Subject: IMPORTANT: APACHE AND APACHE-SSL PKGS UPDATED
To: None <tech-pkg@netbsd.org>
From: Todd Vierling <tv@pobox.com>
List: netbsd-users
Date: 12/03/1998 12:29:38
Today I added changes to the Apache, Apache-SSL, and SSLeay pkgs that update
and revise a significant amount of the build structure of these pkgs. The
updates should be visible after the next supscan.
The important things that any person wanting to update should note:
- THERE ARE NO SECURITY BUG FIXES IN APACHE 1.3.3 OVER 1.3.2.
If 1.3.2 works Fine for you, you do not need to upgrade at this time
unless you wish to try out the new build structure.
- The NEXT release of Apache (probably 1.3.4) will significantly merge the
httpd.conf, access.conf, and srm.conf files - access.conf and srm.conf
will be empty, and httpd.conf will hold all directives. Be prepared for
this change when the pkg is updated to the next Apache version.
- If you find bugs in the build system, please report them to the
tech-pkg@netbsd.org mailing list. I will see them, but in case I am not
able to fix them in a timely manner, others there may be able to help.
- mod_perl and mod_frontpage are being worked on. `Watch this space.'
I actually have mod_perl compiling, linking, and running, but it plays
with the Perl XS infrastructure, and shouldn't.
SSL notes:
- Engelschall's mod_ssl module has been integrated into the pkg system in a
very special way, and is now located in www/ap-ssl (apache-modssl is
gone).
When you build Apache alone, it is built with "hooks" (known as the
mod_ssl EAPI) that allow mod_ssl to link itself into Apache later as a
dynamic shared object. You may then compile SSLeay and mod_ssl even after
Apache is installed.
The new mod_ssl setup HAS NOT BEEN TESTED EXTENSIVELY. It runs for me on
simple requests, but needs a blast test.
- To complement the previous point, SSLeay has been modified to generate
shared libraries with the now familiar and hated `pkglibtool' script. It
does not generate a `libRSAglue.a' any more; those routines are linked
into libcrypto only as necessary.
The new SSLeay pkg is called "ssleay" (lower case) and deliberately
conflicts with SSLeay-0.9.0b to force an upgrade of the SSLeay pkg if
building the new mod_ssl.
- httpd.conf.default now includes special sections of interest to SSL server
administrators, the most important of which is a block of directives near
the top that load and setup mod_ssl. Please check the new
httpd.conf.default and merge changes into your own httpd.conf.
--