diff --git a/squid31.spec b/squid31.spec new file mode 100644 index 0000000..95352ae --- /dev/null +++ b/squid31.spec @@ -0,0 +1,1084 @@ +## % define _use_internal_dependency_generator 0 +%define __perl_requires %{SOURCE98} +## % define __find_requires %{SOURCE99} + +# TODO: +# - Still several patches to rebase. Is all really needed? Some should +# be possible to override with buildtime variables +# - Error pages have changed. Squid now to language negotiation +# - Should helpers be split in their own packages? Starting to have a fair +# bit of dependencies there + +Name: squid +Version: 3.1.0.9 +Release: 1%{?dist} +Summary: The Squid proxy caching server +Epoch: 7 +License: GPLv2+ +Group: System Environment/Daemons +URL: http://www.squid-cache.org +Source: http://www.squid-cache.org/Squid/Versions/v3/3.1/squid-%{version}.tar.bz2 +Source1: http://www.squid-cache.org/Squid/Versions/v3/3.1/squid-%{version}.tar.bz2.asc +Source2: squid.init +Source3: squid.logrotate +Source4: squid.sysconfig +Source5: squid.pam +Source6: squid.nm +Source98: perl-requires-squid.sh +## Source99: filter-requires-squid.sh + +# Upstream patches +#Patch001: http://www.squid-cache.org/Versions/v3/3.1/changesets/bXXXX.patch + +# External patches + +# Local patches +# Applying upstream patches first makes it less likely that local patches +# will break upstream ones. +Patch201: squid-3.1.0.9-config.patch +Patch202: squid-3.1.0.9-location.patch +Patch203: squid-3.0.STABLE1-build.patch +Patch204: squid-3.0.STABLE1-perlpath.patch +Patch205: squid-3.0.STABLE15-smb-path.patch +Patch208: squid-3.0.STABLE7-from_manpg.patch + +Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) +Requires: bash >= 2.0 +Requires(pre): shadow-utils +Requires(post): /sbin/chkconfig +Requires(preun): /sbin/service /sbin/chkconfig +Requires(postun): /sbin/service +BuildRequires: openldap-devel pam-devel openssl-devel krb5-devel +Obsoletes: squid-novm + +%description +Squid is a high-performance proxy caching server for Web clients, +supporting FTP, gopher, and HTTP data objects. Unlike traditional +caching software, Squid handles all requests in a single, +non-blocking, I/O-driven process. Squid keeps meta data and especially +hot objects cached in RAM, caches DNS lookups, supports non-blocking +DNS lookups, and implements negative caching of failed requests. + +Squid consists of a main server program squid, a Domain Name System +lookup program (dnsserver), a program for retrieving FTP data +(ftpget), and some management and client tools. + +%prep +%setup -q + +%patch201 -p1 -b .config +%patch202 -p1 -b .location +%patch203 -p1 -b .build +%patch204 -p1 -b .perlpath +%patch205 -p1 -b .smb-path +%patch208 -p1 -b .from_manpg + +%build +export CXXFLAGS="-fPIE %{optflags}" ; export CFLAGS="-fPIE -Os -g -pipe -fsigned-char %{optflags}" ; export LDFLAGS="-pie" ; +%configure \ + --exec_prefix=/usr \ + --bindir=%{_sbindir} \ + --libexecdir=%{_libdir}/squid \ + --localstatedir=/var \ + --datadir=%{_datadir} \ + --sysconfdir=/etc/squid \ + --disable-dependency-tracking \ + --enable-arp-acl \ + --enable-auth="basic,digest,ntlm,negotiate" \ + --enable-basic-auth-helpers="LDAP,MSNT,NCSA,PAM,SMB,YP,getpwnam,multi-domain-NTLM,SASL,DB,POP3,squid_radius_auth" \ + --enable-negotiate-auth-helpers="squid_kerb_auth" \ + --enable-cache-digests \ + --enable-cachemgr-hostname=localhost \ + --enable-delay-pools \ + --enable-digest-auth-helpers="password,ldap,eDirectory" \ + --enable-epoll \ + --enable-external-acl-helpers="ip_user,ldap_group,session,unix_group,wbinfo_group" \ + --enable-icap-client \ + --enable-ident-lookups \ + %ifnarch ppc64 ia64 x86_64 s390x + --with-large-files \ + %endif + --enable-linux-netfilter \ + --enable-ntlm-auth-helpers="SMB,fakeauth" \ + --enable-referer-log \ + --enable-removal-policies="heap,lru" \ + --enable-snmp \ + --enable-ssl \ + --enable-storeio="aufs,diskd,null,ufs" \ + --enable-useragent-log \ + --enable-wccpv2 \ + --with-aio \ + --with-default-user="squid" \ + --with-filedescriptors=16384 \ + --with-dl \ + --with-openssl=/usr/kerberos \ + --with-pthreads + +# following options are no longer supported +# --with-winbind-auth-challenge \ +# --enable-follow-x-forwarded-for \ +# --enable-fd-config \ +# --with-maxfd=16384 \ +# --enable-underscores \ + +export CXXFLAGS="-fPIE" ; export CFLAGS="-fPIE -Os -g -pipe -fsigned-char" ; export LDFLAGS="-pie" ; +make %{?