2025-07-23 12:56:49 +00:00
#
# spec file for package apache2
#
# Copyright (c) 2025 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
%global upstream_name httpd
%global testsuite_name %{upstream_name} -framework
%global tversion svn1921782
%global flavor @BUILD_FLAVOR@%{nil}
%define mpm %{nil}
%if "%{flavor}" == "prefork" || "%{flavor}" == "test_prefork"
%define mpm prefork
%endif
%if "%{flavor}" == "worker" || "%{flavor}" == "test_worker"
%define mpm worker
%endif
%if "%{flavor}" == "event" || "%{flavor}" == "test_event"
%define mpm event
%endif
%define test 0
%define unittest 0
%if "%{flavor}" == "test_prefork" || "%{flavor}" == "test_worker" || "%{flavor}" == "test_event" || "%{flavor}" == "test_devel" || "%{flavor}" == "test_main"
%define test 1
%if "%{flavor}" == "test_prefork" || "%{flavor}" == "test_worker" || "%{flavor}" == "test_event"
%define unittest 1
%endif
%endif
%if "%{mpm}" == "prefork"
%define mpm_alt_prio 10
%endif
%if "%{mpm}" == "worker"
%define mpm_alt_prio 20
%endif
%if "%{mpm}" == "event"
%define mpm_alt_prio 30
%endif
%define default_mpm prefork
%define suse_maintenance_mmn 0
%define apache_mmn %(test -s %{SOURCE0} && \
{ echo -n apache_mmn_; bzcat %{SOURCE0} | \
awk '/^#define MODULE_MAGIC_NUMBER_MAJOR/ {printf "%d", $3}' ; } || \
echo apache_mmn_notfound)
%define static_modules unixd systemd
%define dynamic_modules authz_core access_compat actions alias allowmethods asis auth_basic auth_digest \\\
auth_form authn_anon authn_core authn_dbd authn_dbm authn_file authn_socache authnz_ldap \\\
authnz_fcgi authz_core authz_dbd authz_dbm authz_groupfile authz_host authz_owner authz_user \\\
autoindex bucketeer buffer cache cache_disk cache_socache case_filter case_filter_in cgid cgi \\\
charset_lite data dav dav_fs dav_lock dbd deflate brotli dialup dir dumpio echo env expires \\\
ext_filter file_cache filter headers heartmonitor http2 imagemap include info lbmethod_bybusyness \\\
lbmethod_byrequests lbmethod_bytraffic lbmethod_heartbeat ldap log_config log_debug log_forensic \\\
logio lua macro mime mime_magic negotiation optional_fn_export optional_fn_import \\\
optional_hook_export optional_hook_import proxy proxy_ajp proxy_balancer proxy_connect \\\
proxy_express proxy_fcgi proxy_fdpass proxy_ftp proxy_hcheck proxy_html proxy_http proxy_http2 \\\
proxy_scgi proxy_uwsgi proxy_wstunnel ratelimit reflector remoteip reqtimeout request rewrite \\\
sed session session_cookie session_crypto session_dbd setenvif slotmem_plain slotmem_shm \\\
socache_dbm socache_memcache socache_redis socache_shmcb speling ssl status substitute suexec \\\
unique_id userdir usertrack version vhost_alias watchdog xml2enc
%define support_bin ab check_forensic dbmmanage find_directives gensslcert htdbm htdigest htpasswd httxt2dbm \\\
log_server_status logresolve split-logfile
%define support_sbin apachectl htcacheclean fcgistarter logresolve.pl rotatelogs
%define platform_string Linux/SUSE
%define httpduser wwwrun
%define httpdgroup www
%define datadir /srv/www
%define htdocsdir %{datadir}/htdocs
%define manualdir %{_datadir}/apache2/manual
%define errordir %{_datadir}/apache2/error
%define iconsdir %{_datadir}/apache2/icons
%define cgidir %{datadir}/cgi-bin
%define localstatedir %{_localstatedir}/lib/apache2
%define runtimedir /run
%define proxycachedir %{_localstatedir}/cache/apache2
%define logfiledir %{_localstatedir}/log/apache2
%define sysconfdir %{_sysconfdir}/apache2
%define includedir %{_includedir}/apache2
%if "%{mpm}" != ""
%define libexecdir %{_libdir}/apache2-%{mpm}
%else
%define libexecdir %{_libdir}/apache2
%endif
%define installbuilddir %{_datadir}/apache2/build
%define userdir public_html
%define suexec_safepath %{_prefix}/local/bin:%{_prefix}/bin:/bin
%define psuffix %{nil}
%if "%{flavor}" != ""
%define psuffix -%{flavor}
%endif
%define use_firewalld 1
%define build_http2 1
Name : apache2%{psuffix}
2025-08-20 09:03:01 +02:00
Version : 2.4.63
2025-07-23 12:56:49 +00:00
Release : 0
Summary : The Apache HTTPD Server
License : Apache-2.0
Group : Productivity/Networking/Web/Servers
URL : https://httpd.apache.org/
# essential sources
Source0 : https://www.apache.org/dist/httpd/%{upstream_name} -%{version} .tar.bz2
Source1 : https://www.apache.org/dist/httpd/%{upstream_name} -%{version} .tar.bz2.asc
Source2 : apache2.keyring
Source3 : apache2.service
Source4 : apache2@.service
Source5 : apache2.target
# Add file to take mtime from it in prep section
Source6 : apache2.changes
