20:52 Sergey A. Osokin (osa) 

www/nginx-devel: remove third-party opentracing module (+)

Similar functionality is available with OTEL module, also
devel/libopentracing port is EOLed today.

Bump PORTREVISION.

    b2ad75a

18:22 Sergey A. Osokin (osa) 

www/nginx-devel: third-party modules management (+)

o) update third-party lua module to 0.10.26;
o) update third-party headers-more module to latest snapshot;
o) remove third-party http_mp4_h264 module, legacy and undownloadable.

Bump PORTREVISION.

    a157ce5

23:35 Sergey A. Osokin (osa) 

www/nginx-devel: third-party modules management (+)

o) remove third-party cookie_flag module, the functionality supported
   natively by the proxy_cookie_flags directive;
o) update third-party ndk module to 0.3.3;
o) update third-party lua module to 0.10.26.rc2.

Updated version of the lua module can be built with pcre2.

Bump PORTREVISION.

    a0a2255

17:41 Sergey A. Osokin (osa) 

www/nginx-devel: add NGINX Open Telemetry module (+)

Bump PORTREVISON.

    e178c2a

19:54 Sergey A. Osokin (osa) 

www/nginx-devel: update from 1.24.0 to 1.25.0

Enable HTTPv3 protocol by default.
Remove third-party clojure module due to a build issue.

The OpenSSL compatibility layer, which emulates BoringSSL
QUIC API for OpenSSL, is enabled by default, and 0-RTT is
not supported in this mode.

Alternativly, it's possible to build nginx with a third-party
library from ports tree, that provides QUIC support:
o) BoringSSL
o) LibreSSL
o) QuicTLS

<Changelog>

*) Feature: experimental HTTP/3 support.

</Changelog>

    ad934b7

18:14 Sergey A. Osokin (osa) 

www/nginx-devel: update 1.23.4 -> 1.24.0

Remove the following broken third-party modules:
o) dynamic_hc
o) small_light

    b7d44cc

17:50 Sergey A. Osokin (osa) 

www/nginx-devel: add fips-check third-party module

Bump PORTREVISION.

    82e3dfd

20:18 Sergey A. Osokin (osa) 

www/nginx-devel: switch to pcre2

The pcre library 8.45 has been released Jun 22nd, 2021 and is not
officially supported anymore.

The pcre2 support in nginx was introduced in 1.21.5, it's been
released Dec 28th, 2021.  There're few modules are still require
devel/pcre, but since devel/pcre and devel/pcre2 can be coexist
and those few modules are happy with that, let's switch to pcre2
by default.

Also, while I'm here update third-party lua module to its
recent version - 0.10.23.

Bump PORTREVISION.

    220f031

23:49 Sergey A. Osokin (osa) 

*/*: update NGINX JavaScript 0.7.9 -> 0.7.10

Bump PORTREVISION for www/nginx-devel.

<ChangeLog>
nginx modules:

*) Feature: added Request, Response and Headers ctors in Fetch API.

*) Bugfix: fixed nginx logger callback for calls in master process.

Core:

*) Feature: added signal support in CLI.

*) Feature: added "xml" module for working with XML documents.

*) Feature: extended support for symmetric and asymmetric keys
   in WebCrypto. Most notably JWK format for importKey() was added.

*) Feature: extended support for symmetric and asymmetric keys
   in WebCrypto. Most notably JWK format for importKey() was added.
   generateKey() and exportKey() were also implemented.

*) Feature: added String.prototype.replaceAll().

*) Bugfix: fixed for(expr1; conditional syntax error handling.

*) Bugfix: fixed Object.values() and Object.entries() with external
   objects.

*) Bugfix: fixed RegExp.prototype[@@replace]().

</ChangeLog>

    d1b0448

11:35 Dmitry Marakasov (amdmi3) 

www/nginx-devel: fix option desc typo

Approved by:	portmgr blanket

    20e0264

18:24 Sergey A. Osokin (osa) 

www/nginx-devel: update HTTPv3/QUIC patch

It's possible now to build NGINX HTTPv3/QUIC implementation with
another the LibreSSL 3.6.0.

Bump PORTREVISION.

    8ec44fa

02:36 Sergey A. Osokin (osa) 

www/nginx-devel: third-party modules management

Update third-party vts module to 0.2.1.	(*)
Add third-party sts module.

Bump PORTREVISION.

Spotted by:	Ken <mayhem30@gmail.com> (*)

    9f66476

17:42 Sergey A. Osokin (osa) 

www/nginx-devel: add third-party clojure module back

Bump PORTREVISION.

Thanks to pluknet.

    3364325

11:18 Sergey A. Osokin (osa) 

www/nginx-devel: able to build with security/openssl-quictls

While I'm here fix a typo in a start-up template, introduced in
c42df2fcbbeccbfb2d57f4d6d7558493d512d732.

Bump PORTREVISION.

Differential Revision:	https://reviews.freebsd.org/D33773
Reviewed by:		pluknet

    bc5c2f7

16:47 Sergey A. Osokin (osa) 

www/nginx-devel: initial support for HTTPv3

Bump PORTREVISION.

Based on ideas from:	ashish

    cada189

21:27 Sergey A. Osokin (osa) 

www/nginx-devel: choose PCRE library for build

NGINX 1.21.5 adds support for PCRE2 library, in addition to
support PCRE1.  It's possible to choose regular expression
library for the port now.