_smp_mflags} + +mkdir faq +cp %{SOURCE1} faq +cd faq +sgml2html FAQ.sgml + +%install +rm -rf $RPM_BUILD_ROOT +%makeinstall \ + sysconfdir=$RPM_BUILD_ROOT/etc/squid \ + localstatedir=$RPM_BUILD_ROOT/var \ + bindir=$RPM_BUILD_ROOT/%{_sbindir} \ + libexecdir=$RPM_BUILD_ROOT/%{_libdir}/squid +echo " +# +# This is /etc/httpd/conf.d/squid.conf +# + +ScriptAlias /Squid/cgi-bin/cachemgr.cgi %{_libdir}/squid/cachemgr.cgi + +# Only allow access from localhost by default + + order allow,deny + allow from localhost.localdomain + # Add additional allowed hosts as needed + # allow from .example.com +" > $RPM_BUILD_ROOT/squid.httpd.tmp + + +ln -s ../../%{_datadir}/squid/errors/English $RPM_BUILD_ROOT/etc/squid/errors +ln -s ../../%{_datadir}/squid/icons $RPM_BUILD_ROOT/etc/squid/icons + +mkdir -p $RPM_BUILD_ROOT/etc/rc.d/init.d +mkdir -p $RPM_BUILD_ROOT/etc/logrotate.d +mkdir -p $RPM_BUILD_ROOT/etc/sysconfig +mkdir -p $RPM_BUILD_ROOT/etc/pam.d +mkdir -p $RPM_BUILD_ROOT/etc/httpd/conf.d/ +mkdir -p $RPM_BUILD_ROOT/etc/NetworkManager/dispatcher.d +install -m 755 %{SOURCE2} $RPM_BUILD_ROOT/etc/rc.d/init.d/squid +install -m 644 %{SOURCE3} $RPM_BUILD_ROOT/etc/logrotate.d/squid +install -m 644 %{SOURCE4} $RPM_BUILD_ROOT/etc/sysconfig/squid +install -m 644 %{SOURCE5} $RPM_BUILD_ROOT/etc/pam.d/squid +install -m 644 $RPM_BUILD_ROOT/squid.httpd.tmp $RPM_BUILD_ROOT/etc/httpd/conf.d/squid.conf +install -m 644 %{SOURCE6} $RPM_BUILD_ROOT/etc/NetworkManager/dispatcher.d/20-squid +mkdir -p $RPM_BUILD_ROOT/var/log/squid +mkdir -p $RPM_BUILD_ROOT/var/spool/squid +chmod 644 contrib/url-normalizer.pl contrib/rredir.* contrib/user-agents.pl +iconv -f ISO88591 -t UTF8 ChangeLog -o ChangeLog.tmp +mv -f ChangeLog.tmp ChangeLog + +# remove unpackaged files from the buildroot +rm -f $RPM_BUILD_ROOT%{_sbindir}/{RunAccel,RunCache} +rm -f $RPM_BUILD_ROOT/squid.httpd.tmp + +%clean +rm -rf $RPM_BUILD_ROOT + +%files +%defattr(-,root,root,-) +%doc faq/*\.html README ChangeLog QUICKSTART +%doc contrib/url-normalizer.pl contrib/rredir.* contrib/user-agents.pl + +%attr(755,root,root) %dir /etc/squid +%attr(755,root,root) %dir %{_libdir}/squid +%attr(750,squid,squid) %dir /var/log/squid +%attr(750,squid,squid) %dir /var/spool/squid +%attr(4750,root,squid) %{_libdir}/squid/ncsa_auth +%attr(4750,root,squid) %{_libdir}/squid/pam_auth + +%config(noreplace) %attr(644,root,root) /etc/httpd/conf.d/squid.conf +%config(noreplace) %attr(640,root,squid) /etc/squid/squid.conf +%config(noreplace) %attr(644,root,squid) /etc/squid/cachemgr.conf +%config(noreplace) /etc/squid/mime.conf +%config(noreplace) /etc/sysconfig/squid +%config(noreplace) /etc/squid/msntauth.conf +%config(noreplace) /etc/squid/mib.txt +# These are not noreplace because they are just sample config files +%config /etc/squid/msntauth.conf.default +%config /etc/squid/squid.conf.default +%config /etc/squid/mime.conf.default +%config /etc/squid/cachemgr.conf.default +%config(noreplace) /etc/pam.d/squid +%config(noreplace) /etc/logrotate.d/squid + +%config(noreplace) /etc/squid/errors +%dir %{_datadir}/squid +%attr(-,root,root) %{_datadir}/squid/errors +%attr(-,root,root) /etc/squid/icons +%attr(755,root,root) /etc/rc.d/init.d/squid +%attr(755,root,root) /etc/NetworkManager/dispatcher.d/20-squid +%{_datadir}/squid/icons +%{_sbindir}/squid +%{_sbindir}/squidclient +%{_mandir}/man8/* +%{_libdir}/squid/* + +%pre +if ! getent group squid >/dev/null 2>&1; then + /usr/sbin/groupadd -g 23 squid +fi + +if ! getent passwd squid >/dev/null 2>&1 ; then + /usr/sbin/useradd -g 23 -u 23 -d /var/spool/squid -r -s /sbin/nologin squid >/dev/null 2>&1 || exit 1 +fi + +for i in /var/log/squid /var/spool/squid ; do + if [ -d $i ] ; then + for adir in `find $i -maxdepth 0 \! -user squid`; do + chown -R