%global __brp_check_rpaths %{nil} %define _disable_ld_no_undefined 1 # (luigiwalser, ngompa): httpd build hates parallelization %define _smp_ncpus_max 8 %define contentdir %{_datadir}/httpd %define confdir %{_sysconfdir}/httpd/conf %define docroot /var/www %define suexec_caller apache %define vstring Mageia %{?!maxmodules:%global maxmodules 128} %{?!serverlimit:%global serverlimit 1024} Summary: The most widely used Web server on the Internet Name: apache Version: 2.4.59 Release: %mkrel 1 Group: System/Servers License: ASL 2.0 URL: https://httpd.apache.org Source0: https://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2 Source1: https://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2.asc Source9: htcacheclean.service Source10: htcacheclean.sysconfig Source14: httpd.tmpfiles Source15: httpd.service Source16: httpd.sysconfig Source20: httpd.conf Source30: base.conf Source31: mpm.conf Source32: mod_lua.conf Source33: mod_cgi.conf Source34: mod_dav.conf Source35: mod_proxy.conf Source36: mod_proxy_html.conf Source37: mod_ssl.conf Source38: mod_ldap.conf Source39: mod_cache.conf Source40: mod_dbd.conf Source41: mod_suexec.conf Source42: mod_userdir.conf Source43: mod_systemd.conf Source44: mod_session.conf Source45: mod_http2.conf Source46: mod_brotli.conf Source50: httpd-security.conf Source51: httpd-ssl.conf Source60: default_vhosts.conf Source61: default_ssl_vhost.conf # build/scripts patches Patch1: httpd-2.4.1-apctl.patch Patch2: httpd-2.4.9-apxs.patch Patch3: httpd-2.4.1-deplibs.patch Patch5: httpd-2.4.3-layout.patch Patch6: httpd-2.4.3-apctl-systemd.patch Patch7: httpd-2.4.10-detect-systemd.patch # Features/functional changes Patch20: httpd-2.4.3-release.patch Patch23: httpd-2.4.4-export.patch Patch24: httpd-2.4.1-corelimit.patch #Patch26: httpd-2.4.4-r1337344+.patch Patch27: httpd-2.4.2-icons.patch Patch28: httpd-2.4.4-r1332643+.patch # http://marc.info/?l=apache-httpd-dev&m=134867223818085&w=2 Patch29: httpd-2.4.27-systemd.patch Patch30: httpd-2.4.4-cachehardmax.patch Patch31: httpd-2.4.18-sslmultiproxy.patch Patch34: httpd-2.4.17-socket-activation.patch #Patch35: httpd-2.4.17-sslciphdefault.patch #Patch44: httpd-2.4.46-lua-resume.patch # Bug fixes # https://issues.apache.org/bugzilla/show_bug.cgi?id=32524 Patch100: httpd-2.4.25-ab_source_address.patch Patch101: httpd-2.2.10-ldap_auth_now_modular_in-apr-util-dbd-ldap_fix.diff Provides: webserver Provides: apache-mod_actions = %{version} Provides: apache-mod_alias = %{version} Provides: apache-mod_asis = %{version} Provides: apache-mod_auth_basic = %{version} Provides: apache-mod_auth_digest = %{version} Provides: apache-mod_authn_anon = %{version} Provides: apache-mod_authn_dbm = %{version} Provides: apache-mod_authn_default = %{version} Provides: apache-mod_authn_file = %{version} Provides: apache-mod_authz_dbm = %{version} Provides: apache-mod_authz_default = %{version} Provides: apache-mod_authz_groupfile = %{version} Provides: apache-mod_authz_host = %{version} Provides: apache-mod_authz_owner = %{version} Provides: apache-mod_authz_user = %{version} Provides: apache-mod_autoindex = %{version} Provides: apache-mod_bucketeer = %{version} Provides: apache-mod_case_filter = %{version} Provides: apache-mod_case_filter_in = %{version} Provides: apache-mod_cern_meta = %{version} Provides: apache-mod_cgi = %{version} Provides: apache-mod_cgid = %{version} Provides: apache-mod_charset_lite = %{version} Provides: apache-mod_deflate = %{version} Provides: apache-mod_dir = %{version} Provides: apache-mod_dumpio = %{version} Provides: apache-mod_echo = %{version} Provides: apache-mod_env = %{version} Provides: apache-mod_example = %{version} Provides: apache-mod_expires = %{version} Provides: apache-mod_ext_filter = %{version} Provides: apache-mod_filter = %{version} Provides: apache-mod_headers = %{version} Provides: apache-mod_ident = %{version} Provides: apache-mod_imagemap = %{version} Provides: apache-mod_include = %{version} Provides: apache-mod_info = %{version} Provides: apache-mod_log_config = %{version} Provides: apache-mod_log_forensic = %{version} Provides: apache-mod_logio = %{version} Provides: apache-mod_mime_magic = %{version} Provides: apache-mod_mime = %{version} Provides: apache-mod_negotiation = %{version} Provides: apache-mod_optional_fn_export = %{version} Provides: apache-mod_optional_fn_import = %{version} Provides: apache-mod_optional_hook_export = %{version} Provides: apache-mod_optional_hook_import = %{version} Provides: apache-mod_rewrite = %{version} Provides: apache-mod_setenvif = %{version} Provides: apache-mod_speling = %{version} Provides: apache-mod_status = %{version} Provides: apache-mod_unique_id = %{version} Provides: apache-mod_usertrack = %{version} Provides: apache-mod_version = %{version} Provides: apache-mod_vhost_alias = %{version} Provides: apache-mod_systemd = %{version} Obsoletes: apache-base < 2.4.44 Obsoletes: apache-modules < 2.4.44 Obsoletes: apache-conf < 2.4.44 Obsoletes: apache-mpm-event < 2.4.44 Obsoletes: apache-mpm-prefork < 2.4.44 Obsoletes: apache-mpm-peruser < 2.4.44 Obsoletes: apache-mpm-worker < 2.4.44 Obsoletes: apache-mpm-itk < 2.4.44 Requires(pre): webserver-base Requires: webserver-base # needed for /etc/mime.types file Requires: mailcap Requires(post): systemd >= %{systemd_required_version} Requires(post): rpm-helper >= 0.24.8-1 Requires(preun): rpm-helper >= 0.24.8-1 BuildRequires: pkgconfig(apr-1) >= 1.7.0-4 BuildRequires: pkgconfig(apr-util-1) >= 1.6.1-5 BuildRequires: bison BuildRequires: flex BuildRequires: db5-devel BuildRequires: pkgconfig(expat) BuildRequires: gdbm-devel BuildRequires: pkgconfig(libsasl2) BuildRequires: libtool >= 1.4.2 BuildRequires: openldap-devel BuildRequires: pkgconfig(jansson) BuildRequires: pkgconfig(openssl) BuildRequires: pkgconfig(libpcre2-8) BuildRequires: pkgconfig(zlib) BuildRequires: pkgconfig(libcap) BuildRequires: pkgconfig(lua) BuildRequires: pkgconfig(libsystemd) BuildRequires: pkgconfig(libcurl) BuildRequires: multiarch-utils >= 1.0.3 BuildRequires: pkgconfig(libnghttp2) >= 1.8.0 BuildRequires: pkgconfig(libbrotlienc) %description This package contains the main binary of apache, a powerful, full-featured, efficient and freely-available Web server. Apache is also the most popular Web server on the Internet. This version of apache is fully modular, and many modules are available in pre-compiled formats, like PHP and mod_auth_external. The package was built to support a maximum of %{maxmodules} dynamically loadable modules, and a ServerLimit of %{serverlimit}. You can change these values at RPM build time by using for example: --define 'maxmodules 512' --define 'serverlimit 2048' %package mod_dav Summary: Distributed Authoring and Versioning (WebDAV) Group: System/Servers # ensure initscript presence Requires(post): apache Requires(postun): apache Requires: apache >= %{version}-%{release} Provides: apache-mod_dav_fs = %{version} Provides: apache-mod_dav_lock = %{version} %description mod_dav This module