%def_with mysql %def_with ldap %def_with gssapi %def_with ssl %def_with lua %def_without gamin %def_with pgsql %def_with tests %def_with maxminddb %def_with libdeflate %define lighttpd_user lighttpd %define lighttpd_group lighttpd %define lighttpd_spool %_spooldir/%name %define docdir %_docdir/%name-%version-doc Name: lighttpd Version: 1.4.70 Release: alt1 Summary: A fast webserver with minimal memory-footprint License: BSD Group: System/Servers # git clone https://git.lighttpd.net/lighttpd/lighttpd1.4.git Url: http://www.lighttpd.net Source0: %name-%version.tar Patch0: %name-%version-%release.patch Requires(pre): shadow-utils shadow-groups webserver-common Provides: webserver BuildRequires(pre): rpm-macros-webserver-common # Automatically added by buildreq on Wed Dec 02 2020 # optimized out: glibc-kernheaders-generic glibc-kernheaders-x86 libcom_err-devel libcrypt-devel libkrb5-devel libsasl2-3 perl pkg-config python2-base sh4 BuildRequires: bzlib-devel libbrotli-devel libfcgi-devel libpcre2-devel libxxhash-devel zlib-devel %{?_with_maxminddb:BuildPreReq: libmaxminddb-devel} %{?_with_mysql:BuildPreReq: libmysqlclient-devel} %{?_with_gssapi:BuildPreReq: libkrb5-devel} %{?_with_ssl:BuildPreReq: libssl-devel} %{?_with_ldap:BuildPreReq: libldap-devel} %{?_with_lua:BuildPreReq: lua-devel} %{?_with_gamin:BuildPreReq: libgamin-devel} %{?_with_pgsql:BuildPreReq: libpq5-devel} %{?_with_libdeflate:BuildPreReq: libdeflate-devel} %{?_with_tests:BuildPreReq: perl-devel perl-Digest-SHA} %description %name is intented to be a frontend for ad-servers which have to deliver small files concurrently to many connections. %if_with mysql %package mysql-vhost Summary: MySQL based vhosting %name module Group: System/Servers Requires: %name = %version-%release %description mysql-vhost This module provides virtual hosts (vhosts) based on a MySQL table. %endif #mysql %if_with ldap %package auth-ldap Summary: LDAP authentication for %name Group: System/Servers Requires: %name = %version-%release %description auth-ldap LDAP authentication for %name %package ldap-vhost Summary: LDAP based vhosting %name module Group: System/Servers Requires: %name = %version-%release %description ldap-vhost This module provides virtual hosts (vhosts) based on a LDAP. %endif #ldap %if_with maxminddb %package maxminddb Summary: MaxMind GeoIP2 module (plugin) for %name. Group: System/Servers Requires: %name = %version-%release %description maxminddb The module loads a geoip database of type "country" or "city" and sets new ENV vars based on ip record lookups. %endif #maxminddb %if_with gssapi %package auth-gssapi Summary: GSSAPI authentication for %name Group: System/Servers Requires: %name = %version-%release %description auth-gssapi GSSAPI authentication for %name %endif #gssapi %if_with pgsql %package pgsql-vhost Summary: PostgreSQL based vhosting %name module Group: System/Servers Requires: %name = %version-%release %description pgsql-vhost This module provides virtual hosts (vhosts) based on a PostgreSQL