Source10 : apache2-ssl-dirs.tar.bz2
# test
# svn checkout http://svn.apache.org/repos/asf/httpd/test/framework/trunk/ httpd-framework
Source20 : %{testsuite_name} -%{tversion} .tar.bz2
Source21 : apache2-mod_example.c
# integration settings
Source30 : sysconfig.apache2
Source31 : logrotate.apache2
Source32 : permissions.apache2
Source33 : firewalld.apache2
Source34 : firewalld-ssl.apache2
Source35 : susefirewall.apache2
Source36 : susefirewall-ssl.apache2
# scripts
Source100 : apache2-a2enmod
Source101 : apache2-a2enflag
Source102 : apache2-systemd-ask-pass
Source103 : apache2-start_apache2
Source104 : apache2-script-helpers
# additional support
Source130 : apache2-gensslcert
Source131 : apache2-check_forensic
Source132 : apache2-find_directives
# configuration
Source150 : apache2-httpd.conf
Source151 : apache2-errors.conf
Source152 : apache2-default-server.conf
Source153 : apache2-listen.conf
Source154 : apache2-manual.conf
Source155 : apache2-mod_autoindex-defaults.conf
Source156 : apache2-mod_info.conf
Source157 : apache2-mod_log_config.conf
Source158 : apache2-mod_mime-defaults.conf
Source159 : apache2-mod_status.conf
Source160 : apache2-mod_userdir.conf
Source161 : apache2-server-tuning.conf
Source163 : apache2-ssl-global.conf
Source164 : apache2-mod_usertrack.conf
Source165 : apache2-mod_reqtimeout.conf
Source166 : apache2-loadmodule.conf
Source167 : apache2-global.conf
Source168 : apache2-mod_cgid-timeout.conf
Source169 : apache2-protocols.conf
Source190 : apache2-vhost.template
Source191 : apache2-vhost-ssl.template
# READMEs and other documentation
Source200 : apache2-README-access_compat.txt
Source201 : apache2-README-instances.txt
Source202 : apache2-README-configuration.txt
# layout of system dirs configuration, may be upstreamed
Patch0 : apache2-system-dirs-layout.patch
# apachectl is frontend for start_apache2, suse specific
Patch1 : apache2-apachectl.patch
# [bnc#210904] perhaps to be upstreamed
Patch2 : apache2-logresolve-tmp-security.patch
# [bnc#690734] TODO, to be upstreamed
Patch3 : apache2-LimitRequestFieldSize-limits-headers.patch
# [fate317766] backport of an upstream commit
Patch4 : apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
2025-08-20 09:03:01 +02:00
# FIX-UPSTREAM: bsc#1246477 CVE-2024-42516: HTTP response splitting
Patch5 : CVE-2024-42516.patch
# FIX-UPSTREAM: bsc#1246305 CVE-2024-43204: SSRF when mod_proxy is loaded allows an attacker to send outbound proxy requests to a URL controlled by them
Patch6 : CVE-2024-43204.patch
# FIX-UPSTREAM: bsc#1246303 CVE-2024-47252: insufficient escaping of user-supplied data in mod_ssl allows an untrusted SSL/TLS client to insert escape characters into log files
Patch7 : CVE-2024-47252.patch
# FIX-UPSTREAM: bsc#1246302 CVE-2025-23048: access control bypass by trusted clients through TLS 1.3 session resumption in some mod_ssl configurations
Patch8 : CVE-2025-23048.patch
# FIX-UPSTREAM: bsc#1246307 CVE-2025-49630: denial of service can be triggered by untrusted clients causing an assertion in mod_proxy_http2
Patch9 : CVE-2025-49630.patch
# FIX-UPSTREAM: bsc#1246169 CVE-2025-49812: Opossum Attack Application Layer Desynchronization using Opportunistic TLS
Patch10 : CVE-2025-49812.patch
# FIX-UPSTREAM: bsc#1246306 CVE-2025-53020: HTTP/2 denial of service due to late release of memory after effective lifetime
Patch11 : CVE-2025-53020.patch
2025-07-23 12:56:49 +00:00
# PATCH: https://marc.info/?l=apache-httpd-users&m=147448312531134&w=2
Patch100 : apache-test-application-xml-type.patch
# PATCH: /test_ssl_var_lookup?SSL_SERVER_SAN_DNS_0 returns <build-host-name>
# /test_ssl_var_lookup?SSL_SERVER_SAN_OTHER_dnsSRV_0 _https.<build-host-name>
# but Apache::Test::vars()->{servername} returns 'localhost' instead of <build-host-name>
# (see $san_dns and $san_dnssrv variables in t/ssl/varlookup.t)
# even if in live system I do not experience this inconsistency, let's turn off
# these variables from the test
Patch101 : apache-test-turn-off-variables-in-ssl-var-lookup.patch
2025-12-16 21:14:50 +01:00
#FIX-UPSTREAM: bsc#1254511 CVE-2025-55753
Patch102 : CVE-2025-55753.patch
#FIX-UPSTREAM: bsc#1254512 CVE-2025-58098
Patch103 : CVE-2025-58098.patch
#FIX-UPSTREAM: bsc#1254514 CVE-2025-65082
Patch104 : CVE-2025-65082.patch
#FIX-UPSTREAM: bsc#1254515 CVE-2025-66200
Patch105 : CVE-2025-66200.patch
2025-08-20 09:03:01 +02:00
2025-07-23 12:56:49 +00:00
BuildRequires : apache-rpm-macros-control
#Since 2.4.7 the event MPM requires apr 1.5.0 or later.
