[34] | 1 | %define contentdir /var/www |
---|
| 2 | %define suexec_caller apache |
---|
| 3 | %define mmn 20051115 |
---|
| 4 | %define vstring Fedora |
---|
| 5 | %define distro Fedora Core |
---|
| 6 | |
---|
| 7 | Summary: Apache HTTP Server |
---|
| 8 | Name: httpd |
---|
| 9 | Version: 2.2.3 |
---|
| 10 | Release: 5 |
---|
| 11 | URL: http://httpd.apache.org/ |
---|
| 12 | Source0: http://www.apache.org/dist/httpd/httpd-%{version}.tar.gz |
---|
| 13 | Source1: index.html |
---|
| 14 | Source3: httpd.logrotate |
---|
| 15 | Source4: httpd.init |
---|
| 16 | Source5: httpd.sysconf |
---|
| 17 | Source7: powered_by_fedora.png |
---|
| 18 | Source10: httpd.conf |
---|
| 19 | Source11: ssl.conf |
---|
| 20 | Source12: welcome.conf |
---|
| 21 | Source13: manual.conf |
---|
| 22 | Source14: proxy_ajp.conf |
---|
| 23 | # Documentation |
---|
| 24 | Source30: migration.xml |
---|
| 25 | Source31: migration.css |
---|
| 26 | Source32: html.xsl |
---|
| 27 | Source33: README.confd |
---|
| 28 | # build/scripts patches |
---|
| 29 | Patch1: httpd-2.1.10-apctl.patch |
---|
| 30 | Patch2: httpd-2.1.10-apxs.patch |
---|
| 31 | Patch3: httpd-2.0.45-deplibs.patch |
---|
| 32 | Patch4: httpd-2.1.10-disablemods.patch |
---|
| 33 | Patch5: httpd-2.1.10-layout.patch |
---|
| 34 | Patch6: httpd-2.2.2-ac260.patch |
---|
| 35 | # Features/functional changes |
---|
| 36 | Patch20: httpd-2.0.48-release.patch |
---|
| 37 | Patch21: httpd-2.0.40-xfsz.patch |
---|
| 38 | Patch22: httpd-2.1.10-pod.patch |
---|
| 39 | Patch23: httpd-2.0.45-export.patch |
---|
| 40 | Patch24: httpd-2.0.48-corelimit.patch |
---|
| 41 | Patch25: httpd-2.0.54-selinux.patch |
---|
| 42 | # Bug fixes |
---|
| 43 | Patch50: httpd-2.0.45-encode.patch |
---|
| 44 | Patch54: httpd-2.2.0-authnoprov.patch |
---|
| 45 | License: Apache Software License |
---|
| 46 | Group: System Environment/Daemons |
---|
| 47 | BuildRoot: %{_tmppath}/%{name}-root |
---|
| 48 | BuildRequires: autoconf, perl, pkgconfig, xmlto >= 0.0.11, findutils |
---|
| 49 | BuildRequires: db4-devel, expat-devel, zlib-devel, libselinux-devel |
---|
| 50 | BuildRequires: apr-devel >= 1.2.0, apr-util-devel >= 1.2.0, pcre-devel >= 5.0, |
---|
| 51 | Requires: /etc/mime.types, gawk, /usr/share/magic.mime, /usr/bin/find |
---|
| 52 | Requires: initscripts >= 8.36 |
---|
| 53 | Obsoletes: httpd-suexec |
---|
| 54 | Prereq: /sbin/chkconfig, /bin/mktemp, /bin/rm, /bin/mv |
---|
| 55 | Prereq: sh-utils, textutils, /usr/sbin/useradd |
---|
| 56 | Provides: webserver |
---|
| 57 | Provides: httpd-mmn = %{mmn} |
---|
| 58 | Obsoletes: apache, secureweb, mod_dav, mod_gzip, stronghold-apache, stronghold-htdocs |
---|
| 59 | Obsoletes: mod_put, mod_roaming, mod_jk |
---|
| 60 | Conflicts: pcre < 4.0 |
---|
| 61 | |
---|
| 62 | %description |
---|
| 63 | The Apache HTTP Server is a powerful, efficient, and extensible |
---|
| 64 | web server. |
---|
| 65 | |
---|
| 66 | %package devel |
---|
| 67 | Group: Development/Libraries |
---|
| 68 | Summary: Development tools for the Apache HTTP server. |
---|
| 69 | Obsoletes: secureweb-devel, apache-devel, stronghold-apache-devel |
---|
| 70 | Requires: apr-devel, apr-util-devel, pkgconfig |
---|
| 71 | Requires: httpd = %{version}-%{release} |
---|
| 72 | |
---|
| 73 | %description devel |
---|
| 74 | The httpd-devel package contains the APXS binary and other files |
---|
| 75 | that you need to build Dynamic Shared Objects (DSOs) for the |
---|
| 76 | Apache HTTP Server. |
---|
| 77 | |
---|
| 78 | If you are installing the Apache HTTP server and you want to be |
---|
| 79 | able to compile or develop additional modules for Apache, you need |
---|
| 80 | to install this package. |
---|
| 81 | |
---|
| 82 | %package manual |
---|
| 83 | Group: Documentation |
---|
| 84 | Summary: Documentation for the Apache HTTP server. |
---|
| 85 | Requires: httpd = %{version}-%{release} |
---|
| 86 | Obsoletes: secureweb-manual, apache-manual |
---|
| 87 | |
---|
| 88 | %description manual |
---|
| 89 | The httpd-manual package contains the complete manual and |
---|
