rpm/nginx
SHA256
1
0
Fork 0
forked from pool/nginx
Code Pull Requests Activity

Compare commits

base: rpm:factory
Branches Tags
rpm:factory rpm:devel pool:slfo-1.2 pool:slfo-main pool:factory pool:devel
..
compare: pool:slfo-1.2
Branches Tags
pool:slfo-1.2 pool:slfo-main pool:factory pool:devel rpm:factory rpm:devel

25 Commits
factory ... slfo-1.2

Author SHA256 Message Date
Adrian Schröter
838981f651 Sync changes to SLFO-1.2 branch 2025-08-20 09:55:24 +02:00
Ana Guerrero
1fae1b6260 Accepting request 1293972 from server:http 
- Changed nginx.logrotate and nginx-conf.patch files.
  * Removed hardcoded user and group definitions.
- Removed ending slashes wherever possible.
- Removed root privileges when running logrotate (bsc#1246090).

OBS-URL: https://build.opensuse.org/request/show/1293972
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nginx?expand=0&rev=102
 2025-07-20 13:28:27 +00:00
Илья Индиго
0acd39241a - Changed nginx.logrotate and nginx-conf.patch files. 
* Removed hardcoded user and group definitions.
- Removed ending slashes wherever possible.
- Removed root privileges when running logrotate (bsc#1246090).

OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=294
 2025-07-16 22:50:22 +00:00
Илья Индиго
02820af414 - Drop root priviledges while running logrotate (bsc#1246090) 
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=293
 2025-07-16 22:07:01 +00:00
Ana Guerrero
b19a5a4c17 Accepting request 1288818 from server:http 
- Updated to 1.29.0
  * https://nginx.org/en/CHANGES
  * Added support for response code 103 from proxy and gRPC backends;
    the "early_hints" directive.
  * Added loading of secret keys from hardware tokens with OpenSSL provider.
  * Changed the logging level of SSL errors in a QUIC handshake has been
    changed from "error" to "crit" for critical errors, and to "info" for
    the rest; the logging level of unsupported QUIC transport parameters
    has been lowered from "info" to "debug".
  * Disabled OpenSSL 3.5 QUIC API support by default.

OBS-URL: https://build.opensuse.org/request/show/1288818
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nginx?expand=0&rev=101
 2025-06-27 21:00:26 +00:00
Илья Индиго
2ea46e960d - Updated to 1.29.0 
* https://nginx.org/en/CHANGES
  * Added support for response code 103 from proxy and gRPC backends;
    the "early_hints" directive.
  * Added loading of secret keys from hardware tokens with OpenSSL provider.
  * Changed the logging level of SSL errors in a QUIC handshake has been
    changed from "error" to "crit" for critical errors, and to "info" for
    the rest; the logging level of unsupported QUIC transport parameters
    has been lowered from "info" to "debug".
  * Disabled OpenSSL 3.5 QUIC API support by default.

OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=291
 2025-06-27 09:42:27 +00:00
Dominique Leuenberger
078dcaedd0 Accepting request 1281951 from server:http 
- Updated to 1.28.0:
  * Fixed -Wunterminated-string-initialization with gcc15
  * HTTP/3: fixed NGX_HTTP_V3_VARLEN_INT_LEN value

OBS-URL: https://build.opensuse.org/request/show/1281951
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nginx?expand=0&rev=100
 2025-06-04 18:27:36 +00:00
Илья Индиго
bb977f7b5f - Updated to 1.28.0: 
* Fixed -Wunterminated-string-initialization with gcc15
  * HTTP/3: fixed NGX_HTTP_V3_VARLEN_INT_LEN value

OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=289
 2025-06-02 14:17:50 +00:00
Ana Guerrero
e76e94ac55 Accepting request 1279422 from server:http 
- Changed service to prevent "timed out. Killing" messages on service stopping

OBS-URL: https://build.opensuse.org/request/show/1279422
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nginx?expand=0&rev=99
 2025-05-26 16:32:02 +00:00
Илья Индиго
734c74345c Changed service to prevent 'timed out. Killing' messages on service stopping 
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=287
 2025-05-22 23:51:19 +00:00
Ana Guerrero
caff628312 Accepting request 1270052 from server:http 
- Updated to 1.27.5
  * https://nginx.org/en/CHANGES
  * Changed the maximum size limit for SSL sessions cached in shared
    memory has been raised to 8192.
  * Fixed in the "grpc_ssl_password_file", "proxy_ssl_password_file",
    and "uwsgi_ssl_password_file" directives when loading SSL certificates
    and encrypted keys from variables; the bug had appeared in 1.23.1.
  * Fixed in the $ssl_curve and $ssl_curves variables when using pluggable
    curves in OpenSSL.