BuildRequires : apr-devel >= 1.5.0
BuildRequires : apr-util-devel
BuildRequires : automake
# for basic testing
BuildRequires : curl
BuildRequires : db-devel
%if %{use_firewalld}
BuildRequires : firewall-macros
%endif
BuildRequires : libbrotli-devel
%if %{build_http2}
BuildRequires : pkgconfig(libnghttp2) >= 1.2.1
%endif
BuildRequires : libcap-devel
BuildRequires : libxml2-devel
BuildRequires : lua-devel
BuildRequires : openldap2-devel
BuildRequires : openssl-devel >= 0.9.8a
BuildRequires : pcre2-devel
BuildRequires : pkgconfig
BuildRequires : systemd-rpm-macros
BuildRequires : xz
BuildRequires : pkgconfig(jansson)
BuildRequires : pkgconfig(libcurl)
BuildRequires : pkgconfig(libsystemd)
BuildRequires : pkgconfig(systemd)
BuildRequires : pkgconfig(zlib)
# SECTION test requirements
%if %{test}
BuildRequires : apache-rpm-macros
BuildRequires : apache2
BuildRequires : apache2-devel
BuildRequires : apache2-manual
BuildRequires : apache2-utils
%endif
%if "%{flavor}" == "test_prefork"
BuildRequires : apache2-prefork
%endif
%if "%{flavor}" == "test_worker"
BuildRequires : apache2-worker
%endif
%if "%{flavor}" == "test_event"
BuildRequires : apache2-event
%endif
%if %{unittest}
# perl-doc is assumed by t/filter/case.t (/usr/lib/perl5/*/pod/perlsub.pod)
BuildRequires : perl-doc
BuildRequires : perl(Crypt::SSLeay)
BuildRequires : perl(DateTime)
BuildRequires : perl(Devel::CoreStack)
BuildRequires : perl(Devel::Symdump)
BuildRequires : perl(Digest::MD5)
BuildRequires : perl(HTML::HeadParser)
BuildRequires : perl(HTML::Parser)
BuildRequires : perl(HTML::Tagset)
BuildRequires : perl(HTTP::DAV)
BuildRequires : perl(LWP)
BuildRequires : perl(LWP::Protocol::https)
BuildRequires : perl(MIME::Base64)
BuildRequires : perl(Net::Cmd)
BuildRequires : perl(URI)
%if %{build_http2}
BuildRequires : perl(AnyEvent)
BuildRequires : perl(Protocol::HTTP2::Client)
%endif
BuildRequires : netcfg
%endif
# /SECTION
%if "%{mpm}" != ""
Provides : apache2-MPM
Requires : apache2
%endif
%if "%{flavor}" == ""
Requires : %{_sysconfdir} /mime.types
Requires : apache2-MPM
Suggests : apache2-%{default_mpm}
Recommends: apache2-utils
Requires : logrotate
Provides : %{apache_mmn}
Provides : http_daemon
Provides : httpd
Provides : suse_maintenance_mmn_%{suse_maintenance_mmn}
Obsoletes : apache2-example-pages
Requires(pre) : group(www)
Requires(pre) : user(wwwrun)
%{?systemd_ordering}
%endif
%if "%{flavor}" == "utils"
Requires : /usr/bin/which
Recommends: w3m
%endif
%if "%{flavor}" == "devel"
Requires : apache2 = %{version}
Requires : apr-devel
Requires : apr-util-devel
Requires : gcc
Provides : httpd-devel = %{version}
%endif
%if "%{flavor}" == "manual"
Provides : apache2-doc = %{version}
Obsoletes : apache2-doc <= %{version}
%endif
%if "%{mpm}" != ""
Requires(pre) : permissions
Requires(post) : %fillup_prereq
Requires(post) : grep
Requires(post) : update-alternatives
Requires(postun) : update-alternatives
%endif
%if %{test} || "%{flavor}" == "manual"
BuildArch : noarch
%endif
%description
The Apache HTTP Server Project is an effort to develop and
maintain an open-source HTTP server for modern operating
systems including UNIX and Windows. The goal of this project
is to provide a secure, efficient and extensible server that
provides HTTP services in sync with the current HTTP standards.
