CVS commit: pkgsrc/www/nghttp2

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Fri May 26 19:47:18 UTC 2017

Modified Files:
        pkgsrc/www/nghttp2: Makefile distinfo

Log Message:
Changes 1.23.0:

libnghttp2

Previously, if libnghttp2 received an invalid header field, it is just ignored, and is treated like it was never happened. This release changes this behaviour, and now libnghttp2 treats an incoming 
invalid header field as error, and resets the stream with PROTOCOL_ERROR.

nghttp2_on_invalid_frame_callback is now called if validation of altsvc header field fails.

nghttpx

nghttpx now verifies that OCSP response received from a program specified by --fetch-ocsp-response-file. The validation can be turned off by using --no-verify-ocsp option. In this validation, it 
makes sure that the OCSP response is targeted to the expected certificate. This is important because we pass the file path to the external program (see --fetch-ocsp-response-file), and if the file is 
replaced because of renewal, and nghttpx has not reloaded its configuration, the certificate nghttpx has loaded and the one included in the file differ. Verifying the OCSP response detects this, and 
avoids to send wrong OCSP response.


To generate a diff of this commit:
cvs rdiff -u -r1.25 -r1.26 pkgsrc/www/nghttp2/Makefile
cvs rdiff -u -r1.21 -r1.22 pkgsrc/www/nghttp2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/nghttp2/Makefile
diff -u pkgsrc/www/nghttp2/Makefile:1.25 pkgsrc/www/nghttp2/Makefile:1.26
--- pkgsrc/www/nghttp2/Makefile:1.25    Sun Apr 30 01:21:25 2017
+++ pkgsrc/www/nghttp2/Makefile Fri May 26 19:47:18 2017
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.25 2017/04/30 01:21:25 ryoon Exp $
+# $NetBSD: Makefile,v 1.26 2017/05/26 19:47:18 adam Exp $
 
-DISTNAME=      nghttp2-1.22.0
-PKGREVISION=   1
+DISTNAME=      nghttp2-1.23.0
 CATEGORIES=    www
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=tatsuhiro-t/}
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/www/nghttp2/distinfo
diff -u pkgsrc/www/nghttp2/distinfo:1.21 pkgsrc/www/nghttp2/distinfo:1.22
--- pkgsrc/www/nghttp2/distinfo:1.21    Sat Apr 29 06:01:55 2017
+++ pkgsrc/www/nghttp2/distinfo Fri May 26 19:47:18 2017
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.21 2017/04/29 06:01:55 adam Exp $
+$NetBSD: distinfo,v 1.22 2017/05/26 19:47:18 adam Exp $
 
-SHA1 (nghttp2-1.22.0.tar.xz) = 35b0e65124d83146cab4f0b5ad2873d0175de2a5
-RMD160 (nghttp2-1.22.0.tar.xz) = 2e18773d09691264b4a8d7a4db44761d2deb3366
-SHA512 (nghttp2-1.22.0.tar.xz) = dc6e02afc5834db6945b658a45b6c27ec96365ee77218e746803eb166ffb58b0e88c43dc32db6bc0fef65db5cacba01f80140c4958c52eb9691ac13aaae9b02d
-Size (nghttp2-1.22.0.tar.xz) = 1514712 bytes
+SHA1 (nghttp2-1.23.0.tar.xz) = 7bf0be27fcd601023e2095bd7114ed164979db23
+RMD160 (nghttp2-1.23.0.tar.xz) = 23f96f0532b792d87190115af6805ccfdb135025
+SHA512 (nghttp2-1.23.0.tar.xz) = d3230db303c03dd454344438fd6579b853569d70ef8f0f983e55ba0a4ad6cf22c35eb7dc8f83809a1f409a546755964c662e0d5cae2ec279a5ab6bd3bee6b795
+Size (nghttp2-1.23.0.tar.xz) = 1517680 bytes