table. %endif #pgsql %package rrdtool Summary: rrdtool support %name module Group: System/Servers Requires: %name = %version-%release, rrdtool %description rrdtool mod_rrdtool is used to monitor the traffic and load on the webserver. %package doc Summary: %name documentation Group: Documentation BuildArch: noarch %description doc Documentation for %name. %prep %setup %patch0 -p1 libtoolize -f -c %autoreconf %build %configure --libdir=%_libdir/%name \ --with-brotli \ --with-zlib \ --with-bzip2 \ --with-uuid \ --with-xxhash \ %{?_with_mysql: --with-mysql} \ %{?_with_pgsql: --with-pgsql} \ %{?_with_ssl: --with-openssl} \ %{?_with_ldap: --with-ldap} \ %{?_with_lua: --with-lua} \ %{?_with_gamin: --with-fam} \ %{?_with_gssapi: --with-krb5} \ %{?_with_maxminddb: --with-maxminddb} \ %{?_with_libdeflate: --with-libdeflate} \ %{?_with_lua: LUA_CFLAGS="-I/usr/include/" LUA_LIBS="-llua"} %make_build # run tests for sanity checks #pushd tests #./wrapper.sh . .. ./prepare.sh #./wrapper.sh . .. ./run-tests.pl #popd %install %makeinstall libdir=%buildroot%_libdir/%name mkdir -p %buildroot%_sysconfdir/{rc.d/init.d,sysconfig} mkdir -p %buildroot%_unitdir mkdir -p %buildroot{%_spooldir/%name/tmp,%_var/log/%name,%_var/lib/%name} # inirscript, sysconfig and unit install -m755 %name.init %buildroot%_initdir/%name #install -m644 doc/initscripts/sysconfig.lighttpd %buildroot%_sysconfdir/sysconfig/lighttpd install -m644 doc/systemd/lighttpd.service %buildroot%_unitdir/lighttpd.service install -m644 doc/systemd/lighttpd.socket %buildroot%_unitdir/lighttpd.socket # configs cp -rp doc/config %buildroot%_sysconfdir/%name find %buildroot%_sysconfdir/%name -type f -name "Makefile*" -delete # logrotate script install -pDm644 lighttpd.logrotate %buildroot%_sysconfdir/logrotate.d/%name # docs rm -rf %buildroot%docdir mkdir -p %buildroot%docdir/outdated cp -a doc/outdated/*.txt %buildroot%docdir/outdated/ %if_with tests %check %make -C tests leak-check %endif #tests %pre %_sbindir/groupadd -r -f %lighttpd_group ||: %_sbindir/useradd -r -g %lighttpd_group -d /dev/null -s /dev/null -N %lighttpd_user \ 2> /dev/null > /dev/null ||: gpasswd -a %lighttpd_user %webserver_group %post %post_service lighttpd %preun %preun_service lighttpd %files %doc README INSTALL COPYING AUTHORS %config %_initdir/%name %config(noreplace) %_sysconfdir/logrotate.d/%name %_unitdir/* %dir %attr(0750,root,%lighttpd_group) %_sysconfdir/%name %dir %attr(0750,root,%lighttpd_group) %_sysconfdir/%name/conf.d %dir %attr(0750,root,%lighttpd_group) %_sysconfdir/%name/vhosts.d %config(noreplace) %attr(0644,root,%lighttpd_group) %_sysconfdir/%name/*.conf %config(noreplace) %attr(0644,root,%lighttpd_group) %_sysconfdir/%name/*/*.conf %_sysconfdir/%name/*/mod.template %_sysconfdir/%name/vhosts.d/* %_man8dir/* %dir %attr(1770,root,%lighttpd_group) %lighttpd_spool %dir %attr(1770,root,%lighttpd_group) %lighttpd_spool/tmp %dir %attr(1770,root,%lighttpd_group) %_var/lib/%name %dir %attr(1770,root,%lighttpd_group) %_var/log/%name %dir %_libdir/%name %_libdir/%name/*.so %if_with mysql %exclude %_libdir/%name/*_vhostdb_mysql.so %endif #mysql %if_with pgsql %exclude %_libdir/%name/*_vhostdb_pgsql.so %endif #pgsql %if_with ldap %exclude %_libdir/%name/*_authn_ldap.so %exclude %_libdir/%name/*_vhostdb_ldap.so %endif ldap %if_with gssapi %exclude %_libdir/%name/*_authn_gssapi.so %endif gssapi %if_with maxminddb %exclude %_libdir/%name/*_maxminddb.so %endif #maxminddb %exclude %_libdir/%name/*_rrdtool.so %_sbindir/* %exclude %_libdir/%name/*.la %files doc %docdir %if_with mysql %files mysql-vhost %_libdir/%name/*_vhostdb_mysql.so %endif #mysql %if_with ldap %files auth-ldap %_libdir/%name/*_authn_ldap.so %files ldap-vhost %_libdir/%name/*_vhostdb_ldap.so %endif #ldap %if_with gssapi %files auth-gssapi %_libdir/%name/*_authn_gssapi.so %endif #gssapi %if_with pgsql %files pgsql-vhost %_libdir/%name/*_vhostdb_pgsql.so %endif #pgsql %if_with maxminddb %files maxminddb %_libdir/%name/*_maxminddb.so %endif #maxminddb %files rrdtool %_libdir/%name/*rrdtool.so %changelog * Thu May 11 2023 Alexei Takaseev 1.4.70-alt1 - 1.4.70 * Mon Jan 23 2023 Alexei Takaseev 1.4.68-alt1 - 1.4.68 - Pack lighttpd.socket * Wed Sep 21 2022 Alexei Takaseev 1.4.67-alt1 - 1.4.67 * Thu Jun 09 2022 Alexei Takaseev 1.4.65-alt1 - 1.4.65 * Fri Jan 21 2022 Alexei Takaseev 1.4.64-alt1 - 1.4.64 - BR: libpcre -> libpcre2 - Remove deprecated modules * Tue Dec 07 2021 Alexei Takaseev 1.4.63-alt1 - 1.4.63 * Fri Dec 03 2021 Alexei Takaseev 1.4.62-alt1 - 1.4.62 * Fri Oct 29 2021 Alexei Takaseev 1.4.61-alt1 - 1.4.61 * Tue Oct 05 2021 Alexei Takaseev 1.4.60-alt1 - 1.4.60 * Fri Feb 05 2021 Alexei Takaseev 1.4.59-alt1 - 1.4.59 * Tue Dec 29 2020 Alexei Takaseev 1.4.58-alt1 - 1.4.58 * Fri Dec 18 2020 Alexei Takaseev 1.4.57-alt1 - 1.4.57 * Wed Dec 02 2020 Alexei Takaseev 1.4.56-alt1 - 1.4.56 * Mon May 25 2020 Alexei Takaseev 1.4.55-alt2 - Disable gamin support * Sat Feb 01 2020 Alexei Takaseev 1.4.55-alt1 - 1.4.55 * Wed May 29 2019 Alexei Takaseev 1.4.54-alt1 - 1.4.54 * Sun Jan 27 2019 Alexei Takaseev 1.4.53-alt1 - 1.4.53 * Fri Nov 30 2018 Alexei Takaseev 1.4.52-alt1 - 1.4.52 * Mon Oct 15 2018 Alexei Takaseev 1.4.51-alt1 - 1.4.51 - Enable internal tests * Tue Sep 04 2018 Alexei Takaseev 1.4.50-alt2 - Rebuild with OpenSSL 1.1.x * Tue Aug 21 2018 Alexei Takaseev 1.4.50-alt1 - 1.4.50 * Mon Mar 12 2018 Alexei Takaseev 1.4.49-alt1 - 1.4.49 * Wed Mar 07 2018 Alexei Takaseev 1.4.48-alt1 - 1.4.48 * Tue Nov 07 2017 Alexei Takaseev 1.4.47-alt2 - Build with gssapi support (closes: #34134) - Build with pgsql vhosting - Split base package to auth-mysql, auth-ldap, ldap-vhost, auth-gssapi, pgsql-vhost subpackages * Mon Oct 23 2017 Alexei Takaseev 1.4.47-alt1 - 1.4.47 * Sun Oct 22 2017 Alexei Takaseev 1.4.46-alt1 - 1.4.46 * Fri Aug 11 2017 Alexei Takaseev 1.4.45-alt1 - 1.4.45 * Tue Feb 07 2017 Igor Vlasenko 1.4.43-alt1.1 - rebuild with new lua 5.3 * Tue Nov 01 2016 Alexei Takaseev 1.4.43-alt1 - 1.4.43 * Mon Oct 17 2016 Alexei Takaseev 1.4.42-alt1 - 1.4.42 * Wed Jan 06 2016 