provides class 1 and class 2 WebDAV ('Web-based Distributed Authoring and Versioning') functionality for Apache. This extension to the HTTP protocol allows creating, moving, copying, and deleting resources and collections on a remote web server. %package mod_ldap Summary: LDAP connection pooling and result caching DSO:s Group: System/Servers # ensure initscript presence Requires(post): apache Requires(postun): apache Requires: apache >= %{version}-%{release} Requires: apr-util-dbd-ldap Provides: apache-mod_authnz_ldap = %{version} Obsoletes: apache-mod_auth_ldap < 2.4.44 %description mod_ldap This module was created to improve the performance of websites relying on backend connections to LDAP servers. In addition to the functions provided by the standard LDAP libraries, this module adds an LDAP connection pool and an LDAP shared memory cache. %package mod_session Group: System/Servers Summary: Session interface for the Apache HTTP Server # ensure initscript presence Requires(post): apache Requires(postun): apache Requires: apache >= %{version}-%{release} Requires: apr-util-openssl %description mod_session The mod_session module and associated backends provide an abstract interface for storing and accessing per-user session data. %package mod_cache Summary: Content cache keyed to URIs Group: System/Servers # ensure initscript presence Requires(post): apache Requires(postun): apache Requires: apache >= %{version}-%{release} Recommends: apache-htcacheclean = %{version}-%{release} %description mod_cache mod_cache implements an RFC 2616 compliant HTTP content caching filter, with support for the caching of content negotiated responses containing the Vary header. mod_cache requires the services of one or more storage management modules. One storage management module is included in the base Apache distribution: * mod_cache_disk: implements a disk based storage manager %package mod_proxy Summary: HTTP/1.1 proxy/gateway server Group: System/Servers # ensure initscript presence Requires(post): apache Requires(postun): apache Requires: apache >= %{version}-%{release} Provides: apache-mod_proxy_balancer = %{version} Provides: apache-mod_proxy_connect = %{version} Provides: apache-mod_proxy_ftp = %{version} Provides: apache-mod_proxy_http = %{version} BuildRequires: pkgconfig(libxml-2.0) %description mod_proxy This module implements a proxy/gateway for Apache. It implements proxying capability for FTP, CONNECT (for SSL), HTTP/0.9, HTTP/1.0, and HTTP/1.1. The module can be configured to connect to other proxy modules for these and other protocols. %package mod_proxy_html Summary: HTML and XML content filters for the Apache HTTP Server Group: System/Servers # ensure initscript presence Requires(post): apache Requires(postun): apache Requires: apache >= %{version}-%{release} %description mod_proxy_html The mod_proxy_html and mod_xml2enc modules provide filters which can transform and modify HTML and XML content. %package mod_suexec Summary: Allows CGI scripts to run as a specified user and Group Group: System/Servers # ensure initscript presence Requires(post): apache Requires(postun): apache Requires: apache >= %{version}-%{release} %description mod_suexec This module, in combination with the suexec support program allows CGI scripts to run as a specified user and Group. Normally, when a CGI or SSI program executes, it runs as the same user who is running the web server. %package mod_userdir Summary: User-specific directories Group: System/Servers # ensure initscript presence Requires(post): apache Requires(postun): apache Requires: apache >= %{version}-%{release} %description mod_userdir This module allows user-specific directories to be accessed using the http://example.com/~username/ syntax. %package mod_ssl Summary: Strong cryptography using the SSL and TLS protocols Group: System/Servers # ensure initscript presence Requires(post): apache Requires(postun): apache Requires: apache >= %{version}-%{release} Requires(post): openssl %description mod_ssl This module provides SSL v2/v3 and TLS v1 support for the Apache HTTP Server. It was contributed by Ralf S. Engeschall based on his mod_ssl project and originally derived from work by Ben Laurie. This module relies on OpenSSL to provide the cryptography engine. This module also have native SNI support, please look here for more information: * http://daniel-lange.com/plugin/tag/sni * https://sni.velox.ch/ %package mod_dbd Summary: Manages SQL database connections Group: System/Servers # ensure initscript presence Requires(post): apache Requires(postun): apache Requires: apache >= %{version}-%{release} Requires: apr-util-dbd-ldap Recommends: apr-util-dbd-freetds Recommends: apr-util-dbd-mysql Recommends: apr-util-dbd-odbc Recommends: apr-util-dbd-pgsql Recommends: apr-util-dbd-sqlite3 # File mod_authz_dbd.so moved from main package to this one Conflicts: apache < 2.4.57-1 %description mod_dbd mod_dbd manages SQL database connections using apr_dbd. It provides database connections on request to modules requiring SQL database functions, and takes care of managing databases with optimal efficiency and scalability for both threaded and non-threaded MPMs. %package mod_http2 Summary: This module provides HTTP/2 (RFC 7540) support Group: System/Servers # ensure initscript presence Requires(post): apache Requires(postun): apache Requires: apache >= %{version}-%{release} Recommends: nghttp2 >= 1.8.0 %description mod_http2 This module provides HTTP/2 (RFC 7540) support for the Apache HTTP Server. This module relies on libnghttp2 to provide the core http/2 engine. %package mod_brotli Summary: Google Brotli compression for apache Group: System/Servers # ensure initscript presence Requires(post): apache Requires(postun): apache Requires: apache >= %{version}-%{release} Provides: apache-mod_brotli = %{version} %description mod_brotli The mod_brotli module provides the BROTLI_COMPRESS output filter that allows output from your server to be compressed using the brotli compression format before being sent to the client over the network. This module uses the Brotli library found at https://github.com/google/brotli. %package htcacheclean Summary: Clean up the disk cache (for apache-mod_disk_cache) Group: System/Servers Requires(post): rpm-helper >= 0.24.8-1 Requires(preun): rpm-helper >= 0.24.8-1 %description htcacheclean htcacheclean is used to keep the size of mod_cache_disk's storage within a certain limit. This tool can run either manually or in daemon mode. When running in daemon mode, it sleeps in the background and checks the cache directories at regular intervals for cached content to be removed. %package devel Summary: Module development tools for the apache web server Group: Development/C Requires: apache = %{version}-%{release} Requires: apr-devel >= 1:1.4.5 Requires: apr-util-devel >= 1.4.1 Requires: db-devel Requires: expat-devel Requires: gdbm-devel Requires: libsasl-devel Requires: openssl-devel Requires: pcre2-devel Requires: zlib-devel # (tv) because config_vars.mk contains "LDFLAGS = -lsystemd...": Requires: pkgconfig(libsystemd) %description devel The apache-devel package contains the source code for the apache Web server and the APXS binary you'll need to build Dynamic Shared Objects (DSOs) for apache. If you are installing the apache Web server and you want to be able to compile or develop additional modules for apache, you'll need to install this package. %package doc Summary: The apache Manual Group: System/Servers BuildArch: noarch %description doc This package contains the apache server documentation in HTML format. Please view the documentation by starting the apache server and your favorite web browser and point to this URL: http://localhost/manual %prep %setup -q -n httpd-%{version} %patch1 -p1 -b .apctl %patch2 -p1 -b .apxs %patch3 -p1 -b .deplibs %patch5 -p1 -b .patchlayout %patch6 -p1 -b .apctlsystemd %patch7 -p1 -b .detectsystemd %patch23 -p1 -b .export %patch24 -p1 -b .corelimit #patch26 -p1 -b .r1337344+ %patch27 -p1 -b .icons %patch29 -p1 -b .systemd %patch30 -p1 -b .cachehardmax # No longer applies #patch31 -p1 -b .sslmultiproxy %patch34 -p1 -b .socketactivation #patch35 -p1 -b .sslciphdefault #patch44 -p1 -b .luaresume %patch100 -p1 -b .ab_source_address.droplet %patch101 -p0 -b .PR45994.droplet # Patch in vendor/release string sed "s/@RELEASE@/%{vstring}/" < %{PATCH20} | patch -p1 # forcibly prevent use of bundled apr, apr-util, pcre rm -rf srclib/{apr,apr-util,pcre} # fix apxs perl -pi \ -e 's|\@exp_installbuilddir\@|%{_libdir}/httpd/build|;' \ -e 's|get_vars\("prefix"\)|"%{_libdir}/httpd/build"|;' \ -e 's|get_vars\("sbindir"\) . "/envvars"|"\$installbuilddir/envvars"|;' \ support/apxs.in # correct perl paths find -type f -print0 | xargs -0 perl -pi \ -e 's|/usr/local/bin/perl|perl|g;' \ -e 's|/usr/local/bin/perl5|perl|g;' \ -e 's|/path/to/bin/perl|perl|g;' # bump max modules perl -pi \ -e 's/DYNAMIC_MODULE_LIMIT \d+/DYNAMIC_MODULE_LIMIT %{maxmodules}/;' \ include/httpd.h # bump server limit perl -pi \ -e 's/DEFAULT_SERVER_LIMIT \d+/DEFAULT_SERVER_LIMIT %{serverlimit}/' \ server/mpm/prefork/prefork.c \ server/mpm/worker/worker.c \ server/mpm/event/event.c # don't try to touch srclib perl -pi -e "s|^SUBDIRS = .*|SUBDIRS = os server modules support|g" Makefile.in # this will only work if configured correctly in the config (FullOs)... cp server/core.c server/core.c.untagged %build %serverbuild # regenerate configure scripts autoheader && autoconf || exit 1 export CFLAGS=$RPM_OPT_FLAGS ldflags_hacky_workaround_for_systemd_lib_not_added="-lsystemd " export LDFLAGS="${ldflags_hacky_workaround_for_systemd_lib_not_added}-Wl,-z,relro,-z,now" # Hard-code path to links to avoid unnecessary builddep export LYNX_PATH=/usr/bin/links %configure \ --prefix=%{_sysconfdir}/httpd \ --exec-prefix=%{_prefix} \ --bindir=%{_bindir} \ --sbindir=%{_sbindir} \ --mandir=%{_mandir} \ --libdir=%{_libdir} \ --sysconfdir=%{_sysconfdir}/httpd/conf \ --includedir=%{_includedir}/httpd \ --libexecdir=%{_libdir}/httpd/modules \ --datadir=%{contentdir} \ --enable-layout=Fedora \ --with-installbuilddir=%{_libdir}/httpd/build \ --enable-mpms-shared=all \ --with-apr=%{_bindir}/apr-1-config \ --with-apr-util=%{_bindir}/apu-1-config \ --enable-suexec \ --with-suexec \ --with-suexec-caller=%{suexec_caller} \ --with-suexec-userdir=public_html \ --with-suexec-docroot=%{docroot} \ --without-suexec-logfile \ --with-suexec-syslog \ --with-suexec-bin=%{_sbindir}/suexec \ --with-suexec-uidmin=500 \ --with-suexec-gidmin=500 \ --with-systemd \ --enable-systemd \ --enable-pie \ --with-pcre2 \ --enable-mods-shared=all \ --enable-ssl \ --with-ssl \ --disable-distcache \ --enable-proxy \ --enable-proxy-fdpass \ --enable-cache \ --enable-disk-cache \ --enable-ldap \ --enable-authnz-ldap \ --enable-cgid \ --enable-cgi \ --enable-authn-anon \ --enable-bucketeer \ --enable-case-filter \ --enable-case-filter-in \ --enable-cern_meta \ --enable-ident \ --enable-imagemap \ --enable-optional-fn-export \ --enable-optional-fn-import \ --enable-optional-hook-export \ --enable-optional-hook-import # parallel build fails on the build host %__make %install #export QA_SKIP_RPATHS=1 %make_install INSTALL_SUEXEC=setuid #Fix config_vars.mk, and add some MDK flags so all other modules #can simply do "apxs -q VARIABLE" and know, for example, the exact #release of apache-devel or the exact directory where the source is #located. CVMK="%{buildroot}%{_libdir}/httpd/build/config_vars.mk" perl -pi \ -e "s|%{_builddir}/httpd-%{version}|%{_usrsrc}/apache-%{version}|g;" \ -e "s|%{buildroot}||g;" \ -e "s|^EXTRA_INCLUDES.*|EXTRA_INCLUDES = `apr-1-config --includes` -I%{_includedir}/apache -I%{_includedir}/openssl|g;" \ $CVMK # fix libtool invocation perl -pi \ -e "s|^LIBTOOL.*|LIBTOOL = libtool|g;" \ -e "s|^SH_LIBTOOL.*|SH_LIBTOOL = libtool|g;" \ $CVMK echo "ap_version = %{version}" >> $CVMK echo "ap_release = %{release}" >> $CVMK # fix some bugs and other stuff perl -pi -e "s|%{_builddir}/httpd-%{version}|%{_usrsrc}/apache-%{version}|g" \ %{buildroot}%{_libdir}/httpd/build/apr_rules.mk # named config.nice files are in the devel package rm -f %{buildroot}%{_libdir}/httpd/build/config.nice # main configuration files install -m 644 %{SOURCE20} %{buildroot}%{_sysconfdir}/httpd/conf/httpd.conf # modules configuration files install -d -m 755 %{buildroot}%{confdir}/modules.d install -m 644 %{SOURCE30} %{buildroot}%{confdir}/modules.d/00_base.conf install -m 644 %{SOURCE31} %{buildroot}%{confdir}/modules.d/00_mpm.conf install -m 644 %{SOURCE32} %{buildroot}%{confdir}/modules.d/00_mod_lua.conf install -m 644 %{SOURCE33} %{buildroot}%{confdir}/modules.d/01_mod_cgi.conf install -m 644 %{SOURCE34} %{buildroot}%{confdir}/modules.d/00_mod_dav.conf install -m 644 %{SOURCE35} %{buildroot}%{confdir}/modules.d/00_mod_proxy.conf install -m 644 %{SOURCE36} %{buildroot}%{confdir}/modules.d/00_mod_proxy_html.conf install -m 644 %{SOURCE37} %{buildroot}%{confdir}/modules.d/00_mod_ssl.conf install -m 644 %{SOURCE38} %{buildroot}%{confdir}/modules.d/01_mod_ldap.conf install -m 644 %{SOURCE39} %{buildroot}%{confdir}/modules.d/00_mod_cache.conf install -m 644 %{SOURCE40} %{buildroot}%{confdir}/modules.d/02_mod_dbd.conf install -m 644 %{SOURCE41} %{buildroot}%{confdir}/modules.d/00_mod_suexec.conf install -m 644 %{SOURCE42} %{buildroot}%{confdir}/modules.d/00_mod_userdir.conf install -m 644 %{SOURCE43} %{buildroot}%{confdir}/modules.d/00_mod_systemd.conf install -m 644 %{SOURCE44} %{buildroot}%{confdir}/modules.d/01_mod_session.conf install -m 644 %{SOURCE45} %{buildroot}%{confdir}/modules.d/01_mod_http2.conf install -m 644 %{SOURCE46} %{buildroot}%{confdir}/modules.d/10_mod_brotli.conf # generic server configuration files install -d -m 755 %{buildroot}%{confdir}/conf.d install -m 644 %{SOURCE50} %{buildroot}%{confdir}/conf.d/security.conf install -m 644 %{SOURCE51} %{buildroot}%{confdir}/conf.d/ssl.conf for file in mpm multilang-errordoc autoindex languages info userdir; do install -m 