pali pushed to cherokee (el5). "- New upstream release (1.0.8) (..more)"
notifications at fedoraproject.org
notifications at fedoraproject.org
Wed Apr 15 20:59:53 UTC 2015
>From c0983c34704ec9f8ff4843ff1b48732dea9b0ae4 Mon Sep 17 00:00:00 2001
From: Lorenzo Villani <lvillani at binaryhelix.net>
Date: Fri, 6 Aug 2010 18:42:23 +0200
Subject: * Fri Aug 6 2010 lvillani <lvillani at enterprise.binaryhelix.net>
1.0.6-1 - Relevant changes since 1.0.4 - NEW: Much better UTF-8 encoding -
NEW: Templates support slicing now (as in Python str) - NEW: 'TLS/SSL'
matching rule - NEW: Reverse HTTP proxy can overwrite "Expire:" entries -
NEW: Redirection handler support the ${host} macro now - FIX: POST support in
the HTTP reverse proxy - FIX: Some SSL/TLS were fixed. [unfinished] - FIX:
X-Forwarded-For parsing bug fixed - FIX: Better php-fpm support in the PHP
wizard - FIX: Bundled PySCGI bumped to 1.14 - FIX: Random 100% CPU usage -
FIX: POST management regression in the proxy - FIX: Connection RST/WAIT_FIN
related fixes - FIX: Dirlist bugfix: symbolic links handling - FIX: POST
status report bug-fixes - DOC: Documentation updates - i18n: Spanish
translation updated - i18n: Dutch translation updated - i18n: Polish
translation updated - i18n: German translation updated
diff --git a/.gitignore b/.gitignore
index 881bc92..d5fd851 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,2 @@
cherokee-1.0.4.tar.gz
+cherokee-1.0.6.tar.gz
diff --git a/cherokee.spec b/cherokee.spec
index 82e68bf..2214b6e 100644
--- a/cherokee.spec
+++ b/cherokee.spec
@@ -11,7 +11,7 @@ ExcludeArch: ppc
%endif
Name: cherokee
-Version: 1.0.4
+Version: 1.0.6
Release: 1%{?dist}
Summary: Flexible and Fast Webserver
@@ -32,6 +32,8 @@ Requires(post): chkconfig
Requires(preun): chkconfig
Requires(preun): initscripts
+Provides: webserver
+
%description
Cherokee is a very fast, flexible and easy to configure Web Server. It supports
the widespread technologies nowadays: FastCGI, SCGI, PHP, CGI, TLS and SSL
@@ -167,6 +169,29 @@ fi
%changelog
+* Fri Aug 6 2010 lvillani <lvillani at enterprise.binaryhelix.net> 1.0.6-1
+- Relevant changes since 1.0.4
+- NEW: Much better UTF-8 encoding
+- NEW: Templates support slicing now (as in Python str)
+- NEW: 'TLS/SSL' matching rule
+- NEW: Reverse HTTP proxy can overwrite "Expire:" entries
+- NEW: Redirection handler support the ${host} macro now
+- FIX: POST support in the HTTP reverse proxy
+- FIX: Some SSL/TLS were fixed. [unfinished]
+- FIX: X-Forwarded-For parsing bug fixed
+- FIX: Better php-fpm support in the PHP wizard
+- FIX: Bundled PySCGI bumped to 1.14
+- FIX: Random 100% CPU usage
+- FIX: POST management regression in the proxy
+- FIX: Connection RST/WAIT_FIN related fixes
+- FIX: Dirlist bugfix: symbolic links handling
+- FIX: POST status report bug-fixes
+- DOC: Documentation updates
+- i18n: Spanish translation updated
+- i18n: Dutch translation updated
+- i18n: Polish translation updated
+- i18n: German translation updated
+
* Mon Jun 28 2010 Lorenzo Villani <lvillani at binaryhelix.net> - 1.0.4-1
- Relevant changes since 1.0.0
- OLD: Dropped support for RFC 2817.