%prep
%autosetup -p1 -n %{upstream_name} -%{version} -a20
#
# BUILD
#
%if ! %{test} && "%{flavor}" != "manual"
%build
echo " = = = = = = = = = = = = = = = = = = B U I L D I N G [ %{flavor} ] f l a v o r "
# configuration (autoreconf, configure) common for all flavors,
# except test and manual
autoreconf --force --install --verbose
# replace PLATFORM string that's seen in the "Server:" header
sed -i -e 's,(" PLATFORM "),(%{platform_string}),' server/core.c
# use mtime of .changes for build time
CHANGES_MTIME=`stat --format=" % % y " %{SOURCE6} `
sed -i -e " s / _ _ D A T E _ _ \" \" _ _ T I M E _ _ ; / \" $ C H A N G E S _ M T I M E \" ; / " server/buildmark.c
export CFLAGS=" %{optflags} - f P I C - W a l l
-DLDAP_DEPRECATED -DDEFAULT_LISTENBACKLOG=APR_INT32_MAX -DDEFAULT_ERRORLOG='\"%{logfiledir}/error_log\"' "
export CPPFLAGS=" %{optflags} - D S S L _ E X P E R I M E N T A L _ E N G I N E - D M A X _ S E R V E R _ L I M I T = 2 0 0 0 0 0 - D L D A P _ D E P R E C A T E D - D M A X L I N E = 4 0 9 6 "
cat > config.layout <<-EOF
# SUSE Layout
<Layout SUSE>
Prefix : %{datadir}
exec_prefix: %{_prefix}
bindir: %{_bindir}
sbindir: %{_sbindir}
libdir: %{_libdir}
libexecdir: %{libexecdir}
mandir: %{_mandir}
sysconfdir: %{sysconfdir}
datadir: %{datadir}
installbuilddir: %{installbuilddir}
errordir: %{errordir}
iconsdir: %{iconsdir}
htdocsdir: %{htdocsdir}
manualdir: %{manualdir}
cgidir: %{cgidir}
includedir: %{includedir}
localstatedir: %{localstatedir}
runtimedir: %{runtimedir}
logfiledir: %{logfiledir}
proxycachedir: %{proxycachedir}
</Layout>
EOF
# %%configure (e. g --libexecdir) switches override
# layout paths (use layout because some of variables
# there does not exist as configure switches), so
# override them back
%configure \
--prefix=%{datadir} \
--libexecdir=%{libexecdir} \
--includedir=%{includedir} \
--sysconfdir=%{sysconfdir} \
--enable-layout=SUSE \
--libexecdir=%{libexecdir} \
%if "%{mpm}" != ""
--with-program-name=httpd-%{mpm} \
%endif
--with-apr=%{_bindir} /apr-1-config \
--with-apr-util=%{_bindir} /apu-1-config \
%if "%{mpm}" != ""
--with-mpm=" %{mpm} " \
%endif
%if "%{mpm}" == "worker" || "%{mpm}" == "event"
%ifarch %ix86
%ifnarch i386
--enable-nonportable-atomics=yes \
%endif
%endif
%endif
--enable-exception-hook \
--with-pcre \
--enable-pie \
--enable-mods-shared=all \
--enable-mods-static=" %{static_modules} " \
--enable-ssl=shared \
--disable-isapi \
--enable-deflate \
--enable-brotli \
--enable-echo \
--enable-filter \
--enable-ext-filter \
--enable-charset-lite \
--enable-file-cache \
--enable-logio \
--enable-dumpio \
--enable-bucketeer \
--enable-case_filter \
--enable-case_filter_in \
--enable-imagemap \
%if %{build_http2}
--enable-http2 \
%endif
--with-ldap \
--enable-ldap \
--enable-authnz_ldap \
--enable-authnz-fcgi \
--enable-proxy \
--enable-proxy-connect \
--enable-proxy-ftp \
--enable-proxy-http \
%if %{build_http2}
--enable-proxy-http2 \
%endif
--enable-proxy-fdpass \
--enable-cache \
--enable-disk-cache \
--enable-mem-cache \
--enable-version \
--enable-dav-lock \
--enable-authn-alias \
--enable-optional-hook-export \
--enable-optional-hook-import \
--enable-optional-fn-import \
--enable-optional-fn-export \
--enable-suexec \
--with-suexec-bin=%{_sbindir} /suexec \
--with-suexec-caller=%{httpduser} \
--with-suexec-docroot=%{datadir} \
--with-suexec-logfile=%{logfiledir} /suexec.log \
--with-suexec-userdir=%{userdir} \
--with-suexec-uidmin=96 \
--with-suexec-gidmin=96 \
--with-suexec-safepath=%{suexec_safepath} \
--disable-heartbeat
# MPMs build
%if "%{mpm}" != ""
# adjust SERVER_CONFIG_FILE
sed -i " s : h t t p d - %{mpm} . c o n f : h t t p d . c o n f : " include/ap_config_auto.h
make %{?_smp_mflags}
%endif
# main package build
%if "%{flavor}" == ""
pushd support
make %{?_smp_flags} suexec
popd
%endif
# utils build
%if "%{flavor}" == "utils"
pushd support
make %{?_smp_mflags}
cp %{SOURCE130} gensslcert
cp %{SOURCE131} check_forensic
cp %{SOURCE132} find_directives
popd
%endif
%endif
#
# INSTALL
#
%if ! %{test}
%install
echo " = = = = = = = = = = = = = = = = = = I N S T A L L I N G [ %{flavor} ] f l a v o r "