644 docs/conf/extra/httpd-$file.conf \ %{buildroot}%{confdir}/conf.d/$file.conf done cat >> %{buildroot}%{confdir}/conf.d/userdir.conf <<EOF <Directory "/home/*/public_html/cgi-bin"> Options ExecCGI SetHandler cgi-script </Directory> EOF # sites configuration files install -d -m 755 %{buildroot}%{confdir}/sites.d install -m 644 %{SOURCE60} %{buildroot}%{confdir}/sites.d/00_default_vhosts.conf install -m 644 %{SOURCE61} %{buildroot}%{confdir}/sites.d/00_default_ssl_vhost.conf install -m 644 docs/conf/extra/httpd-manual.conf \ %{buildroot}%{confdir}/sites.d/manual.conf # compatibility symlinks pushd %{buildroot}%{confdir} ln -s sites.d webapps.d ln -s sites.d vhosts.d popd # fix a msec safe cache for the ssl stuff install -d %{buildroot}/var/cache/httpd/mod_ssl touch %{buildroot}/var/cache/httpd/mod_ssl/scache.dir touch %{buildroot}/var/cache/httpd/mod_ssl/scache.pag touch %{buildroot}/var/cache/httpd/mod_ssl/scache.sem # fix a msec safe cache for the mod_ldap LDAPSharedCacheFile touch %{buildroot}/var/cache/httpd/mod_ldap_cache install -d -m 755 %{buildroot}/var/cache/httpd/mod_proxy install -d -m 755 %{buildroot}/var/lib/dav # htcacheclean files install -D -m 644 %{SOURCE9} %{buildroot}%{_unitdir}/htcacheclean.service install -D -m 644 %{SOURCE10} %{buildroot}%{_sysconfdir}/sysconfig/htcacheclean # httpd files install -D -p -m 644 %{SOURCE14} %{buildroot}%{_tmpfilesdir}/httpd.conf install -D -p -m 644 %{SOURCE15} %{buildroot}%{_unitdir}/httpd.service install -D -p -m 644 %{SOURCE16} %{buildroot}%{_sysconfdir}/sysconfig/httpd # fix man page paths sed -e "s|/usr/local/apache2|/etc/httpd|" \ < docs/man/httpd.8 > $RPM_BUILD_ROOT%{_mandir}/man8/httpd.8 # rpm macros install -d -m 755 %{buildroot}%{_rpmmacrodir} cat > %{buildroot}%{_rpmmacrodir}/macros.httpd <<EOF %%_httpd_apxs %%{_bindir}/apxs %%_httpd_confdir %{confdir} %%_httpd_modconfdir %{confdir}/modules.d %%_httpd_siteconfdir %{confdir}/sites.d %%_httpd_extconfdir %{confdir}/conf.d %%_httpd_contentdir %{contentdir} %%_httpd_moddir %%{_libdir}/httpd/modules EOF %multiarch_includes %{buildroot}%{_includedir}/httpd/ap_config_layout.h # cleanup rm -f %{buildroot}/var/www/html/* rm -f %{buildroot}/var/www/cgi-bin/* rm -f %{buildroot}%{_sysconfdir}/httpd/conf/mime.types rm -rf %{buildroot}%{_sysconfdir}/httpd/conf/{extra,original} # make some dangling soft links pushd %{buildroot}%{_sysconfdir}/httpd ln -s ../..%{_localstatedir}/log/httpd logs ln -s ../..%{_libdir}/httpd/modules modules ln -s ../..%{_libdir}/httpd/build build ln -s /run/httpd run popd # install log rotation stuff install -d -m 755 %{buildroot}%{_sysconfdir}/logrotate.d cat > %{buildroot}%{_sysconfdir}/logrotate.d/httpd << EOF /var/log/httpd/*_log /var/log/httpd/apache_runtime_status /var/log/httpd/ssl_mutex { rotate 5 monthly missingok notifempty sharedscripts nocompress postrotate /bin/systemctl reload httpd.service > /dev/null 2>/dev/null || true endscript } EOF # (dw) mpm packages don't automatically cause a restart, because on upgrade # there will already be 2 restarts due to the main package and the modules, and # if you want to run an mpm other than prefork, that has to be configured # manually (via systemctl for systemd or sysconfig for sysvinit), so automatic # restart is not appropriate. Apache modules cause a restart via filetriggers, # so that a restart can be done for modules, but only once, even if some of the # modules are coming from other SRPMS. Also, filetriggers are run right before # posttrans, and this is important because on Apache version upgrades, the mpm # needs to be upgraded before a restart because the modules may be dependent on # new symbols in httpd. %post %_tmpfilescreate httpd %_post_service httpd %preun %_preun_service httpd %post mod_ldap %create_ghostfile /var/cache/httpd/mod_ldap_cache apache root 0600 %post mod_ssl %_create_ssl_certificate httpd # create some ghost files %create_ghostfile /var/cache/httpd/mod_ssl/scache.dir apache root 0600 %create_ghostfile /var/cache/httpd/mod_ssl/scache.pag apache root 0600 %create_ghostfile /var/cache/httpd/mod_ssl/scache.sem apache root 0600 %post htcacheclean %_post_service htcacheclean %preun htcacheclean %_preun_service htcacheclean %transfiletriggerin -p /usr/bin/perl -- /etc/httpd/conf/modules.d/ /etc/httpd/conf/sites.d/ /etc/httpd/conf/conf.d/ /etc/httpd/conf/webapps.d/ use strict; my (%installed, %removed); while (my $line = <STDIN>) { my ($operation, $file) = $line =~ /^(.)(\S+)$/; if ($operation eq '+') { $installed{$file} = 1; } else { $removed{$file} = 1; } } my @new_files = grep { !$removed{$_} } keys %installed; my @old_files = grep { !$installed{$_} } keys %removed; # if there configuration files added or removed, a restart is needed if (@new_files || @old_files) { system('systemctl try-restart httpd.service'); } else { system('systemctl try-reload-or-restart httpd.service'); } %files %doc ABOUT_APACHE README CHANGES LICENSE VERSIONING NOTICE %doc docs/conf/extra/*.conf %config(noreplace) %{_sysconfdir}/sysconfig/httpd %config(noreplace) %{_sysconfdir}/logrotate.d/httpd %dir %{_sysconfdir}/httpd %exclude %{_sysconfdir}/httpd/conf/conf.d/ssl.conf %dir %{_sysconfdir}/httpd/conf/conf.d %dir %{_sysconfdir}/httpd/conf/sites.d %dir %{_sysconfdir}/httpd/conf/modules.d %{_sysconfdir}/httpd/conf/vhosts.d %{_sysconfdir}/httpd/conf/webapps.d %{_sysconfdir}/httpd/logs %{_sysconfdir}/httpd/modules %{_sysconfdir}/httpd/run %config(noreplace) %{_sysconfdir}/httpd/conf/httpd.conf %config(noreplace) %{_sysconfdir}/httpd/conf/magic %config(noreplace) %{_sysconfdir}/httpd/conf/modules.d/00_base.conf %config(noreplace) %{_sysconfdir}/httpd/conf/modules.d/00_mpm.conf %config(noreplace) %{_sysconfdir}/httpd/conf/modules.d/01_mod_cgi.conf %config(noreplace) %{_sysconfdir}/httpd/conf/modules.d/00_mod_lua.conf %config(noreplace) %{_sysconfdir}/httpd/conf/modules.d/00_mod_systemd.conf %config(noreplace) %{_sysconfdir}/httpd/conf/sites.d/00_default_vhosts.conf %config(noreplace) %{_sysconfdir}/httpd/conf/conf.d/*.conf %exclude %{_sysconfdir}/httpd/conf/conf.d/userdir.conf %{_tmpfilesdir}/httpd.conf %{_unitdir}/httpd.service %{_datadir}/httpd %exclude %{_datadir}/httpd/manual /var/www/cgi-bin %{_bindir}/ab %{_bindir}/dbmmanage %{_bindir}/htdbm %{_bindir}/htdigest %{_bindir}/htpasswd %{_bindir}/httxt2dbm %{_bindir}/logresolve %{_sbindir}/apachectl %{_sbindir}/checkgid %{_sbindir}/rotatelogs %{_sbindir}/fcgistarter %{_sbindir}/httpd %{_libdir}/httpd/modules/mod_mpm_event.so %{_libdir}/httpd/modules/mod_mpm_prefork.so %{_libdir}/httpd/modules/mod_mpm_worker.so %{_libdir}/httpd/modules/mod_actions.so %{_libdir}/httpd/modules/mod_alias.so %{_libdir}/httpd/modules/mod_asis.so %{_libdir}/httpd/modules/mod_auth_basic.so %{_libdir}/httpd/modules/mod_auth_digest.so %{_libdir}/httpd/modules/mod_authn_anon.so %{_libdir}/httpd/modules/mod_authn_dbm.so %{_libdir}/httpd/modules/mod_authn_file.so %{_libdir}/httpd/modules/mod_authz_dbm.so %{_libdir}/httpd/modules/mod_authz_groupfile.so %{_libdir}/httpd/modules/mod_authz_host.so %{_libdir}/httpd/modules/mod_authz_owner.so %{_libdir}/httpd/modules/mod_authz_user.so %{_libdir}/httpd/modules/mod_autoindex.so %{_libdir}/httpd/modules/mod_bucketeer.so %{_libdir}/httpd/modules/mod_case_filter_in.so %{_libdir}/httpd/modules/mod_case_filter.so %{_libdir}/httpd/modules/mod_cern_meta.so %{_libdir}/httpd/modules/mod_cgid.so %{_libdir}/httpd/modules/mod_cgi.so %{_libdir}/httpd/modules/mod_charset_lite.so %{_libdir}/httpd/modules/mod_dir.so %{_libdir}/httpd/modules/mod_dumpio.so %{_libdir}/httpd/modules/mod_echo.so %{_libdir}/httpd/modules/mod_env.so %{_libdir}/httpd/modules/mod_expires.so %{_libdir}/httpd/modules/mod_ext_filter.so %{_libdir}/httpd/modules/mod_filter.so %{_libdir}/httpd/modules/mod_headers.so %{_libdir}/httpd/modules/mod_ident.so %{_libdir}/httpd/modules/mod_imagemap.so %{_libdir}/httpd/modules/mod_include.so %{_libdir}/httpd/modules/mod_info.so %{_libdir}/httpd/modules/mod_log_config.so %{_libdir}/httpd/modules/mod_log_forensic.so %{_libdir}/httpd/modules/mod_logio.so %{_libdir}/httpd/modules/mod_macro.so %{_libdir}/httpd/modules/mod_md.so %{_libdir}/httpd/modules/mod_mime_magic.so %{_libdir}/httpd/modules/mod_mime.so %{_libdir}/httpd/modules/mod_negotiation.so %{_libdir}/httpd/modules/mod_optional_fn_export.so %{_libdir}/httpd/modules/mod_optional_fn_import.so %{_libdir}/httpd/modules/mod_optional_hook_export.so %{_libdir}/httpd/modules/mod_optional_hook_import.so %{_libdir}/httpd/modules/mod_rewrite.so %{_libdir}/httpd/modules/mod_setenvif.so %{_libdir}/httpd/modules/mod_speling.so %{_libdir}/httpd/modules/mod_status.so %{_libdir}/httpd/modules/mod_substitute.so %{_libdir}/httpd/modules/mod_unique_id.so %{_libdir}/httpd/modules/mod_usertrack.so %{_libdir}/httpd/modules/mod_version.so %{_libdir}/httpd/modules/mod_vhost_alias.so %{_libdir}/httpd/modules/mod_access_compat.so %{_libdir}/httpd/modules/mod_allowmethods.so %{_libdir}/httpd/modules/mod_authn_core.so %{_libdir}/httpd/modules/mod_authn_socache.so %{_libdir}/httpd/modules/mod_authz_core.so %{_libdir}/httpd/modules/mod_buffer.so %{_libdir}/httpd/modules/mod_data.so %{_libdir}/httpd/modules/mod_deflate.so %{_libdir}/httpd/modules/mod_dialup.so %{_libdir}/httpd/modules/mod_file_cache.so %{_libdir}/httpd/modules/mod_heartbeat.so %{_libdir}/httpd/modules/mod_heartmonitor.so %{_libdir}/httpd/modules/mod_log_debug.so %{_libdir}/httpd/modules/mod_lua.so %{_libdir}/httpd/modules/mod_ratelimit.so %{_libdir}/httpd/modules/mod_reflector.so %{_libdir}/httpd/modules/mod_remoteip.so %{_libdir}/httpd/modules/mod_request.so %{_libdir}/httpd/modules/mod_reqtimeout.so %{_libdir}/httpd/modules/mod_sed.so %{_libdir}/httpd/modules/mod_slotmem_plain.so %{_libdir}/httpd/modules/mod_slotmem_shm.so %{_libdir}/httpd/modules/mod_socache_dbm.so %{_libdir}/httpd/modules/mod_socache_memcache.so %{_libdir}/httpd/modules/mod_socache_redis.so %{_libdir}/httpd/modules/mod_socache_shmcb.so %{_libdir}/httpd/modules/mod_unixd.so %{_libdir}/httpd/modules/mod_watchdog.so %{_libdir}/httpd/modules/mod_systemd.so %{_libdir}/httpd/modules/httpd.exp %dir /var/log/httpd %dir %{_libdir}/httpd %attr(0700,apache,root) %dir /var/cache/httpd %exclude %{_mandir}/man8/htcacheclean.8* %exclude %{_mandir}/man8/suexec.8* %exclude %{_mandir}/man1/apxs.1* %{_mandir}/*/* %files mod_proxy %doc modules/proxy/CHANGES %config(noreplace) %{confdir}/modules.d/00_mod_proxy.conf %{_libdir}/httpd/modules/mod_proxy.so %{_libdir}/httpd/modules/mod_lbmethod_bybusyness.so %{_libdir}/httpd/modules/mod_lbmethod_byrequests.so %{_libdir}/httpd/modules/mod_lbmethod_bytraffic.so %{_libdir}/httpd/modules/mod_lbmethod_heartbeat.so %{_libdir}/httpd/modules/mod_proxy_ajp.so %{_libdir}/httpd/modules/mod_proxy_balancer.so %{_libdir}/httpd/modules/mod_proxy_connect.so %{_libdir}/httpd/modules/mod_proxy_express.so %{_libdir}/httpd/modules/mod_proxy_fcgi.so %{_libdir}/httpd/modules/mod_proxy_fdpass.so %{_libdir}/httpd/modules/mod_proxy_ftp.so %{_libdir}/httpd/modules/mod_proxy_hcheck.so %{_libdir}/httpd/modules/mod_proxy_http.so %{_libdir}/httpd/modules/mod_proxy_scgi.so %{_libdir}/httpd/modules/mod_proxy_uwsgi.so %{_libdir}/httpd/modules/mod_proxy_wstunnel.so %attr(0770,apache,root) %dir /var/cache/httpd/mod_proxy %files mod_proxy_html %config(noreplace) %{confdir}/modules.d/00_mod_proxy_html.conf %{_libdir}/httpd/modules/mod_proxy_html.so %{_libdir}/httpd/modules/mod_xml2enc.so %files mod_dav %config(noreplace) %{confdir}/modules.d/00_mod_dav.conf %{_libdir}/httpd/modules/mod_dav_fs.so %{_libdir}/httpd/modules/mod_dav_lock.so %{_libdir}/httpd/modules/mod_dav.so %attr(-,apache,apache) %dir /var/lib/dav %files mod_ldap %config(noreplace) %{confdir}/modules.d/01_mod_ldap.conf %{_libdir}/httpd/modules/mod_ldap.so %{_libdir}/httpd/modules/mod_authnz_ldap.so %attr(0600,apache,root) %ghost /var/cache/httpd/mod_ldap_cache %files mod_session %config(noreplace) %{confdir}/modules.d/01_mod_session.conf %{_libdir}/httpd/modules/mod_session.so %{_libdir}/httpd/modules/mod_session_cookie.so %{_libdir}/httpd/modules/mod_session_crypto.so %{_libdir}/httpd/modules/mod_auth_form.so %files mod_cache %config(noreplace) %{confdir}/modules.d/00_mod_cache.conf %{_libdir}/httpd/modules/mod_cache.so %{_libdir}/httpd/modules/mod_cache_disk.so %{_libdir}/httpd/modules/mod_cache_socache.so %files mod_suexec %config(noreplace) %{confdir}/modules.d/00_mod_suexec.conf %{_libdir}/httpd/modules/mod_suexec.so %attr(4710,root,apache) %{_sbindir}/suexec %{_mandir}/man8/suexec.8* %files mod_userdir %config(noreplace) %{confdir}/modules.d/00_mod_userdir.conf %config(noreplace) %{confdir}/conf.d/userdir.conf %{_libdir}/httpd/modules/mod_userdir.so %files mod_ssl %config(noreplace) %{confdir}/modules.d/00_mod_ssl.conf %config(noreplace) %{confdir}/conf.d/ssl.conf %config(noreplace) %{confdir}/sites.d/00_default_ssl_vhost.conf %{_libdir}/httpd/modules/mod_ssl.so %attr(0700,apache,root) %dir /var/cache/httpd/mod_ssl %attr(0600,apache,root) %ghost /var/cache/httpd/mod_ssl/scache.dir %attr(0600,apache,root) %ghost /var/cache/httpd/mod_ssl/scache.pag %attr(0600,apache,root) %ghost /var/cache/httpd/mod_ssl/scache.sem %files mod_dbd %config(noreplace) %{confdir}/modules.d/02_mod_dbd.conf %{_libdir}/httpd/modules/mod_dbd.so %{_libdir}/httpd/modules/mod_authn_dbd.so %{_libdir}/httpd/modules/mod_authz_dbd.so %{_libdir}/httpd/modules/mod_session_dbd.so %files mod_http2 %config(noreplace) %{confdir}/modules.d/01_mod_http2.conf %{_libdir}/httpd/modules/mod_http2.so %files mod_brotli %config(noreplace) %{confdir}/modules.d/10_mod_brotli.conf %{_libdir}/httpd/modules/mod_brotli.so %files htcacheclean %{_unitdir}/htcacheclean.service %config(noreplace) %{_sysconfdir}/sysconfig/htcacheclean %{_sbindir}/htcacheclean %{_mandir}/man8/htcacheclean.8* %files devel %multiarch %{multiarch_includedir}/httpd/ap_config_layout.h %{_includedir}/httpd %{_libdir}/httpd/build %{_sysconfdir}/httpd/build %{_rpmmacrodir}/macros.httpd %{_sbindir}/envvars %{_sbindir}/envvars-std %{_bindir}/apxs %{_mandir}/man1/apxs.1* %files