23128706 Upgrade Apache Web Server to version 2.4.20
authorPetr Sumbera <petr.sumbera@oracle.com>
Tue, 19 Apr 2016 05:21:45 -0700
changeset 5828 5009deba8bc0
parent 5827 17e1134323cc
child 5829 4712e132a71c
23128706 Upgrade Apache Web Server to version 2.4.20
components/apache24/Makefile
components/apache24/apache-24.p5m
components/apache24/apache.license
components/apache24/patches/no_ssl3.patch
components/apache24/patches/priv_drop.patch
components/apache24/patches/ssl-fips-140.patch
--- a/components/apache24/Makefile	Wed Apr 20 20:01:01 2016 -0700
+++ b/components/apache24/Makefile	Tue Apr 19 05:21:45 2016 -0700
@@ -26,15 +26,15 @@
 include ../../make-rules/shared-macros.mk
 
 COMPONENT_NAME=		apache2
-COMPONENT_VERSION=	2.4.16
+COMPONENT_VERSION=	2.4.20
 COMPONENT_PROJECT_URL=	http://httpd.apache.org/
 COMPONENT_SRC_NAME=	httpd
 COMPONENT_ARCHIVE_HASH=	\
-    sha256:2fc18017801944cfcfde76a24f16c1276c866c2a6e512ee895f566bef9368fae
+    sha256:e77482a46e5b6971ba6181b71a3c0ed1dbf3fa83810bf767c6320f0c621261e4
 COMPONENT_ARCHIVE_URL=	http://archive.apache.org/dist/httpd/$(COMPONENT_ARCHIVE)
 COMPONENT_BUGDB=	utility/apache
 
