if it contains -I: $ echo "-I/usr/Some-Install-Location/include" | sed 's/-I//g' /usr/Somenstall-Location/include $ echo "-I/usr/Some-Install-Location/include" | sed -re 's/(^|\s)-I\s*(\S+)/\1\2/g' /usr/Some-Install-Location/include Signed-off-by: Ignacy Gawędzki <ignacy.gawedzki@green-communications.fr> [Thomas: improved commit log.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/*/Config.in: fix help text check-package warningsThomas Petazzoni2017-12-181-2/+2
| | | | | | | | | | | | | This commit fixes the warnings reported by check-package on the help text of all package Config.in files, related to the formatting of the help text: should start with a tab, then 2 spaces, then at most 62 characters. The vast majority of warnings fixed were caused by too long lines. A few warnings were related to spaces being used instead of a tab to indent the help text. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* nginx: bump to 1.12.2Adam Duskett2017-11-222-2/+2
| | | | | Signed-off-by: Adam Duskett <aduskett@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/nginx: add license hashSamuel Martin2017-11-051-0/+2
| | | | | Signed-off-by: Samuel Martin <s.martin49@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
* package/nginx/S50nginx: Do not assume start-stop-daemon knows -R.Thomas Claveirole2017-10-101-4/+2
| | | | | | | | | | | | start-stop-daemon fails on -R when not compiled with CONFIG_FEATURE_START_STOP_DAEMON_FANCY. Thus, do not rely on -R during stop to avoid a race condition during restart. Use a sleep 1 during restart instead, as suggested by Peter Korsgaard in <87bmluk4bm.fsf@dell.be.48ers.dk>. Signed-off-by: Thomas Claveirole <thomas.claveirole@green-communications.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* nginx (S50nginx): Fix stop, reload, restart. Add force-reload.Thomas Claveirole2017-09-271-5/+13
| | | | | | | | | | | | | | | | | | | Fix package/nginx/S50nginx: * On stop, use start-stop-daemon -R 1 to wait for the nginx processes to actually stop. This fixes a race condition with restart, where nginx fails to restart because start is called too early w.r.t. stop. (This only works with Debian's start-stop-daemon, however BusyBox's start-stop-daemon does not fail when given -R; it just ignores the argument silently). * Implement reload with an actual reload instead of a restart. * Add force-reload. Signed-off-by: Thomas Claveirole <thomas.claveirole@green-communications.fr> Reviewed-by: Samuel Martin <s.martin49@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
* nginx: security bump to version 1.12.1Peter Korsgaard2017-07-142-2/+2
| | | | | | | | | | | | Fixes CVE-2017-7529 - Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request. For more details, see: http://mailman.nginx.org/pipermail/nginx-announce/2017/000200.html Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/nginx: fix buildSamuel Martin2017-07-141-0/+33
| | | | | | | | | | | | | | | Add a patch to nginx configuration system fixing misdetected unneeded PCRE dependency. This patch has been submitted upstream [1]. Fixes: http://autobuild.buildroot.net/results/bc7/bc7458b97a88785653845afd30fe9d5f3a69905b/build-end.log [1] http://mailman.nginx.org/pipermail/nginx-devel/2017-July/010308.html Signed-off-by: Samuel Martin <s.martin49@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* nginx: bump to version 1.12.0Adam Duskett2017-07-056-32/+34
| | | | | | | Also update the patch line numbers to work with 1.12.0 Signed-off-by: Adam Duskett <Adamduskett@outlook.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/n*/Config.in: fix ordering of statementsAdam Duskett2017-05-011-2/+2
| | | | | | | | | | | | | The check-package script when ran gives warnings on ordering issues on all of these Config files. This patch cleans up all warnings related to the ordering in the Config files for packages starting with the letter n in the package directory. The appropriate ordering is: type, default, depends on, select, help See http://nightly.buildroot.org/#_config_files for more information. Signed-off-by: Adam Duskett <Adamduskett@outlook.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* boot, package: use SPDX short identifier for BSD-2cRahul Bedarkar2017-04-011-1/+1
| | | | | | | | | | | We want to use SPDX identifier for license string as much as possible. SPDX short identifier for BSD-2c is BSD-2-Clause. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/BSD-2c/BSD-2-Clause/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* nginx: bump version to 1.10.3Adam Duskett2017-02-042-2/+2
| | | | | Signed-off-by: Adam Duskett <aduskett@codeblue.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* nginx: group the external modules enabling logicThomas Petazzoni2016-12-041-5/+5
| | | | | | | | This commit moves the logic that allows to enable the naxsi external module below the "external modules" comment, which was already used for the upload and dav-ext modules. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* nginx-dav-ext: new packageJohan Oudinet2016-12-041-0/+5