doc %config(noreplace) %{confdir}/sites.d/manual.conf %{_datadir}/httpd/manual %changelog * Fri Apr 05 2024 kekepower <kekepower> 2.4.59-1.mga9 + Revision: 2054489 - Update to version 2.4.59 to fix CVE-2024-27316 (mga#33059) - Update to version 2.4.58 (mga#32415) * Fri Apr 14 2023 daviddavid <daviddavid> 2.4.57-3.mga9 + Revision: 1952919 - devel sub-pkg requires also pcre2-devel * Thu Apr 13 2023 daviddavid <daviddavid> 2.4.57-2.mga9 + Revision: 1952890 - switch to pcre2 (mga#31791) * Fri Apr 07 2023 kekepower <kekepower> 2.4.57-1.mga9 + Revision: 1951701 - Update to version 2.4.57 - Remove patches from Debian * Fri Apr 07 2023 kekepower <kekepower> 2.4.56-3.mga9 + Revision: 1951687 - The file mod_authz_dbd.so moved from main pkg to the mod_dbd pkg * Mon Apr 03 2023 kekepower <kekepower> 2.4.56-2.mga9 + Revision: 1951324 - Add 2 patches from Debian that fixes regressions in o mod_rewrite (debian#1033284) o http2 (debian#1033408) * Tue Mar 07 2023 kekepower <kekepower> 2.4.56-1.mga9 + Revision: 1948157 - Update to version 2.4.56 - Fixes CVE-2023-27522 and CVE-2023-25690 * Thu Jan 19 2023 mokraemer <mokraemer> 2.4.55-2.mga9 + Revision: 1934454 - transfiletriggerin was monitoring nonexistent directories * Wed Jan 18 2023 kekepower <kekepower> 2.4.55-1.mga9 + Revision: 1934281 - Update to version 2.4.55 * Sat Jan 07 2023 wally <wally> 2.4.54-4.mga9 + Revision: 1930982 - move rpm macros into /usr/lib/rpm/macros.d * Tue Jan 03 2023 umeabot <umeabot> 2.4.54-3.mga9 + Revision: 1929526 - Rebuild to use libldap-2.5 instead of 2.4 * Mon Jul 18 2022 luigiwalser <luigiwalser> 2.4.54-2.mga9 + Revision: 1869370 - possibly fix systemctl command in file trigger for modules (mga#30543) - fix multiple consecutive reloads of httpd service by logrotate (mga#29620) * Wed Jun 08 2022 kekepower <kekepower> 2.4.54-1.mga9 + Revision: 1863605 - Update to version 2.4.54 * Mon Mar 14 2022 kekepower <kekepower> 2.4.53-1.mga9 + Revision: 1790985 - Update to version 2.4.53 * Mon Dec 20 2021 tmb <tmb> 2.4.52-1.mga9 + Revision: 1763028 - update to 2.4.52 * Sun Oct 17 2021 cjw <cjw> 2.4.51-2.mga9 + Revision: 1752023 - patch102: fix unresolved symbol in mod_ssl * Thu Oct 07 2021 kekepower <kekepower> 2.4.51-1.mga9 + Revision: 1749951 - Update to version 2.4.51 * Tue Oct 05 2021 kekepower <kekepower> 2.4.50-1.mga9 + Revision: 1749560 - Update to version 2.4.50 * Sat Oct 02 2021 guillomovitch <guillomovitch> 2.4.49-3.mga9 + Revision: 1747378 - rebuild for openssl 3.0.0 * Wed Sep 29 2021 ns80 <ns80> 2.4.49-2.mga9 + Revision: 1746860 - add patches from Ubuntu to fix a regression in 2.4.49 (mga#29497) * Sun Sep 19 2021 kekepower <kekepower> 2.4.49-1.mga9 + Revision: 1745968 - Update to version 2.4.49 * Thu Jun 10 2021 tmb <tmb> 2.4.48-2.mga9 + Revision: 1730337 - rebuild with fixed apr + ns80 <ns80> - new version 2.4.48 for CVE-2019-17567, CVE-2020-13950, CVE-2020-35452, CVE-2021-2669[01], CVE-2021-30641, CVE-2021-31618 (mga#29087) * Sun Apr 11 2021 wally <wally> 2.4.46-3.mga9 + Revision: 1714716 - add Fedora patch to rebuild with lua 5.4 * Fri Aug 21 2020 tv <tv> 2.4.46-2.mga8 + Revision: 1617451 - make devel pkg requires systemd-devel b/c config_vars.mk references -lsystemd this will fix all apache modules failures in autobuild * Fri Aug 07 2020 shlomif <shlomif> 2.4.46-1.mga8 + Revision: 1611951 - mga#27058 ; new bugfix ver 2.4.46 * Tue Apr 14 2020 ovitters <ovitters> 2.4.43-2.mga8 + Revision: 1567305 - drop makedev require in mod_ssl subpackage * Thu Apr 02 2020 shlomif <shlomif> 2.4.43-1.mga8 + Revision: 1564011 - New version 2.4.43 * Tue Feb 18 2020 umeabot <umeabot> 2.4.41-4.mga8 + Revision: 1541347 - Mageia 8 Mass Rebuild + wally <wally> - replace deprecated %%configure2_5x * Wed Dec 25 2019 tmb <tmb> 2.4.41-3.mga8 + Revision: 1469992 - mod_dbd: only load mod_session_dbd if mod_session is available * Wed Dec 25 2019 tmb <tmb> 2.4.41-2.mga8 + Revision: 1469988 - bump rel - mod_session: mod_auth_form requires mod_request (mga#25316) * Sat Aug 17 2019 shlomif <shlomif> 2.4.41-1.mga8 + Revision: 1429588 - New version 2.4.41 - security fix for MGA#25316 + mokraemer <mokraemer> - add check for php-fpm * Sun Apr 21 2019 shlomif <shlomif> 2.4.39-1.mga7 + Revision: 1394385 - New version 2.4.39 * Sat Feb 02 2019 luigiwalser <luigiwalser> 2.4.38-1.mga7 + Revision: 1362615 - 2.4.38 + bcornec <bcornec> - Fix load ordering of apache modules mod_dbd being after mod_session * Thu Oct 25 2018 guillomovitch <guillomovitch> 2.4.37-3.mga7 + Revision: 1325511 - drop obsolete 2.2 -> 2.4 update documentation * Wed Oct 24 2018 bcornec <bcornec> 2.4.37-2.mga7 + Revision: 1325079 - update to upstream apache 2.4.37 * Sun Oct 21 2018 bcornec <bcornec> 2.4.35-2.mga7 + Revision: 1323393 - SLIENT: working version of the previous patch - adding a dependency on curl-devel checked by configure and not found on build system by default * Sun Oct 21 2018 bcornec <bcornec> 2.4.35-1.mga7 + Revision: 1323359 - Update to upstream apache 2.4.35 to help fix mga#22833 * Fri Sep 21 2018 umeabot <umeabot> 2.4.33-2.mga7 + Revision: 1294375 - Mageia 7 Mass Rebuild * Tue Mar 27 2018 shlomif <shlomif> 2.4.33-1.mga7 + Revision: 1212748 - New version 2.4.33 ( MGA#22833 ) * Fri Dec 22 2017 wally <wally> 2.4.29-4.mga7 + Revision: 1184010 - don't hardcode brotli lib requires to mod_brotli (lib reqs are autogenerated) * Tue Dec 19 2017 mitya <mitya> 2.4.29-3.mga7 + Revision: 1183312 - Add missing quotes in security.conf (breaks Augeas and certbot-apache) * Sun Nov 12 2017 zezinho <zezinho> 2.4.29-2.mga7 + Revision: 1177065 - add mod_brotli to the apache modules * Tue Oct 24 2017 shlomif <shlomif> 2.4.29-1.mga7 + Revision: 1173231 - New version 2.4.29 fixing MGA#21741 . * Sat Oct 14 2017 shlomif <shlomif> 2.4.28-1.mga7 + Revision: 1171836 - New version 2.4.28 + pterjan <pterjan> - Update mod_systemd patch from fedora * Wed Sep 20 2017 shlomif <shlomif> 2.4.27-5.mga7 + Revision: 1156237 - Revert prev change because it was not helpful. - Hopefully fix BRs away from pkgconfig ones to fix build fails. - Apply patch for MGA#21741 ("optionsbleed" / CVE-2017-9798 ; security). * Wed Aug 02 2017 guillomovitch <guillomovitch> 2.4.27-2.mga7 + Revision: 1133961 - rebuild for latest openssl * Sun Jul 16 2017 shlomif <shlomif> 2.4.27-1.mga7 + Revision: 1123865 - New version 2.4.27 - Fix some typos. ( MGA#21119 + other stuff.) * Tue Jun 20 2017 shlomif <shlomif> 2.4.26-1.mga6 + Revision: 1107940 - New version 2.4.26 - fix for bugs - MGA#20002 . * Mon Dec 26 2016 luigiwalser <luigiwalser> 2.4.25-2.mga6 + Revision: 1077896 - remove CVE patches for issues fixed in 2.4.25 * Sat Dec 24 2016 shlomif <shlomif> 2.4.25-1.mga6 + Revision: 1077190 - New version 2.4.25 with bug fixes ( MGA#20002 ). * Sun Dec 11 2016 ngompa <ngompa> 2.4.23-5.mga6 + Revision: 1074168 - Lower max ncpus per luigiwalser, bump suexec uid/gid min to 500 - Remove unneeded %%pretrans * Mon Dec 05 2016 luigiwalser <luigiwalser> 2.4.23-3.mga6 + Revision: 1072633 - add upstream patch to fix CVE-2016-8740 * Tue Jul 19 2016 luigiwalser <luigiwalser> 2.4.23-2.mga6 + Revision: 1042580 - rediff patch from redhat to fix CVE-2016-5387 * Wed Jul 06 2016 tmb <tmb> 2.4.23-1.mga6 + Revision: 1039075 - update to 2.4.23 (CVE-2016-4979) - fix build with systemd 230 * Tue Jun 21 2016 shlomif <shlomif> 2.4.20-3.mga6 + Revision: 1037062 - Convert tabs to spaces - rpmlint - Remove trailing space - Hopefully Fix mod_dav (MGA#18747). * Sat Apr 16 2016 oden <oden> 2.4.20-2.mga6 + Revision: 1002970 - rebuilt because sometimes mod_systemd.so builds and sometimes not (#1) - 2.4.20 * Wed Mar 02 2016 umeabot <umeabot> 2.4.18-4.mga6 + Revision: 983140 - Rebuild for openssl * Wed Mar 02 2016 oden <oden> 2.4.18-3.mga6 + Revision: 983110 - fix deps - rebuilt against openssl-1.0.2g & nghttp2-1.8.0 * Sun Dec 27 2015 oden <oden> 2.4.18-2.mga6 + Revision: 915744 - rebuild * Fri Dec 18 2015 oden <oden> 2.4.18-1.mga6 + Revision: 911565 - 2.4.18 - P31: sync with fedora - fix deps according to specs * Thu Nov 05 2015 oden <oden> 2.4.17-1.2.mga6 + Revision: 897988 - crap. mod_http2.so got packaged twice. * Thu Nov 05 2015 oden <oden> 2.4.17-1.1.mga6 + Revision: 897980 - mod_systemd FTBS, sometimes - 2.4.17 - sync with fedora rawhide - rediff patches - revert the mod_http2 config add... - add the new mod_http2 as deactivated in the config - fix broken config (wtf?) * Sun Sep 06 2015 tv <tv> 2.4.10-18.mga6 + Revision: 873222 - switch to new upstream file trigger syntax * Tue Jul 21 2015 luigiwalser <luigiwalser> 2.4.10-17.mga6 + Revision: 855965 - rediff upstream patches to fix CVE-2015-3183 and CVE-2015-3185 * Thu May 07 2015 luigiwalser <luigiwalser> 2.4.10-16.mga5 + Revision: 821400 - disable SSLv3 by default * Thu Mar 05 2015 luigiwalser <luigiwalser> 2.4.10-15.mga5 + Revision: 817894 - add patch from upstream via opensuse to fix CVE-2015-0228 + pterjan <pterjan> - Fix m4 for enabling systemd plugin * Wed Feb 04 2015 luigiwalser <luigiwalser> 2.4.10-12.mga5 + Revision: 813436 - add patch from fedora to fix CVE-2014-3583 * Tue Dec 30 2014 luigiwalser <luigiwalser> 2.4.10-11.mga5 + Revision: 807327 - add patch from opensuse to fix CVE-2014-8109 * Wed Dec 10 2014 luigiwalser <luigiwalser> 2.4.10-8.mga5 + Revision: 802601 - add patch from redhat to fix CVE-2013-5704 - add upstream patch to fix CVE-2014-3581 * Wed Oct 15 2014 umeabot <umeabot> 2.4.10-6.mga5 + Revision: 750397 - Second Mageia 5 Mass Rebuild * Sat Sep 27 2014 tv <tv> 2.4.10-5.mga5 + Revision: 725942 - rebuild for missing pythoneggs deps * Tue Sep 16 2014 umeabot <umeabot> 2.4.10-4.mga5 + Revision: 677787 - Mageia 5 Mass Rebuild + tv <tv> - s/uggests:/Recommends:/ * Thu Sep 04 2014 colin <colin> 2.4.10-3.mga5 + Revision: 672006 - Update systemd patches from Fedora + joequant <joequant> - update patch to see systemd 216 libraries - rebuild with new systemd * Tue Jul 22 2014 luigiwalser <luigiwalser> 2.4.10-2.mga5 + Revision: 655575 - 2.4.10 - remove upstreamed patch 32 - rediff patch 100 * Sun Jun 29 2014 tv <tv> 2.4.9-4.mga5 + Revision: 641019 - rebuild with lua-5.2 * Tue Apr 29 2014 guillomovitch <guillomovitch> 2.4.9-3.mga5 + Revision: 618886 - revert to lua 5.2, mod_lua seems broken with lua 5.2 * Mon Apr 07 2014 guillomovitch <guillomovitch> 2.4.9-2.mga5 + Revision: 612619 - build against lua 5.2 instead of 5.1 - use pristine mod_userdir default configuration * Tue Mar 18 2014 oden <oden> 2.4.9-1.mga5 + Revision: 604827 - P1: restored from fedora, deactivated, needs some work - P58: drop, applied upstream - P2: rediff - 2.4.9 * Wed Jan 15 2014 luigiwalser <luigiwalser> 2.4.7-5.mga4 + Revision: 566606 - allow main apache package to be upgraded before the modules (mga#12277) * Tue Jan 07 2014 pterjan <pterjan> 2.4.7-4.mga4 + Revision: 565488 - Don't tell configure we use capabilities if we actually use suid suexec - pass INSTALL_SUEXEC=setuid to make install, configure fails to change it in Makefile.in, breaking build + guillomovitch <guillomovitch> - split mod_session in a subpackage, to enforce apr-util-openssl dependency (#12111) * Sat Nov 30 2013 colin <colin> 2.4.7-2.mga4 + Revision: 554301 - Fix bug introduced in the systemd service in the last update - Restore bug reference comments in systemd service which explains the somewhat odd workarounds * Fri Nov 29 2013 guillomovitch <guillomovitch> 2.4.7-1.mga4 + Revision: 554066 - new version 2.4.7 - sync with fedora patchset - sync systemd unit with fedora * Sat Oct 19 2013 umeabot <umeabot> 2.4.6-5.mga4 + Revision: 533701 - Mageia 4 Mass Rebuild * Tue Sep 03 2013 luigiwalser <luigiwalser> 2.4.6-4.mga4 + Revision: 474907 - rpm no longer allows listing a symlink to a directory as a dir in files - rpm no longer allows listing a symlink to a directory as a dir in files * Tue Jul 23 2013 colin <colin> 2.4.6-3.mga4 + Revision: 457508 - Really fix pretrans scriptlet (mga#10178) * Tue Jul 23 2013 luigiwalser <luigiwalser> 2.4.6-2.mga4 + Revision: 457459 - activate trigger on webapps.d directory (mga#10275) - fix pretrans scriptlet for when sites.d already exists on upgrade (mga#10178) * Mon Jul 22 2013 oden <oden> 2.4.6-1.mga4 + Revision: 457312 - 2.4.6 * Wed Jun 19 2013 colin <colin> 2.4.4-8.mga4 + Revision: 445135 - Add workaround for deadlocks on stop/restart (rhbz#912288 and rhbz#952634) * Sat Apr 06 2013 blino <blino> 2.4.4-7.mga3 + Revision: 408458 - use mkdir -p in pretrans scriptlet to avoid error on first install * Thu Apr 04 2013 luigiwalser <luigiwalser> 2.4.4-6.mga3 + Revision: 407569 - fix userdir configuration again * Wed Apr 03 2013 guillomovitch <guillomovitch> 2.4.4-5.mga3 + Revision: 407560 - add README.update.urpmi to advertise setup changes * Mon Mar 25 2013 guillomovitch <guillomovitch> 2.4.4-4.mga3 + Revision: 405238 - take advantage of mod_systemd for controlling apache (fix #9434) - use systemd service for htcacheclean instead of initscript - keep original fedora patches verbatim * Sun Mar 24 2013 colin <colin> 2.4.4-3.mga3 + Revision: 405136 - Use tmpfiles macros and add system version to requires (mga#9302) * Tue Feb 26 2013 oden <oden> 2.4.4-1.mga3 + Revision: 400366 - 2.4.4 (fixes CVE-2012-3499, CVE-2012-4558) - rediffed P23, P26, P28, P100 - added mod_systemd from httpd-2.4.3-17.fc19.src.rpm * Fri Feb 08 2013 luigiwalser <luigiwalser> 2.4.3-9.mga3 + Revision: 395248 - rework conflict prevention script to work within pretrans * Wed Jan 23 2013 luigiwalser <luigiwalser> 2.4.3-8.mga3 + Revision: 391679 - fix userdir configuration * Tue Jan 15 2013 luigiwalser <luigiwalser> 2.4.3-7.mga3 + Revision: 388404 - use pretrans instead of pre to work around rpm 4.11 issue * Fri Jan 11 2013 umeabot <umeabot> 2.4.3-6.mga3 + Revision: 345632 - Mass Rebuild - https://wiki.mageia.org/en/Feature:Mageia3MassRebuild * Sat Dec 01 2012 fwang <fwang> 2.4.3-5.mga3 + Revision: 323699 - rebuild for new pcre * Tue Nov 20 2012 guillomovitch <guillomovitch> 2.4.3-4.mga3 + Revision: 319896 - fix manual configuration (#8141) * Fri Oct 05 2012 guillomovitch <guillomovitch> 2.4.3-3.mga3 + Revision: 302878 - add a dependency on mailcap for /etc/mime.types file (fix #7566) * Sun Sep 09 2012 guillomovitch <guillomovitch> 2.4.3-2.mga3 + Revision: 291156 - fix rpm filetriggers * Thu Aug 23 2012 guillomovitch <guillomovitch> 2.4.3-1.mga3 + Revision: 283340 - no need for restricted perms on /run/httpd directory - new version - sync patches set with fedora * Mon Aug 20 2012 colin <colin> 2.4.2-6.mga3 + Revision: 282508 - tmpfiles.d config is not user configurable, so it should not be in /etc. * Thu Aug 16 2012 guillomovitch <guillomovitch> 2.4.2-5.mga3 + Revision: 281593 - drop custom magic and mime.types file - don't even ship upstream mime.types file, and use system one instead * Tue Jul 24 2012 blino <blino> 2.4.2-4.mga3 + Revision: 273911 - really allow php scripts when mod_php is loaded * Mon Jul 23 2012 blino <blino> 2.4.2-3.mga3 + Revision: 273652 - do not include ssl.conf in apache package, it will break apache is mod_ssl is not installed * Fri Jul 20 2012 guillomovitch <guillomovitch> 2.4.2-2.mga3 + Revision: 272823 - ship apxs man page in devel package - use dedicated rpm-helper scriptlet to handle cert generation - minimal default vhost configuration - fix modules configuration files - ensure apache-devel requires apache - don't migration code in %%pre for initial installation * Tue Jul 17 2012 guillomovitch <guillomovitch> 2.4.2-1.mga3 + Revision: 271771 - manage configuration upgrade - split configuration in 3 subdirectories: * /etc/httpd/conf/modules.d for module loading * /etc/httpd/conf/conf.d for generic configuration * /etc/httpd/conf/sites.d for site configuration - rework package granularity: * merge back mod_reqtimeout and mod_deflate into main package * split mod_proxy_html in its own package * merge other proxy modules in mod_proxy * merge dbd modules in mod_dbd * merge cache modules in mod_cache - drop conditional test support - drop overzealous memcached soft dependency for mod_ssl - fix mpm modules building - fix default configuration - merge webapps.d and vhosts.d directories as sites.d - use original icons set - drop unused sources - drop source package - new version - switch to fedora layout - sync with fedora patch set - drop sysinit support * Mon Jun 11 2012 colin <colin> 2.2.22-14.mga3 + Revision: 259749 - Rebuild for new openssl * Mon May 28 2012 luigiwalser <luigiwalser> 2.2.22-13.mga3 + Revision: 247725 - use graceful-stop for service stop in httpd.service (from fedora) * Sun May 06 2012 luigiwalser <luigiwalser> 2.2.22-12.mga2 + Revision: 234841 - fix suexec path - make suexec config work with systemd * Sat Apr 28 2012 tmb <tmb> 2.2.22-11.mga2 + Revision: 233587 - add back rpm-helper requires for htcacheclean * Sat Apr 28 2012 tmb <tmb> 2.2.22-10.mga2 + Revision: 233586 - Require rpm-helper >= 0.24.8-1 for systemd support * Fri Apr 27 2012 tmb <tmb> 2.2.22-9.mga2 + Revision: 233496 - rebuild for versioned rpm-helper requires * Sat Apr 21 2012 luigiwalser <luigiwalser> 2.2.22-8.mga2 + Revision: 232417 - add rpm-helper requirements for post_service scripts - do not edit original service source file during build * Sun Apr 08 2012 guillomovitch <guillomovitch> 2.2.22-7.mga2 + Revision: 229775 - drop PrivateTmp from systemd service (fix #5143) * Sun Apr 08 2012 luigiwalser <luigiwalser> 2.2.22-6.mga2 + Revision: 229771 - merge apache-mod_suexec * Mon Mar 19 2012 luigiwalser <luigiwalser> 2.2.22-5.mga2 + Revision: 224024 - use arch independent libdir to find modules (thanks Funda Wang) * Sun Mar 18 2012 luigiwalser <luigiwalser> 2.2.22-4.mga2 + Revision: 223823 - use USR1 instead of HUP for systemctl reload (do not kill children) - use package ordering to ensure _post_service is run at the right time - do httpd restarts via posttrans and filetriggers (explained in spec) + colin <colin> - Fix systemd migration on upgrade (ensure mpm is installed and linked for apache post) - Fix all mpm systemd units (other than prefork) - Ensure only one mpm systemd unit can be enabled at any one time. * Mon Mar 12 2012 guillomovitch <guillomovitch> 2.2.22-3.mga2 + Revision: 222883 - deport base file and user creation in webserver-base package + luigiwalser <luigiwalser> - start httpd after remote-fs and named (from fedora) - enable PrivateTmp in service file (rh #781440) - update httpd.conf (from mdv) * Sun Feb 12 2012 luigiwalser <luigiwalser> 2.2.22-2.mga2 + Revision: 208280 - drop distcache support from mod_ssl - build against current db version - sync doc package with mdv - update 01_default_ssl_vhost.conf and patch 0 (from mdv) - minor requires fixes from mdv * Tue Feb 07 2012 guillomovitch <guillomovitch> 2.2.22-1.mga2 + Revision: 205893 - new version - rediff ab patch - drop security patches related to fixed vulns * Thu Jan 19 2012 guillomovitch <guillomovitch> 2.2.21-9.mga2 + Revision: 198442 - reduce multiple file copying - ensure source and doc packages are noarch - merge apache-doc package * Thu Jan 19 2012 colin <colin> 2.2.21-8.mga2 + Revision: 198013 - Fix systemd unit PID path (breaks with systemd v38) * Sat Dec 31 2011 dmorgan <dmorgan> 2.2.21-7.mga2 + Revision: 189170 - Add P21/22: Fix CVE2011-3368 and regression introduced in CVE 2011-3192 - Use systemd rpm macro * Thu Oct 27 2011 nanardon <nanardon> 2.2.21-5.mga2 + Revision: 158597 - apache-mpm-event provides apache-mpm not 'apache' * Sat Oct 15 2011 dmorgan <dmorgan> 2.2.21-4.mga2 + Revision: 155444 - Rebuild because it seems apache-mpm-event is missing, preventing libapreq2 to build * Sun Sep 18 2011 pterjan <pterjan> 2.2.21-3.mga2 + Revision: 145045 - Obsolete apache-base * Wed Sep 14 2011 guillomovitch <guillomovitch> 2.2.21-2.mga2 + Revision: 143581 - merge apache-base and apache-modules as apache package - load modules inconditionaly - drop useless dependencies from apache-devel package * Wed Sep 14 2011 guillomovitch <guillomovitch> 2.2.21-1.mga2 + Revision: 143348 - new version * Thu Sep 08 2011 guillomovitch <guillomovitch> 2.2.20-3.mga2 + Revision: 141320 - systemd support * Thu Sep 01 2011 guillomovitch <guillomovitch> 2.2.20-2.mga2 + Revision: 137745 - merge apache-conf and apache-base, to reduce dependencies hell - rework dependencies to a comprehensive model: apache is an empty package, requiring the configuration, the modules and an engine - rework post/preun scripts to use 'service httpd condrestart' - ensure post/preun dependencies consistency with post/preun scriptlets - simplify macros mess - stop preventing initscript to be localized * Thu Sep 01 2011 guillomovitch <guillomovitch> 2.2.20-1.mga2 + Revision: 137516 - add missing LSB headers to htcacheclean init script - new version - drop suexec PATH patch - rediff french documentation fixes, mpm-itk, mpm-peruser and authnoprov patches - large spec cleanup + misc <misc> - remove README.urpmi, as it only speak of change dating back to 2008.1 + pterjan <pterjan> - Revert re-import - imported package apache * Fri Jan 14 2011 ahmad <ahmad> 2.2.17-4.mga1 + Revision: 17736 - drop old/unneeded scriptlets - imported package apache