# MPMs install
%if "%{mpm}" != ""
# install httpd binary
make DESTDIR=%{buildroot} program-install
# install modules
pushd modules
make DESTDIR=%{buildroot} install -j1
popd
# install alternative links (httpd binary, modules)
mkdir -p %{buildroot} %{_sysconfdir} /alternatives
ln -sf %{_sysconfdir} /alternatives/httpd %{buildroot} %{_sbindir} /httpd
mkdir -p %{buildroot} %{_libdir} /apache2/
for module in %{dynamic_modules} ; do
if [ -e %{buildroot} %{libexecdir} /mod_$module.so ]; then
ln -sf %{_sysconfdir} /alternatives/mod_$module.so %{buildroot} %{_libdir} /apache2/mod_$module.so
fi
done
%endif
# main packge install
%if "%{flavor}" == ""
mkdir -p %{buildroot} %{logfiledir} \
%{buildroot} %{proxycachedir} \
%{buildroot} %{localstatedir} \
%{buildroot} %{libexecdir}
# save MODULE_MAGIC_NUMBER
mkdir -p %{buildroot} /%{_libexecdir}
cat > %{buildroot} /%{_libexecdir} /apache2_MMN <<-EOF
#!/bin/sh
echo %{apache_mmn}
EOF
%if 0%{?suse_version} > 1500
mkdir -p %{buildroot} %{_distconfdir} /logrotate.d
install -m 644 %{SOURCE31} %{buildroot} /%{_distconfdir} /logrotate.d/apache2
%else
mkdir -p %{buildroot} %{_sysconfdir} /logrotate.d
install -m 644 %{SOURCE31} %{buildroot} /%{_sysconfdir} /logrotate.d/apache2
%endif
make DESTDIR=%{buildroot} install-suexec -j1
mkdir -p %{buildroot} %{_unitdir}
install -m 644 %{SOURCE3} %{buildroot} %{_unitdir} /apache2.service
install -m 644 %{SOURCE4} %{buildroot} %{_unitdir} /apache2@.service
install -m 644 %{SOURCE5} %{buildroot} %{_unitdir} /apache2.target
ln -sf service %{buildroot} /%{_sbindir} /rcapache2
install -m 700 %{SOURCE102} %{buildroot} %{_sbindir} /apache2-systemd-ask-pass
install -m 755 %{SOURCE100} %{buildroot} %{_sbindir} /a2enmod
ln -s a2enmod %{buildroot} %{_sbindir} /a2dismod
install -m 755 %{SOURCE101} %{buildroot} %{_sbindir} /a2enflag
ln -s a2enflag %{buildroot} %{_sbindir} /a2disflag
install -m 744 %{SOURCE103} %{buildroot} %{_sbindir} /start_apache2
mkdir -p %{buildroot} /%{_datadir} /apache2/
install -m 644 %{SOURCE104} %{buildroot} /%{_datadir} /apache2/script-helpers
%if %{use_firewalld}
install -D -m 644 %{SOURCE33} %{buildroot} %{_prefix} /lib/firewalld/services/apache2.xml
install -D -m 644 %{SOURCE34} %{buildroot} %{_prefix} /lib/firewalld/services/apache2-ssl.xml
%else
install -d %{buildroot} %{_sysconfdir} /sysconfig/SuSEfirewall2.d/services/
install -m 644 %{SOURCE35} %{buildroot} %{_sysconfdir} /sysconfig/SuSEfirewall2.d/services/apache2
install -m 644 %{SOURCE36} %{buildroot} %{_sysconfdir} /sysconfig/SuSEfirewall2.d/services/apache2-ssl
%endif
mkdir -p %{buildroot} %{_sysconfdir}
mkdir -p %{buildroot} %{_sysconfdir} /apache2/sysconfig.d
mkdir -p %{buildroot} /%{_fillupdir}
install -m 644 %{SOURCE30} %{buildroot} %{_fillupdir} /sysconfig.apache2
# htdocsdir is used by default-server.conf
mkdir -p %{buildroot} %{htdocsdir}
mkdir -p %{buildroot} %{sysconfdir}
mkdir -p %{buildroot} %{sysconfdir} /conf.d
for c in default-server.conf \
errors.conf \
global.conf \
httpd.conf \
listen.conf \
loadmodule.conf \
mod_autoindex-defaults.conf \
mod_info.conf \
mod_log_config.conf \
mod_mime-defaults.conf \
mod_status.conf \
mod_userdir.conf \
mod_usertrack.conf \
server-tuning.conf \
mod_reqtimeout.conf \
mod_cgid-timeout.conf \
ssl-global.conf \
protocols.conf
do
install -m 644 %{_sourcedir} /apache2-$c %{buildroot} /%{sysconfdir} /$c
done
cat > %{buildroot} /%{sysconfdir} /uid.conf <<-EOF
User %{httpduser}
Group %{httpdgroup}
EOF
tar -xjf %{SOURCE10} -C %{buildroot} /%{sysconfdir}
# fixup libdir
%if "%{_lib}" != "lib64"
sed -e 's/lib64/%{_lib}/' -i \
%{buildroot} /%{sysconfdir} /loadmodule.conf \
%{buildroot} /%{_fillupdir} /sysconfig.apache2
%endif
mkdir %{buildroot} /%{sysconfdir} /vhosts.d
install -m 644 %{SOURCE190} %{buildroot} /%{sysconfdir} /vhosts.d/vhost.template
install -m 644 %{SOURCE191} %{buildroot} /%{sysconfdir} /vhosts.d/vhost-ssl.template
install -m 644 docs/conf/charset.conv %{buildroot} /%{sysconfdir} /
install -m 644 docs/conf/magic %{buildroot} /%{sysconfdir} /
ln -sf ../mime.types %{buildroot} /%{sysconfdir} /mime.types
make DESTDIR=%{buildroot} install-icons