@@ -211,7 +236,6 @@ fi
- I18n: Dutch updated
- I18n: New translation to Catalan
-
* Wed May 12 2010 Lorenzo Villani <lvillani at binaryhelix.net> - 1.0.0-1
- First stable release
diff --git a/sources b/sources
index b9e789e..e79eb6b 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-24874b465abe6611ef2f2c145a840cb2 cherokee-1.0.4.tar.gz
+685d7f0319a27ff3b2d49f0f490d31ef cherokee-1.0.6.tar.gz
--
cgit v0.10.2
>From 5f319b41ed14a883db9c4403f6480eb650ae3e5d Mon Sep 17 00:00:00 2001
From: Lorenzo Villani <lvillani at binaryhelix.net>
Date: Sun, 29 Aug 2010 16:20:17 +0200
Subject: - New upstream release (1.0.8) - Init script overhaul - Relevant
changes since 1.0.6: - NEW: Enhanced 'Header' rule match - NEW: Improved
extensions rule - FIX: SSL/TLS works with Firefox again - FIX: Better SSL/TLS
connection close - FIX: Range requests work better now - FIX: Hot-linking
wizard w/o Referer - FIX: Hot-linking wizard usability - FIX: Minor CSS fix
in the default dirlist theme - FIX: POST management issue - FIX: PHP wizard,
better configuration - FIX: admin, unresponsive button - DOC: Misc
improvements - i18n: French translation updated
diff --git a/.gitignore b/.gitignore
index d5fd851..3ac4955 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,3 @@
cherokee-1.0.4.tar.gz
cherokee-1.0.6.tar.gz
+/cherokee-1.0.8.tar.gz
diff --git a/01-drop-privileges.patch b/01-drop-privileges.patch
new file mode 100644
index 0000000..7284a19
--- /dev/null
+++ b/01-drop-privileges.patch
@@ -0,0 +1,13 @@
+Index: cherokee-1.0.8/cherokee.conf.sample.pre
+===================================================================
+--- cherokee-1.0.8.orig/cherokee.conf.sample.pre
++++ cherokee-1.0.8/cherokee.conf.sample.pre
+@@ -18,6 +18,8 @@ server!keepalive_max_requests = 500
+ server!server_tokens = full
+ server!panic_action = %prefix%/bin/cherokee-panic
+ server!pid_file = %localstatedir%/run/cherokee.pid
++server!group = cherokee
++server!user = cherokee
+
+ # Default virtual server
+ #
diff --git a/cherokee.init b/cherokee.init
old mode 100644
new mode 100755
index 29b8710..f8ffbb0
--- a/cherokee.init
+++ b/cherokee.init
@@ -1,68 +1,114 @@
#!/bin/sh
#
-# cherokee Startup script for the Apache HTTP Server
+# cherokee Startup script for the Cherokee web server.
#
# chkconfig: - 95 05
-# description: Cherokee is ligth Web Server system
-# config: /etc/cherokee/cherokee.conf
-# pidfile: /var/run/cherokee.pid
-# Default-Start: 345
+# description: Cherokee is lightweight web server.
#
-# Source function library
+### BEGIN INIT INFO
+# Provides:
+# Required-Start:
+# Required-Stop:
+# Should-Start:
+# Should-Stop:
+# Default-Start: 3 4 5
+# Default-Stop:
+# Short-Description:
+# Description:
+### END INIT INFO
+
+# Source function library.
. /etc/rc.d/init.d/functions
-NAME=cherokee
-BASE=/usr/sbin/$NAME
-DAEMON="-d"
-CONF="/etc/cherokee/cherokee.conf"
-PIDFILE="/var/run/$NAME.pid"
+exec="/usr/sbin/cherokee"
+prog="cherokee"
+config="/etc/cherokee/cherokee.conf"
+pidfile="/var/run/cherokee.pid"
-# Check that $BASE exists.
-[ -f $BASE ] || exit 0
+# [ -e /etc/sysconfig/$prog ] && . /etc/sysconfig/$prog
-# Source networking configuration.
+# No network? No cherokee.
. /etc/sysconfig/network
-
-# Check that networking is up.
[ ${NETWORKING} = "no" ] && exit 0
-RETVAL=0
-# See how we were called.
+lockfile=/var/lock/subsys/$prog
+
+start() {
+ [ -x $exec ] || exit 5
+ [ -f $config ] || exit 6
+ echo -n $"Starting $prog: "
+ daemon --pidfile $pidfile $exec -d -C $config
+ retval=$?
+ echo
+ [ $retval -eq 0 ] && touch $lockfile
+ return $retval
+}
+
+stop() {
+ echo -n $"Stopping $prog: "
+ killproc -p $pidfile $prog
+ retval=$?
+ echo
+ [ $retval -eq 0 ] && rm -f $lockfile
+ return $retval
+}
+
+restart() {
+ stop
+ start
+}
+
+reload() {
+ echo -n $"Reloading $prog: "
+ killproc -p $pidfile $prog -HUP
+ retval=$?
+ echo
+ return $retval
+}
+
+force_reload() {
+ restart
+}
+
+rh_status() {
+ # run checks to determine if the service is running or use generic status
+ status $prog
+}
+
+rh_status_q() {
+ rh_status >/dev/null 2>&1
+}
+
+
case "$1" in
- start)
- if [ -n "`/sbin/pidof $NAME`" ]; then
- echo -n $"$NAME: already running"
- echo ""
- exit $RETVAL
- fi
- echo -n "Starting Cherokee service: "
- $BASE --config=$CONF $DAEMON pidfile $PIDFILE >&/dev/null
- /sbin/pidof $NAME >&/dev/null && success || failure
- RETVAL=$?
- echo
- [ $RETVAL -eq 0 ] && touch /var/lock/subsys/cherokee
+ start)
+ rh_status_q && exit 0
+ $1
+ ;;
+ stop)
+ rh_status_q || exit 0
+ $1
;;
- stop)
- echo -n "Shutting down Cherokee service: "
- killproc $BASE
- RETVAL=$?