-TPNO=	23618
+TPNO=	27725
 	
 CONFIGURE_DEFAULT_DIRS=no
 TEST_TARGET= $(NO_TESTS)
@@ -82,6 +82,7 @@
 REQUIRED_PACKAGES += library/apr-util-15/dbd-mysql
 REQUIRED_PACKAGES += library/apr-util-15/dbd-sqlite
 REQUIRED_PACKAGES += library/libxml2
+REQUIRED_PACKAGES += library/nghttp2
 REQUIRED_PACKAGES += library/openldap
 REQUIRED_PACKAGES += library/pcre
 REQUIRED_PACKAGES += library/security/openssl
--- a/components/apache24/apache-24.p5m	Wed Apr 20 20:01:01 2016 -0700
+++ b/components/apache24/apache-24.p5m	Tue Apr 19 05:21:45 2016 -0700
@@ -18,7 +18,7 @@
 #
 # CDDL HEADER END
 #
-# Copyright (c) 2014, 2015, Oracle and/or its affiliates. All rights reserved.
+# Copyright (c) 2014, 2016, Oracle and/or its affiliates. All rights reserved.
 #
 <transform file path=usr.*/man/.+ -> default mangler.man.stability uncommitted>
 <transform file link hardlink path=usr/apache2/2.4/build/.* -> \
@@ -153,6 +153,7 @@
 file path=usr/apache2/2.4/include/mod_session.h
 file path=usr/apache2/2.4/include/mod_so.h
 file path=usr/apache2/2.4/include/mod_ssl.h
+file path=usr/apache2/2.4/include/mod_ssl_openssl.h
 file path=usr/apache2/2.4/include/mod_status.h
 file path=usr/apache2/2.4/include/mod_unixd.h
 file path=usr/apache2/2.4/include/mod_watchdog.h
@@ -219,6 +220,7 @@
 file path=usr/apache2/2.4/libexec/mod_headers.so
 file path=usr/apache2/2.4/libexec/mod_heartbeat.so
 file path=usr/apache2/2.4/libexec/mod_heartmonitor.so
+file path=usr/apache2/2.4/libexec/mod_http2.so
 file path=usr/apache2/2.4/libexec/mod_include.so
 file path=usr/apache2/2.4/libexec/mod_info.so
 file path=usr/apache2/2.4/libexec/mod_lbmethod_bybusyness.so
@@ -434,12 +436,17 @@
 file path=usr/apache2/2.4/manual/howto/public_html.html.ja.utf8
 file path=usr/apache2/2.4/manual/howto/public_html.html.ko.euc-kr
 file path=usr/apache2/2.4/manual/howto/public_html.html.tr.utf8
+file path=usr/apache2/2.4/manual/howto/reverse_proxy.html
+file path=usr/apache2/2.4/manual/howto/reverse_proxy.html.en
 file path=usr/apache2/2.4/manual/howto/ssi.html
 file path=usr/apache2/2.4/manual/howto/ssi.html.en
 file path=usr/apache2/2.4/manual/howto/ssi.html.fr
 file path=usr/apache2/2.4/manual/howto/ssi.html.ja.utf8
 file path=usr/apache2/2.4/manual/howto/ssi.html.ko.euc-kr
 file path=usr/apache2/2.4/manual/images/apache_header.gif
+file path=usr/apache2/2.4/manual/images/bal-man-b.png
+file path=usr/apache2/2.4/manual/images/bal-man-w.png
+file path=usr/apache2/2.4/manual/images/bal-man.png
 file path=usr/apache2/2.4/manual/images/build_a_mod_2.png
 file path=usr/apache2/2.4/manual/images/build_a_mod_3.png
 file path=usr/apache2/2.4/manual/images/build_a_mod_4.png
@@ -466,6 +473,7 @@
 file path=usr/apache2/2.4/manual/images/mod_rewrite_fig2.gif
 file path=usr/apache2/2.4/manual/images/mod_rewrite_fig2.png
 file path=usr/apache2/2.4/manual/images/pixel.gif
+file path=usr/apache2/2.4/manual/images/reverse-proxy-arch.png
 file path=usr/apache2/2.4/manual/images/rewrite_backreferences.png
 file path=usr/apache2/2.4/manual/images/rewrite_process_uri.png
 file path=usr/apache2/2.4/manual/images/rewrite_rule_flow.png
@@ -787,6 +795,8 @@
 file path=usr/apache2/2.4/manual/mod/mod_heartmonitor.html
 file path=usr/apache2/2.4/manual/mod/mod_heartmonitor.html.en
 file path=usr/apache2/2.4/manual/mod/mod_heartmonitor.html.fr
+file path=usr/apache2/2.4/manual/mod/mod_http2.html
+file path=usr/apache2/2.4/manual/mod/mod_http2.html.en
 file path=usr/apache2/2.4/manual/mod/mod_ident.html
 file path=usr/apache2/2.4/manual/mod/mod_ident.html.en
 file path=usr/apache2/2.4/manual/mod/mod_ident.html.fr
--- a/components/apache24/apache.license	Wed Apr 20 20:01:01 2016 -0700
+++ b/components/apache24/apache.license	Tue Apr 19 05:21:45 2016 -0700
@@ -1,5 +1,5 @@
 Apache HTTP Server
-Copyright 2015 The Apache Software Foundation.
+Copyright 2016 The Apache Software Foundation.
 
 This product includes software developed at
 The Apache Software Foundation (http://www.apache.org/).
--- a/components/apache24/patches/no_ssl3.patch	Wed Apr 20 20:01:01 2016 -0700
+++ b/components/apache24/patches/no_ssl3.patch	Tue Apr 19 05:21:45 2016 -0700
@@ -5,40 +5,41 @@
 
 --- modules/ssl/ssl_private.h
 +++ modules/ssl/ssl_private.h
-@@ -298,10 +298,10 @@
- #ifdef HAVE_TLSV1_X
- #define SSL_PROTOCOL_TLSV1_1 (1<<3)
- #define SSL_PROTOCOL_TLSV1_2 (1<<4)
--#define SSL_PROTOCOL_ALL   (SSL_PROTOCOL_SSLV3|SSL_PROTOCOL_TLSV1| \
-+#define SSL_PROTOCOL_ALL   (SSL_PROTOCOL_TLSV1| \
-                             SSL_PROTOCOL_TLSV1_1|SSL_PROTOCOL_TLSV1_2)
+@@ -302,7 +302,7 @@
+ #endif
+ #define SSL_PROTOCOL_TLSV1 (1<<2)
+ #ifndef OPENSSL_NO_SSL3
+-#define SSL_PROTOCOL_BASIC (SSL_PROTOCOL_SSLV3|SSL_PROTOCOL_TLSV1)
++#define SSL_PROTOCOL_BASIC (SSL_PROTOCOL_TLSV1)
  #else
--#define SSL_PROTOCOL_ALL   (SSL_PROTOCOL_SSLV3|SSL_PROTOCOL_TLSV1)
-+#define SSL_PROTOCOL_ALL   (SSL_PROTOCOL_TLSV1)
+ #define SSL_PROTOCOL_BASIC (SSL_PROTOCOL_TLSV1)
  #endif
- typedef int ssl_proto_t;
- 
 --- docs/manual/mod/mod_ssl.html.en
 +++ docs/manual/mod/mod_ssl.html.en
-@@ -1369,9 +1361,7 @@
+@@ -1440,11 +1440,7 @@
  