| 90 | reference guide for the Apache HTTP server. The information can |
---|
| 91 | also be found at http://httpd.apache.org/docs/2.2/. |
---|
| 92 | |
---|
| 93 | %package -n mod_ssl |
---|
| 94 | Group: System Environment/Daemons |
---|
| 95 | Summary: SSL/TLS module for the Apache HTTP server |
---|
| 96 | Epoch: 1 |
---|
| 97 | BuildRequires: openssl-devel, distcache-devel |
---|
| 98 | Requires(post): openssl >= 0.9.7f-4, /bin/cat |
---|
| 99 | Requires: httpd = 0:%{version}-%{release}, httpd-mmn = %{mmn} |
---|
| 100 | Obsoletes: stronghold-mod_ssl |
---|
| 101 | |
---|
| 102 | %description -n mod_ssl |
---|
| 103 | The mod_ssl module provides strong cryptography for the Apache Web |
---|
| 104 | server via the Secure Sockets Layer (SSL) and Transport Layer |
---|
| 105 | Security (TLS) protocols. |
---|
| 106 | |
---|
| 107 | %prep |
---|
| 108 | %setup -q |
---|
| 109 | %patch1 -p1 -b .apctl |
---|
| 110 | %patch2 -p1 -b .apxs |
---|
| 111 | %patch3 -p1 -b .deplibs |
---|
| 112 | %patch4 -p1 -b .disablemods |
---|
| 113 | %patch5 -p1 -b .layout |
---|
| 114 | %patch6 -p1 -b .ac260 |
---|
| 115 | |
---|
| 116 | %patch21 -p0 -b .xfsz |
---|
| 117 | %patch22 -p1 -b .pod |
---|
| 118 | %patch23 -p1 -b .export |
---|
| 119 | %patch24 -p1 -b .corelimit |
---|
| 120 | %patch25 -p1 -b .selinux |
---|
| 121 | |
---|
| 122 | # no -b to prevent droplets in install root |
---|
| 123 | %patch50 -p1 |
---|
| 124 | %patch54 -p1 -b .authnoprov |
---|
| 125 | |
---|
| 126 | # Patch in vendor/release string |
---|
| 127 | sed "s/@RELEASE@/%{vstring}/" < %{PATCH20} | patch -p1 |
---|
| 128 | |
---|
| 129 | # Safety check: prevent build if defined MMN does not equal upstream MMN. |
---|
| 130 | vmmn=`echo MODULE_MAGIC_NUMBER_MAJOR | cpp -include include/ap_mmn.h | sed -n '/^2/p'` |
---|
| 131 | if test "x${vmmn}" != "x%{mmn}"; then |
---|
| 132 | : Error: Upstream MMN is now ${vmmn}, packaged MMN is %{mmn}. |
---|
| 133 | : Update the mmn macro and rebuild. |
---|
| 134 | exit 1 |
---|
| 135 | fi |
---|
| 136 | |
---|
| 137 | : Building for '%{distro}' with MMN %{mmn} and vendor string '%{vstring}' |
---|
| 138 | |
---|
| 139 | %build |
---|
| 140 | # forcibly prevent use of bundled apr, apr-util, pcre |
---|
| 141 | rm -rf srclib/{apr,apr-util,pcre} |
---|
| 142 | |
---|
| 143 | # regenerate configure scripts |
---|
| 144 | autoheader && autoconf || exit 1 |
---|
| 145 | |
---|
| 146 | # Limit size of CHANGES to recent history |
---|
| 147 | echo '1,/Changes with Apache MPM/wq' | ed CHANGES |
---|
| 148 | |
---|
| 149 | # Before configure; fix location of build dir in generated apxs |
---|
| 150 | %{__perl} -pi -e "s:\@exp_installbuilddir\@:%{_libdir}/httpd/build:g" \ |
---|
| 151 | support/apxs.in |
---|
| 152 | # update location of migration guide in apachectl |
---|
| 153 | %{__perl} -pi -e "s:\@docdir\@:%{_docdir}/%{name}-%{version}:g" \ |
---|
| 154 | support/apachectl.in |
---|
| 155 | |
---|
| 156 | # Build the migration guide |
---|
| 157 | sed 's/@DISTRO@/%{distro}/' < $RPM_SOURCE_DIR/migration.xml > migration.xml |
---|
| 158 | xmlto -x $RPM_SOURCE_DIR/html.xsl html-nochunks migration.xml |
---|
| 159 | cp $RPM_SOURCE_DIR/migration.css . # make %%doc happy |
---|
| 160 | |
---|
| 161 | CFLAGS=$RPM_OPT_FLAGS |
---|
| 162 | SH_LDFLAGS="-Wl,-z,relro" |
---|
| 163 | export CFLAGS SH_LDFLAGS |
---|
| 164 | |
---|
| 165 | function mpmbuild() |
---|
| 166 | { |
---|
| 167 | mpm=$1; shift |
---|
| 168 | mkdir $mpm; pushd $mpm |
---|
| 169 | ../configure \ |
---|
| 170 | --prefix=%{_sysconfdir}/httpd \ |
---|
| 171 | --exec-prefix=%{_prefix} \ |
---|
| 172 | --bindir=%{_bindir} \ |
---|
| 173 | --sbindir=%{_sbindir} \ |
---|
| 174 | --mandir=%{_mandir} \ |
---|
| 175 | --libdir=%{_libdir} \ |
---|
| 176 | --sysconfdir=%{_sysconfdir}/httpd/conf \ |
---|
| 177 | --includedir=%{_includedir}/httpd \ |
---|
| 178 | --libexecdir=%{_libdir}/httpd/modules \ |
---|
| 179 | --datadir=%{contentdir} \ |
---|
| 180 | --with-installbuilddir=%{_libdir}/httpd/build \ |
---|
| 181 | --with-mpm=$mpm \ |
---|
| 182 | --with-apr=%{_prefix} --with-apr-util=%{_prefix} \ |
---|