Alexei Takaseev 1.4.39-alt1 - 1.4.39 * Sun Dec 06 2015 Alexei Takaseev 1.4.38-alt1 - 1.4.38 * Mon Aug 31 2015 Alexei Takaseev 1.4.37-alt1 - 1.4.37 * Tue Jul 28 2015 Alexei Takaseev 1.4.36-alt1 - 1.4.36 * Wed Apr 29 2015 Alexei Takaseev 1.4.35-alt2 - update to svn2986 * Wed Apr 02 2014 Alexei Takaseev 1.4.35-alt1 - 1.4.35 * Tue Jan 21 2014 Alexei Takaseev 1.4.34-alt1 - 1.4.34 * Mon Sep 30 2013 Alexei Takaseev 1.4.33-alt1 - 1.4.33 * Wed Apr 03 2013 Alexei Takaseev 1.4.32-alt4 - change buildreq 'libMySQL-devel' to 'libmysqlclient-devel' * Mon Nov 26 2012 Alexei Takaseev 1.4.32-alt3 - Add systemd unit * Thu Nov 22 2012 Alexei Takaseev 1.4.32-alt2 - fix DoS in Connection header value split (CVE-2012-5533) * Wed Nov 07 2012 Alexei Takaseev 1.4.32-alt1 - 1.4.32 * Mon Oct 18 2010 Vladimir V. Kamarzin 1.4.28-alt2 - Rebuild with libssl.so.10 and libcrypto.so.10. * Fri Oct 01 2010 Vladimir V. Kamarzin 1.4.28-alt1 - 1.4.28. - New config scheme introduced by upstream: small main config which includes configs for modules and vhosts (Closes: #23233). - Add lighttpd pseudouser to %%webserver_group according to WebPolicy (Closes: #23232). - Don't create docdir when starting lighttpd service. * Thu Feb 04 2010 Vladimir V. Kamarzin 1.4.25-alt1.svn.2710 - Update to 2710 revision of 1.4.x branch. - Security fix: CVE-2010-0295 (lighttpd Slow Request Denial of Service Vulnerability). * Thu Dec 31 2009 Vladimir V. Kamarzin 1.4.23-alt3 - Properly create all docroots specified in config file, patch by Nikolay A. Fetisov (Closes: #22652). * Fri Oct 16 2009 Vladimir V. Kamarzin 1.4.23-alt2 - Fix building with fresh liblua * Wed Sep 02 2009 Vladimir V. Kamarzin 1.4.23-alt1 - 1.4.23 - Move spawn-fcgi package to separate git repository because spawn-fcgi was removed from lighttpd main tree, see http://blog.lighttpd.net/articles/2009/04/03/spawn-fcgi-removed-from-lighttpd-1-4 - Rebuilt with libldap2.4 * Thu Mar 19 2009 Vladimir V. Kamarzin 1.4.22-alt1 - 1.4.22 - Fix+add cond* actions in spawn-fcgi initscript * Tue Dec 09 2008 Vladimir V. Kamarzin 1.4.20-alt2.svn.2364 - Updated to 2364 revision of 1.4.x branch - Add condrestart action for spawn-fcgi initscript * Tue Sep 30 2008 Vladimir V. Kamarzin 1.4.20-alt1 - 1.4.20 release - Security fix: duplicate Request Headers Memory Leak Vulnerability http://secunia.com/advisories/32069/ * Tue Sep 09 2008 Vladimir V. Kamarzin 1.4.19-alt6.svn.2299 - Updated to 2299 revision of 1.4.x branch - Move spawn-fcgi to separate subpackage (thresh, vvk) * Wed Aug 27 2008 Vladimir V Kamarzin 1.4.19-alt5.svn.2296 - Updated to 2296 revision of 1.4.x branch - initscript: add restart() (Closes: #16417) - logrotate-script: redirect output to /dev/null * Fri Apr 04 2008 Vladimir V Kamarzin 1.4.19-alt4.svn.2142 - Updated to 2142 revision of 1.4.x branch - Security fixes: + CVE-2008-1531 lighttpd OpenSSL Error Queue Denial of Service Vulnerability - Enable memcache support * Fri Mar 14 2008 Vladimir V Kamarzin 1.4.19-alt3 - Add logrotate script - Initscript changes: + Check