CVS commit: pkgsrc/www/lighttpd

["Amitai Schleier" <schmonz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   schmonz
Date:           Wed Aug 13 13:44:58 UTC 2025

Modified Files:
        pkgsrc/www/lighttpd: Makefile PLIST distinfo

Log Message:
lighttpd: update to 1.4.80. Changes:

* [doc] move comments in systemd lighttpd.service
* [doc] refresh INSTALL
* [core] adjust malloc_top_pad after srv->srvconf.max_conns
* [build] remove references to libev; no longer used
* [multiple] stricter string init without trail '\0'
* workaround unsupported PR_CAP_AMBIENT_CLEAR_ALL on Cloud Run
* [TLS] 0-init plugin_ssl_ctx (fixes #3281)
* [autotools] LIGHTTPD_STATIC in config.h if static build
* [doc] systemd lighttpd.service SystemCallFilter
* [core] reject stray \r in chunked headers
* [tests] reject stray \r or \n in chunked headers
* [core] http_chunk_decode_append_error()
* [core] h1_chunked_400_bad_request()
* [mod_webdav] log trace for EACCES on PUT
* [build] check for C23 memset_explicit()
* [mod_ssi] set tmp file length if ssi exec fails
* [mod_openssl] avoid BoringSSL/AWS-LC compiler warn
* [mod_openssl] AWS-LC limitations/compatibility (#3282)
* [mod_openssl] use BoringSSL APIs w/ SSL_CREDENTIAL
* [mod_boringssl] cp mod_openssl.c mod_boringssl.c
* [build] build support for mod_boringssl
* [mod_boringssl] rename plugin init func
* [mod_boringssl] remove openssl/libressl code
* [mod_openssl] remove code specific to boringssl
* [mod_boringssl] ignore ssl.read-ahead
* [mod_boringssl] TLS_with_buffers_method() optim
* [mod_boringssl] init/enable CRYPTO_BUFFER_POOL
* [mod_boringssl] use SSL_get0_peer_certificates()
* [mod_boringssl] using AWS-LC does not build
* [mod_boringssl] code reuse
* [mod_boringssl] more CRYPTO_BUFFER code, less X509
* [mod_boringssl] elide excess time() calls
* [mod_boringssl] alt callbacks for client cert vfy
* [mod_boringssl] remove verify_callback (replaced)
* [mod_boringssl] load CRLs into STACK_OF(X509_CRL)
* [mod_openssl] revert commits; re-support AWS-LC
* [mod_boringssl] skip BIO copy if pkey already DER
* [mod_boringssl] shared code for parsing PEM files
* [mod_boringssl] typo
* [mod_boringssl] wipe tmp_buf used to decode pkey
* [mod_boringssl] more generic pkey read from PEM
* [mod_wolfssl] more generic pkey read from PEM
* [mod_nss] more generic pkey read from PEM
* [core] http_chunk_decode_append_* code reuse
* [h2] h2_send_headers_hoff() to reduce stack use
* [core] stricter validate of trailers from backends
* [core] check Transfer-Encoding: chunked from backends
* [core] remove deprecated Expect-CT from enum
* [core] http_header_str_contains_token() comment
* [core] http_request_field_check_value() code reuse
* [core] http_request_field_check_name() code reuse
* [core] stricter validation of backend response
* [mod_magnet] stricter validation of request/response
* [h2] fill in hoff[] for ":status: XXX\r\n\r\n"
* [core] simplify hoff[] access when hoff[1] == 0
* [core] check HTTP/1.x field block fully consumed
* [core] unfold fields in http_header_parse_hoff()
* [h2] stricter validation of HTTP/2 trailers
* [core] validate BACKEND_PROXY headers end w/ CRLF
* [core] strict validate request headers end w/ CRLF
* [core] fix stat_cache inotify for files in rootdir
* [core] merge request trailers into request headers
* [mod_staticfile] reject pathinfo on static files
* [mod_setenv] warn if setenv.* incl invalid chars
* [tests] trailers
* [mod_proxy] sketch out streaming and trailers
* [mod_setenv] quiet coverity noise
* [core] disable mmap for < QNX 8.0.0
* [core] connections_pool_clear() unless in jobqueue
* [mod_openssl] build against ancient openssl libs
* [TLS] SSL error handling improvements
* [mod_openssl] update lib version EOL warning
* [mod_openssl] workaround OpenSSL 3 SSL_sendfile bug
* [mod_wolfssl] check for WOLFSSL_SHUTDOWN_NOT_DONE
* [TLS] skip SSL_shutdown after non-recoverable error
* [mod_wolfssl] handle additional wolfssl socket err
* [mod_mbedtls] mbedtls 4.x removes MBEDTLS_DHM_C
* [mod_mbedtls] mbedtls 4.x PSA crypto handles RNG
* [mod_mbedtls] mbedtls 4.x removes RSA key exch
* [mod_mbedtls] mbedtls 4.x curve_info,list private
* [mod_mbedtls] mbedtls 4.x makes oid private
* [doc] command line -f - to read config from stdin (fixes #3286)
* [h2] attempt to detect HTTP/2 MadeYouReset DoS