| 183 | --enable-suexec --with-suexec \ |
---|
| 184 | --with-suexec-caller=%{suexec_caller} \ |
---|
| 185 | --with-suexec-docroot=%{contentdir} \ |
---|
| 186 | --with-suexec-logfile=%{_localstatedir}/log/httpd/suexec.log \ |
---|
| 187 | --with-suexec-bin=%{_sbindir}/suexec \ |
---|
| 188 | --with-suexec-uidmin=500 --with-suexec-gidmin=100 \ |
---|
| 189 | --enable-pie \ |
---|
| 190 | --with-pcre \ |
---|
| 191 | $* |
---|
| 192 | |
---|
| 193 | make %{?_smp_mflags} |
---|
| 194 | popd |
---|
| 195 | } |
---|
| 196 | |
---|
| 197 | # Build everything and the kitchen sink with the prefork build |
---|
| 198 | mpmbuild prefork \ |
---|
| 199 | --enable-mods-shared=all \ |
---|
| 200 | --enable-ssl --with-ssl --enable-distcache \ |
---|
| 201 | --enable-proxy \ |
---|
| 202 | --enable-cache --enable-mem-cache \ |
---|
| 203 | --enable-file-cache --enable-disk-cache \ |
---|
| 204 | --enable-ldap --enable-authnz-ldap \ |
---|
| 205 | --enable-cgid \ |
---|
| 206 | --enable-authn-anon --enable-authn-alias |
---|
| 207 | |
---|
| 208 | # For the other MPMs, just build httpd and no optional modules |
---|
| 209 | mpmbuild worker --enable-modules=none |
---|
| 210 | #mpmbuild event --enable-modules=none |
---|
| 211 | |
---|
| 212 | %install |
---|
| 213 | rm -rf $RPM_BUILD_ROOT |
---|
| 214 | |
---|
| 215 | # Classify ab and logresolve as section 1 commands, as they are in /usr/bin |
---|
| 216 | mv docs/man/ab.8 docs/man/ab.1 |
---|
| 217 | mv docs/man/logresolve.8 docs/man/logresolve.1 |
---|
| 218 | |
---|
| 219 | pushd prefork |
---|
| 220 | make DESTDIR=$RPM_BUILD_ROOT install |
---|
| 221 | popd |
---|
| 222 | |
---|
| 223 | # install alternative MPMs |
---|
| 224 | install -m 755 worker/httpd $RPM_BUILD_ROOT%{_sbindir}/httpd.worker |
---|
| 225 | #install -m 755 event/httpd $RPM_BUILD_ROOT%{_sbindir}/httpd.event |
---|
| 226 | |
---|
| 227 | # install conf file/directory |
---|
| 228 | mkdir $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.d |
---|
| 229 | install -m 644 $RPM_SOURCE_DIR/README.confd \ |
---|
| 230 | $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.d/README |
---|
| 231 | for f in ssl.conf welcome.conf manual.conf proxy_ajp.conf; do |
---|
| 232 | install -m 644 $RPM_SOURCE_DIR/$f $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.d/$f |
---|
| 233 | done |
---|
| 234 | |
---|
| 235 | rm $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf/*.conf |
---|
| 236 | install -m 644 $RPM_SOURCE_DIR/httpd.conf \ |
---|
| 237 | $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf/httpd.conf |
---|
| 238 | |
---|
| 239 | mkdir $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig |
---|
| 240 | install -m 644 $RPM_SOURCE_DIR/httpd.sysconf \ |
---|
| 241 | $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/httpd |
---|
| 242 | |
---|
| 243 | # for holding mod_dav lock database |
---|
| 244 | mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/lib/dav |
---|
| 245 | |
---|
| 246 | # create a prototype session cache |
---|
| 247 | mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/cache/mod_ssl |
---|
| 248 | touch $RPM_BUILD_ROOT%{_localstatedir}/cache/mod_ssl/scache.{dir,pag,sem} |
---|
| 249 | |
---|
| 250 | # create cache root |
---|
| 251 | mkdir $RPM_BUILD_ROOT%{_localstatedir}/cache/mod_proxy |
---|
| 252 | |
---|
| 253 | # move utilities to /usr/bin |
---|
| 254 | mv $RPM_BUILD_ROOT%{_sbindir}/{ab,htdbm,logresolve,htpasswd,htdigest} \ |
---|
| 255 | $RPM_BUILD_ROOT%{_bindir} |
---|
| 256 | |
---|
| 257 | # Make the MMN accessible to module packages |
---|
| 258 | echo %{mmn} > $RPM_BUILD_ROOT%{_includedir}/httpd/.mmn |
---|
| 259 | |
---|
| 260 | # docroot |
---|
| 261 | mkdir $RPM_BUILD_ROOT%{contentdir}/html |
---|
| 262 | install -m 644 $RPM_SOURCE_DIR/index.html \ |
---|
| 263 | $RPM_BUILD_ROOT%{contentdir}/error/noindex.html |
---|
| 264 | |
---|
| 265 | # remove manual sources |
---|
| 266 | find $RPM_BUILD_ROOT%{contentdir}/manual \( \ |
---|
| 267 | -name \*.xml -o -name \*.xml.* -o -name \*.ent -o -name \*.xsl -o -name \*.dtd \ |
---|
| 268 | \) -print0 | xargs -0 rm -f |