OBS-URL: https://build.opensuse.org/request/show/1270052
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nginx?expand=0&rev=98
 2025-04-18 14:14:20 +00:00
Илья Индиго
33e69d37f5 - Updated to 1.27.5 
* https://nginx.org/en/CHANGES
  * Changed the maximum size limit for SSL sessions cached in shared
    memory has been raised to 8192.
  * Fixed in the "grpc_ssl_password_file", "proxy_ssl_password_file",
    and "uwsgi_ssl_password_file" directives when loading SSL certificates
    and encrypted keys from variables; the bug had appeared in 1.23.1.
  * Fixed in the $ssl_curve and $ssl_curves variables when using pluggable
    curves in OpenSSL.

OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=285
 2025-04-16 14:59:06 +00:00
Ana Guerrero
9adae25cf9 Accepting request 1266982 from server:http 
- Added nginx-man.patch to enable manpage 8 (boo#1240675).

OBS-URL: https://build.opensuse.org/request/show/1266982
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nginx?expand=0&rev=97
 2025-04-07 15:34:50 +00:00
Илья Индиго
adb7ee7944 - Added nginx-man.patch to enable manpage 8 (boo#1240675). 
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=283
 2025-04-04 00:39:27 +00:00
Илья Индиго
663f0b62ce - Also package the nginx manpage in section 8 (boo#1240675) 
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=282
 2025-04-04 00:18:55 +00:00
Ana Guerrero
3e6644cbea Accepting request 1265447 from server:http 
- Removed rudiment /srv/www/htdocs/50x.html (boo#1240166).
- Changed nginx-conf.patch to refresh default config.

OBS-URL: https://build.opensuse.org/request/show/1265447
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nginx?expand=0&rev=96
 2025-04-02 15:05:05 +00:00
Илья Индиго
143a31735d - Removed rudiment /srv/www/htdocs/50x.html (boo#1240166). 
- Changed nginx-conf.patch to refresh default config.

OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=280
 2025-03-30 02:22:47 +00:00
Ana Guerrero
833f64453b Accepting request 1243543 from server:http 
- Changed URL's from nginx.org to github.com .
- Updated to 1.27.4
  * https://nginx.org/en/CHANGES
  * Fixed insufficient check in virtual servers handling with TLSv1.3
    SNI allowed to reuse SSL sessions in a different virtual server, to
    bypass client SSL certificates verification (CVE-2025-23419).
  * Added the "ssl_object_cache_inheritable", "ssl_certificate_cache",
    "proxy_ssl_certificate_cache", "grpc_ssl_certificate_cache", and
    "uwsgi_ssl_certificate_cache", "keepalive_min_timeout" directives.
  * Fixed nginx could not build libatomic library using the library
    sources if the --with-libatomic=DIR option was used.

OBS-URL: https://build.opensuse.org/request/show/1243543
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nginx?expand=0&rev=95
 2025-02-06 21:02:24 +00:00
Илья Индиго
1efb13abf9 - Changed URL's from nginx.org to github.com . 
- Updated to 1.27.4
  * https://nginx.org/en/CHANGES
  * Fixed insufficient check in virtual servers handling with TLSv1.3
    SNI allowed to reuse SSL sessions in a different virtual server, to
    bypass client SSL certificates verification (CVE-2025-23419).
  * Added the "ssl_object_cache_inheritable", "ssl_certificate_cache",
    "proxy_ssl_certificate_cache", "grpc_ssl_certificate_cache", and
    "uwsgi_ssl_certificate_cache", "keepalive_min_timeout" directives.
  * Fixed nginx could not build libatomic library using the library
    sources if the --with-libatomic=DIR option was used.

OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=278
 2025-02-06 04:48:43 +00:00
Ana Guerrero
e502c32e76 Accepting request 1226763 from server:http 
- Updated to 1.27.3
  * https://github.com/nginx/nginx/releases/tag/release-1.27.3
  * Added the "server" directive in the "upstream" block supports the "resolve" parameter.
  * Added the "resolver" and "resolver_timeout" directives in the "upstream" block.
  * Added SmarterMail specific mode support for IMAP LOGIN with
    untagged CAPABILITY response in the mail proxy module.
  * Changed TLSv1 and TLSv1.1 protocols are disabled by default.
  * Changed IPv6 address in square brackets and no port can be specified in the
    "proxy_bind", "fastcgi_bind", "grpc_bind", "memcached_bind", "scgi_bind",
    and "uwsgi_bind" directives, and as client address in ngx_http_realip_module.
  * Fixed ngx_http_mp4_module and "proxy_store" directive.

