Accepting request 1243543 from server:http

- Changed URL's from nginx.org to github.com .
- Updated to 1.27.4
  * https://nginx.org/en/CHANGES
  * Fixed insufficient check in virtual servers handling with TLSv1.3
    SNI allowed to reuse SSL sessions in a different virtual server, to
    bypass client SSL certificates verification (CVE-2025-23419).
  * Added the "ssl_object_cache_inheritable", "ssl_certificate_cache",
    "proxy_ssl_certificate_cache", "grpc_ssl_certificate_cache", and
    "uwsgi_ssl_certificate_cache", "keepalive_min_timeout" directives.
  * Fixed nginx could not build libatomic library using the library
    sources if the --with-libatomic=DIR option was used.

OBS-URL: https://build.opensuse.org/request/show/1243543
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nginx?expand=0&rev=95

nginx-1.27.1.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:bd7ba68a6ce1ea3768b771c7e2ab4955a59fb1b1ae8d554fedb6c2304104bdfc
-size 1245244

nginx-1.27.1.tar.gz.asc

@@ -1,17 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQJHBAABCAAxFiEE1nhs4wPZqQIpmNxsyEZNVJr3XAoFAma7Vi8THHMua2FuZGF1
-cm92QGY1LmNvbQAKCRDIRk1UmvdcCtRUEACjv3LHnzN3J1c6h5C9cKTjIIKa4PgA
-fM8o41QenN6HMQ8a0ww8zH2zdDUxVr9OgNBV0sqtsL5SX+BuMTjGC75M5qgk45yd
-E6FMk2tJ69wVqmN1zP5sYV5n7dmt89mh7W3J3lO4XpgqCQcogmmyMg+1Z9vvO4Nt
-VvYO7w45oEqc5rb7IjWtktNS3jjf2Kat6azhOvrbMjuCUt/pOBJiM11diLmURtEx
-xE5It7bFwoywJUtjF7XUMeOGljH5VnxTLuIlq/5FkAYklu484B2iLHidhCLfq7g7
-9FJO3XatFrRefA7ryawZ9AnQtrLIt0YZdIEweoOxp16kj3mCmqhF/aeBNAcnQUAM
-EZLX/BBYA6cog8YuWffan9G5EYvul0tdXK5DQF8vUjBfw54aI4YnA5TDtSMniBEJ
-SJrUCbKazGFwd+K94IrGD8EwypEC+M3gQovNn34NikLr1Xe8Uz3i2x7y0OgYxbUh
-hH+ilD5XS0bHfueydYIKl85muwFtiIs3b0EhfvGf4z5d2DmvZ3/cYxjYpzZG0r7L
-WckCqgj2uVXvR3phDqpm0aNd8C+4sho+PQmXon8PbIpjuVLvQhz0XiH6D7H61wks
-XWNvBFHNjeBJYjaZQQ/2kAKfdwdpYTYvDd3Rlnscn3BNQvu9prWUDCYiNHMnNnOB
-ueop2LrbK54ogg==
-=bwlL
------END PGP SIGNATURE-----

nginx-1.27.4.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:294816f879b300e621fa4edd5353dd1ec00badb056399eceb30de7db64b753b2
+size 1277177

nginx-1.27.4.tar.gz.asc

@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+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+=Smqo
+-----END PGP SIGNATURE-----

nginx.changes

@@ -1,3 +1,53 @@
+-------------------------------------------------------------------
+Thu Feb  6 04:45:46 UTC 2025 - Илья Индиго <ilya@ilya.top>
+
+- Changed URL's from nginx.org to github.com .
+- Updated to 1.27.4
+  * https://nginx.org/en/CHANGES
+  * Fixed insufficient check in virtual servers handling with TLSv1.3
+    SNI allowed to reuse SSL sessions in a different virtual server, to
+    bypass client SSL certificates verification (CVE-2025-23419).
+  * Added the "ssl_object_cache_inheritable", "ssl_certificate_cache",
+    "proxy_ssl_certificate_cache", "grpc_ssl_certificate_cache", and
+    "uwsgi_ssl_certificate_cache", "keepalive_min_timeout" directives.
+  * Fixed nginx could not build libatomic library using the library
+    sources if the --with-libatomic=DIR option was used.
+
+-------------------------------------------------------------------
+Wed Nov 27 04:14:02 UTC 2024 - Илья Индиго <ilya@ilya.top>
+
+- Updated to 1.27.3
+  * https://github.com/nginx/nginx/releases/tag/release-1.27.3
+  * Added the "server" directive in the "upstream" block supports the "resolve" parameter.
+  * Added the "resolver" and "resolver_timeout" directives in the "upstream" block.
+  * Added SmarterMail specific mode support for IMAP LOGIN with
+    untagged CAPABILITY response in the mail proxy module.
+  * Changed TLSv1 and TLSv1.1 protocols are disabled by default.
+  * Changed IPv6 address in square brackets and no port can be specified in the
+    "proxy_bind", "fastcgi_bind", "grpc_bind", "memcached_bind", "scgi_bind",
+    and "uwsgi_bind" directives, and as client address in ngx_http_realip_module.
+  * Fixed ngx_http_mp4_module and "proxy_store" directive.
+
+-------------------------------------------------------------------
+Thu Oct  3 06:22:15 UTC 2024 - Илья Индиго <ilya@ilya.top>
+
+- Updated to 1.27.2
+  * https://nginx.org/en/CHANGES
+  * Added SSL certificates, secret keys, and CRLs are now cached on start
+    or during reconfiguration.
+  * Added client certificate validation with OCSP in the stream module.
+  * Added OCSP stapling support in the stream module.
+  * Added the "proxy_pass_trailers" directive in the ngx_http_proxy_module.
+  * Added the "ssl_client_certificate" directive now supports certificates
+    with auxiliary information.
+  * Changed now the "ssl_client_certificate" directive is not required
+    for client SSL certificates verification.
+
+-------------------------------------------------------------------
+Fri Sep 27 17:32:21 UTC 2024 - Thorsten Kukuk <kukuk@suse.com>
+
+- Add /srv/www to filelist [bsc#1231027]
+
 -------------------------------------------------------------------
 Fri Aug 16 02:21:19 UTC 2024 - Илья Индиго <ilya@ilya.top>
 