---|
| 269 | |
---|
| 270 | # Strip the manual down just to English and replace the typemaps with flat files: |
---|
| 271 | set +x |
---|
| 272 | for f in `find $RPM_BUILD_ROOT%{contentdir}/manual -name \*.html -type f`; do |
---|
| 273 | if test -f ${f}.en; then |
---|
| 274 | cp ${f}.en ${f} |
---|
| 275 | rm ${f}.* |
---|
| 276 | fi |
---|
| 277 | done |
---|
| 278 | set -x |
---|
| 279 | |
---|
| 280 | install -m 644 $RPM_SOURCE_DIR/powered_by_fedora.png \ |
---|
| 281 | $RPM_BUILD_ROOT%{contentdir}/icons |
---|
| 282 | |
---|
| 283 | # logs |
---|
| 284 | rmdir $RPM_BUILD_ROOT%{_sysconfdir}/httpd/logs |
---|
| 285 | mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/log/httpd |
---|
| 286 | |
---|
| 287 | # symlinks for /etc/httpd |
---|
[297] | 288 | ln -s ../..%{_localstatedir}/log/httpd $RPM_BUILD_ROOT/etc/httpd/logs |
---|
| 289 | ln -s ../..%{_localstatedir}/run $RPM_BUILD_ROOT/etc/httpd/run |
---|
| 290 | ln -s ../..%{_libdir}/httpd/modules $RPM_BUILD_ROOT/etc/httpd/modules |
---|
[34] | 291 | |
---|
| 292 | # install SYSV init stuff |
---|
| 293 | mkdir -p $RPM_BUILD_ROOT/etc/rc.d/init.d |
---|
| 294 | install -m755 $RPM_SOURCE_DIR/httpd.init \ |
---|
| 295 | $RPM_BUILD_ROOT/etc/rc.d/init.d/httpd |
---|
| 296 | %{__perl} -pi -e "s:\@docdir\@:%{_docdir}/%{name}-%{version}:g" \ |
---|
| 297 | $RPM_BUILD_ROOT/etc/rc.d/init.d/httpd |
---|
| 298 | |
---|
| 299 | # install log rotation stuff |
---|
| 300 | mkdir -p $RPM_BUILD_ROOT/etc/logrotate.d |
---|
| 301 | install -m644 $RPM_SOURCE_DIR/httpd.logrotate \ |
---|
| 302 | $RPM_BUILD_ROOT/etc/logrotate.d/httpd |
---|
| 303 | |
---|
| 304 | # fix man page paths |
---|
| 305 | sed -e "s|/usr/local/apache2/conf/httpd.conf|/etc/httpd/conf/httpd.conf|" \ |
---|
| 306 | -e "s|/usr/local/apache2/conf/mime.types|/etc/mime.types|" \ |
---|
| 307 | -e "s|/usr/local/apache2/conf/magic|/etc/httpd/conf/magic|" \ |
---|
| 308 | -e "s|/usr/local/apache2/logs/error_log|/var/log/httpd/error_log|" \ |
---|
| 309 | -e "s|/usr/local/apache2/logs/access_log|/var/log/httpd/access_log|" \ |
---|
| 310 | -e "s|/usr/local/apache2/logs/httpd.pid|/var/run/httpd.pid|" \ |
---|
| 311 | -e "s|/usr/local/apache2|/etc/httpd|" < docs/man/httpd.8 \ |
---|
| 312 | > $RPM_BUILD_ROOT%{_mandir}/man8/httpd.8 |
---|
| 313 | |
---|
| 314 | # Make ap_config_layout.h libdir-agnostic |
---|
| 315 | sed -i '/.*DEFAULT_..._LIBEXECDIR/d;/DEFAULT_..._INSTALLBUILDDIR/d' \ |
---|
| 316 | $RPM_BUILD_ROOT%{_includedir}/httpd/ap_config_layout.h |
---|
| 317 | |
---|
| 318 | # Remove unpackaged files |
---|
| 319 | rm -f $RPM_BUILD_ROOT%{_libdir}/*.exp \ |
---|
| 320 | $RPM_BUILD_ROOT/etc/httpd/conf/mime.types \ |
---|
| 321 | $RPM_BUILD_ROOT%{_libdir}/httpd/modules/*.exp \ |
---|
| 322 | $RPM_BUILD_ROOT%{_libdir}/httpd/build/config.nice \ |
---|
| 323 | $RPM_BUILD_ROOT%{_bindir}/ap?-config \ |
---|
| 324 | $RPM_BUILD_ROOT%{_sbindir}/{checkgid,dbmmanage,envvars*} \ |
---|
| 325 | $RPM_BUILD_ROOT%{contentdir}/htdocs/* \ |
---|
| 326 | $RPM_BUILD_ROOT%{_mandir}/man1/dbmmanage.* \ |
---|
| 327 | $RPM_BUILD_ROOT%{contentdir}/cgi-bin/* |
---|
| 328 | |
---|
| 329 | rm -rf $RPM_BUILD_ROOT/etc/httpd/conf/{original,extra} |
---|
| 330 | |
---|
| 331 | # Make suexec a+rw so it can be stripped. %%files lists real permissions |
---|
| 332 | chmod 755 $RPM_BUILD_ROOT%{_sbindir}/suexec |
---|
| 333 | |
---|
| 334 | %pre |
---|
| 335 | # Add the "apache" user |
---|
| 336 | /usr/sbin/useradd -c "Apache" -u 48 \ |
---|
| 337 | -s /sbin/nologin -r -d %{contentdir} apache 2> /dev/null || : |
---|
| 338 | |
---|
| 339 | %triggerpostun -- apache < 2.0, stronghold-apache < 2.0 |
---|
| 340 | /sbin/chkconfig --add httpd |
---|
| 341 | |
---|
| 342 | # Prevent removal of index.html on upgrades from 1.3 |
---|
| 343 | %triggerun -- apache < 2.0, stronghold-apache < 2.0 |
---|
| 344 | if [ -r %{contentdir}/index.html -a ! -r %{contentdir}/index.html.rpmold ]; then |
---|
| 345 | mv %{contentdir}/index.html %{contentdir}/index.html.rpmold |
---|
| 346 | fi |
---|
| 347 | |
---|
| 348 | %post |
---|
| 349 | # Register the httpd service |