docdir existance and create it if it doesn't exist (Closes: #12725) + Introduce log_reopen() function for sending SIGHUP to daemon - needed for log rotation * Tue Mar 11 2008 Vladimir V Kamarzin 1.4.19-alt2 - There is an error in previous package version: real version was 1.4.18, not 1.4.19! - This is real 1.4.19 release. Security fixes: + CVE-2008-0983: remote DoS + CVE-2008-1111: exposure of sensitive information (Fix sending source of cgi script instead of 500 error if fork fails) * Tue Sep 11 2007 Vladimir V Kamarzin 1.4.19-alt1 - Real version is 1.4.18 - there is error in package version!!! - Security fix: CVE-2007-4727: FastCGI header overrun in mod_fastcgi * Tue Sep 04 2007 Vladimir V Kamarzin 1.4.18-alt1.svn.1981 - Updated to 1981 revision of 1.4.x branch: + many bugs fixed (see HISTORY) - Fixed ALT Security Policy violation (spooldir permissions) * Mon Jul 16 2007 Vladimir V Kamarzin 1.4.15-alt2.svn.1881 - Updated to 1881 revision of 1.4.x branch - Security fixes: + Remote crash on duplicate header keys with line-wrapping (fixes #1230) + Missing check for base64 encoded string in mod_auth and Basic auth (reported by Stefan Esser) + Crash with md5-sess and cnonce not set in mod_auth (reported by Stefan Esser) + Possible crash in Auth-Digest header parser on trailing WS in mod_auth (reported by Stefan Esser) + mem-leak in mod_auth (reported by Stefan Esser) + URL Access restrictions bypass in mod_access + Local DOS with broken FastCGI applications * Mon Apr 16 2007 Vladimir V Kamarzin 1.4.15-alt1 - Updated to 1.4.15 release * Thu Apr 12 2007 Vladimir V Kamarzin 1.4.13-alt3.1745 - Updated to 1745 revision of 1.4.x branch - Added sis/sisx mime types (Closes: #11462) * Thu Apr 05 2007 Vladimir V Kamarzin 1.4.13-alt2.1719 - Updated to 1719 revision of 1.4.x branch + Fix crash if gethostbyaddr() fails on redirect * Sat Mar 24 2007 Vladimir V Kamarzin 1.4.13-alt2.1716 - Build without memcache * Tue Mar 20 2007 Vladimir V Kamarzin 1.4.13-alt1.1716 - Updated to 1716 revision of 1.4.x branch * Thu Feb 08 2007 Vladimir V Kamarzin 1.4.13-alt1.1607 - Updated to 1.4.x branch svn revision 1607 - Security fix: + Fix remote DOS in CRLF parsing (CVE-2007-1869) + Fix a crash for files with an mtime of 0 reported by cubiq on irc (CVE-2007-1870) - Integrate lighttpd-1.4.3-config.patch * Mon Jan 30 2006 LAKostis 1.4.9-alt1 - 1.4.9; - change fam support to gamin; - pack ChangeLog and move it to -doc subpackage. * Sat Jan 07 2006 LAKostis 1.4.8-alt1 - 1.4.8; - fix #8431. * Sat Oct 29 2005 LAKostis 1.4.6-alt1 - 1.4.6. - fix config dir permissions. - fix requires. - add libfcgi-devel to BuildRequires. - add lua,memcache,fam,ldap support. - split out to many packages. * Sun Sep 11 2005 LAKostis 1.4.3-alt1 - first build for ALTLinux Sisyphus. * Thu Sep 30 2004 12:41 1.3.1 - upgraded to 1.3.1 * Tue Jun 29 2004 17:26 1.2.3 - rpmlint'ed the package - added URL - added (noreplace) to start-script - change group to Networking/Daemon (like apache) * Sun Feb 23 2003 15:04 - initial version