--- squid3-3.0.STABLE19.orig/debian/squid3-common.install +++ squid3-3.0.STABLE19/debian/squid3-common.install @@ -0,0 +1,3 @@ +usr/share/squid3/icons +usr/share/squid3/mib.txt +usr/share/squid3/mime.conf --- squid3-3.0.STABLE19.orig/debian/squid3.postinst +++ squid3-3.0.STABLE19/debian/squid3.postinst @@ -0,0 +1,84 @@ +#! /bin/sh + +set -e + +grepconf () { + w=" " # space tab + sq=/etc/squid3/squid.conf + # sed is cool. + res=`sed -ne ' + s/^'$1'['"$w"']\+\([^'"$w"']\+\).*$/\1/p; + t end; + d; + :end q' < $sq` + [ -n "$res" ] || res=$2 + echo "$res" +} + +grepconf2 () { + w=" " # space tab + sq=/etc/squid3/squid.conf + # sed is cool. + res=`sed -ne ' + s/^'$1'['"$w"']\+[^'"$w"']\+['"$w"']\+\([^'"$w"']\+\).*$/\1/p; + t end; + d; + :end q' < $sq` + [ -n "$res" ] || res=$2 + echo "$res" +} + +case "$1" in + configure) + # + # Chown the directories. + # + log_dir=/var/log/squid3 + cache_dir=`grepconf2 cache_dir /var/spool/squid3` + usr=`grepconf cache_effective_user proxy` + grp=`grepconf cache_effective_group proxy` + + if [ "$(stat -c %U $cache_dir)" != "$usr" ] || + [ "$(stat -c %G $cache_dir)" != "$grp" ] ; then + chown $usr:$grp $cache_dir -R + fi + + if [ "$(stat -c %U $log_dir)" != "$usr" ] || + [ "$(stat -c %G $log_dir)" != "$grp" ] ; then + if [ "$(dpkg-statoverride --list $log_dir)" = "" ] ; then + chown -R $usr:$grp $log_dir + fi + fi + + # + # Create spool dirs if they don't exist. + # + if [ -d "$cache_dir" -a ! -d "$cache_dir/00" ] + then + echo "Creating Squid HTTP proxy 3.0 spool directory structure" + squid3 -z + fi + ;; + abort-upgrade|abort-remove|abort-deconfigure) + ;; + *) + # + # Unknown action - do nothing. + # + exit 0 + ;; +esac + +# +# Update links if needed and start squid3. +# +update-rc.d squid3 defaults 30 >/dev/null + +invoke-rc.d squid3 restart + +# dh_installdeb will replace this with shell code automatically +# generated by other debhelper scripts. + +#DEBHELPER# + +exit 0 --- squid3-3.0.STABLE19.orig/debian/rules +++ squid3-3.0.STABLE19/debian/rules @@ -0,0 +1,77 @@ +#! /usr/bin/make -f + +include /usr/share/cdbs/1/rules/debhelper.mk +include /usr/share/cdbs/1/class/autotools.mk +include /usr/share/cdbs/1/rules/dpatch.mk + +INSTALLDIR := $(CURDIR)/debian/tmp +datadir=/usr/share/squid3 + +DEB_DH_INSTALL_SOURCEDIR := $(INSTALLDIR) +DEB_INSTALL_DOCS_squid3-common := CONTRIBUTORS CREDITS QUICKSTART RELEASENOTES.html \ + SPONSORS TODO + +DEB_CONFIGURE_EXTRA_FLAGS := --datadir=/usr/share/squid3 \ + --sysconfdir=/etc/squid3 \ + --mandir=/usr/share/man \ + --with-cppunit-basedir=/usr \ + --enable-inline \ + --enable-async-io=8 \ + --enable-storeio="ufs,aufs,diskd,null" \ + --enable-removal-policies="lru,heap" \ + --enable-delay-pools \ + --enable-cache-digests \ + --enable-underscores \ + --enable-icap-client \ + --enable-follow-x-forwarded-for \ + --enable-auth="basic,digest,ntlm,negotiate" \ + --enable-basic-auth-helpers="LDAP,MSNT,NCSA,PAM,SASL,SMB,YP,getpwnam,multi-domain-NTLM" \ + --enable-ntlm-auth-helpers="SMB" \ + --enable-digest-auth-helpers="ldap,password" \ + --enable-negotiate-auth-helpers="squid_kerb_auth" \ + --enable-external-acl-helpers="ip_user,ldap_group,session,unix_group,wbinfo_group" \ + --enable-arp-acl \ + --enable-snmp \ + --with-filedescriptors=65536 \ + --with-large-files \ + --with-default-user=proxy + +DEB_HOST_ARCH_OS := $(shell dpkg-architecture -qDEB_HOST_ARCH_OS 2>/dev/null) + +ifeq ($(DEB_HOST_ARCH_OS), kfreebsd) + DEB_CONFIGURE_EXTRA_FLAGS += --enable-kqueue +else + DEB_CONFIGURE_EXTRA_FLAGS += --enable-epoll --enable-linux-netfilter +endif + +DEB_MAKE_CLEAN_TARGET = distclean + + +install/squid3:: + install -m 755 -g root -d $(INSTALLDIR)/usr/lib/cgi-bin + mv $(INSTALLDIR)/usr/lib/squid3/cachemgr.cgi $(INSTALLDIR)/usr/lib/cgi-bin/cachemgr3.cgi + mv $(INSTALLDIR)/usr/sbin/squid $(INSTALLDIR)/usr/sbin/squid3 + mv $(INSTALLDIR)/usr/share/man/man8/squid.8 $(INSTALLDIR)/usr/share/man/man8/squid3.8 + mv $(INSTALLDIR)/usr/share/man/man8/pam_auth.8 $(INSTALLDIR)/usr/share/man/man8/squid3_pam_auth.8 + mv $(INSTALLDIR)/usr/share/man/man8/squid_ldap_auth.8 $(INSTALLDIR)/usr/share/man/man8/squid3_ldap_auth.8 + mv $(INSTALLDIR)/usr/share/man/man8/squid_ldap_group.8 $(INSTALLDIR)/usr/share/man/man8/squid3_ldap_group.8 + mv $(INSTALLDIR)/usr/share/man/man8/squid_session.8 $(INSTALLDIR)/usr/share/man/man8/squid3_session.8 + mv $(INSTALLDIR)/usr/share/man/man8/squid_unix_group.8 $(INSTALLDIR)/usr/share/man/man8/squid3_unix_group.8 + mv $(INSTALLDIR)/usr/share/man/man8/cachemgr.cgi.8 $(INSTALLDIR)/usr/share/man/man8/cachemgr3.cgi.8 + install -m 755 -g root -d $(INSTALLDIR)/etc/init.d + install -m 755 -g root -d $(INSTALLDIR)/etc/logrotate.d + install -m 755 -g root -d $(INSTALLDIR)/etc/resolvconf.d + install -m 755 -g root -d $(INSTALLDIR)/etc/resolvconf.d/update-libc.d + install -m 755 -g root debian/squid3.rc $(INSTALLDIR)/etc/init.d/squid3 + install -m 755 -g root debian/squid3.resolvconf $(INSTALLDIR)/etc/resolvconf.d/update-libc.d/squid3 + install -m 644 -g root debian/squid3.logrotate $(INSTALLDIR)/etc/logrotate.d/squid3 + install -m 755 -g root -d debian/squid3/var/log + install -m 755 -g root -d debian/squid3/var/spool + install -m 755 -g root -d debian/squid3/var/run + install -m 750 -o proxy -g proxy -d debian/squid3/var/log/squid3 + install -m 750 -o proxy -g proxy -d debian/squid3/var/spool/squid3 + install -m 755 -g root -d $(INSTALLDIR)/usr/share/man/man1 + install -m 644 -g root debian/squidclient.1 $(INSTALLDIR)/usr/share/man/man1/squidclient.1 + +clean:: + rm -f lib/cppunit-1.10.0/_configs.sed --- squid3-3.0.STABLE19.orig/debian/squidclient.1 +++ squid3-3.0.STABLE19/debian/squidclient.1 @@ -0,0 +1,48 @@ +.TH SQUIDCLIENT 1 "Mar 1998" "Squid Cache" "Debian Linux" +.SH NAME +squidclient -- client interface to the squid cache +.SH SYNOPSIS +.B squidclient +.RB [ \-r ] +.RB [ \-s ] +.RB [ \-i +.IR IMS ] +.RB [ \-h +.IR host ] +.RB [ \-p +.IR port ] +.RB [ \-m +.IR method ] +.B url +.SH DESCRIPTION +.B Squidclient +is a command line interface to retrieve URLs through the squid object cache. +.SH OPTIONS +.IP -r +Force cache to reload URL. +.IP -s +Silent. Do not print data to stdout. +.IP "\-i \fItime\fP" +If-Modified-Since time (in Epoch seconds). +.IP "\-h \fIhost\fP" +Retrieve URL from cache on hostname. Default is localhost. +.IP "\-p \fIport\fP" +Port number of cache. Default is 3128. +.IP "\-m \fImethod\fP" +Request method, default is GET. Squid also supports a non-standard method +called \fBPURGE\fP. You can use that to purge a specific URL from the cache. +You need to have \fIpurge\fP access setup in squid.conf similar to +\fImanager\fP access. Here is an example: +.nf + + acl purge method PURGE + http_access deny purge !localhost +.fi + +.SH SEE ALSO +squid(8). +.SH AUTHOR +Derived from Harvest. Further developed by by numerous individuals from +the internet community. Development is led by Duane Wessels of the +National Laboratory for Applied Network Research and funded by +the National Science Foundation. --- squid3-3.0.STABLE19.orig/debian/squid3.resolvconf +++ squid3-3.0.STABLE19/debian/squid3.resolvconf @@ -0,0 +1,6 @@ +#!/bin/sh + +PATH="/usr/sbin:/usr/bin:/sbin:/bin" + +# Make squid aware of changes to resolv.conf +invoke-rc.d squid3 reload || true --- squid3-3.0.STABLE19.orig/debian/squid3.prerm +++ squid3-3.0.STABLE19/debian/squid3.prerm @@ -0,0 +1,21 @@ +#!/bin/sh + +set -e + +case "$1" in + remove|remove-in-favour|deconfigure-in-favour) + # + # Stop the daemon + # + invoke-rc.d squid3 stop + ;; + upgrade|failed-upgrade) + ;; +esac + +# dh_installdeb will replace this with shell code automatically +# generated by other debhelper scripts. + +#DEBHELPER# + +exit 0 --- squid3-3.0.STABLE19.orig/debian/squid3-common.postinst +++ squid3-3.0.STABLE19/debian/squid3-common.postinst @@ -0,0 +1,36 @@ +#! /bin/sh + +set -e + + +case "$1" in + configure) + # + # Fix directory->link transition for /usr/share/squid3/errors in + # 3.0.STABLE15-1: all has gone well, remove temporary directory + # + if (dpkg --compare-versions "$2" lt '3.0.STABLE15-1' && + [ ! -h "/usr/share/squid3/errors" ] && + [ -d "/usr/share/squid3/errors" ]) + then + rm -rf /usr/share/squid3/errors + ln -s /usr/share/squid-langpack /usr/share/squid3/errors + fi + ;; + + abort-upgrade|abort-remove|abort-deconfigure) + ;; + *) + # + # Unknown action - do nothing. + # + exit 0 + ;; +esac + +# dh_installdeb will replace this with shell code automatically +# generated by other debhelper scripts. + +#DEBHELPER# + +exit 0 --- squid3-3.0.STABLE19.orig/debian/control +++ squid3-3.0.STABLE19/debian/control @@ -0,0 +1,81 @@ +Source: squid3 +Section: web +Priority: optional +Maintainer: Luigi Gangitano +Homepage: http://www.squid-cache.org +Standards-Version: 3.8.3 +Build-Depends: libldap2-dev, libpam0g-dev, libdb-dev, sharutils, dpatch (>= 2.0.9), cdbs, libsasl2-dev, debhelper (>=5), libcppunit-dev, libkrb5-dev, comerr-dev + +Package: squid3 +Architecture: any +Section: web +Priority: optional +Depends: ${shlibs:Depends}, ${misc:Depends}, netbase, adduser, logrotate (>= 3.5.4-1), squid3-common (= ${source:Version}), lsb-base +Suggests: squidclient, squid3-cgi, resolvconf (>= 0.40), smbclient +Description: A full featured Web Proxy cache (HTTP proxy) + Squid is a high-performance proxy caching server for web clients, supporting + FTP, gopher, and HTTP data objects. + . + Squid version 3 is a major rewrite of Squid in C++ and introduces a number of + new features including ICAP and ESI support. + +Package: squid3-dbg +Architecture: any +Section: debug +Priority: extra +Depends: squid3 (= ${binary:Version}), ${misc:Depends} +Description: A full featured Web Proxy cache (HTTP proxy) - Debug symbols + Squid is a high-performance proxy caching server for web clients, supporting + FTP, gopher, and HTTP data objects. + . + Squid version 3 is a major rewrite of Squid in C++ and introduces a number of + new features including ICAP and ESI support. + . + This package contains debugging symbols for binaries in squid3. + +Package: squid3-common +Architecture: all +Section: web +Priority: optional +Depends: ${misc:Depends}, squid-langpack +Description: A full featured Web Proxy cache (HTTP proxy) - common files + Squid is a high-performance proxy caching server for web clients, supporting + FTP, gopher, and HTTP data objects. + . + Squid version 3 is a major rewrite of Squid in C++ and introduces a number of + new features including ICAP and ESI support. + . + This package contains common files (errors and icons) + +Package: squidclient +Architecture: any +Section: web +Priority: optional +Depends: ${shlibs:Depends}, ${misc:Depends} +Provides: squid3-client +Conflicts: squid3-client +Replaces: squid3-client +Description: A full featured Web Proxy cache (HTTP proxy) - control utility + Squid is a high-performance proxy caching server for web clients, supporting + FTP, gopher, and HTTP data objects. + . + Squid version 3 is a major rewrite of Squid in C++ and introduces a number of + new features including ICAP and ESI support. + . + This package contains a small utility that can be used to get URLs from the + command line. It needs to talk to a `squid' proxy server. + +Package: squid3-cgi +Architecture: any +Section: web +Priority: optional +Depends: apache2 | httpd, ${shlibs:Depends}, ${misc:Depends} +Description: A full featured Web Proxy cache (HTTP proxy) - control CGI + Squid is a high-performance proxy caching server for web clients, supporting + FTP, gopher, and HTTP data objects. + . + Squid version 3 is a major rewrite of Squid in C++ and introduces a number of + new features including ICAP and ESI support. + . + This package contains a CGI program that can be used