---|
| 350 | /sbin/chkconfig --add httpd |
---|
| 351 | |
---|
| 352 | %preun |
---|
| 353 | if [ $1 = 0 ]; then |
---|
| 354 | /sbin/service httpd stop > /dev/null 2>&1 |
---|
| 355 | /sbin/chkconfig --del httpd |
---|
| 356 | fi |
---|
| 357 | |
---|
| 358 | %define sslcert %{_sysconfdir}/pki/tls/certs/localhost.crt |
---|
| 359 | %define sslkey %{_sysconfdir}/pki/tls/private/localhost.key |
---|
| 360 | |
---|
| 361 | %post -n mod_ssl |
---|
| 362 | umask 077 |
---|
| 363 | |
---|
| 364 | if [ ! -f %{sslkey} ] ; then |
---|
| 365 | %{_bindir}/openssl genrsa -rand /proc/apm:/proc/cpuinfo:/proc/dma:/proc/filesystems:/proc/interrupts:/proc/ioports:/proc/pci:/proc/rtc:/proc/uptime 1024 > %{sslkey} 2> /dev/null |
---|
| 366 | fi |
---|
| 367 | |
---|
| 368 | FQDN=`hostname` |
---|
| 369 | if [ "x${FQDN}" = "x" ]; then |
---|
| 370 | FQDN=localhost.localdomain |
---|
| 371 | fi |
---|
| 372 | |
---|
| 373 | if [ ! -f %{sslcert} ] ; then |
---|
| 374 | cat << EOF | %{_bindir}/openssl req -new -key %{sslkey} \ |
---|
| 375 | -x509 -days 365 -set_serial $RANDOM \ |
---|
| 376 | -out %{sslcert} 2>/dev/null |
---|
| 377 | -- |
---|
| 378 | SomeState |
---|
| 379 | SomeCity |
---|
| 380 | SomeOrganization |
---|
| 381 | SomeOrganizationalUnit |
---|
| 382 | ${FQDN} |
---|
| 383 | root@${FQDN} |
---|
| 384 | EOF |
---|
| 385 | fi |
---|
| 386 | |
---|
| 387 | %check |
---|
| 388 | # Check the built modules are all PIC |
---|
| 389 | if readelf -d $RPM_BUILD_ROOT%{_libdir}/httpd/modules/*.so | grep TEXTREL; then |
---|
| 390 | : modules contain non-relocatable code |
---|
| 391 | exit 1 |
---|
| 392 | fi |
---|
| 393 | |
---|
| 394 | # Verify that the same modules were built into the httpd binaries |
---|
| 395 | ./prefork/httpd -l | grep -v prefork > prefork.mods |
---|
| 396 | for mpm in worker; do |
---|
| 397 | ./${mpm}/httpd -l | grep -v ${mpm} > ${mpm}.mods |
---|
| 398 | if ! diff -u prefork.mods ${mpm}.mods; then |
---|
| 399 | : Different modules built into httpd binaries, will not proceed |
---|
| 400 | exit 1 |
---|
| 401 | fi |
---|
| 402 | done |
---|
| 403 | |
---|
| 404 | %clean |
---|
| 405 | rm -rf $RPM_BUILD_ROOT |
---|
| 406 | |
---|
| 407 | %files |
---|
| 408 | %defattr(-,root,root) |
---|
| 409 | |
---|
| 410 | %doc ABOUT_APACHE README CHANGES LICENSE VERSIONING NOTICE |
---|
| 411 | %doc migration.html migration.css |
---|
| 412 | |
---|
| 413 | %dir %{_sysconfdir}/httpd |
---|
| 414 | %{_sysconfdir}/httpd/modules |
---|
| 415 | %{_sysconfdir}/httpd/logs |
---|
| 416 | %{_sysconfdir}/httpd/run |
---|
| 417 | %dir %{_sysconfdir}/httpd/conf |
---|
| 418 | %config %{_sysconfdir}/httpd/conf/httpd.conf |
---|
| 419 | %config(noreplace) %{_sysconfdir}/httpd/conf.d/welcome.conf |
---|
| 420 | %config(noreplace) %{_sysconfdir}/httpd/conf.d/proxy_ajp.conf |
---|
| 421 | %config(noreplace) %{_sysconfdir}/httpd/conf/magic |
---|
| 422 | |
---|
| 423 | %config(noreplace) %{_sysconfdir}/logrotate.d/httpd |
---|
| 424 | %config %{_sysconfdir}/rc.d/init.d/httpd |
---|
| 425 | |
---|
| 426 | %dir %{_sysconfdir}/httpd/conf.d |
---|
| 427 | %{_sysconfdir}/httpd/conf.d/README |
---|
| 428 | |
---|
| 429 | %config(noreplace) %{_sysconfdir}/sysconfig/httpd |
---|
| 430 | |
---|
| 431 | %{_bindir}/* |
---|
| 432 | %{_sbindir}/ht* |
---|
| 433 | %{_sbindir}/apachectl |
---|
| 434 | %{_sbindir}/rotatelogs |
---|
| 435 | %attr(4510,root,%{suexec_caller}) %{_sbindir}/suexec |
---|
| 436 | |
---|
| 437 | %dir %{_libdir}/httpd |
---|
| 438 | %dir %{_libdir}/httpd/modules |
---|
| 439 | %{_libdir}/httpd/modules/mod*.so |
---|
| 440 | %exclude %{_libdir}/httpd/modules/mod_ssl.so |
---|
| 441 | |
---|
| 442 | %dir %{contentdir} |
---|
| 443 | %dir %{contentdir}/cgi-bin |
---|
| 444 | %dir %{contentdir}/html |
---|
| 445 | %dir %{contentdir}/icons |
---|
| 446 | %dir %{contentdir}/error |
---|
| 447 | %dir %{contentdir}/error/include |
---|
| 448 | %{contentdir}/icons/* |
---|
| 449 | %{contentdir}/error/README |
---|
| 450 | %{contentdir}/error/noindex.html |
---|
| 451 | %config %{contentdir}/error/*.var |
---|
| 452 | %config %{contentdir}/error/include/*.html |