squid:squid $adir + done + fi +done + +exit 0 + +%post +/sbin/chkconfig --add squid +if [ $1 = 0 ]; then + case "$LANG" in + bg*) + DIR=Bulgarian + ;; + ca*) + DIR=Catalan + ;; + cs*) + DIR=Czech + ;; + da*) + DIR=Danish + ;; + nl*) + DIR=Dutch + ;; + en*) + DIR=English + ;; + ea*) + DIR=Estonian + ;; + fi*) + DIR=Finnish + ;; + fr*) + DIR=French + ;; + de*) + DIR=German + ;; + he*) + DIR=Hebrew + ;; + hu*) + DIR=Hungarian + ;; + it*) + DIR=Italian + ;; + ja*) + DIR=Japanese + ;; + kr*) + DIR=Korean + ;; + pl*) + DIR=Polish + ;; + pt*) + DIR=Portuguese + ;; + ro*) + DIR=Romanian + ;; + ru*) + DIR=Russian-koi8-r + ;; + sr*) + DIR=Serbian + ;; + sk*) + DIR=Slovak + ;; + es*) + DIR=Spanish + ;; + sv*) + DIR=Swedish + ;; + zh_TW*) + DIR=Traditional_Chinese + ;; + zh_CN*) + DIR=Simplify_Chinese + ;; + tr*) + DIR=Turkish + ;; + greek) + DIR=Greek + ;; + *) + DIR=English + ;; + esac + ln -snf %{_datadir}/squid/errors/$DIR /etc/squid/errors +fi + +%preun +if [ $1 = 0 ] ; then + service squid stop >/dev/null 2>&1 + rm -f /var/log/squid/* + /sbin/chkconfig --del squid +fi + +%postun +if [ "$1" -ge "1" ] ; then + service squid condrestart >/dev/null 2>&1 +fi + +%triggerin -- samba-common +/usr/sbin/usermod -a -G wbpriv squid >/dev/null 2>&1 || \ + chgrp squid /var/cache/samba/winbindd_privileged >/dev/null 2>&1 || : + +%changelog +* Wed Jul 01 2009 Jiri Skala 3.0.STABLE16-2 +- fixed patch parameter of bXXX patches + +* Mon Jun 29 2009 Henrik Nordstrom 3.0.STABLE16-1 +- Upgrade to 3.0.STABLE16 + +* Sat May 23 2009 Henrik Nordstrom - 3.0.STABLE15-2 +- Bug #453304 - Squid requires restart after Network Manager connection setup + +* Sat May 09 2009 Henrik Nordstrom 3.0.STABLE15-1 +- Upgrade to 3.0.STABLE15 + +* Tue Apr 28 2009 Jiri Skala - 3.0.STABLE14-3 +- fixed ambiguous condition in the init script (exit 4) + +* Mon Apr 20 2009 Henrik Nordstrom - 3.0.STABLE14-2 +- Squid bug #2635: assertion failed: HttpHeader.cc:1196: "Headers[id].type == ftInt64" + +* Sun Apr 19 2009 Henrik Nordstrom - 7:3.0.STABLE14-1 +- Upgrade to 3.0.STABLE14 + +* Fri Mar 06 2009 Henrik Nordstrom - 7:3.0.STABLE13-2 +- backported logfile.cc syslog parameters patch from 3.1 (b9443.patch) +- GCC-4.4 workaround in src/wccp2.cc + +* Wed Feb 25 2009 Fedora Release Engineering - 7:3.0.STABLE13-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild + +* Thu Feb 5 2009 Jonathan Steffan - 7:3.0.STABLE13-1 +- upgrade to latest upstream + +* Tue Jan 27 2009 Henrik Nordstrom - 7:3.0.STABLE12-1 +- upgrade to latest upstream + +* Sun Jan 18 2009 Tomas Mraz - 7:3.0.STABLE10-4 +- rebuild with new openssl + +* Fri Dec 19 2008 Henrik Nordstrom - 7:3.0.STABLE10-3 +- actually include the upstream bugfixes in the build + +* Fri Dec 19 2008 Henrik Nordstrom - 7:3.0.STABLE10-2 +- upstream bugfixes for cache corruption and access.log response size errors + +* Fri Oct 24 2008 Henrik Nordstrom - 7:3.0.STABLE10-1 +- upgrade to latest upstream + +* Sun Oct 19 2008 Henrik Nordstrom - 7:3.0.STABLE9-2 +- disable coss support, not officially supported in 3.0 + +* Sun Oct 19 2008 Henrik Nordstrom - 7:3.0.STABLE9-1 +- update to latest upstream + +* Thu Oct 09 2008 Henrik Nordstrom - 7:3.0.STABLE7-4 +- change logrotate to move instead of copytruncate + +* Wed Oct 08 2008 Jiri Skala - 7:3.0.STABLE7-3 +- fix #465052 - FTBFS squid-3.0.STABLE7-1.fc10 + +* Thu Aug 14 2008 Jiri Skala - 7:3.0.STABLE7-2 +- used ncsa_auth.8 from man-pages. there will be this file removed due to conflict +- fix #458593 noisy initscript +- fix #463129 init script tests wrong conf file +- fix #450352 - build.patch patches only generated files + +* Wed Jul 02 2008 Jiri Skala - 7:3.0.STABLE7-1 +- update to latest upstream +- fix #453214 + +* Mon May 26 2008 Martin Nagy - 7:3.0.STABLE6-2 +- fix bad allocation + +* Wed May 21 2008 Martin Nagy - 7:3.0.STABLE6-1 +- upgrade to latest upstream +- fix bad allocation + +* Fri May 09 2008 Martin Nagy - 7:3.0.STABLE5-2 +- fix configure detection of netfilter kernel headers (#435499), + patch by aoliva@redhat.com +- add support for negotiate authentication (#445337) + +* Fri