to query and administrate + a `squid' proxy cache through a web browser. --- squid3-3.0.STABLE19.orig/debian/squid3.rc +++ squid3-3.0.STABLE19/debian/squid3.rc @@ -0,0 +1,147 @@ +#! /bin/sh +# +# squid3 Startup script for the SQUID HTTP proxy-cache. +# +# Version: @(#)squid3.rc 1.0 07-Jul-2006 luigi@debian.org +# +### BEGIN INIT INFO +# Provides: squid3 +# Required-Start: $network $remote_fs $syslog +# Required-Stop: $network $remote_fs $syslog +# Should-Start: $named +# Should-Stop: $named +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# Short-Description: Squid HTTP Proxy version 3.0 +### END INIT INFO + +NAME=squid3 +DESC="Squid HTTP Proxy 3.0" +DAEMON=/usr/sbin/squid3 +PIDFILE=/var/run/$NAME.pid +CONFIG=/etc/squid3/squid.conf +SQUID_ARGS="-D -YC -f $CONFIG" + +[ ! -f /etc/default/squid3 ] || . /etc/default/squid3 + +. /lib/lsb/init-functions + +PATH=/bin:/usr/bin:/sbin:/usr/sbin + +[ -x $DAEMON ] || exit 0 + +ulimit -n 65535 + +find_cache_dir () { + w=" " # space tab + res=`sed -ne ' + s/^'$1'['"$w"']\+[^'"$w"']\+['"$w"']\+\([^'"$w"']\+\).*$/\1/p; + t end; + d; + :end q' < $CONFIG` + [ -n "$res" ] || res=$2 + echo "$res" +} + +find_cache_type () { + w=" " # space tab + res=`sed -ne ' + s/^'$1'['"$w"']\+\([^'"$w"']\+\).*$/\1/p; + t end; + d; + :end q' < $CONFIG` + [ -n "$res" ] || res=$2 + echo "$res" +} + +start () { + cache_dir=`find_cache_dir cache_dir /var/spool/squid3` + cache_type=`find_cache_type cache_dir ufs` + + # + # Create spool dirs if they don't exist. + # + if [ "$cache_type" = "coss" -a -d "$cache_dir" -a ! -f "$cache_dir/stripe" ] || [ "$cache_type" != "coss" -a -d "$cache_dir" -a ! -d "$cache_dir/00" ] + then + log_warning_msg "Creating $DESC cache structure" + $DAEMON -z + fi + + umask 027 + ulimit -n 65535 + cd $cache_dir + start-stop-daemon --quiet --start \ + --pidfile $PIDFILE \ + --exec $DAEMON -- $SQUID_ARGS < /dev/null + return $? +} + +stop () { + PID=`cat $PIDFILE 2>/dev/null` + start-stop-daemon --stop --quiet --pidfile $PIDFILE --exec $DAEMON + # + # Now we have to wait until squid has _really_ stopped. + # + sleep 2 + if test -n "$PID" && kill -0 $PID 2>/dev/null + then + log_action_begin_msg " Waiting" + cnt=0 + while kill -0 $PID 2>/dev/null + do + cnt=`expr $cnt + 1` + if [ $cnt -gt 24 ] + then + log_action_end_msg 1 + return 1 + fi + sleep 5 + log_action_cont_msg "" + done + log_action_end_msg 0 + return 0 + else + return 0 + fi +} + +case "$1" in + start) + log_daemon_msg "Starting $DESC" "$NAME" + if start ; then + log_end_msg $? + else + log_end_msg $? + fi + ;; + stop) + log_daemon_msg "Stopping $DESC" "$NAME" + if stop ; then + log_end_msg $? + else + log_end_msg $? + fi + ;; + reload|force-reload) + log_action_msg "Reloading $DESC configuration files" + start-stop-daemon --stop --signal 1 \ + --pidfile $PIDFILE --quiet --exec $DAEMON + log_action_end_msg 0 + ;; + restart) + log_daemon_msg "Restarting $DESC" "$NAME" + stop + if start ; then + log_end_msg $? + else + log_end_msg $? + fi + ;; + *) + echo "Usage: /etc/init.d/$NAME {start|stop|reload|force-reload|restart}" + exit 3 + ;; +esac + +exit 0 + --- squid3-3.0.STABLE19.orig/debian/squid3.install +++ squid3-3.0.STABLE19/debian/squid3.install @@ -0,0 +1,13 @@ +etc/squid3/squid.conf +etc/squid3/msntauth.conf +etc/logrotate.d +etc/resolvconf.d +etc/init.d/squid3 +usr/lib/squid3 +usr/sbin/squid3 +usr/share/man/man8/squid3.8 +usr/share/man/man8/squid3_pam_auth.8 +usr/share/man/man8/squid3_ldap_auth.8 +usr/share/man/man8/squid3_ldap_group.8 +usr/share/man/man8/squid3_session.8 +usr/share/man/man8/squid3_unix_group.8 --- squid3-3.0.STABLE19.orig/debian/NEWS.debian +++ squid3-3.0.STABLE19/debian/NEWS.debian @@ -0,0 +1,11 @@ +squid3 (3.0.STABLE15-1) unstable; urgency=low + + Since version 3.0.STABLE15-1 error pages are not included in squid3-common + anymore, but are instead shipped in a separate package (squid-langpack). + + If the error_directory option in /etc/squid3/squid.conf was customized, it + should be checked against the new directory layout of squid-langpack; if + it is not set correctly, squid3 will refuse to start. + + -- Luigi Gangitano Mon, 6 Jul 2009 13:29:10 +0200 + --- squid3-3.0.STABLE19.orig/debian/squid3.logrotate +++ squid3-3.0.STABLE19/debian/squid3.logrotate @@ -0,0 +1,15 @@ +# +# Logrotate fragment for squid3. +# +/var/log/squid3/*.log { + daily + compress + delaycompress + rotate 2 + missingok + nocreate + sharedscripts + postrotate + test ! -e /var/run/squid3.pid || /usr/sbin/squid3 -k rotate + endscript +} --- squid3-3.0.STABLE19.orig/debian/squid3.preinst +++ squid3-3.0.STABLE19/debian/squid3.preinst @@ -0,0 +1,35 @@ +#! /bin/sh + +set -e + +case "$1" in + upgrade|install-upgrade) + ;; + abort-upgrade) + exit 0 + ;; +esac +# +# Add the "proxy" user/group to /etc/passwd if needed. +# + +if ! grep -q "^proxy:" /etc/passwd +then + # + # Let's hope that this works; if /var/spool/squid3 is + # already present this fails :( + # + adduser --system --home /var/spool/squid3 --group proxy + # + # Change the shell so that cron jobs will work. + # (They run as root now, but you can never know). + # + chsh -s /bin/sh proxy +fi + +# dh_installdeb will replace this with shell code automatically +# generated by other debhelper scripts. + +#DEBHELPER# + +exit 0 --- squid3-3.0.STABLE19.orig/debian/squidclient.install +++ squid3-3.0.STABLE19/debian/squidclient.install @@ -0,0 +1,2 @@ +usr/bin/squidclient +usr/share/man/man1/squidclient.1 --- squid3-3.0.STABLE19.orig/debian/squid3-cgi.install +++ squid3-3.0.STABLE19/debian/squid3-cgi.install @@ -0,0 +1,3 @@ +usr/lib/cgi-bin/cachemgr3.cgi +usr/share/man/man8/cachemgr3.cgi.8 +etc/squid3/cachemgr.conf --- squid3-3.0.STABLE19.orig/debian/README.Debian +++ squid3-3.0.STABLE19/debian/README.Debian @@ -0,0 +1,22 @@ + +This is the next-generation Squid. In version 3.0 squid has been ported to