Please note: several modules are required patching to support
PCRE2 library, so let's keep PCRE1 as default version for now.

Bump PORTREVISION.

    8d9d1a8

16:13 Sergey A. Osokin (osa) 

www/nginx-devel: update from 1.21.3 to 1.21.4.

New kernel TLS feature is available starting with FreeBSD 13.0,
and it requires OpenSSL 3.0, compiled with "enable-ktls" option.
Further, KTLS needs to be enabled in kernel, and in OpenSSL,
either via OpenSSL configuration file or with

  ssl_conf_command Options KTLS;

in nginx configuration.

To enable kernel TLS on FreeBSD 13 and above:

  # kldload ktls_ocf
  # sysctl kern.ipc.tls.enable=1

to load a software backend, see man ktls(4) for details.

Also, please visit the following link to get more details
https://hg.nginx.org/nginx/rev/65946a191197

<Changelog>

*) Change: support for NPN instead of ALPN to establish HTTP/2
   connections has been removed.

*) Change: now nginx rejects SSL connections if ALPN is used by the
   client, but no supported protocols can be negotiated.

*) Change: the default value of the "sendfile_max_chunk" directive was
   changed to 2 megabytes.

*) Feature: the "proxy_half_close" directive in the stream module.

*) Feature: the "ssl_alpn" directive in the stream module.

*) Feature: the $ssl_alpn_protocol variable.

*) Feature: support for SSL_sendfile() when using OpenSSL 3.0.

*) Feature: the "mp4_start_key_frame" directive in the
   ngx_http_mp4_module.
   Thanks to Tracey Jaquith.

*) Bugfix: in the $content_length variable when using chunked transfer
   encoding.

*) Bugfix: after receiving a response with incorrect length from a
   proxied backend nginx might nevertheless cache the connection.
   Thanks to Awdhesh Mathpal.

*) Bugfix: invalid headers from backends were logged at the "info" level
   instead of "error"; the bug had appeared in 1.21.1.

*) Bugfix: requests might hang when using HTTP/2 and the "aio_write"
   directive.

</Changelog>

    62502a5

20:41 Sergey A. Osokin (osa) 

www/nginx-devel: move third-party module definition to Makefile.extmod.

    b11f6f7

14:31 Mathieu Arnold (mat) 

Remove # $FreeBSD$ from Makefiles.

    305f148

16:48 osa 

Run NJS module's configure script in the configure phase.
While I'm here update the NJS module description.

Bump PORTREVISION.

 

16:45 tobik 

Remove redundant option descriptions that match the default ones

(ignoring case)

Reported by:	danfe (for net/mosquitto), portscan

 

20:59 osa 

Update third-party dynamic_upstream module.
Add third-party dynamic_healthcheck module.

Bump PORTREVISION.

 

22:38 osa 

Add kernel TLS option.

It's possible to build nginx on FreeBSD13 with security/openssl
port, compiled with kernel TLS option as well.

Bump PORTREVISION.

Based
on:	https://github.com/nginx/nginx/compare/branches/stable-1.16...bsdjhb:ktls-1.16
Reviewed by:	jhb
Tested by:	jhb

 

01:17 osa 

Remove legacy third-party modules:

o) modsecurity2
o) fastdfs

All modules, including all third-party modules, are dynamic now.

Bump PORTREVISION.

 

02:06 osa 

Add third-party opentracing dynamic module.

Bump PORTREVISION.

 

16:19 osa 

Add cookie_flag third-party dynamic module.

While I'm here create a description for STREAM related
modules.

Bump PORTREVISION.

 

16:38 osa 

Add http_degradation module.

While I'm here keep the knobs inside their groups sorted.

Bump PORTREVISION.

 

03:34 osa 

Add STREAM_REALIP knob for the ngx_stream_realip module. (*)

Enable STREAM_REALIP knob by default.

Also, create STREAMGRP group for stream-specific modules.

Bump PORTREVISION.

Requested by:	Kirill I. <kerya@kerya.net> (*)

 

15:15 osa 

Partially revert back r524489, the trird-party opentracing module
is not ready yet to be added to the port.

Bump PORTREVISION.

 

15:11 osa 

Commit missing patches for r524122.

Eagle eye notice from:	joneum
No cookie for:		osa

 

19:33 osa 

Add link-function third-party module, it provides dynamic linking to
your application in a server context and call the function of your
application in a location directive.

Bump PORTREVISION.

 

20:38 osa 

Add the following third-party modules:
o) ip2location
o) ip2proxy

Add third-party slice_ahead feature.

Update third-party passenger module to the latest release 6.0.3.

Switch third-party lua module dependence from lang/luajit (2.0) to
lang/luajit-openresty (2.1).

Bump PORTREVISION.

 

20:58 adamw 

Remove GeoIP-related options. Where possible, replace GeoIP 1 defaults
with GeoIP 2.

Also, as suggested by zi, add an UPDATING note about this.

 

14:28 des 

Rename www/mod_security3 to security/modsecurity3.  It is not an Apache
module, and the upstream name is ModSecurity in a single word.

PR:		233351
Submitted by:	Marie Helene Kvello-Aune, Marius Halden (maintainer)
Differential Revision:	https://reviews.freebsd.org/D18353

 

21:35 osa 

Merge from www/nginx and adopt next revisions:
	465814, 465851, 465931, 468031.

Bump PORTREVISION.