OBS-URL: https://build.opensuse.org/request/show/1226763
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nginx?expand=0&rev=94
 2024-11-27 21:06:23 +00:00
Илья Индиго
5111159ef7 - Updated to 1.27.3 
* https://github.com/nginx/nginx/releases/tag/release-1.27.3
  * Added the "server" directive in the "upstream" block supports the "resolve" parameter.
  * Added the "resolver" and "resolver_timeout" directives in the "upstream" block.
  * Added SmarterMail specific mode support for IMAP LOGIN with
    untagged CAPABILITY response in the mail proxy module.
  * Changed TLSv1 and TLSv1.1 protocols are disabled by default.
  * Changed IPv6 address in square brackets and no port can be specified in the
    "proxy_bind", "fastcgi_bind", "grpc_bind", "memcached_bind", "scgi_bind",
    and "uwsgi_bind" directives, and as client address in ngx_http_realip_module.
  * Fixed ngx_http_mp4_module and "proxy_store" directive.

OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=276
 2024-11-27 04:28:59 +00:00
Ana Guerrero
d89c21608d Accepting request 1205364 from server:http 
- Updated to 1.27.2
  * https://nginx.org/en/CHANGES
  * Added SSL certificates, secret keys, and CRLs are now cached on start
    or during reconfiguration.
  * Added client certificate validation with OCSP in the stream module.
  * Added OCSP stapling support in the stream module.
  * Added the "proxy_pass_trailers" directive in the ngx_http_proxy_module.
  * Added the "ssl_client_certificate" directive now supports certificates
    with auxiliary information.
  * Changed now the "ssl_client_certificate" directive is not required
    for client SSL certificates verification.

OBS-URL: https://build.opensuse.org/request/show/1205364
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nginx?expand=0&rev=93
 2024-10-03 16:00:39 +00:00
Илья Индиго
31cf02ba3e - Updated to 1.27.2 
* https://nginx.org/en/CHANGES
  * Added SSL certificates, secret keys, and CRLs are now cached on start
    or during reconfiguration.
  * Added client certificate validation with OCSP in the stream module.
  * Added OCSP stapling support in the stream module.
  * Added the "proxy_pass_trailers" directive in the ngx_http_proxy_module.
  * Added the "ssl_client_certificate" directive now supports certificates
    with auxiliary information.
  * Changed now the "ssl_client_certificate" directive is not required
    for client SSL certificates verification.

OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=274
 2024-10-03 06:56:17 +00:00
Ana Guerrero
4ee1f5dcce Accepting request 1204304 from server:http 
- Add /srv/www to filelist [bsc#1231027]

OBS-URL: https://build.opensuse.org/request/show/1204304
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nginx?expand=0&rev=92
 2024-09-29 16:09:49 +00:00
Илья Индиго
4a4cda503c - Add /srv/www to filelist [bsc#1231027] 
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=272
 2024-09-28 06:43:44 +00:00
7 changed files with 53 additions and 33 deletions
Expand all files Collapse all files

3
nginx-1.27.1.tar.gz
View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:bd7ba68a6ce1ea3768b771c7e2ab4955a59fb1b1ae8d554fedb6c2304104bdfc
size 1245244

17
nginx-1.27.1.tar.gz.asc
View File

@@ -1,17 +0,0 @@
-----BEGIN PGP SIGNATURE-----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=bwlL
-----END PGP SIGNATURE-----

BIN
nginx-1.27.2.tar.gz (Stored with Git LFS) Normal file
View File

Binary file not shown.

17
nginx-1.27.2.tar.gz.asc Normal file
View File

@@ -0,0 +1,17 @@
-----BEGIN PGP SIGNATURE-----
iQJHBAABCAAxFiEE1nhs4wPZqQIpmNxsyEZNVJr3XAoFAmb9Z0ATHHMua2FuZGF1
cm92QGY1LmNvbQAKCRDIRk1UmvdcCg6nD/9JY+oE21aFArOQQ3xjFQh1sIZVVzE0
JrRqYtzj6Rd834+bHW2Q2dXIgkxRoau//9+bP3sjGfDzqtjUOTwc0Eu85GK+8PV9
eqdLJDjBTMFd1L1Zha07N1Eimcb/M4+ttPtKszC/u6L6zHKvGzMWPq6xt/jqN2Bo
697Z26fTGV8k1oFmZj8Y7dZodIhykMjjea98R/uOKXsSqZGPw2u5xTWpab6ITB7i
vAnkV5d51roGmYfFXdBbxq3BvnpBWAVLL4FEWDWcNyMVAoW+GP68aaSyn4K4Enaq
fxyc6zcVeqhQsWdumE7EbT7cQIGBh+MbSYuApZQmr59sFOwHo+i/BBOHpzlv4LWH
Jo1tEOJWZNjliXGVKdf2v4nwfQOacsa36MMU0INO200c4PC6UZvGdJ8jPzARNSHK
EZy7VYTZ1l3UDnL3v+IqmIOWQNjyPNOjWvLgq9aZOp24GvzXMPGXiIL1JvTeM/po
u3vJR57w3Ioxfddmr4aqQQRVQDfNg9F/AnZXFk6Dss6h3C0L8cyi+NO+jpgf1h5a
Mv6nAaPyuzvgI5leKLnA5pMrfWxCJ2ZLgqPy0wz9Ckmd/ALAvT7FHv73XEEz5CJb
TQP1jloxJHsNmjMfkFX6rKuOwEYaSgQU8i7GCt0qYiv7y+C5GeHQSdAZk9apO0Q4
063qFKVdOSNphQ==
=PkLy
-----END PGP SIGNATURE-----