C++ +for code manageability. Since squid 2.x is not developed anymore except for bug +fixing, this package is where new features will be added. + +Squid 3.0 supports WCCPv2, ICAP, Edge Side Include, SSL offloading, etc. Please +note that not all of the new feature have been enabled in Debian package. + +Squid 3.0 is configured by the /etc/squid3/squid.conf file. Syntax of that +file is the same of previous versions of squid and each directive is largely +commented there. Configuration files from 2.x versions of squid will mostly +work in squid 3.0. Changes to the configuration file are reported in +/usr/share/doc/squid3/RELEASENOTES.html + +This package can be installed alongside a squid-2.x package, for testing and +migration purpose. Please note that the default http_port for both packages is +3128 and at least one has to be changed. + +The squid homepage is at http://www.squid-cache.org/ +Squid was downloaded from that site with HTTP. + + -- Luigi Gangitano , Sun, 09 Jul 2006 18:08:00 +0200 --- squid3-3.0.STABLE19.orig/debian/compat +++ squid3-3.0.STABLE19/debian/compat @@ -0,0 +1 @@ +5 --- squid3-3.0.STABLE19.orig/debian/copyright +++ squid3-3.0.STABLE19/debian/copyright @@ -0,0 +1,442 @@ + +This package was debianized by Luigi Gangitano on +22 Apr 2006. + +The current Debian maintainer is Luigi Gangitano + +It was downloaded from http://www.squid-cache.org + +SQUID Internet Object Cache http://www.squid-cache.org +-------------------------------------------------------- + + Squid is the result of efforts by numerous individuals from the + Internet community. Development is led by Duane Wessels of the + National Laboratory for Applied Network Research and funded by + the National Science Foundation. + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program; if not, write to the Free Software + Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, + MA 02110-1301, USA. + +Squid is derived from the ``cached'' software from the ARPA-funded +Harvest research project. The Harvest home page is +http://harvest.cs.colorado.edu/. + +Squid is originally derived from the Harvest Information Discovery and +Access System. The Harvest copyright text follows: + +/* + * Copyright (c) 1994, 1995. All rights reserved. + * + * The Harvest software was developed by the Internet Research Task + * Force Research Group on Resource Discovery (IRTF-RD): + * + * Mic Bowman of Transarc Corporation. + * Peter Danzig of the University of Southern California. + * Darren R. Hardy of the University of Colorado at Boulder. + * Udi Manber of the University of Arizona. + * Michael F. Schwartz of the University of Colorado at Boulder. + * Duane Wessels of the University of Colorado at Boulder. + * + * This copyright notice applies to software in the Harvest + * ``src/'' directory only. Users should consult the individual + * copyright notices in the ``components/'' subdirectories for + * copyright information about other software bundled with the + * Harvest source code distribution. + * + * TERMS OF USE + * + * The Harvest software may be used and re-distributed without + * charge, provided that the software origin and research team are + * cited in any use of the system. Most commonly this is + * accomplished by including a link to the Harvest Home Page + * (http://harvest.cs.colorado.edu/) from the query page of any + * Broker you deploy, as well as in the query result pages. These + * links are generated automatically by the standard Broker + * software distribution. + * + * The Harvest software is provided ``as is'', without express or + * implied warranty, and with no support nor obligation to assist + * in its use, correction, modification or enhancement. We assume + * no liability with respect to the infringement of copyrights, + * trade secrets, or any patents, and are not responsible for + * consequential damages. Proper use of the Harvest software is + * entirely the responsibility of the user. + * + * DERIVATIVE WORKS + * + * Users may make derivative works from the Harvest software, subject + * to the following constraints: + * + * - You must include the above copyright notice and these + * accompanying paragraphs in all forms of derivative works, + * and any documentation and other materials related to such + * distribution and use acknowledge that the software was + * developed at the above institutions. + * + * - You must notify IRTF-RD regarding your distribution of + * the derivative work. + * + * - You must clearly notify users that your are distributing + * a modified version and not the original Harvest software. + * + * - Any derivative product is also subject to these copyright + * and use restrictions. + * + * Note that the Harvest software is NOT in the public domain. We + * retain copyright, as specified above. + * + * HISTORY OF FREE SOFTWARE STATUS + * + * Originally we required sites to license the software in cases + * where they were going to build commercial products/services + * around Harvest. In June 1995 we changed this policy. We now + * allow people to use the core Harvest software (the code found in + * the Harvest ``src/'' directory) for free. We made this change + * in the interest of encouraging the widest possible deployment of + * the technology. The Harvest software is really a reference + * implementation of a set of protocols and formats, some of which + * we intend to standardize. We encourage commercial + * re-implementations of code complying to this set of standards. + */ + +============================================================================== + +lib/base64.c::base64_encode(): + +Adopted from http://ftp.sunet.se/pub2/gnu/vm/base64-encode.c. +Modified to work with strings instead of files. + +============================================================================== + +snmplib/*: +include/{asn1.h,parse.h,snmp*}: + +The SNMP library code is developed by Carnegie Mellon University. + +/*************************************************************************** + * + * Copyright 1997 by Carnegie Mellon University + * + * All Rights Reserved + * + * Permission to use, copy, modify, and distribute this software and its + * documentation for any purpose and without fee is hereby granted, + * provided that the above copyright notice appear in all copies and that + * both that copyright notice and this permission notice appear in + * supporting documentation, and that the name of CMU not be + * used in advertising or publicity pertaining to distribution of the + * software without specific, written prior permission. + * + * CMU DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING + * ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO EVENT SHALL + * CMU BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR + * ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, + * WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, + * ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS + * SOFTWARE. + * + ***************************************************************************/ + +============================================================================== + +lib/GNUregex.c: + +/* Extended regular expression matching and search library, + * version 0.12. + * (Implements POSIX draft P10003.2/D11.2, except for + * internationalization features.) + * + * Copyright (C) 1993 Free Software Foundation, Inc. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2, or (at your option) + * any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111, USA. */ + +============================================================================== + +lib/md5.c: + +/* + * This code implements the MD5 message-digest algorithm. + * The algorithm is due to Ron Rivest. This code was + * written by Colin Plumb in 1993, no copyright is claimed. + * This code is in the public domain; do with it what you wish. + * + * Equivalent code is available from RSA Data Security, Inc. + * This code has been tested against that, and is equivalent, + * except that you don't need to include two pages of legalese + * with every copy. + * + * To compute the message digest of a chunk of bytes, declare an + * SquidMD5Context structure, pass it to SquidMD5Init, call + * SquidMD5Update as needed on buffers full of bytes, and then call + * SquidMD5Final, which will fill a supplied 16-byte array with the + * digest. + * + * Changed so as no longer to depend on Colin Plumb's `usual.h' header + * definitions; now uses stuff from dpkg's config.h. + * - Ian Jackson . + * Still in the public domain. + * + * Changed SquidMD5Update to take a void * for easier use and some + * other minor cleanup. - Henrik Nordstrom . + * Still in the public domain. + * + * Prefixed all symbols with "Squid" so they don't collide with + * other libraries. Duane Wessels . + * Still in the public domain. + */ + +============================================================================== + +lib/radix.c: + +/* + * Copyright (c) 1988, 1989, 1993 + * The Regents of the University of California. All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * 3. Neither the name of the University nor the names of its contributors + * may be used to endorse or promote products derived from this software + * without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + * + * @(#)radix.c 8.4 (Berkeley) 11/2/94 + */ + +============================================================================== + +lib/tempnam.c: + +/* A reasonably functional tmpnam. */ + +/* Originally by Tom Hageman, tom@basil.icce.rug.nl */ + +/* + * This tmpnam() was changed by Gerben_Wierda@RnA.nl to serve as + * tempnam() for squid-1.1.6. It ignores the directory parameter, every + * temp file is written in /tmp. + */ + +============================================================================== + +lib/drand48.c: + +From Linux libc-5.4.46. + +============================================================================== + +mcast_encode() in src/access_log.c is derived from Mark Atkinson's +(mark_a@cix.compulink.co.uk) "Tiny Encryption Algorithm". +http://www.io.com/~paulhart/game/algorithms/tea.html + +============================================================================== + +lib/inet_ntoa.c: + +/* + * Copyright (c) 1983 Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * 3. Neither the name of the University nor the names of its contributors + * may be used to endorse or promote products derived from this software + * without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + */ + +static char sccsid[] = "@(#)inet_ntoa.c 5.6 (Berkeley) 2/24/91"; + +============================================================================== + +lib/strnstr.cc: + +/*- + * Copyright (c) 2001 Mike Barcroft + * Copyright (c) 1990, 1993 + * The Regents of the University of California. All rights reserved. + * + * This code is derived from software contributed to Berkeley by + * Chris Torek. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * 3. Neither the name of the University nor the names of its contributors + * may be used to endorse or promote products derived from this software + * without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + * + * @(#)strstr.c 8.1 (Berkeley) 6/4/93 + * $FreeBSD: src/lib/libc/string/strnstr.c,v 1.2.2.1 2001/12/09 06:50:03 mike Exp $ + * $DragonFly: src/lib/libc/string/strnstr.c,v 1.4 2006/03/20 17:24:20 dillon Exp $ + */ + +============================================================================== + +lib/getopt.c: + +/* + * Copyright (c) 1987, 1993, 1994 + * The Regents of the University of California. All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * 3. Neither the name of the University nor the names of its contributors + * may be used to endorse or promote products derived from this software + * without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + */ + +static char sccsid[] = "@(#)getopt.c 8.3 (Berkeley) 4/27/95"; + +============================================================================== + +src/external_acl.c + +Copyright (C) 2002 MARA Systems AB, Sweden + +This program is free software; you can redistribute it and/or modify +it under the terms of the GNU General Public License as published by +the Free Software Foundation; either version 2, or (at your option) +any later version. + +============================================================================== + +helpers/external_acl/wbinfo_group/wbinfo_group.pl + + This program is put in the public domain by Jerry Murdock + . It is distributed in the hope that it will + be useful, but WITHOUT ANY WARRANTY; without even the implied warranty + of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. + +============================================================================== + +helpers/external_acl/winbind_group/ + + This is a helper for the external ACL interface for Squid Cache + Copyright (C) 2002 Guido Serassio + Based on previous work of Rodrigo Albani de Campos + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2 of the License, or + (at your option) any later version. + + includes code contributed by others + + winbind client common code + + Copyright (C) Tim Potter 2000 + Copyright (C) Andrew Tridgell 2000 + + This library is free software; you can redistribute it and/or + modify it under the terms of the GNU Library General Public + License as published by the Free Software Foundation; either + version 2 of the License, or (at your option) any later version. + +============================================================================== + +lib/libTrie/* + + This library is (C) Robert Collins and is licensed + under the GPL. + +============================================================================== + + On Debian GNU/Linux systems, a copy of the GNU General Public License + can be found in /usr/share/common-licenses/GPL. + + The Debian packaging is (C) 2006, Luigi Gangitano and is + licensed under the GPL, see above. --- squid3-3.0.STABLE19.orig/debian/changelog +++ squid3-3.0.STABLE19/debian/changelog @@ -0,0 +1,463 @@ +squid3 (3.0.STABLE19-1~bpo50+1) lenny-backports; urgency=low + + * Backport to Lenny + + -- Luigi Gangitano Tue, 20 Oct 2009 12:10:51 +0200 + +squid3 (3.0.STABLE19-1) unstable; urgency=low + + * New upstream release + - Fixes DoS in exthernal auth header parser (Ref: CVE-2009-2855) + + * debian/squid.rc + - Fixed dependencies in init.d script, thanks to Petter Reinholdtsen + (Closes: #546362) + + * debian/control + - Bumped Standard-Version to 3.8.3, no change needed + + -- Luigi Gangitano Sun, 20 Sep 2009 01:33:00 +0200 + +squid3 (3.0.STABLE18-1) unstable; urgency=high + + * New upstream release + - Removed patches integrated upstream + + 12-gcc44-fixes + + 13-signed-unsigned-fixes + + SQUID-2009-2 + + * debian/rules + - Enable ARP ACLs (Closes: #538023) + - Enable SNMP support (Closes: #537187) + + * debian/control + - Fix dependency for squid3-dbg on squid3 =${binary:Version} + - Added dependency of squid3-dbg on ${misc:Depends} + + * debian/squid3-common.postinst + - Added DEBHELPER placeholder + + -- Luigi Gangitano Sun, 09 Aug 2009 00:28:56 +0200 + +squid3 (3.0.STABLE16-2.1) unstable; urgency=high + + * Non-maintainer upload by the Security Team. + * Fix multiple possible denial of service vectors in the processing of + requests or responses + (SQUID-2009-2; CVE-2009-2622; CVE-2009-2621; 12-SQUID-2009_2.dpatch). + + -- Nico Golde Tue, 04 Aug 2009 21:56:36 +0200 + +squid3 (3.0.STABLE16-2) unstable; urgency=low + + * debian/patches/13-signed-unsigned-fixes + - Added upstream patch fixing build errors on 64-bit archs + (Closes: #536588) + + * debian/README.Debian + - Removed instability notice of development version + + * debian/control + - Fixed squid3-dbg section and priority to match archive override + + -- Luigi Gangitano Sat, 11 Jul 2009 13:46:45 +0200 + +squid3 (3.0.STABLE16-1) unstable; urgency=low + + * New upstream release + + * debian/patches/12-gcc44-fixes + - Added upstream patch fixing build erros with GCC 4.4 (Closes: #526672) + + * debian/control + - Bumped Standard-Version to 3.8.2, no change needed + + * debian/NEWS.Debian + - Fixed format of NEWS.Debian (double space at start) + + -- Luigi Gangitano Tue, 07 Jul 2009 18:56:41 +0200 + +squid3 (3.0.STABLE15-1) unstable; urgency=low + + * New upstream release + - Fixes wrong reference to digest_pw_auth (Closes: #517528) + + * debian/{control,squid3-common.{install,postinst,links},NEWS.Debian} + - Added dependency on squid-langpack, linked error directory to + /usr/share/squid-langpack (Closes: #497283) + - Added a notice in NEWS.Debian on customized error_directory settings + + * debian/patches/01-cf.data.debian + - Adapted to new upstream version + + * debian/control + - Added debug package to help bug reports + - Added dependency on libkrb5-dev and comerr-dev + + * debian/squid3.resolvconf + - Use invoke-rc.d instead of directly calling init script + + * debian/rules + - Added missing --with-large-files configure option (Closes: #534888) + - Enabled Kerberos Negotiate Auth support (Closes: #532064) + + * debian/copyright + - Fixed copyright to reflect current sources, thanks to Amos Jeffries + (Closes: #524601) + + * debian/squid3.rc + - Added reference to config file at startup (Closes: #517529) + + * debian/squid3.postinst + - Removed path from command invocation and make lintian happy + + -- Luigi Gangitano Mon, 6 May 2009 13:29:10 +0200 + +squid3 (3.0.STABLE13-1) unstable; urgency=low + + * New upstream release + - Removed patches integrated upstream + + 