---|
| 453 | |
---|
| 454 | %attr(0700,root,root) %dir %{_localstatedir}/log/httpd |
---|
| 455 | %attr(0700,apache,apache) %dir %{_localstatedir}/lib/dav |
---|
| 456 | %attr(0700,apache,apache) %dir %{_localstatedir}/cache/mod_proxy |
---|
| 457 | |
---|
| 458 | %{_mandir}/man?/* |
---|
| 459 | %exclude %{_mandir}/man8/apxs.8* |
---|
| 460 | |
---|
| 461 | %files manual |
---|
| 462 | %defattr(-,root,root) |
---|
| 463 | %{contentdir}/manual |
---|
| 464 | %config %{_sysconfdir}/httpd/conf.d/manual.conf |
---|
| 465 | |
---|
| 466 | %files -n mod_ssl |
---|
| 467 | %defattr(-,root,root) |
---|
| 468 | %{_libdir}/httpd/modules/mod_ssl.so |
---|
| 469 | %config(noreplace) %{_sysconfdir}/httpd/conf.d/ssl.conf |
---|
| 470 | %attr(0700,apache,root) %dir %{_localstatedir}/cache/mod_ssl |
---|
| 471 | %attr(0600,apache,root) %ghost %{_localstatedir}/cache/mod_ssl/scache.dir |
---|
| 472 | %attr(0600,apache,root) %ghost %{_localstatedir}/cache/mod_ssl/scache.pag |
---|
| 473 | %attr(0600,apache,root) %ghost %{_localstatedir}/cache/mod_ssl/scache.sem |
---|
| 474 | |
---|
| 475 | %files devel |
---|
| 476 | %defattr(-,root,root) |
---|
| 477 | %{_includedir}/httpd |
---|
| 478 | %{_sbindir}/apxs |
---|
| 479 | %{_mandir}/man8/apxs.8* |
---|
| 480 | %dir %{_libdir}/httpd/build |
---|
| 481 | %{_libdir}/httpd/build/*.mk |
---|
| 482 | %{_libdir}/httpd/build/*.sh |
---|
| 483 | |
---|
| 484 | %changelog |
---|
| 485 | * Mon Sep 11 2006 Joe Orton <jorton@redhat.com> 2.2.3-5 |
---|
| 486 | - updated "powered by Fedora" logo (#205573, Diana Fong) |
---|
| 487 | - tweak welcome page wording slightly (#205880) |
---|
| 488 | |
---|
| 489 | * Fri Aug 18 2006 Jesse Keating <jkeating@redhat.com> - 2.2.3-4 |
---|
| 490 | - rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc* |
---|
| 491 | (#203001) |
---|
| 492 | |
---|
| 493 | * Thu Aug 3 2006 Joe Orton <jorton@redhat.com> 2.2.3-3 |
---|
| 494 | - init: use killproc() delay to avoid race killing parent |
---|
| 495 | |
---|
| 496 | * Fri Jul 28 2006 Joe Orton <jorton@redhat.com> 2.2.3-2 |
---|
| 497 | - update to 2.2.3 |
---|
| 498 | - trim %%changelog to >=2.0.52 |
---|
| 499 | |
---|
| 500 | * Thu Jul 20 2006 Joe Orton <jorton@redhat.com> 2.2.2-8 |
---|
| 501 | - fix segfault on dummy connection failure at graceful restart (#199429) |
---|
| 502 | |
---|
| 503 | * Wed Jul 19 2006 Joe Orton <jorton@redhat.com> 2.2.2-7 |
---|
| 504 | - fix "apxs -g"-generated Makefile |
---|
| 505 | - fix buildconf with autoconf 2.60 |
---|
| 506 | |
---|
| 507 | * Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 2.2.2-5.1 |
---|
| 508 | - rebuild |
---|
| 509 | |
---|
| 510 | * Wed Jun 7 2006 Joe Orton <jorton@redhat.com> 2.2.2-5 |
---|
| 511 | - require pkgconfig for -devel (#194152) |
---|
| 512 | - fixes for installed support makefiles (special.mk et al) |
---|
| 513 | - BR autoconf |
---|
| 514 | |
---|
| 515 | * Fri Jun 2 2006 Joe Orton <jorton@redhat.com> 2.2.2-4 |
---|
| 516 | - make -devel package multilib-safe (#192686) |
---|
| 517 | |
---|
| 518 | * Thu May 11 2006 Joe Orton <jorton@redhat.com> 2.2.2-3 |
---|
| 519 | - build DSOs using -z relro linker flag |
---|
| 520 | |
---|
| 521 | * Wed May 3 2006 Joe Orton <jorton@redhat.com> 2.2.2-2 |
---|
| 522 | - update to 2.2.2 |
---|
| 523 | |
---|
| 524 | * Thu Apr 6 2006 Joe Orton <jorton@redhat.com> 2.2.0-6 |
---|
| 525 | - rebuild to pick up apr-util LDAP interface fix (#188073) |
---|
| 526 | |
---|
| 527 | * Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - (none):2.2.0-5.1.2 |
---|
| 528 | - bump again for double-long bug on ppc(64) |
---|
| 529 | |
---|
| 530 | * Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - (none):2.2.0-5.1.1 |
---|
| 531 | - rebuilt for new gcc4.1 snapshot and glibc changes |
---|
| 532 | |
---|
| 533 | * Mon Feb 6 2006 Joe Orton <jorton@redhat.com> 2.2.0-5.1 |
---|
| 534 | - mod_auth_basic/mod_authn_file: if no provider is configured, |
---|
| 535 | and AuthUserFile is not configured, decline to handle authn |
---|
| 536 | silently rather than failing noisily. |
---|
| 537 | |
