head	1.3;
access;
symbols
	pkgsrc-2024Q1:1.3.0.44
	pkgsrc-2024Q1-base:1.3
	pkgsrc-2023Q4:1.3.0.42
	pkgsrc-2023Q4-base:1.3
	pkgsrc-2023Q3:1.3.0.40
	pkgsrc-2023Q3-base:1.3
	pkgsrc-2023Q2:1.3.0.38
	pkgsrc-2023Q2-base:1.3
	pkgsrc-2023Q1:1.3.0.36
	pkgsrc-2023Q1-base:1.3
	pkgsrc-2022Q4:1.3.0.34
	pkgsrc-2022Q4-base:1.3
	pkgsrc-2022Q3:1.3.0.32
	pkgsrc-2022Q3-base:1.3
	pkgsrc-2022Q2:1.3.0.30
	pkgsrc-2022Q2-base:1.3
	pkgsrc-2022Q1:1.3.0.28
	pkgsrc-2022Q1-base:1.3
	pkgsrc-2021Q4:1.3.0.26
	pkgsrc-2021Q4-base:1.3
	pkgsrc-2021Q3:1.3.0.24
	pkgsrc-2021Q3-base:1.3
	pkgsrc-2021Q2:1.3.0.22
	pkgsrc-2021Q2-base:1.3
	pkgsrc-2021Q1:1.3.0.20
	pkgsrc-2021Q1-base:1.3
	pkgsrc-2020Q4:1.3.0.18
	pkgsrc-2020Q4-base:1.3
	pkgsrc-2020Q3:1.3.0.16
	pkgsrc-2020Q3-base:1.3
	pkgsrc-2020Q2:1.3.0.14
	pkgsrc-2020Q2-base:1.3
	pkgsrc-2020Q1:1.3.0.10
	pkgsrc-2020Q1-base:1.3
	pkgsrc-2019Q4:1.3.0.12
	pkgsrc-2019Q4-base:1.3
	pkgsrc-2019Q3:1.3.0.8
	pkgsrc-2019Q3-base:1.3
	pkgsrc-2019Q2:1.3.0.6
	pkgsrc-2019Q2-base:1.3
	pkgsrc-2019Q1:1.3.0.4
	pkgsrc-2019Q1-base:1.3
	pkgsrc-2018Q4:1.3.0.2
	pkgsrc-2018Q4-base:1.3
	pkgsrc-2018Q3:1.2.0.4
	pkgsrc-2018Q3-base:1.2
	pkgsrc-2018Q2:1.2.0.2
	pkgsrc-2018Q2-base:1.2
	pkgsrc-2018Q1:1.1.0.12
	pkgsrc-2018Q1-base:1.1
	pkgsrc-2017Q4:1.1.0.10
	pkgsrc-2017Q4-base:1.1
	pkgsrc-2017Q3:1.1.0.8
	pkgsrc-2017Q3-base:1.1
	pkgsrc-2017Q2:1.1.0.4
	pkgsrc-2017Q2-base:1.1
	pkgsrc-2017Q1:1.1.0.2
	pkgsrc-2017Q1-base:1.1;
locks; strict;
comment	@# @;


1.3
date	2018.10.12.13.57.46;	author adam;	state Exp;
branches;
next	1.2;
commitid	fUAAKQYOzJSzXFVA;

1.2
date	2018.06.21.11.31.33;	author adam;	state Exp;
branches;
next	1.1;
commitid	hf6S7M04M8THM8HA;

1.1
date	2017.02.18.05.59.23;	author nonaka;	state Exp;
branches;
next	;
commitid	d69bEKH7eMhqDoGz;


desc
@@


1.3
log
@tinyproxy: updated to 1.10.0

Tinyproxy version 1.10.0

Major changes in this release
-----------------------------
Add support for basic HTTP authentication
Add socks upstream support
Log to stdout if no logfile is specified
Activate reverse proxy by default
Support bind with transparent mode
Install tinyproxy to bin/ instead of sbin/
Ship manpages as part of distribution tarball
Allow multiple listen statements in the configuration
Coverity fixes
Simplified configure and build
Improved selftest environment

Included security fixes
-----------------------
Fix CVE-2017-11747: Create PID file before dropping privileges.
Fix CVE-2012-3505: algorithmic complexity DoS in hashmap

Bugfixes
--------
fix algorithmic complexity DoS in hashmap
fix CONNECT requests with IPv6 literal addresses as host
fix invalid free for GET requests to ipv6 literal address
conf: Allow multiple Listen statements in the config
allow listening on multiple families when no Listen is provided in config
Drop supplementary groups
build: fix build with autoconf >= 2.69
Move files installed in /etc/ to /etc/tinyproxy/
Fix crash (infinite loop) when writing to log file fails
Fix bug in ACL netmask generation
Fix FilterURLs with transparent proxy support
Fix upstream proxy support
Create log and pid files after we drop privs
Don't recompile regular expressions
Use output of id instead of $USER
keep track of error codes in return codes in tests
@
text
@$NetBSD: patch-etc_tinyproxy.conf.in,v 1.2 2018/06/21 11:31:33 adam Exp $

Customize settings.

--- etc/tinyproxy.conf.in.orig	2018-08-31 23:03:36.000000000 +0000
+++ etc/tinyproxy.conf.in
@@@@ -12,8 +12,8 @@@@
 # as the root user. Either the user or group name or the UID or GID
 # number may be used.
 #
-User nobody
-Group nobody
+User @@TINYPROXY_USER@@
+Group @@TINYPROXY_GROUP@@
 
 #
 # Port: Specify the port which tinyproxy will listen on.  Please note
@@@@ -124,7 +124,7 @@@@ LogLevel Info
 # can be used for signalling purposes.
 # If not specified, no pidfile will be written.
 #
-#PidFile "@@localstatedir@@/run/tinyproxy/tinyproxy.pid"
+PidFile "@@localstatedir@@/run/tinyproxy/tinyproxy.pid"
 
 #
 # XTinyproxy: Tell Tinyproxy to include the X-Tinyproxy header, which
@


1.2
log
@tinyproxy: updated to 1.8.4

Tinyproxy version 1.8.4

Most notably, this release removes the limitation of a single Listen address of not listening on the wildcard address and a DoS (CVE-2012-3505).
Among several other bug fixes, this release fixes a bunch of issues found by coverity (scan.coverity.com).

Bugs resolved since version 1.8.3
fix algorithmic complexity DoS in hashmap
fix failing CONNECT requests with IPv6 literal addresses
fix invalid free for GET requests to IPv6 literal addresses
support multiple Listen statements in configuration
support listening on ipv4 and ipv6 wildcard if no Listen specified
fix crash when writing to log file fails
fix build with autoconf >= 2.69
@
text
@d1 1
a1 1
$NetBSD: patch-etc_tinyproxy.conf.in,v 1.1 2017/02/18 05:59:23 nonaka Exp $
d5 2
a6 2
--- etc/tinyproxy.conf.in.orig	2010-03-03 18:37:24.000000000 +0900
+++ etc/tinyproxy.conf.in	2016-12-15 11:05:42.000000000 +0900
d18 1
a18 2
@@@@ -122,7 +122,7 @@@@ LogLevel Info
 # PidFile: Write the PID of the main tinyproxy thread to this file so it
d20 1
@


1.1
log
@fixup tinyproxy.conf
@
text
@d1 3
a3 1
$NetBSD$
@