10-mgr_active_requests + + 11-SQUID-2009-1 + + * debian/patches/02-makefile-defaults + - Removed cachemgr configuration file fix integrated upstream + + * debian/rules + - Disable support for coss witch is marked as unstable upstream + + -- Luigi Gangitano Mon, 16 Feb 2009 16:18:30 +0100 + +squid3 (3.0.STABLE8-3) unstable; urgency=high + + * Urgency high due to security fixes + + * debian/patches/11-SQUID-2009-1 + - Added upstream patch fixing Denial of Service in request processing + (Ref: SQUID-2009-1, CVE: TBA) + + -- Luigi Gangitano Fri, 06 Feb 2009 20:23:57 +0100 + +squid3 (3.0.STABLE8-2) unstable; urgency=low + + * debian/squid3.postinst + - Fixed non-POSIX option to chown (Closes: #491701) + + * debian/rules + - Removed obsoleted configure options (Closes: 511272) + - Added --enable-follow-x-forwarded-for configure option + + * debian/control + - Added dependency on ${misc:Depends} to make lintian happy + + * debian/squid3.postinst + - Removed path from squid3 invocation to make lintian happy + + * debian/control + - Bumped Standard-Version to 3.8.0, no change needed + + -- Luigi Gangitano Fri, 9 Jan 2009 00:02:48 +0200 + +squid3 (3.0.STABLE8-1) unstable; urgency=high + + * Urgency high to meet freeze deadline + + * New upstream release + + * debian/patches/10-mgr_active_requests + - Added upstream patch fixing delay_pool reporting in cachemgr.cgi + + -- Luigi Gangitano Mon, 21 Jul 2008 09:20:31 +0200 + +squid3 (3.0.STABLE7-1) unstable; urgency=low + + * New upstream release + + -- Luigi Gangitano Sat, 05 Jul 2008 21:24:36 +0200 + +squid3 (3.0.STABLE6-2) unstable; urgency=low + + * debian/control + - Fixed suggestion on squidclient package + + -- Luigi Gangitano Sun, 01 Jun 2008 05:48:22 +0200 + +squid3 (3.0.STABLE6-1) unstable; urgency=low + + * New upstream release (Closes: #478695) + + * debian/squid3.rc + - Added automatic coss file creation (Closes: #478108) + - Removed default blocking logging to syslog + - Added parsing of /etc/default/squid3 for SQUID_ARGS override + + * debian/{rules,control,squidclient.install,squidclient.1} + - Rename squid3-client package to squidclient (Closes: #473876) + - Added squidclient man page from old squid package + + -- Luigi Gangitano Sun, 01 Jun 2008 02:43:42 +0200 + +squid3 (3.0.STABLE5-1) UNRELEASED; urgency=low + + * New upstream release (Closes: #478695) + + -- Luigi Gangitano Sat, 03 May 2008 18:39:36 +0200 + +squid3 (3.0.STABLE4-1) unstable; urgency=low + + * New upstream release + + -- Luigi Gangitano Thu, 03 Apr 2008 01:34:07 +0200 + +squid3 (3.0.STABLE2-1) unstable; urgency=low + + * New upstream release (Closes: #470641) + + * debian/rules + - Fixed bashism (Closes: #468567) + + * debian/control + - Fixed description, remove instability notice (Closes: #463347) + + * debian/squid.rc + - Raise max open filedescriptor limit to match build time limit at + 65535 (Closes: #470605, #470607) + + -- Luigi Gangitano Wed, 12 Mar 2008 13:52:21 +0100 + +squid3 (3.0.STABLE1-2) unstable; urgency=low + + * debian/rules + - Fixed --with-large-files option to ./configure (Closes: #459306) + - Added null storio option (Closes: #456889) + + -- Luigi Gangitano Tue, 11 Jan 2008 14:09:45 +0100 + +squid3 (3.0.STABLE1-1) unstable; urgency=low + + * New upstream release + - Updated debian/watch (Closes: #456470) + - Removed patches integrated upstream + + 08-resume-http + + 09-dos-cache-update + + * debian/control + - Bumped Standard-Version to 3.7.3 (no change needed) + - Added Homepage field + + * debian/patches/01-cf.data.debian + - Adapted to new upstream version (remove default accesso to + RFC1918 addresses) + + * debian/squid3.{preinst,postinst,prerm,postrm} + - Added debhelper token + + -- Luigi Gangitano Mon, 17 Dec 2007 11:36:57 +0100 + +squid3 (3.0.RC1-3) unstable; urgency=high + + * Urgency high due to security fixes + + * debian/patches/09-dos-cache-update + - Added upstream patch fixing DoS in cache update reply processing + (Ref: CVE-2007-6239, SQUID-2007:2) + + -- Luigi Gangitano Fri, 7 Dec 2007 16:30:39 +0100 + +squid3 (3.0.RC1-2) unstable; urgency=low + + * debian/patches/08-resume-http.dpatch + - Added upstream patch fixing failure to resume downloads + + -- Luigi Gangitano Mon, 15 Oct 2007 02:43:44 +0200 + +squid3 (3.0.RC1-1) unstable; urgency=low + + * New upstream release + - Updated debian watch + + * debian/patches/01-cf.data.debian + - Updated to match upstream changes + + * debian/control + - Updated Build-Depends to libdb 4.6 + - Removed dependency on essential package coreutils + - Fixed dependency on virtual package httpd + + -- Luigi Gangitano Sun, 14 Oct 2007 16:07:28 +0200 + +squid3 (3.0.PRE7-1) unstable; urgency=low + + * New upstream release + - Fixed assertion failure when receiving TCP_RESET (Closes: #435887) + - Removed patches integrated upstream: + + debian/patches/05-helpers-typo + + debian/patches/06-mem-obj-reference + + debian/patches/07-close-icap-connections + + * debian/patches/01-cf.data.debian + - Removed upstream-integrated patches + + * debian/rules + - Enabled build time default user configuration + + -- Luigi Gangitano Fri, 31 Aug 2007 18:05:13 +0200 + +squid3 (3.0.PRE6-2) unstable; urgency=low + + * debian/control + - Make package binNMU safe (Closes: #432981) + + * debian/rules + - Enabled diskd (Closes: #434621) + - Removed --enable-diskio option (Closes: #435230) + + -- Luigi Gangitano Sun, 13 May 2007 19:13:03 +0200 + +squid3 (3.0.PRE6-1) unstable; urgency=low + + * New upstream release + - Removed patches integrated upsteam: + + 04-m68k-ftbfs + + * debian/rules + - Enable delay pools (Closes: #410785) + - Enable cache digests (Closes: #416631) + - Enable ICAP client + - Raised Max Filedescriptor limit to 65536 + + * debian/control + - Added real package dependency for httpd in squid3-cgi + + * debian/patches/02-makefile-defaults + - Fix default configuration