nginx.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package nginx
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -23,14 +23,14 @@
 %bcond_with    ngx_google_perftools
 #
 Name:           nginx
-Version:        1.27.1
+Version:        1.27.4
 Release:        0
 Summary:        A HTTP server and IMAP/POP3 proxy server
 License:        BSD-2-Clause
 Group:          Productivity/Networking/Web/Proxy
-URL:            https://nginx.org
-Source0:        https://nginx.org/download/%{name}-%{version}.tar.gz
-Source1:        https://nginx.org/download/%{name}-%{version}.tar.gz.asc
+URL:            https://github.com/nginx/nginx
+Source0:        https://github.com/nginx/nginx/releases/download/release-%{version}/%{name}-%{version}.tar.gz
+Source1:        https://github.com/nginx/nginx/releases/download/release-%{version}/%{name}-%{version}.tar.gz.asc
 Source2:        https://nginx.org/keys/pluknet.key#/%{name}.keyring
 Source3:        %{name}.rpmlintrc
 Source4:        %{name}.logrotate
@@ -68,7 +68,7 @@ Provides:       http_daemon
 Provides:       httpd
 %{?systemd_ordering}
 %sysusers_requires
-#
+
 %if %{with ngx_google_perftools}
 BuildRequires:  google-perftools-devel
 %endif
@@ -98,14 +98,8 @@ The source of %{name} [engine x] HTTP server and IMAP/POP3 proxy server.
 
 %prep
 %autosetup -p1
-
 sed -i 's/\r//g' contrib/geo2nginx.pl
-sed -i 's|#LIBDIR#|%{_libdir}|g' conf/nginx.conf
-
-%if %{with systemd}
-sed -i 's/\/var\/run/\/run/' conf/nginx.conf
-%endif
-
+sed -i -e 's|#LIBDIR#|%{_libdir}|g' -e 's|/var/run|/run|' conf/nginx.conf
 sed -i 's/^\(#define NGX_LISTEN_BACKLOG \).*/\1-1/' src/os/unix/ngx_linux_config.h
 
 %build
@@ -126,16 +120,14 @@ install -Dpm0644 %{SOURCE6} %{buildroot}%{_sysusersdir}/%{name}.conf
 rm %{buildroot}/srv/www/htdocs/index.html
 
 mkdir -p %{buildroot}%{ngx_doc_dir}
-cp -av CHANGES* LICENSE \
-  %{buildroot}%{ngx_doc_dir}
+cp -av CHANGES* LICENSE %{buildroot}%{ngx_doc_dir}
 
 mkdir -p %{buildroot}%{_datadir}/%{name}/
 mkdir -p %{buildroot}%{ngx_conf_dir}/vhosts.d/
 mkdir -p %{buildroot}%{ngx_conf_dir}/conf.d/
 
 chmod a+rx contrib/geo2nginx.pl
-cp -av contrib/geo2nginx.pl contrib/unicode2nginx/ \
-  %{buildroot}%{_datadir}/%{name}/
+cp -av contrib/geo2nginx.pl contrib/unicode2nginx/ %{buildroot}%{_datadir}/%{name}/
 
 mkdir -p %{buildroot}%{src_install_dir}
 tar -xzf %{SOURCE0} --strip-components=1 -C %{buildroot}%{src_install_dir}
@@ -197,6 +189,8 @@ rm -r $GPGTMP
 %{ngx_module_dir}/ngx_mail_module.so
 %{ngx_module_dir}/ngx_stream_module.so
 %{_mandir}/man3/%{name}.3pm*
+%dir /srv/www
+%dir /srv/www/htdocs
 /srv/www/htdocs/50x.html
 %config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
 %dir %attr(750,%{ngx_user_group},%{ngx_user_group}) %{_localstatedir}/log/nginx/