- echo
- [ $RETVAL -eq 0 ] && rm -f /var/lock/subsys/cherokee
+ restart)
+ $1
;;
- restart|reload)
- $0 stop
- $0 start
- RETVAL=$?
+ reload)
+ rh_status_q || exit 7
+ $1
;;
- status)
- status $BASE
- RETVAL=$?
+ force-reload)
+ force_reload
;;
- *)
- echo "Usage: $NAME {start|stop|restart|reload|status}"
- exit 1
+ status)
+ rh_status
+ ;;
+ condrestart|try-restart)
+ rh_status_q || exit 0
+ restart
+ ;;
+ *)
+ echo $"Usage: $0 {start|stop|status|restart|condrestart|try-restart|reload|force-reload}"
+ exit 2
esac
-
-exit $RETVAL
-
+exit $?
diff --git a/cherokee.spec b/cherokee.spec
index 2214b6e..ac9a49d 100644
--- a/cherokee.spec
+++ b/cherokee.spec
@@ -11,7 +11,7 @@ ExcludeArch: ppc
%endif
Name: cherokee
-Version: 1.0.6
+Version: 1.0.8
Release: 1%{?dist}
Summary: Flexible and Fast Webserver
@@ -23,6 +23,9 @@ BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
Source1: %{name}.init
Source2: %{name}.logrotate
+# Drop privileges to cherokee:cherokee after startup
+Patch0: 01-drop-privileges.patch
+
BuildRequires: openssl-devel pam-devel mysql-devel pcre
# BuildRequires: pcre-devel
BuildRequires: gettext
@@ -55,6 +58,7 @@ This package holds the development files for cherokee.
%prep
%setup -q
+%patch0 -p1 -b .privs
%build
%configure --with-wwwroot=%{_var}/www/%{name} --enable-tls=openssl --enable-pthreads --enable-trace --disable-static --disable-rpath
@@ -82,6 +86,9 @@ make install DESTDIR=%{buildroot}
-e 's#log/%{name}\.error#log/%{name}/error_log#' \
%{buildroot}%{_sysconfdir}/%{name}/cherokee.conf.perf_sample
+touch %{buildroot}%{_var}/log/%{name}/access_log \
+ %{buildroot}%{_var}/log/%{name}/error_log
+
find %{buildroot}%{_libdir} -name *.la -exec rm -rf {} \;
mv ChangeLog ChangeLog.iso8859-1
@@ -137,8 +144,11 @@ fi
%{_libdir}/lib%{name}-*.so.*
%{_datadir}/locale/*/LC_MESSAGES/cherokee.mo
%{_datadir}/%{name}
-# logs are written as root. no need to give perms to the cherokee user.
%dir %{_var}/log/%{name}/
+# Since we drop privileges to cherokee:cherokee, change permissions on these
+# log files.
+%attr (-,%{name},%{name}) %{_var}/log/%{name}/error_log
+%attr (-,%{name},%{name}) %{_var}/log/%{name}/access_log
%dir %attr(-,%{name},%{name}) %{_var}/lib/%{name}/
%doc AUTHORS ChangeLog COPYING INSTALL README
%doc %{_datadir}/doc/%{name}
@@ -169,7 +179,25 @@ fi
%changelog
-* Fri Aug 6 2010 lvillani <lvillani at enterprise.binaryhelix.net> 1.0.6-1
+* Sun Aug 29 2010 Lorenzo Villani <lvillani at binaryhelix.net> - 1.0.8-1
+- New upstream release (1.0.8)
+- Init script overhaul
+- Relevant changes since 1.0.6:
+- NEW: Enhanced 'Header' rule match
+- NEW: Improved extensions rule
+- FIX: SSL/TLS works with Firefox again
+- FIX: Better SSL/TLS connection close
+- FIX: Range requests work better now
+- FIX: Hot-linking wizard w/o Referer
+- FIX: Hot-linking wizard usability
+- FIX: Minor CSS fix in the default dirlist theme
+- FIX: POST management issue
+- FIX: PHP wizard, better configuration
+- FIX: admin, unresponsive button
+- DOC: Misc improvements
+- i18n: French translation updated
+
+* Fri Aug 6 2010 Lorenzo Villani <lvillani at enterprise.binaryhelix.net> 1.0.6-1
- Relevant changes since 1.0.4
- NEW: Much better UTF-8 encoding
- NEW: Templates support slicing now (as in Python str)
diff --git a/sources b/sources
index e79eb6b..e6a1592 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-685d7f0319a27ff3b2d49f0f490d31ef cherokee-1.0.6.tar.gz
+12117a80c2a970173bd32660439c2db0 cherokee-1.0.8.tar.gz
--
cgit v0.10.2
http://pkgs.fedoraproject.org/cgit/cherokee.git/commit/?h=el5&id=ade2e9d89867621e92be9c37cf7168c332117fed
More information about the scm-commits
mailing list