  <li><code>all</code>
      <p>
 -    This is a shortcut for ``<code>+SSLv3 +TLSv1</code>'' or
 -    - when using OpenSSL 1.0.1 and later -
--    ``<code>+SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2</code>, respectively.</p></li>
+-    ``<code>+SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2</code>'', respectively
+-    (except for OpenSSL versions compiled with the ``no-ssl3'' configuration
+-    option, where <code>all</code> does not include <code>+SSLv3</code>).</p></li>
 +    This is a shortcut for ``<code>+TLSv1 +TLSv1.1 +TLSv1.2</code>''.</p></li>
  </ul>
  <div class="example"><h3>Example</h3><pre class="prettyprint lang-config">SSLProtocol TLSv1</pre>
  </div>
 --- docs/manual/mod/mod_ssl.html.fr
 +++ docs/manual/mod/mod_ssl.html.fr
-@@ -1548,8 +1545,7 @@
+@@ -1626,11 +1626,7 @@
  
  <li><code>all</code>
      <p>
 -    C'est un raccourci pour ``<code>+SSLv3 +TLSv1</code>'' ou - � partir
--    de la version 1.0.1 d'OpenSSL - ``<code>+SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2</code>.</p></li>
+-    de la version 1.0.1 d'OpenSSL - ``<code>+SSLv3 +TLSv1 +TLSv1.1
+-    +TLSv1.2</code>'' (sauf si OpenSSL a �t� compil� avec l'option
+-    ``no-ssl3'', auquel cas <code>all</code> n'inclura pas
+-    <code>+SSLv3</code>).</p></li>
 +    C'est un raccourci pour ``<code>+TLSv1 +TLSv1.1 +TLSv1.2</code>''.</p></li>
  </ul>
  <div class="example"><h3>Exemple</h3><pre class="prettyprint lang-config">SSLProtocol TLSv1</pre>
--- a/components/apache24/patches/priv_drop.patch	Wed Apr 20 20:01:01 2016 -0700
+++ b/components/apache24/patches/priv_drop.patch	Tue Apr 19 05:21:45 2016 -0700
@@ -20,9 +20,9 @@
      const char *opt_arg;
 +    priv_set_t *tset;
      APR_OPTIONAL_FN_TYPE(ap_signal_server) *signal_server;
+     int rc = OK;
  
-     AP_MONCONTROL(0); /* turn off profiling of startup */
-@@ -788,6 +806,17 @@
+@@ -789,6 +907,17 @@
  
          ap_run_optional_fn_retrieve();
  
@@ -38,5 +38,5 @@
 +        }
 +
          ap_main_state = AP_SQ_MS_RUN_MPM;
-         if (ap_run_mpm(pconf, plog, ap_server_conf) != OK)
-             break;
+         rc = ap_run_mpm(pconf, plog, ap_server_conf);
+ 
--- a/components/apache24/patches/ssl-fips-140.patch	Wed Apr 20 20:01:01 2016 -0700
+++ b/components/apache24/patches/ssl-fips-140.patch	Tue Apr 19 05:21:45 2016 -0700
@@ -52,18 +52,3 @@
  dnl #  end of module specific part
  APACHE_MODPATH_FINISH
  
---- acinclude.m4
-+++ acinclude.m4
-@@ -591,6 +591,12 @@
-   ])
-   if test "x$ac_cv_openssl" = "xyes"; then
-     AC_DEFINE(HAVE_OPENSSL, 1, [Define if OpenSSL is available])
-+
-+    APR_ADDTO(MOD_LDFLAGS, [$ap_openssl_libs])
-+    APR_ADDTO(LIBS, [$ap_openssl_libs])
-+    APR_SETVAR(ab_LDFLAGS, [$MOD_LDFLAGS])
-+    APACHE_SUBST(ab_CFLAGS)
-+    APACHE_SUBST(ab_LDFLAGS)
-   fi
- ])
-