May 02 2008 Martin Nagy - 7:3.0.STABLE5-1 +- upgrade to latest upstream + +* Tue Apr 08 2008 Martin Nagy - 7:3.0.STABLE4-1 +- upgrade to latest upstream + +* Thu Apr 03 2008 Martin Nagy - 7:3.0.STABLE2-2 +- add %%{optflags} to make +- remove warnings about unused return values + +* Tue Mar 13 2008 Martin Nagy - 7:3.0.STABLE2-1 +- upgrade to latest upstream 3.0.STABLE2 +- check config file before starting (#428998) +- whitespace unification of init script +- some minor path changes in the QUICKSTART file +- configure with the --with-filedescriptors=16384 option + +* Tue Feb 26 2008 Martin Nagy - 7:3.0.STABLE1-3 +- change the cache_effective_group default back to none + +* Mon Feb 11 2008 Martin Nagy - 7:3.0.STABLE1-2 +- rebuild for 4.3 + +* Wed Jan 23 2008 Martin Nagy - 7:3.0.STABLE1-1 +- upgrade to latest upstream 3.0.STABLE1 + +* Tue Dec 04 2007 Martin Bacovsky - 2.6.STABLE17-1 +- upgrade to latest upstream 2.6.STABLE17 + +* Wed Oct 31 2007 Martin Bacovsky - 7:2.6.STABLE16-3 +- arp-acl was enabled + +* Tue Sep 25 2007 Martin Bacovsky - 7:2.6.STABLE16-2 +- our fd_config patch was replaced by upstream's version +- Source1 (FAQ.sgml) points to local source (upstream's moved to wiki) + +* Fri Sep 14 2007 Martin Bacovsky - 7:2.6.STABLE16-1 +- upgrade to latest upstream 2.6.STABLE16 + +* Wed Aug 29 2007 Fedora Release Engineering - 7:2.6.STABLE14-2 +- Rebuild for selinux ppc32 issue. + +* Thu Jul 19 2007 Martin Bacovsky - 7:2.6.STABLE14-1 +- update to latest upstream 2.6.STABLE14 +- resolves: #247064: Initscript Review + +* Tue Mar 27 2007 Martin Bacovsky - 7:2.6.STABLE12-1 +- update to latest upstream 2.6.STABLE12 +- Resolves: #233913: squid: unowned directory + +* Mon Feb 19 2007 Martin Bacovsky - 7:2.6.STABLE9-2 +- Resolves: #226431: Merge Review: squid + +* Mon Jan 29 2007 Martin Bacovsky - 7:2.6.STABLE9-1 +- update to the latest upstream + +* Sun Jan 14 2007 Martin Stransky - 7:2.6.STABLE7-1 +- update to the latest upstream + +* Tue Dec 12 2006 Martin Stransky - 7:2.6.STABLE6-1 +- update to the latest upstream + +* Mon Nov 6 2006 Martin Stransky - 7:2.6.STABLE5-1 +- update to the latest upstream + +* Tue Oct 26 2006 Martin Stransky - 7:2.6.STABLE4-4 +- added fix for #205568 - marked cachemgr.conf as world readable + +* Tue Oct 25 2006 Martin Stransky - 7:2.6.STABLE4-3 +- added fix for #183869 - squid can abort when getting status +- added upstream fixes: + * Bug #1796: Assertion error HttpHeader.c:914: "str" + * Bug #1779: Delay pools fairness, correction to first patch + * Bug #1802: Crash on exit in certain conditions where cache.log is not writeable + * Bug #1779: Delay pools fairness when multiple connections compete for bandwidth + * Clarify the select/poll/kqueue/epoll configure --enable/disable options +- reworked fd patch for STABLE4 + +* Tue Oct 17 2006 Martin Stransky - 7:2.6.STABLE4-2 +- upstream fixes: + * Accept 00:00-24:00 as a valid time specification (upstream BZ #1794) + * aioDone() could be called twice + * Squid reconfiguration (upstream BZ #1800) + +* Mon Oct 2 2006 Martin Stransky - 7:2.6.STABLE4-1 +- new upstream +- fixes from upstream bugzilla, items #1782,#1780,#1785,#1719,#1784,#1776 + +* Tue Sep 5 2006 Martin Stransky - 7:2.6.STABLE3-2 +- added upstream patches for ACL + +* Mon Aug 21 2006 Martin Stransky - 7:2.6.STABLE3-1 +- the latest stable upstream + +* Thu Aug 10 2006 Karsten Hopp 7:2.6.STABLE2-3 +- added some requirements for pre/post install scripts + +* Fri Aug 04 2006 Martin Stransky - 7:2.6.STABLE2-2 +- added patch for #198253 - squid: don't chgrp another pkg's + files/directory + +* Mon Jul 31 2006 Martin Stransky - 7:2.6.STABLE2-1 +- the latest stable upstream +- reworked fd config patch + +* Wed Jul 25 2006 Martin Stransky - 7:2.6.STABLE1-3 +- the latest CVS upstream snapshot + +* Wed Jul 19 2006 Martin Stransky - 7:2.6.STABLE1-2 +- the latest CVS snapshot + +* Mon Jul 18 2006 Martin Stransky - 7:2.6.STABLE1-1 +- new upstream + the latest CVS snapshot from 2006/07/18 +- updated fd config patch +- enabled epoll +- fixed release format (#197405) +- enabled