25
nginx.changes
View File

@@ -1,3 +1,28 @@
-------------------------------------------------------------------
Wed Aug 13 09:18:21 UTC 2025 - Felix Schnizlein <fschnizlein@suse.com>
- Drop root priviledges while running logrotate (bsc#1246090)
-------------------------------------------------------------------
Thu Oct 3 06:22:15 UTC 2024 - Илья Индиго <ilya@ilya.top>
- Updated to 1.27.2
* https://nginx.org/en/CHANGES
* Added SSL certificates, secret keys, and CRLs are now cached on start
or during reconfiguration.
* Added client certificate validation with OCSP in the stream module.
* Added OCSP stapling support in the stream module.
* Added the "proxy_pass_trailers" directive in the ngx_http_proxy_module.
* Added the "ssl_client_certificate" directive now supports certificates
with auxiliary information.
* Changed now the "ssl_client_certificate" directive is not required
for client SSL certificates verification.
-------------------------------------------------------------------
Fri Sep 27 17:32:21 UTC 2024 - Thorsten Kukuk <kukuk@suse.com>
- Add /srv/www to filelist [bsc#1231027]
-------------------------------------------------------------------
Fri Aug 16 02:21:19 UTC 2024 - Илья Индиго <ilya@ilya.top>

1
nginx.logrotate
View File

@@ -1,4 +1,5 @@
/var/log/nginx/*.log {
su nginx nginx
compress
dateext
maxage 365

20
nginx.spec
View File

@@ -23,7 +23,7 @@
%bcond_with ngx_google_perftools
#
Name: nginx
Version: 1.27.1
Version: 1.27.2
Release: 0
Summary: A HTTP server and IMAP/POP3 proxy server
License: BSD-2-Clause
@@ -68,7 +68,7 @@ Provides: http_daemon
Provides: httpd
%{?systemd_ordering}
%sysusers_requires
#
%if %{with ngx_google_perftools}
BuildRequires: google-perftools-devel
%endif
@@ -98,14 +98,8 @@ The source of %{name} [engine x] HTTP server and IMAP/POP3 proxy server.
%prep
%autosetup -p1
sed -i 's/\r//g' contrib/geo2nginx.pl
sed -i 's|#LIBDIR#|%{_libdir}|g' conf/nginx.conf
%if %{with systemd}
sed -i 's/\/var\/run/\/run/' conf/nginx.conf
%endif
sed -i -e 's|#LIBDIR#|%{_libdir}|g' -e 's|/var/run|/run|' conf/nginx.conf
sed -i 's/^\(#define NGX_LISTEN_BACKLOG \).*/\1-1/' src/os/unix/ngx_linux_config.h
%build
@@ -126,16 +120,14 @@ install -Dpm0644 %{SOURCE6} %{buildroot}%{_sysusersdir}/%{name}.conf
rm %{buildroot}/srv/www/htdocs/index.html
mkdir -p %{buildroot}%{ngx_doc_dir}
cp -av CHANGES* LICENSE \
%{buildroot}%{ngx_doc_dir}
cp -av CHANGES* LICENSE %{buildroot}%{ngx_doc_dir}
mkdir -p %{buildroot}%{_datadir}/%{name}/
mkdir -p %{buildroot}%{ngx_conf_dir}/vhosts.d/
mkdir -p %{buildroot}%{ngx_conf_dir}/conf.d/
chmod a+rx contrib/geo2nginx.pl
cp -av contrib/geo2nginx.pl contrib/unicode2nginx/ \
%{buildroot}%{_datadir}/%{name}/
cp -av contrib/geo2nginx.pl contrib/unicode2nginx/ %{buildroot}%{_datadir}/%{name}/
mkdir -p %{buildroot}%{src_install_dir}
tar -xzf %{SOURCE0} --strip-components=1 -C %{buildroot}%{src_install_dir}
@@ -197,6 +189,8 @@ rm -r $GPGTMP
%{ngx_module_dir}/ngx_mail_module.so
%{ngx_module_dir}/ngx_stream_module.so
%{_mandir}/man3/%{name}.3pm*
%dir /srv/www
%dir /srv/www/htdocs
/srv/www/htdocs/50x.html
%config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
%dir %attr(750,%{ngx_user_group},%{ngx_user_group}) %{_localstatedir}/log/nginx/