---|
| 538 | * Fri Feb 3 2006 Joe Orton <jorton@redhat.com> 2.2.0-5 |
---|
| 539 | - mod_ssl: add security fix for CVE-2005-3357 (#177914) |
---|
| 540 | - mod_imagemap: add security fix for CVE-2005-3352 (#177913) |
---|
| 541 | - add fix for AP_INIT_* designated initializers with C++ compilers |
---|
| 542 | - httpd.conf: enable HTMLTable in default IndexOptions |
---|
| 543 | - httpd.conf: add more "redirect-carefully" matches for DAV clients |
---|
| 544 | |
---|
| 545 | * Thu Jan 5 2006 Joe Orton <jorton@redhat.com> 2.2.0-4 |
---|
| 546 | - mod_proxy_ajp: fix Cookie handling (Mladen Turk, r358769) |
---|
| 547 | |
---|
| 548 | * Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com> |
---|
| 549 | - rebuilt |
---|
| 550 | |
---|
| 551 | * Wed Dec 7 2005 Joe Orton <jorton@redhat.com> 2.2.0-3 |
---|
| 552 | - strip manual to just English content |
---|
| 553 | |
---|
| 554 | * Mon Dec 5 2005 Joe Orton <jorton@redhat.com> 2.2.0-2 |
---|
| 555 | - don't strip C-L from HEAD responses (Greg Ames, #110552) |
---|
| 556 | - load mod_proxy_balancer by default |
---|
| 557 | - add proxy_ajp.conf to load/configure mod_proxy_ajp |
---|
| 558 | - Obsolete mod_jk |
---|
| 559 | - update docs URLs in httpd.conf/ssl.conf |
---|
| 560 | |
---|
| 561 | * Fri Dec 2 2005 Joe Orton <jorton@redhat.com> 2.2.0-1 |
---|
| 562 | - update to 2.2.0 |
---|
| 563 | |
---|
| 564 | * Wed Nov 30 2005 Joe Orton <jorton@redhat.com> 2.1.10-2 |
---|
| 565 | - enable mod_authn_alias, mod_authn_anon |
---|
| 566 | - update default httpd.conf |
---|
| 567 | |
---|
| 568 | * Fri Nov 25 2005 Joe Orton <jorton@redhat.com> 2.1.10-1 |
---|
| 569 | - update to 2.1.10 |
---|
| 570 | - require apr >= 1.2.0, apr-util >= 1.2.0 |
---|
| 571 | |
---|
| 572 | * Wed Nov 9 2005 Tomas Mraz <tmraz@redhat.com> 2.0.54-16 |
---|
| 573 | - rebuilt against new openssl |
---|
| 574 | |
---|
| 575 | * Thu Nov 3 2005 Joe Orton <jorton@redhat.com> 2.0.54-15 |
---|
| 576 | - log notice giving SELinux context at startup if enabled |
---|
| 577 | - drop SSLv2 and restrict default cipher suite in default |
---|
| 578 | SSL configuration |
---|
| 579 | |
---|
| 580 | * Thu Oct 20 2005 Joe Orton <jorton@redhat.com> 2.0.54-14 |
---|
| 581 | - mod_ssl: add security fix for SSLVerifyClient (CVE-2005-2700) |
---|
| 582 | - add security fix for byterange filter DoS (CVE-2005-2728) |
---|
| 583 | - add security fix for C-L vs T-E handling (CVE-2005-2088) |
---|
| 584 | - mod_ssl: add security fix for CRL overflow (CVE-2005-1268) |
---|
| 585 | - mod_ldap/mod_auth_ldap: add fixes from 2.0.x branch (upstream #34209 etc) |
---|
| 586 | - add fix for dummy connection handling (#167425) |
---|
| 587 | - mod_auth_digest: fix hostinfo comparison in CONNECT requests |
---|
| 588 | - mod_include: fix variable corruption in nested includes (upstream #12655) |
---|
| 589 | - mod_ssl: add fix for handling non-blocking reads |
---|
| 590 | - mod_ssl: fix to enable output buffering (upstream #35279) |
---|
| 591 | - mod_ssl: buffer request bodies for per-location renegotiation (upstream #12355) |
---|
| 592 | |
---|
| 593 | * Sat Aug 13 2005 Joe Orton <jorton@redhat.com> 2.0.54-13 |
---|
| 594 | - don't load by default: mod_cern_meta, mod_asis |
---|
| 595 | - do load by default: mod_ext_filter (#165893) |
---|
| 596 | |
---|
| 597 | * Thu Jul 28 2005 Joe Orton <jorton@redhat.com> 2.0.54-12 |
---|
| 598 | - drop broken epoch deps |
---|
| 599 | |
---|
| 600 | * Thu Jun 30 2005 Joe Orton <jorton@redhat.com> 2.0.54-11 |
---|
| 601 | - mod_dav_fs: fix uninitialized variable (#162144) |
---|
| 602 | - add epoch to dependencies as appropriate |
---|
| 603 | - mod_ssl: drop dependencies on dev, make |
---|
| 604 | - mod_ssl: mark post script dependencies as such |
---|
| 605 | |
---|
| 606 | * Mon May 23 2005 Joe Orton <jorton@redhat.com> 2.0.54-10 |
---|
| 607 | - remove broken symlink (Robert Scheck, #158404) |
---|
| 608 | |
---|
| 609 | * Wed May 18 2005 Joe Orton <jorton@redhat.com> 2.0.54-9 |
---|
| 610 | - add piped logger fixes (w/Jeff Trawick) |
---|
| 611 | |
---|
| 612 | * Mon May 9 2005 Joe Orton <jorton@redhat.com> 2.0.54-8 |