To generate a diff of this commit:
cvs rdiff -u -r1.138 -r1.139 pkgsrc/www/lighttpd/Makefile
cvs rdiff -u -r1.30 -r1.31 pkgsrc/www/lighttpd/PLIST
cvs rdiff -u -r1.86 -r1.87 pkgsrc/www/lighttpd/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/lighttpd/Makefile
diff -u pkgsrc/www/lighttpd/Makefile:1.138 pkgsrc/www/lighttpd/Makefile:1.139
--- pkgsrc/www/lighttpd/Makefile:1.138  Thu Apr 17 21:52:49 2025
+++ pkgsrc/www/lighttpd/Makefile        Wed Aug 13 13:44:58 2025
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.138 2025/04/17 21:52:49 wiz Exp $
+# $NetBSD: Makefile,v 1.139 2025/08/13 13:44:58 schmonz Exp $
 
-DISTNAME=      lighttpd-1.4.79
-PKGREVISION=   1
+DISTNAME=      lighttpd-1.4.80
 CATEGORIES=    www
 MASTER_SITES=  https://download.lighttpd.net/lighttpd/releases-1.4.x/
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/www/lighttpd/PLIST
diff -u pkgsrc/www/lighttpd/PLIST:1.30 pkgsrc/www/lighttpd/PLIST:1.31
--- pkgsrc/www/lighttpd/PLIST:1.30      Fri Apr  4 13:30:17 2025
+++ pkgsrc/www/lighttpd/PLIST   Wed Aug 13 13:44:58 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.30 2025/04/04 13:30:17 schmonz Exp $
+@comment $NetBSD: PLIST,v 1.31 2025/08/13 13:44:58 schmonz Exp $
 lib/lighttpd/mod_accesslog.la
 lib/lighttpd/mod_ajp13.la
 lib/lighttpd/mod_auth.la
@@ -90,8 +90,8 @@ share/examples/lighttpd/conf.d/scgi.conf
 share/examples/lighttpd/conf.d/simple_vhost.conf
 share/examples/lighttpd/conf.d/ssi.conf
 share/examples/lighttpd/conf.d/status.conf
-share/examples/lighttpd/conf.d/userdir.conf
 share/examples/lighttpd/conf.d/tls.conf
+share/examples/lighttpd/conf.d/userdir.conf
 share/examples/lighttpd/conf.d/webdav.conf
 share/examples/lighttpd/lighttpd.annotated.conf
 share/examples/lighttpd/lighttpd.conf

Index: pkgsrc/www/lighttpd/distinfo
diff -u pkgsrc/www/lighttpd/distinfo:1.86 pkgsrc/www/lighttpd/distinfo:1.87
--- pkgsrc/www/lighttpd/distinfo:1.86   Fri Apr  4 13:30:17 2025
+++ pkgsrc/www/lighttpd/distinfo        Wed Aug 13 13:44:58 2025
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.86 2025/04/04 13:30:17 schmonz Exp $
+$NetBSD: distinfo,v 1.87 2025/08/13 13:44:58 schmonz Exp $
 
-BLAKE2s (lighttpd-1.4.79.tar.xz) = bf6c15a2f619c31db07bce9396f3b4baa78cff2d9a407d7ee4183aab0c5baa37
-SHA512 (lighttpd-1.4.79.tar.xz) = e0f1bb2cfca5e81001ea30d13f088425dfc7acbec924ecddf438eb6326ab3158a61c6c4aaee0b68a90666d1cb987ce94b1f6a48afd92485cc995db5b58265f83
-Size (lighttpd-1.4.79.tar.xz) = 865428 bytes
+BLAKE2s (lighttpd-1.4.80.tar.xz) = a83b13ee875b2f737a0d6e24d10aa3f43ff24e2858224953f7102a00781bc4ea
+SHA512 (lighttpd-1.4.80.tar.xz) = 82903869d769b684b006d3df496e92d304aa2f77d457501dd1ba5e6ea43afe80e107477ec56cd2cf3342949a76d5848fd5125bda41958a552d26e545bfc461af
+Size (lighttpd-1.4.80.tar.xz) = 882656 bytes
 SHA1 (patch-doc_config_lighttpd.annotated.conf) = f987b208cac0d24f24e8aa03c268556029d6e184
 SHA1 (patch-doc_lighttpd.8) = 217166e0f0d0e64a2161e6db4d593c386b7c386a