[pkgsrc/trunk]: pkgsrc/www/nghttp2 Changes 1.23.0:

[adam <adam%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/628f798a8f9d
branches:  trunk
changeset: 362833:628f798a8f9d
user:      adam <adam%pkgsrc.org@localhost>
date:      Fri May 26 19:47:18 2017 +0000

description:
Changes 1.23.0:

libnghttp2

Previously, if libnghttp2 received an invalid header field, it is just ignored, and is treated like it was never happened. This release changes this behaviour, and now libnghttp2 treats an incoming 
invalid header field as error, and resets the stream with PROTOCOL_ERROR.

nghttp2_on_invalid_frame_callback is now called if validation of altsvc header field fails.


nghttpx

nghttpx now verifies that OCSP response received from a program specified by --fetch-ocsp-response-file. The validation can be turned off by using --no-verify-ocsp option. In this validation, it 
makes sure that the OCSP response is targeted to the expected certificate. This is important because we pass the file path to the external program (see --fetch-ocsp-response-file), and if the file is 
replaced because of renewal, and nghttpx has not reloaded its configuration, the certificate nghttpx has loaded and the one included in the file differ. Verifying the OCSP response detects this, and 
avoids to send wrong OCSP response.

diffstat:

 www/nghttp2/Makefile |   5 ++---
 www/nghttp2/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 8 deletions(-)

diffs (28 lines):

diff -r 91ad5ca23a80 -r 628f798a8f9d www/nghttp2/Makefile
--- a/www/nghttp2/Makefile      Fri May 26 19:38:31 2017 +0000
+++ b/www/nghttp2/Makefile      Fri May 26 19:47:18 2017 +0000
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.25 2017/04/30 01:21:25 ryoon Exp $
+# $NetBSD: Makefile,v 1.26 2017/05/26 19:47:18 adam Exp $
 
-DISTNAME=      nghttp2-1.22.0
-PKGREVISION=   1
+DISTNAME=      nghttp2-1.23.0
 CATEGORIES=    www
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=tatsuhiro-t/}
 EXTRACT_SUFX=  .tar.xz
diff -r 91ad5ca23a80 -r 628f798a8f9d www/nghttp2/distinfo
--- a/www/nghttp2/distinfo      Fri May 26 19:38:31 2017 +0000
+++ b/www/nghttp2/distinfo      Fri May 26 19:47:18 2017 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.21 2017/04/29 06:01:55 adam Exp $
+$NetBSD: distinfo,v 1.22 2017/05/26 19:47:18 adam Exp $
 
-SHA1 (nghttp2-1.22.0.tar.xz) = 35b0e65124d83146cab4f0b5ad2873d0175de2a5
-RMD160 (nghttp2-1.22.0.tar.xz) = 2e18773d09691264b4a8d7a4db44761d2deb3366
-SHA512 (nghttp2-1.22.0.tar.xz) = dc6e02afc5834db6945b658a45b6c27ec96365ee77218e746803eb166ffb58b0e88c43dc32db6bc0fef65db5cacba01f80140c4958c52eb9691ac13aaae9b02d
-Size (nghttp2-1.22.0.tar.xz) = 1514712 bytes
+SHA1 (nghttp2-1.23.0.tar.xz) = 7bf0be27fcd601023e2095bd7114ed164979db23
+RMD160 (nghttp2-1.23.0.tar.xz) = 23f96f0532b792d87190115af6805ccfdb135025
+SHA512 (nghttp2-1.23.0.tar.xz) = d3230db303c03dd454344438fd6579b853569d70ef8f0f983e55ba0a4ad6cf22c35eb7dc8f83809a1f409a546755964c662e0d5cae2ec279a5ab6bd3bee6b795
+Size (nghttp2-1.23.0.tar.xz) = 1517680 bytes