---|
| 613 | - drop old "powered by Red Hat" logos |
---|
| 614 | |
---|
| 615 | * Wed May 4 2005 Joe Orton <jorton@redhat.com> 2.0.54-7 |
---|
| 616 | - mod_userdir: fix memory allocation issue (upstream #34588) |
---|
| 617 | - mod_ldap: fix memory corruption issue (Brad Nicholes, upstream #34618) |
---|
| 618 | |
---|
| 619 | * Tue Apr 26 2005 Joe Orton <jorton@redhat.com> 2.0.54-6 |
---|
| 620 | - fix key/cert locations in post script |
---|
| 621 | |
---|
| 622 | * Mon Apr 25 2005 Joe Orton <jorton@redhat.com> 2.0.54-5 |
---|
| 623 | - create default dummy cert in /etc/pki/tls |
---|
| 624 | - use a pseudo-random serial number on the dummy cert |
---|
| 625 | - change default ssl.conf to point at /etc/pki/tls |
---|
| 626 | - merge back -suexec subpackage; SELinux policy can now be |
---|
| 627 | used to persistently disable suexec (#155716) |
---|
| 628 | - drop /etc/httpd/conf/ssl.* directories and Makefiles |
---|
| 629 | - unconditionally enable PIE support |
---|
| 630 | - mod_ssl: fix for picking up -shutdown options (upstream #34452) |
---|
| 631 | |
---|
| 632 | * Mon Apr 18 2005 Joe Orton <jorton@redhat.com> 2.0.54-4 |
---|
| 633 | - replace PreReq with Requires(pre) |
---|
| 634 | |
---|
| 635 | * Mon Apr 18 2005 Joe Orton <jorton@redhat.com> 2.0.54-3 |
---|
| 636 | - update to 2.0.54 |
---|
| 637 | |
---|
| 638 | * Tue Mar 29 2005 Joe Orton <jorton@redhat.com> 2.0.53-6 |
---|
| 639 | - update default httpd.conf: |
---|
| 640 | * clarify the comments on AddDefaultCharset usage (#135821) |
---|
| 641 | * remove all the AddCharset default extensions |
---|
| 642 | * don't load mod_imap by default |
---|
| 643 | * synch with upstream 2.0.53 httpd-std.conf |
---|
| 644 | - mod_ssl: set user from SSLUserName in access hook (upstream #31418) |
---|
| 645 | - htdigest: fix permissions of created files (upstream #33765) |
---|
| 646 | - remove htsslpass |
---|
| 647 | |
---|
| 648 | * Wed Mar 2 2005 Joe Orton <jorton@redhat.com> 2.0.53-5 |
---|
| 649 | - apachectl: restore use of $OPTIONS again |
---|
| 650 | |
---|
| 651 | * Wed Feb 9 2005 Joe Orton <jorton@redhat.com> 2.0.53-4 |
---|
| 652 | - update to 2.0.53 |
---|
| 653 | - move prefork/worker modules comparison to %%check |
---|
| 654 | |
---|
| 655 | * Mon Feb 7 2005 Joe Orton <jorton@redhat.com> 2.0.52-7 |
---|
| 656 | - fix cosmetic issues in "service httpd reload" |
---|
| 657 | - move User/Group higher in httpd.conf (#146793) |
---|
| 658 | - load mod_logio by default in httpd.conf |
---|
| 659 | - apachectl: update for correct libselinux tools locations |
---|
| 660 | |
---|
| 661 | * Tue Nov 16 2004 Joe Orton <jorton@redhat.com> 2.0.52-6 |
---|
| 662 | - add security fix for CVE CAN-2004-0942 (memory consumption DoS) |
---|
| 663 | - SELinux: run httpd -t under runcon in configtest (Steven Smalley) |
---|
| 664 | - fix SSLSessionCache comment for distcache in ssl.conf |
---|
| 665 | - restart using SIGHUP not SIGUSR1 after logrotate |
---|
| 666 | - add ap_save_brigade fix (upstream #31247) |
---|
| 667 | - mod_ssl: fix possible segfault in auth hook (upstream #31848) |
---|
| 668 | - add htsslpass(1) and configure as default SSLPassPhraseDialog (#128677) |
---|
| 669 | - apachectl: restore use of $OPTIONS |
---|
| 670 | - apachectl, httpd.init: refuse to restart if $HTTPD -t fails |
---|
| 671 | - apachectl: run $HTTPD -t in user SELinux context for configtest |
---|
| 672 | - update for pcre-5.0 header locations |
---|
| 673 | |
---|
| 674 | * Sat Nov 13 2004 Jeff Johnson <jbj@redhat.com> 2.0.52-5 |
---|
| 675 | - rebuild against db-4.3.21 aware apr-util. |
---|
| 676 | |
---|
| 677 | * Thu Nov 11 2004 Jeff Johnson <jbj@jbj.org> 2.0.52-4 |
---|
| 678 | - rebuild against db-4.3-21. |
---|
| 679 | |
---|
| 680 | * Thu Sep 28 2004 Joe Orton <jorton@redhat.com> 2.0.52-3 |
---|
| 681 | - add dummy connection address fixes from HEAD |
---|
| 682 | - mod_ssl: add security fix for CAN-2004-0885 |
---|
| 683 | |
---|
| 684 | * Tue Sep 28 2004 Joe Orton <jorton@redhat.com> 2.0.52-2 |
---|
| 685 | - update to 2.0.52 |
---|
| 686 | |
---|