WCCPv2 support (#198642) + +* Wed Jul 12 2006 Jesse Keating - 7:2.5.STABLE14-2.1 +- rebuild + +* Tue Jun 8 2006 Martin Stransky - 7:2.5.STABLE14-2 +- fix for squid BZ#1511 - assertion failed: HttpReply.c:105: "rep" + +* Tue May 30 2006 Martin Stransky - 7:2.5.STABLE14-1 +- update to new upstream + +* Sun May 28 2006 Martin Stransky - 7:2.5.STABLE13-5 +- fixed libbind patch (#193298) + +* Wed May 3 2006 Martin Stransky - 7:2.5.STABLE13-4 +- added extra group check (#190544) + +* Wed Mar 29 2006 Martin Stransky - 7:2.5.STABLE13-3 +- improved pre script (#187217) - added group switch + +* Thu Mar 23 2006 Martin Stransky - 7:2.5.STABLE13-2 +- removed "--with-large-files" on 64bit arches + +* Mon Mar 13 2006 Martin Stransky - 7:2.5.STABLE13-1 +- update to new upstream + +* Fri Feb 10 2006 Jesse Keating - 7:2.5.STABLE12-5.1 +- bump again for double-long bug on ppc(64) + +* Tue Feb 07 2006 Martin Stransky - 7:2.5.STABLE12-5 +- new upstream patches + +* Tue Feb 07 2006 Jesse Keating - 7:2.5.STABLE12-4.1 +- rebuilt for new gcc4.1 snapshot and glibc changes + +* Wed Dec 28 2005 Martin Stransky 7:2.5.STABLE12-4 +- added follow-xff patch (#176055) +- samba path fix (#176659) + +* Mon Dec 19 2005 Martin Stransky 7:2.5.STABLE12-3 +- fd-config.patch clean-up +- SMB_BadFetch patch from upstream + +* Fri Dec 09 2005 Jesse Keating +- rebuilt + +* Mon Nov 28 2005 Martin Stransky 7:2.5.STABLE12-2 +- rewriten patch squid-2.5.STABLE10-64bit.patch, it works with + "--with-large-files" option now +- fix for #72896 - squid does not support > 1024 file descriptors, + new "--enable-fd-config" option for it. + +* Wed Nov 9 2005 Martin Stransky 7:2.5.STABLE12-1 +- update to STABLE12 +- setenv patch + +* Mon Oct 24 2005 Martin Stransky 7:2.5.STABLE11-6 +- fix for delay pool from upstream + +* Thu Oct 20 2005 Martin Stransky 7:2.5.STABLE11-5 +- fix for #171213 - CVE-2005-3258 Squid crash due to malformed FTP response +- more fixes from upstream + +* Fri Oct 14 2005 Martin Stransky 7:2.5.STABLE11-4 +- enabled support for large files (#167503) + +* Thu Oct 13 2005 Tomas Mraz 7:2.5.STABLE11-3 +- use include instead of pam_stack in pam config + +* Thu Sep 29 2005 Martin Stransky 7:2.5.STABLE11-2 +- added patch for delay pools and some minor fixes + +* Fri Sep 23 2005 Martin Stransky 7:2.5.STABLE11-1 +- update to STABLE11 + +* Mon Sep 5 2005 Martin Stransky 7:2.5.STABLE10-4 +- Three upstream patches for #167414 +- Spanish and Greek messages +- patch for -D_FORTIFY_SOURCE=2 + +* Tue Aug 30 2005 Martin Stransky 7:2.5.STABLE10-3 +- removed "--enable-truncate" option (#165948) +- added "--enable-cache-digests" option (#102134) +- added "--enable-ident-lookups" option (#161640) +- some clean up (#165949) + +* Fri Jul 15 2005 Martin Stransky 7:2.5.STABLE10-2 +- pam_auth and ncsa_auth have setuid (#162660) + +* Fri Jul 7 2005 Martin Stransky 7:2.5.STABLE10-1 +- new upstream version +- enabled fakeauth utility (#154020) +- enabled digest authentication scheme (#155882) +- all error pages marked as config (#127836) +- patch for 64bit statvfs interface (#153274) +- added httpd config file for cachemgr.cgi (#112725) + +* Mon May 16 2005 Jay Fenlason 7:2.5.STABLE9-7 +- Upgrade the upstream -dns_query patch from -4 to -5 + +* Wed May 11 2005 Jay Fenlason 7:2.5.STABLE9-6 +- More upstream patches, including a fix for + bz#157456 CAN-2005-1519 DNS lookups unreliable on untrusted networks + +* Tue Apr 26 2005 Jay Fenlason 7:2.5.STABLE9-5 +- more upstream patches, including a fix for + CVE-1999-0710 cachemgr malicious use + +* Fri Apr 22 2005 Jay Fenlason 7:2.5.STABLE9-4 +- More upstream patches, including the fixed 2GB patch. +- include the -libbind patch, which prevents squid from using the optional + -lbind library, even if it's installed. + +* Tue Mar 15 2005 Jay Fenlason 7:2.5.STABLE9-2 +- New upstream version, with 14 upstream patches. + +* Wed Feb 16 2005 Jay Fenlason 7:2.5.STABLE8-2 +- new upstream version with 4 upstream patches. +- Reorganize spec file to apply upstream patches first + +* Tue Feb 1 2005 Jay Fenlason 7:2.5.STABLE7-4 +- Include