| | | | | | | | | | | | | | | Nginx built-in support for webdav is missing support for two commands: PROPFIND and OPTIONS. This commit adds a new package that provides an external nginx module with improved webdav support. Signed-off-by: Johan Oudinet <johan.oudinet@gmail.com> [Thomas: - Remove the BR2_PACKAGE_NGINX_HTTP_DAV_EXT_MODULE sub-option of the nginx package. The BR2_PACKAGE_NGINX_DAV_EXT option is sufficient. - Move the nginx.mk code together with another external module being enabled, nginx-upload. - Add LICENSE and LICENSE_FILES variables.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* nginx: bump to version 1.10.2Gustavo Zacarias2016-10-192-2/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* nginx-nasxi: new packageAdam Duskett2016-07-151-0/+5
| | | | | | | | | | | | | | | | | | | | Naxsi is a third party nginx module reads a small subset of simple rules containing a list of known patterns involved in website vulnerabilities. This module behaves like a DROP-by-default firewall for nginx. Signed-off-by: Adam Duskett <aduskett@codeblue.com> [Thomas: - include Config.in file directly from package/Config.in and not from package/nginx/Config. - improve Config.in help text with more details - rename the package prompt from ngx_http_naxsi_module to nginx-naxsi - remove NGINX_NAXSI_SOURCE, and fix the definition of NGINX_NAXSI_SITE - change license from GPLv3 to GPLv2+ with OpenSSL exception - cange license file from LICENSE to naxsi_src/naxsi_json.c. The LICENSE file exists in the latest Git master of the project, but not in the 0.54 tag that we're packaging.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* nginx-upload: new packageBimal Jacob2016-07-151-0/+6
| | | | | | | | | | | | | | A module for nginx web server for handling file uploads using multipart/form-data encoding (RFC 1867). Signed-off-by: Bimal Jacob <bimal.jacob@rockwellcollins.com> Signed-off-by: Matt Weber <matthew.weber@rockwellcollins.com> [Thomas: - rename from nginx-upload-module to nginx-upload. Indeed, we don't want all nginx modules to be suffixed with "-module" - include the module Config.in file directly from package/Config.in, like we do for Python, Perl, Lua or TCL modules.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* nginx: security bump to version 1.10.1Gustavo Zacarias2016-06-052-2/+2
| | | | | | | | | Fixes: CVE-2016-4450 - NULL pointer dereference while writing client request body. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/nginx: fix patches titlesMartin Bark2016-05-168-8/+8
| | | | | | | | | Changed [PATCH x/y] to [PATCH] at the beginning of the subject line since the numbering is meaningless. Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/nginx: add libatomic_ops supportMartin Bark2016-05-132-3/+14
| | | | | | | | | | | | | Force the use of libatomics_ops on the sparc v8 and leon3 platforms to allow nginx to build. Optionally use libatomic_ops on other platforms. This fixes: http://autobuild.buildroot.net/results/20dc41cd62887222d2569d81b5865893baeafaae/ http://autobuild.buildroot.net/results/eb47af0c8df6fae82859865fb8b9912f45960444/ Cc: Waldemar Brodkorb <wbx@openadk.org> Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/nginx: fix dlopen supportMartin Bark2016-05-131-0/+33
| | | | | | | | | | Only include dlfcn.h on systems that support it This fixes: http://autobuild.buildroot.net/results/f72a9a81e21166af20332d835d71651be7c016c3/ Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/nginx: fix libgd supportMartin Bark2016-05-132-0/+32
| | | | | | | | | | Change to using gdlib-config to find libgd and its dependencies. This fixes: http://autobuild.buildroot.net/results/d1806140eccb1202cb8b223289510d64fb28acb6/ Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/nginx: fix openssl supportMartin Bark2016-05-131-0/+31
| | | | | | | | | | Change to using pkg-config to find openssl and its dependencies. This fixes: http://autobuild.buildroot.net/results/17db76c3a099e7592af343bbe119dfe717cd7999/ Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/nginx: fix libxslt supportMartin Bark2016-05-133-45/+35
| | | | | | | | | | Change to using pkg-config to find libxslt and it dependencies. This Fixes: http://autobuild.buildroot.net/results/382699bbed15f598625b9296e464d1349ef559f8 Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/nginx: add debug logging supportMartin Bark2016-05-052-0/+11
| | | | | Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/nginx: add thread pool supportMartin Bark2016-05-052-1/+9
| | | | | Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/nginx: add support for stream proxy modulesMartin Bark2016-05-052-0/+61
| | | | | Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/nginx: bump version to 1.10.0Martin Bark2016-05-054-14/+9
| | | | | | | | | | The ngx_http_spdy_module has been superseded by the ngx_http_v2_module so BR2_PACKAGE_NGINX_HTTP_SPDY_MODULE has changed to BR2_PACKAGE_NGINX_HTTP_V2_MODULE Signed-off-by: Martin Bark <martin@barkynet.com> [Thomas: rewrap Config.in.legacy help text.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/nginx: fix error is nginx.serviceMartin Bark2016-05-051-1/+2
| | | | | | | | | | | | | | | | When using systemd nginx fails to start with the error /usr/bin/mkdir: invalid option -- 't' This is due to a missing space before the semicolon in nginx.service. For systemd to handle multiple commands in ExecStartPre it requires the semicolon to be a separate word or the use of multiple ExecStartPre. This commit splits the multiple commands into two ExecStartPre lines which fixes the error and improves readability. Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/nginx: fix mail modules not buildingMartin Bark2016-05-051-0/+1