make DESTDIR=%{buildroot} install-error
make DESTDIR=%{buildroot} sysconfdir=%{_docdir} /apache2/conf install-conf
cp -r docs/server-status %{buildroot} %{_datadir} /apache2/lua-server-status
mkdir -p %{buildroot} %{_mandir} /man8/
install -D -m 644 docs/man/suexec.8 %{buildroot} %{_mandir} /man8/
install -D -m 644 docs/man/httpd.8 %{buildroot} %{_mandir} /man8/
cp %{SOURCE200} README-access_compat.txt
cp %{SOURCE201} README-instances.txt
cp %{SOURCE202} README-configuration.txt
%endif
# utils install
%if "%{flavor}" == "utils"
> utils-filelist
for utility in %{support_bin} ; do
install -D -m 755 support/$utility %{buildroot} %{_bindir} /$utility
echo %{_bindir} /$utility >> utils-filelist
if [ -f docs/man/$utility.1 ]; then
install -D -m 644 docs/man/$utility.1 %{buildroot} %{_mandir} /man1/$utility.1
echo %{_mandir} /man1/$utility.1.* >> utils-filelist
fi
done
for utility in %{support_sbin} ; do
install -D -m 755 support/$utility %{buildroot} %{_sbindir} /$utility
echo %{_sbindir} /$utility >> utils-filelist
if [ -f docs/man/$utility.8 ]; then
install -D -m 644 docs/man/$utility.8 %{buildroot} %{_mandir} /man8/$utility.8
echo %{_mandir} /man8/$utility.8.* >> utils-filelist
fi
done
%endif
# devel install
%if "%{flavor}" == "devel"
mkdir -p %{buildroot} /%{_bindir}
install -D -m 755 support/apxs %{buildroot} %{_bindir} /
mkdir -p %{buildroot} /%{_mandir} /man1/
install -D -m 644 docs/man/apxs.1 %{buildroot} %{_mandir} /man1/
make DESTDIR=%{buildroot} install-build -j1
make DESTDIR=%{buildroot} install-include -j1
%endif
# manual install
%if "%{flavor}" == "manual"
mkdir -p %{buildroot} %{manualdir}
cp -ra docs/manual/* %{buildroot} %{manualdir}
mkdir -p %{buildroot} /%{sysconfdir} /conf.d/
install -m 644 %{SOURCE154} %{buildroot} /%{sysconfdir} /conf.d/manual.conf
%endif
%endif
#
# CHECK
#
%check
# test basic function of just built MPMs
%if ! %{test} && "%{mpm}" != ""
echo " T e s t i n g . / h t t p d - %{mpm} "
test_dir=" $ P W D / m y - t e s t - %{mpm} "
mkdir $test_dir
cat > $test_dir/httpd.conf << EOF
ServerName my_test
ErrorLog $test_dir/error_log
PidFile $test_dir/httpd.pid
User $(id -un)
Group $(id -gn)
Listen 60080
DocumentRoot $test_dir
LoadModule authz_core_module $PWD/modules/aaa/.libs/mod_authz_core.so
EOF
exit_code=0
./httpd-%{mpm} -k start -f $test_dir/httpd.conf
sleep 2
echo 'HTTPD HELLO' > $test_dir/hello.html
curl -s http://localhost:60080/hello.html | grep 'HTTPD HELLO' || exit_code=1
./httpd-%{mpm} -k stop -f $test_dir/httpd.conf
sleep 1
# do not continue %%check phase
exit $exit_code
%endif
# test just built utils
%if "%{flavor}" == "utils"
# htpasswd
echo " T e s t i n g h t p a s s w d "
exit_code=0
support/htpasswd -bc htpasswd foo_user foo_password
support/htpasswd -bv htpasswd foo_user foo_password || exit_code=1
# htpasswd
echo " T e s t i n g h t p a s s w d "
exit_code=0
support/htdbm -bc htpasswd bar_user bar_password
support/htdbm -bv htpasswd bar_user bar_password || exit_code=2
# do not continue %%check phase
exit $exit_code
%endif
# test _installed_ packages (via test_* flavors)
%if %{test}
%if "%{flavor}" == "test_main"
exit_code=0
# create test configuration, based on default distro one
# with minimum changes to see it is working
mkdir -p $PWD{%{_sysconfdir} /sysconfig,%{localstatedir} ,%{runtimedir} ,%{logfiledir} }
# adjust sysconfig file
cp %{_sysconfdir} /sysconfig/apache2 $PWD%{_sysconfdir} /sysconfig/
sed -i -e " s : \ ( A P A C H E _ H T T P D _ C O N F = \ ) . * : \1 $ P W D %{sysconfdir} / h t t p d . c o n f : " \
-e " s : \ ( %{_localstatedir} \ ) : $ P W D \1 : " $PWD%{_sysconfdir} /sysconfig/apache2
sed -i 's:\(APACHE_MPM=\).*:\1"prefork":' $PWD%{_sysconfdir} /sysconfig/apache2
# copy and adjust configuration (paths and Listen)
cp -r %{_sysconfdir} /apache2/ %{_sysconfdir} /mime.types etc 2>/dev/null || true
find etc/apache2 -name *.conf | xargs sed -i " s : \ ( %{_localstatedir} \ ) : $ P W D \1 : "
find etc/apache2 -name *.conf | xargs sed -i " s : / e t c : $ P W D / e t c : "
sed -i -e 's:80:60080:' -e 's:443:60443:' etc/apache2/listen.conf
# /usr/sbin/start_apache2 is 744
cp %{_sbindir} /start_apache2 .