two more upstream patches for security vulns: + bz#146783 Correct handling of oversized reply headers + bz#146778 CAN-2005-0211 Buffer overflow in WCCP recvfrom() call + +* Tue Jan 25 2005 Jay Fenlason 7:2.5.STABLE7-3 +- Include more upstream patches, including two for security holes. + +* Tue Jan 18 2005 Jay Fenlason 7:2.5.STABLE7-2 +- Add a triggerin on samba-common to make /var/cache/samba/winbindd_privileged + accessable so that ntlm_auth will work. It needs to be in this rpm, + because the Samba RPM can't assume the squid user exists. + Note that this will only work if the Samba RPM is recent enough to create + that directory at install time instead of at winbindd startup time. + That should be samba-common-3.0.0-15 or later. + This fixes bugzilla #103726 +- Clean up extra whitespace in this spec file. +- Add additional upstream patches. (Now 18 upstream patches). +- patch #112 closes CAN-2005-0096 and CAN-2005-0097, remote DOS security holes. +- patch #113 closes CAN-2005-0094, a remote buffer-overflow DOS security hole. +- patch #114 closes CAN-2005-0095, a remote DOS security hole. +- Remove the -nonbl (replaced by #104) and -close (replaced by #111) patches, since + they're now fixed by upstream patches. + +* Mon Oct 25 2004 Jay Fenlason 7:2.5.STABLE7-1 +- new upstream version, with 3 upstream patches. + Updated the -build and -config patches +- Include patch from Ulrich Drepper to more + intelligently close all file descriptors. + +* Mon Oct 18 2004 Jay Fenlason 7:2.5.STABLE6-3 +- include patch from Ulrich Drepper to stop + problems with O_NONBLOCK. This closes #136049 + +* Tue Oct 12 2004 Jay Fenlason 7:2.5.STABLE6-2 +- Include fix for CAN-2004-0918 + +* Tue Sep 28 2004 Jay Fenlason 7:2.5.STABLE6-1 +- New upstream version, with 32 upstream patches. + This closes #133970, #133931, #131728, #128143, #126726 + +- Change the permissions on /etc/squid/squid.conf to 640. This closes + bugzilla #125007 + +* Mon Jun 28 2004 Jay Fenlason 7:2.5STABLE5-5 +- Merge current upstream patches. +- Fix the -pipe patch to have the correct name of the winbind pipe. + +* Tue Jun 15 2004 Elliot Lee +- rebuilt + +* Mon Apr 5 2004 Jay Fenlason 7:2.5.STABLE5-2 +- Include the first 10 upstream patches +- Add a patch for the correct location of the winbindd pipe. This closes + bugzilla #107561 +- Remove the change to ssl_support.c from squid-2.5.STABLE3-build patch + This closes #117851 +- Include /etc/pam.d/squid . This closes #113404 +- Include a patch to close #111254 (assignment in assert) +- Change squid.init to put output messages in /var/log/squid/squid.out + This closes #104697 +- Only useradd the squid user if it doesn't already exist, and error out + if the useradd fails. This closes #118718. + +* Tue Mar 2 2004 Jay Fenlason 7:2.5.STABLE5-1 +- New upstream version, obsoletes many patches. +- Fix --datadir passed to configure. Configure automatically adds /squid + so we shouldn't. +- Remove the problematic triggerpostun trigger, since is's broken, and FC2 + never shipped with that old version. +- add %%{?_smp_mflags} to make line. + +* Tue Mar 02 2004 Elliot Lee +- rebuilt + +* Mon Feb 23 2004 Tim Waugh +- Use ':' instead of '.' as separator for chown. + +* Fri Feb 20 2004 Jay Fenlason 7:2.5.STABLE4-3 +- Clean up the spec file to work on 64-bit platforms (use %%{_libdir} + instead of /usr/lib, etc) +- Make the release number in the changelog section agree with reality. +- use -fPIE rather than -fpie. s390 fails with just -fpie + +* Fri Feb 13 2004 Elliot Lee +- rebuilt + +* Thu Feb 5 2004 Jay Fenlason +- Incorporate many upstream patches +- Include many spec file changes from D.Johnson + +* Tue Sep 23 2003 Jay Fenlason 7:2.5.STABLE4-1 +- New upstream version. +- Fix the Source: line in this spec file to point to the correct URL. +- redo the -location patch to work with the new upstream version. + +* Mon Jun 30 2003 Jay Fenlason 7:2.5.STABLE3-0 +- Spec file change to enable the nul storage module. bugzilla #74654 +- Upgrade to 2.5STABLE3 with current official patches. +- Added --enable-auth="basic,ntlm": closes