| | | | | | | Add the missing --with-mail configure option Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* nginx: security bump to version 1.8.1Gustavo Zacarias2016-01-272-2/+2
| | | | | | | | | | | | | | | | | | | | | | Fixes: CVE-2016-0742 - invalid pointer dereference might occur during DNS server response processing if the "resolver" directive was used, allowing anattacker who is able to forge UDP packets from the DNS server to cause segmentation fault in a worker process. CVE-2016-0746 - use-after-free condition might occur during CNAME response processing if the "resolver" directive was used, allowing an attacker who is able to trigger name resolution to cause segmentation fault in a worker process, or might have potential other impact. CVE-2016-0747 - CNAME resolution was insufficiently limited if the "resolver" directive was used, allowing an attacker who is able to trigger arbitrary name resolution to cause excessive resource consumption in worker processes. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/nginx: fix a typoNoé Rubinstein2015-11-041-1/+1
| | | | | Signed-off-by: Noé Rubinstein <nrubinstein@aldebaran.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package: Replace 'echo -n' by 'printf'Maxime Hadjinlian2015-10-041-1/+1
| | | | | | | | | | | | 'echo -n' is not a POSIX construct (no flag support), we shoud use 'printf', especially in init script. This patch was generated by the following command line: git grep -l 'echo -n' -- `git ls-files | grep -v 'patch'` | xargs sed -i 's/echo -n/printf/' Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* nginx: activate the systemd serviceAurélien Chabot2015-07-131-0/+5
| | | | | Signed-off-by: Aurélien Chabot <aurelien@chabot.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* nginx: bump to 1.8.0 (latest stable version)Danomi Manchego2015-06-285-25/+37
| | | | | | | Patches refreshed to apply with no shift or fuzz. Signed-off-by: Danomi Manchego <danomimanchego123@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* nginx: fix nginx.old clean-upDanomi Manchego2015-06-281-1/+1
| | | | | | | | | | | The bin path for nginx is configured for /usr/sbin, so deleting the nginx.old back-up from /usr/bin never works. Fix path, and also use "$(RM)" instead of "-$(RM)", as "rm -f" never fails. Signed-off-by: Danomi Manchego <danomimanchego123@gmail.com> Acked-by: Samuel Martin <s.martin49@gmail.com> Tested-by: Samuel Martin <s.martin49@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package: kill pointless text justificationGustavo Zacarias2015-04-231-1/+1
| | | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Acked-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages: remove non-IPv6 dependencies and tweaksGustavo Zacarias2015-04-221-3/+3
| | | | | | | | Now that IPv6 is mandatory remove package dependencies and conditionals for it. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* nginx: bump to version 1.6.3Gustavo Zacarias2015-04-072-2/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages: remove (non-)lfs dependencies and tweaksGustavo Zacarias2015-04-012-6/+1
| | | | | | | | Now that largefile is mandatory removes package dependencies and conditionals. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* nginx: add hash fileGustavo Zacarias2015-03-201-0/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/nginx: disallow AIO support on arcSamuel Martin2014-12-071-2/+4
| | | | | | | | | | | | | | | The nginx AIO support cannot build on arc, because it hardcodes the usage of SYS_eventfd(), while it should just use eventfd() from the C library. Fixes: http://autobuild.buildroot.org/results/f3e/f3e2c7a937517a5444f8c6cc0b02692af897b3e0/ [Thomas: adjust comment as suggested by Yann.] Signed-off-by: Samuel Martin <s.martin49@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/nginx: remove rtsig module supportSamuel Martin2014-12-032-6/+0
| | | | | | | | | | | | | | | | | | rtsig module uses the deprecated sysctl syscall, which is not implemented on some recent architecture (such as arc). Also, rtsig module is almost considered as deprecated by some nginx developers [1]. So, just remove this option. Fixes: http://autobuild.buildroot.org/results/730/730105fc0a89b381b3b29192d07f28ef1f13cbb3/ [1] http://mailman.nginx.org/pipermail/nginx-devel/2014-November/006295.html Signed-off-by: Samuel Martin <s.martin49@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/nginx: rename patch to new conventionSamuel Martin2014-12-035-0/+0
| | | | | Signed-off-by: Samuel Martin <s.martin49@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/*/*.mk: Fix indentMaxime Hadjinlian2014-11-191-1/+1
| | | | | | | | | | | Change LIBFOO_PERMISSIONS everywhere to be a space-separated list. As nothing was specified in the manual but all our lists are space separated, there is no reason that this one should be made an exception. Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Tested-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/nginx: fix build failureSamuel Martin2014-10-251-1/+2
| | | | | | | | | | | Correctly set NGX_SYS_NERR, even when it is 0. Fixes: http://autobuild.buildroot.org/results/666/666d780bf61e10c9f89f765bb04ddc1afc11d0d1/ http://autobuild.buildroot.org/?reason=nginx-1.6.2&&arch=powerpc Signed-off-by: Samuel Martin <s.martin49@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
OpenPOWER on IntegriCloud