export START_APACHE_SYSCONFIG_FILE=$PWD/etc/sysconfig/apache2
export START_APACHE_RUN_DIR=$PWD/run
./start_apache2 -k start
sleep 2
curl -s http://localhost:60080/manual/ | grep 'Apache.*HTTP Server.*Documentation' || exit_code=1
curl -s http://localhost:60080/manual/de/ | grep 'Neue Funktionen' || exit_code=2
./start_apache2 -k stop
sleep 1
# do not continue %%check phase
exit $exit_code
%endif
# test of devel package
%if "%{flavor}" == "test_devel"
# apxs test
echo " T e s t i n g a p x s , c o m p i l i n g e x a m p l e m o d u l e "
apxs -q CFLAGS | grep " \\ %{optflags} "
cp %{SOURCE21} mod_example.c
apxs -c mod_example.c
test_dir=" $ P W D / m y - t e s t - d e v e l "
# hack: %{_libdir} cannot be used in noarch packages, define shell variable _libdir, using apxs to find the real value
_libexecdir=$(apxs -q libdir)/apache2
echo " T r y t o l o a d e x a m p l e m o d u l e "
mkdir $test_dir
cat > $test_dir/httpd.conf << EOF
ServerName my_test
ErrorLog $test_dir/error_log
PidFile $test_dir/httpd.pid
User $(id -un)
Group $(id -gn)
Listen 60080
DocumentRoot $test_dir
LoadModule authz_core_module ${_libexecdir}-%{default_mpm} /mod_authz_core.so
LoadModule example_module $PWD/.libs/mod_example.so
<Location /hello>
SetHandler example-handler
</Location>
EOF
exit_code=0
%{_sbindir} /httpd-%{default_mpm} -k start -f $test_dir/httpd.conf
sleep 2
echo " U s e e x a m p l e m o d u l e "
curl -s http://localhost:60080/hello | grep 'Hello, world!' || exit_code=1
%{_sbindir} /httpd-%{default_mpm} -k stop -f $test_dir/httpd.conf
sleep 1
# do not continue %%check phase
exit $exit_code
%endif
# unittest run in test_$MPM flavors
echo " R u n h t t p d - f r a m e w o r k u n i t t e s t s "
cd httpd-framework
perl Makefile.PL -apxs %{apache_apxs}
function dep()
{
dependee=" $ 1 "
requirement=" $ 2 "
# requirement has to be loaded before dependee;
# there can be duplicite entries in $modules
# string, will be added only once
# in load-all-modules.conf
if echo " $ m o d u l e s " | grep -q " $ d e p e n d e e " ; then
modules=" $ r e q u i r e m e n t $ m o d u l e s "
fi
}
# create a conf loading all MPM's modules
echo > $PWD/load-all-modules.conf
# hack: %{_libdir} cannot be used in noarch packages, define shell variable _libdir, using apxs to find the real value
_libdir=$(apxs -q libdir)
# hack: sort -u to load mod_proxy before mod_proxy_http, mod_cache before mod_cache_disk, etc.
modules=$(find ${_libdir}/apache2-%{mpm} / ${_libdir}/apache2/ -name *.so | sed 's:.*/mod_\(.*\).so:\1:' | sort -u)
# fix up dependencies
dep " l b m e t h o d _ b y b u s y n e s s " " p r o x y "
dep " l b m e t h o d _ b y r e q u e s t s " " p r o x y "
dep " l b m e t h o d _ b y t r a f f i c " " p r o x y "
dep " l b m e t h o d _ h e a r t b e a t " " p r o x y "
for m in $modules; do
path=$(find ${_libdir}/apache2-%{mpm} / ${_libdir}/apache2/ -name mod_$m.so | head -n 1)
if ! grep -q " m o d _ $ m . c " $PWD/load-all-modules.conf; then
echo " < I f M o d u l e ! m o d _ $ m . c > " >> $PWD/load-all-modules.conf
echo " L o a d M o d u l e $ { m } _ m o d u l e $ p a t h " >> $PWD/load-all-modules.conf
echo " < / I f M o d u l e > " >> $PWD/load-all-modules.conf
fi
done
# run the testsuite
echo '#####################################################'
echo " # T E S T I N G %{mpm} "
echo '#'
exit_code=0
t/TEST -clean
t/TEST -httpd /usr/sbin/httpd-%{mpm} -httpd_conf $PWD/load-all-modules.conf -start
t/TEST -run-tests || exit_code=1
t/TEST -stop
exit $exit_code
# end of installed packages test
%endif
exit 0
#
# FILES
#
# MPMs files
%if ! %{test} && "%{mpm}" != ""
%files
%{_sbindir} /httpd
%{_sbindir} /httpd-%{mpm}
%ghost %{_sysconfdir} /alternatives/httpd
# %%ghost %%{_sysconfdir}/alternatives/mod_*.so does not work
%(for module in %{dynamic_modules} ; do echo " % g h o s t %{_sysconfdir} / a l t e r n a t i v e s / m o d _ $ m o d u l e . s o " ; done)
%dir %{_libdir} /apache2-%{mpm}
%dir %{_libdir} /apache2
%{_libdir} /apache2/*.so
%{libexecdir} /mod_*.so
%endif
# main package files
%if "%{flavor}" == ""
%files
%doc INSTALL READM* ABOUT_APACHE CHANGES
%license LICENSE
%attr (750,root,root) %dir %{logfiledir}
%attr (750,%{httpduser} ,root) %dir %{proxycachedir}
%attr (750,%{httpduser} ,root) %dir %{localstatedir}
%dir %{datadir}
%dir %{htdocsdir}
%dir %{libexecdir}
%dir %{_libexecdir}
%attr (755,root,root) %{_libexecdir} /apache2_MMN