bugzilla #90145 +- Added --with-winbind-auth-challenge: closes bugzilla #78691 +- Added --enable-useragent-log and --enable-referer-log, closes +- bugzilla #91884 +# - Changed configure line to enable pie +# (Disabled due to broken compilers on ia64 build machines) +#- Patched to increase the maximum number of file descriptors #72896 +#- (disabled for now--needs more testing) + +* Wed Jun 04 2003 Elliot Lee +- rebuilt + +* Wed Jan 22 2003 Tim Powers +- rebuilt + +* Wed Jan 15 2003 Bill Nottingham 7:2.5.STABLE1-1 +- update to 2.5.STABLE1 + +* Wed Nov 27 2002 Tim Powers 7:2.4.STABLE7-5 +- remove unpackaged files from the buildroot + +* Tue Aug 27 2002 Nalin Dahyabhai 2.4.STABLE7-4 +- rebuild + +* Wed Jul 31 2002 Karsten Hopp +- don't raise an error if the config file is incomplete + set defaults instead (#69322, #70065) + +* Thu Jul 18 2002 Bill Nottingham 2.4.STABLE7-2 +- don't strip binaries + +* Mon Jul 8 2002 Bill Nottingham +- update to 2.4.STABLE7 +- fix restart (#53761) + +* Tue Jun 25 2002 Bill Nottingham +- add various upstream bugfix patches + +* Fri Jun 21 2002 Tim Powers +- automated rebuild + +* Thu May 23 2002 Tim Powers +- automated rebuild + +* Fri Mar 22 2002 Bill Nottingham +- 2.4.STABLE6 +- turn off carp + +* Mon Feb 18 2002 Bill Nottingham +- 2.4.STABLE3 + patches +- turn off HTCP at request of maintainers +- leave SNMP enabled in the build, but disabled in the default config + +* Fri Jan 25 2002 Tim Powers +- rebuild against new libssl + +* Wed Jan 09 2002 Tim Powers +- automated rebuild + +* Mon Jan 07 2002 Florian La Roche +- require linuxdoc-tools instead of sgml-tools + +* Tue Sep 25 2001 Bill Nottingham +- update to 2.4.STABLE2 + +* Mon Sep 24 2001 Bill Nottingham +- add patch to fix FTP crash + +* Mon Aug 6 2001 Bill Nottingham +- fix uninstall (#50411) + +* Mon Jul 23 2001 Bill Nottingham +- add some buildprereqs (#49705) + +* Sun Jul 22 2001 Bill Nottingham +- update FAQ + +* Tue Jul 17 2001 Bill Nottingham +- own /etc/squid, /usr/lib/squid + +* Tue Jun 12 2001 Nalin Dahyabhai +- rebuild in new environment +- s/Copyright:/License:/ + +* Tue Apr 24 2001 Bill Nottingham +- update to 2.4.STABLE1 + patches +- enable some more configure options (#24981) +- oops, ship /etc/sysconfig/squid + +* Fri Mar 2 2001 Nalin Dahyabhai +- rebuild in new environment + +* Tue Feb 6 2001 Trond Eivind Glomsrød +- improve i18n +- make the initscript use the standard OK/FAILED + +* Tue Jan 23 2001 Bill Nottingham +- change i18n mechanism + +* Fri Jan 19 2001 Bill Nottingham +- fix path references in QUICKSTART (#15114) +- fix initscript translations (#24086) +- fix shutdown logic (#24234), patch from +- add /etc/sysconfig/squid for daemon options & shutdown timeouts +- three more bugfixes from the Squid people +- update FAQ.sgml +- build and ship auth modules (#23611) + +* Thu Jan 11 2001 Bill Nottingham +- initscripts translations + +* Mon Jan 8 2001 Bill Nottingham +- add patch to use mkstemp (greg@wirex.com) + +* Fri Dec 01 2000 Bill Nottingham +- rebuild because of broken fileutils + +* Sat Nov 11 2000 Bill Nottingham +- fix the acl matching cases (only need the second patch) + +* Tue Nov 7 2000 Bill Nottingham +- add two patches to fix domain ACLs +- add 2 bugfix patches from the squid people + +* Fri Jul 28 2000 Bill Nottingham +- clean up init script; fix condrestart +- update to STABLE4, more bugfixes +- update FAQ + +* Tue Jul 18 2000 Nalin Dahyabhai +- fix syntax error in init script +- finish adding condrestart support + +* Fri Jul 14 2000 Bill Nottingham +- move initscript back + +* Wed Jul 12 2000 Prospector +- automatic rebuild + +* Thu Jul 6 2000 Bill Nottingham +- prereq /etc/init.d +- add bugfix patch +- update FAQ + +* Thu Jun 29 2000 Bill Nottingham +- fix init script + +* Tue Jun 27 2000 Bill Nottingham +- don't prereq new initscripts + +* Mon Jun 26 2000 Bill Nottingham +- initscript munging + +* Sat Jun 10 2000 Bill Nottingham +- rebuild for exciting FHS stuff + +* Wed May 31 2000 Bill Nottingham +- fix init script again (#11699) +- add --enable-delay-pools (#11695) +- update to STABLE3 +- update FAQ + +* Fri Apr 28 2000 Bill Nottingham +- fix init script (#11087) + +* Fri Apr 7 2000 Bill Nottingham +- three more bugfix patches from the squid people +- buildprereq jade, sgmltools + +* Sun Mar 26 2000 Florian La Roche +- make %%pre more portable + +* Thu Mar 16 2000 Bill Nottingham +- bugfix patches +- fix dependency on /usr/local/bin/perl + +* Sat Mar 4 2000 Bill Nottingham +- 2.3.STABLE2 + +* Mon Feb 14 2000 Bill Nottingham +- Yet More Bugfix Patches + +* Tue Feb 8 2000 Bill Nottingham +- add more bugfix patches +- --enable-heap-replacement + +* Mon Jan 31 2000 Cristian Gafton +- rebuild to fix dependencies + +* Fri Jan 28 2000 Bill Nottingham +- grab some bugfix patches + +* Mon Jan 10 2000 Bill Nottingham +- 2.3.STABLE1 (whee, another serial number) + +* Tue Dec 21 1999 Bernhard Rosenkraenzer +- Fix compliance with ftp RFCs + (http://www.wu-ftpd.org/broken-clients.html) +- Work around a bug in some versions of autoconf +- BuildPrereq sgml-tools - we're using sgml2html + +* Mon Oct 18 1999 Bill Nottingham +- add a couple of bugfix patches + +* Wed Oct 13 1999 Bill Nottingham +- update to 2.2.STABLE5. +- update FAQ, fix URLs. + +* Sat Sep 11 1999 Cristian Gafton +- transform restart in reload and add restart to the init script + +* Tue Aug 31 1999 Bill Nottingham +- add squid user as user 23. + +* Mon Aug 16 1999 Bill Nottingham +- initscript munging +- fix conflict between logrotate & squid -k (#4562) + +* Wed Jul 28 1999 Bill Nottingham +- put cachemgr.cgi back in /usr/lib/squid + +* Wed Jul 14 1999 Bill Nottingham +- add webdav bugfix patch (#4027) + +* Mon Jul 12 1999 Bill Nottingham +- fix path to config in squid.init (confuses linuxconf) + +* Wed Jul 7 1999 Bill Nottingham +- 2.2.STABLE4 + +* Wed Jun 9 1999 Dale Lovelace +- logrotate changes +- errors from find when /var/spool/squid or +- /var/log/squid didn't exist + +* Thu May 20 1999 Bill Nottingham +- 2.2.STABLE3 + +* Thu Apr 22 1999 Bill Nottingham +- update to 2.2.STABLE.2 + +* Sun Apr 18 1999 Bill Nottingham +- update to 2.2.STABLE1 + +* Thu Apr 15 1999 Bill Nottingham +- don't need to run groupdel on remove +- fix useradd + +* Mon Apr 12 1999 Bill Nottingham +- fix effective_user (bug #2124) + +* Mon Apr 5 1999 Bill Nottingham +- strip binaries + +* Thu Apr 1 1999 Bill Nottingham +- duh. adduser does require a user name. +- add a serial number + +* Tue Mar 30 1999 Bill Nottingham +- add an adduser in %%pre, too + +* Thu Mar 25 1999 Bill Nottingham +- oog. chkconfig must be in %%preun, not %%postun + +* Wed Mar 24 1999 Bill Nottingham +- switch to using group squid +- turn off icmp (insecure) +- update to 2.2.DEVEL3 +- build FAQ docs from source + +* Tue Mar 23 1999 Bill Nottingham +- logrotate changes + +* Sun Mar 21 1999 Cristian Gafton +- auto rebuild in the new build environment (release 4) + +* Wed Feb 10 1999 Bill Nottingham +- update to 2.2.PRE2 + +* Wed Dec 30 1998 Bill Nottingham +- cache & log dirs shouldn't be world readable +- remove preun script (leave logs & cache @ uninstall) + +* Tue Dec 29 1998 Bill Nottingham +- fix initscript to get cache_dir correct + +* Fri Dec 18 1998 Bill Nottingham +- update to 2.1.PATCH2 +- merge in some changes from RHCN version + +* Sat Oct 10 1998 Cristian Gafton +- strip binaries +- version 1.1.22 + +* Sun May 10 1998 Cristian Gafton +- don't make packages conflict with each other... + +* Sat May 02 1998 Cristian Gafton +- added a proxy auth patch from Alex deVries +- fixed initscripts + +* Thu Apr 09 1998 Cristian Gafton +- rebuilt for Manhattan + +* Fri Mar 20 1998 Cristian Gafton +- upgraded to 1.1.21/1.NOVM.21 + +* Mon Mar 02 1998 Cristian Gafton +- updated the init script to use reconfigure option to restart squid instead + of shutdown/restart (both safer and quicker) + +* Sat Feb 07 1998 Cristian Gafton +- upgraded to 1.1.20 +- added the NOVM package and tryied to reduce the mess in the spec file + +* Wed Jan 7 1998 Cristian Gafton +- first build against glibc +- patched out the use of setresuid(), which is available only on kernels + 2.1.44 and later +