%dir %{sysconfdir}
%config %{sysconfdir} /magic
%config %{sysconfdir} /mime.types
%config (noreplace) %{sysconfdir} /*.conf
%config (noreplace) %{sysconfdir} /charset.conv
%{sysconfdir} /vhosts.d/*.template
%dir %{sysconfdir} /ssl.crl
%dir %{sysconfdir} /ssl.crt
%dir %{sysconfdir} /ssl.csr
%dir %attr (700,root,root) %{sysconfdir} /ssl.key
%dir %{sysconfdir} /ssl.prm
%{sysconfdir} /ssl.*/README*
%dir %{sysconfdir} /conf.d
%dir %{sysconfdir} /vhosts.d
%{_fillupdir} /sysconfig.apache2
%if 0%{?suse_version} > 1500
%{_distconfdir} /logrotate.d/apache2
%else
%config (noreplace) %{_sysconfdir} /logrotate.d/apache2
%endif
%{_unitdir} /apache2.service
%{_unitdir} /apache2@.service
%{_unitdir} /apache2.target
%{_sbindir} /apache2-systemd-ask-pass
%{_sbindir} /a2enflag
%{_sbindir} /a2enmod
%{_sbindir} /a2disflag
%{_sbindir} /a2dismod
%{_sbindir} /start_apache2
%{_sbindir} /rcapache2
%{_datadir} /apache2/script-helpers
%verify (not mode) %attr (0755,root,root) %{_sbindir} /suexec
%if %{use_firewalld}
%dir %{_prefix} /lib/firewalld
%dir %{_prefix} /lib/firewalld/services
%{_prefix} /lib/firewalld/services/apache2.xml
%{_prefix} /lib/firewalld/services/apache2-ssl.xml
%else
%config %{_sysconfdir} /sysconfig/SuSEfirewall2.d/services/apache2
%config %{_sysconfdir} /sysconfig/SuSEfirewall2.d/services/apache2-ssl
%endif
%{_datadir} /apache2
%{iconsdir}
%{errordir}
%{_mandir} /man8/httpd.8.*
%{_mandir} /man8/suexec.8.*
%doc support/SHA1
%{_docdir} /apache2/conf
%endif
# utils files
%if "%{flavor}" == "utils"
%files -f utils-filelist
%endif
# devel files
%if "%{flavor}" == "devel"
%files
%{_bindir} /apxs
%{_mandir} /man1/apxs.1.*
%{_datadir} /apache2
%{installbuilddir}
%{includedir}
%endif
# manual files
%if "%{flavor}" == "manual"
%files
%dir %{_datadir} /apache2
%{manualdir}
%dir %{sysconfdir}
%dir %{sysconfdir} /conf.d/
%config %{sysconfdir} /conf.d/manual.conf
%endif
#
# SCRIPTLETS
#
# MPMs scriptlets
%if ! %{test} && "%{mpm}" != ""
%post
%{_sbindir} /update-alternatives --quiet --force \
--install %{_sbindir} /httpd httpd %{_sbindir} /httpd-%{mpm} %{mpm_alt_prio}
for module in %{dynamic_modules} ; do
if [ -e %{libexecdir} /mod_$module.so ]; then
%{_sbindir} /update-alternatives --quiet --force \
--install %{_libdir} /apache2/mod_$module.so mod_$module.so %{libexecdir} /mod_$module.so %{mpm_alt_prio}
fi
done
exit 0
%postun
if [ " $ 1 " = 1 ]; then
%apache_request_restart
fi
if [ " $ 1 " = 0 ]; then
%{_sbindir} /update-alternatives --quiet --force --remove httpd %{_sbindir} /httpd
for module in %{dynamic_modules} ; do
%{_sbindir} /update-alternatives --quiet --force --remove mod_$module.so %{_libdir} /apache2/mod_$module.so
done
fi
exit 0
%posttrans
%apache_restart_if_needed
exit 0
%endif
# main package scriptlets
%if "%{flavor}" == ""
%pre
%service_add_pre apache2.service apache2.target
%if 0%{?suse_version} > 1500
# Prepare for migration to /usr/etc; save any old .rpmsave
for i in logrotate.d/apache2 ; do
test -f %{_sysconfdir} /${i}.rpmsave && mv -v %{_sysconfdir} /${i}.rpmsave %{_sysconfdir} /${i}.rpmsave.old ||:
done
%endif
exit 0
%post
# wwwadmin group existed in past remove after openSUSE-13.2 out of support scope
if grep -q " ^ w w w a d m i n : " %{_sysconfdir} /group; then
groupmod -n www wwwadmin 2>/dev/null ||:
usermod -g %{httpdgroup} %{httpduser} 2>/dev/null ||:
usermod -s /bin/false %{httpduser} 2>/dev/null ||:
fi
%service_add_post apache2.service apache2.target
%set_permissions %{_sbindir} /suexec || \
echo " P l e a s e c h e c k %{_sysconfdir} / p e r m i s s i o n s . l o c a l f o r s e t t i n g s o f %{_sbindir} / s u e x e c . "
%{fillup_only apache2}
%if %{use_firewalld}
%firewalld_reload
%endif
exit 0
%posttrans
%apache_restart_if_needed
%if 0%{?suse_version} > 1500
# Migration to /usr/etc, restore just created .rpmsave
for i in logrotate.d/apache2 ; do
test -f %{_sysconfdir} /${i}.rpmsave && mv -v %{_sysconfdir} /${i}.rpmsave %{_sysconfdir} /${i} ||:
done
%endif
%verify script
%verify _permissions -e %{_sbindir} /suexec
%preun
%service_del_preun apache2.service apache2.target
exit 0
%postun
%if %{defined service_del_postun_without_restart}
%service_del_postun_without_restart apache2.service apache2.target
%else
DISABLE_RESTART_ON_UPDATE='yes'
%service_del_postun apache2.service apache2.target
%endif
if [ " $ 1 " = 1 ]; then
%apache_request_restart
fi
%endif
%changelog