file for cachemgr.cgi (Closes: #416630) + + * debian/squid3.postinst + - Fixed bashish in postinst (Closes: #411797) + + * debian/patches/05-helpers-typo + - Added upstream patch fixing compilation error in src/helpers.cc + + * debian/patches/06-mem-obj-reference + - Added upstream patch fixing a mem_obj reference in src/store.cc + + * debian/patches/07-close-icap-connections + - Added upstream patch fixing icap connection starvation + + * debian/squid3.rc + - Added LSB-compliant description to rc script + + -- Luigi Gangitano Sun, 13 May 2007 16:03:16 +0200 + +squid3 (3.0.PRE5-5) unstable; urgency=low + + * debian/control + - Revert dependency on libsasl2-2-dev to libsasl2-dev (Closes: #401292) + + -- Luigi Gangitano Thu, 30 Nov 2006 16:27:26 +0100 + +squid3 (3.0.PRE5-4) unstable; urgency=low + + * debian/{rules,squid3-client.install} + - Fix path for squid3client (Closes: #400893) + + -- Luigi Gangitano Thu, 30 Nov 2006 15:32:53 +0100 + +squid3 (3.0.PRE5-3) unstable; urgency=low + + * debian/rules + - Use the right patch for specific options on GNU/kFreeBSD (Closes: #397829) + + -- Luigi Gangitano Sat, 11 Nov 2006 10:32:06 +0100 + +squid3 (3.0.PRE5-2) unstable; urgency=low + + * debian/rules + - Added architecture specific configure options to fix + FTBFS on GNU/KFreeBSD (Closes: #397829) + + * debian/control + - Updated Build-Depend to libsasl2-2-dev + + -- Luigi Gangitano Sat, 11 Nov 2006 00:33:31 +0100 + +squid3 (3.0.PRE5-1) unstable; urgency=low + + * New upstream release + - Includes fix for FTBFS with GCC 4.2 (Closes: #379969) + - Removed upstream-integrated patches: + + 03-upstream-md5-byteswap + + * debian/patches/04-m68k-ftbfs.dpathc + - Added patch to fix FTBFS on m68k due to missing parenthesis + (Closes: #394220) + + * debian/control + - Added Build-Dep on libcppunit-dev + - Updated Build-Dep to libdb4.4-dev + + * debian/rules + - Added usage of already compiled libcppunit, reducing build time + + -- Luigi Gangitano Thu, 9 Nov 2006 15:42:43 +0100 + +squid3 (3.0.PRE4-5) unstable; urgency=low + + * debian/rules + - Fixed typo in configure options (--with-filedescriptors) + - Added missing transparent proxy options + + -- Luigi Gangitano Thu, 20 Jul 2006 15:03:07 +0200 + +squid3 (3.0.PRE4-4) unstable; urgency=low + + * debian/control + - Removed dependency on webmin-squid for squid-cgi + + * debian/rules + - Removed bashism (Closes: #377952) + + -- Luigi Gangitano Wed, 12 Jul 2006 15:56:01 +0200 + +squid3 (3.0.PRE4-3) unstable; urgency=low + + * debian/patches/03-upstream-md5-byteswap.dpatch + - Added upstream patch to fix FTBFS on BIGENDIAN architectures + (Closes: #377596) + + -- Luigi Gangitano Mon, 10 Jul 2006 18:06:06 +0200 + +squid3 (3.0.PRE4-2) unstable; urgency=low + + * debian/copyright + - Added text from CREDITS with copyright and licences for all the + components included in squid + + -- Luigi Gangitano Mon, 10 Jul 2006 00:46:10 +0200 + +squid3 (3.0.PRE4-1) unstable; urgency=low + + * New upstream release + + * debian/rules + - Revorked to build packages that can be installed side-by-side with + the squid 2.x packages. + + * debian/control + - Added dependency on dpatch + + -- Luigi Gangitano Mon, 3 Jul 2006 16:47:43 +0200 + + +squid3 (3.0.PRE3.20060422-2) unstable; urgency=low + + * debian/control + - Added missing Build-Depends on libsasl2-dev + + -- Luigi Gangitano Wed, 14 Jun 2006 15:31:34 +0200 + +squid3 (3.0.PRE3.20060422-1) unstable; urgency=low + + * First package attempt + + -- Luigi Gangitano Sat, 22 Apr 2006 01:19:36 +0200 --- squid3-3.0.STABLE19.orig/debian/squid3.postrm +++ squid3-3.0.STABLE19/debian/squid3.postrm @@ -0,0 +1,39 @@ +#! /bin/sh + +set -e + +case "$1" in + remove) + ;; + purge) + echo "Purging startup links..." + update-rc.d squid3 remove > /dev/null + rm -f /etc/init.d/squid3 + + echo "Purging logfiles..." + rm -rf /var/log/squid3 + + if [ -f /etc/squid3/squid.conf ]; then + echo "Removing the config-file .." + rm -f /etc/squid3/squid.conf + fi + + # + # We do not remove /var/spool/squid3 because that might + # take a lot of time. Most of the time it is on a seperate + # disk anyway and it is faster to do a mkfs on it.. + # + echo "Please, remove /var/spool/squid3 yourself." + ;; + failed-upgrade) + ;; + upgrade|abort-install|abort-upgrade|disappear) + ;; +esac + +# dh_installdeb will replace this with shell code automatically +# generated by other debhelper scripts. + +#DEBHELPER# + +exit 0 --- squid3-3.0.STABLE19.orig/debian/watch +++ squid3-3.0.STABLE19/debian/watch @@ -0,0 +1,2 @@ +version=3 +http://www.squid-cache.org/Versions/v3/3.0/squid-(.?\..?\.STABLE.{1,2})\.tar\.gz --- squid3-3.0.STABLE19.orig/debian/squid3-common.links +++ squid3-3.0.STABLE19/debian/squid3-common.links @@ -0,0 +1 @@ +/usr/share/squid-langpack /usr/share/squid3/errors --- squid3-3.0.STABLE19.orig/debian/patches/00list +++ squid3-3.0.STABLE19/debian/patches/00list @@ -0,0 +1,2 @@ +01-cf.data.debian +02-makefile-defaults --- squid3-3.0.STABLE19.orig/debian/patches/02-makefile-defaults.dpatch +++ squid3-3.0.STABLE19/debian/patches/02-makefile-defaults.dpatch @@ -0,0 +1,29 @@ +#! /bin/sh /usr/share/dpatch/dpatch-run +## 02-makefile-defaults.dpatch by Luigi Gangitano +## +## All lines beginning with `## DP:' are a description of the patch. +## DP: Change default file locations for debian + +@DPATCH@ +diff -urNad squid3~/src/Makefile.in squid3/src/Makefile.in +--- squid3~/src/Makefile.in 2009-02-16 00:17:42.000000000 +0100 ++++ squid3/src/Makefile.in 2009-02-16 16:18:20.000000000 +0100 +@@ -2630,14 +2630,14 @@ + DEFAULT_ICP_PORT = @CACHE_ICP_PORT@ + DEFAULT_PREFIX = $(prefix) + DEFAULT_CONFIG_FILE = $(sysconfdir)/squid.conf +-DEFAULT_MIME_TABLE = $(sysconfdir)/mime.conf ++DEFAULT_MIME_TABLE = $(datadir)/mime.conf + DEFAULT_DNSSERVER = $(libexecdir)/`echo dnsserver | sed '$(transform);s/$$/$(EXEEXT)/'` +-DEFAULT_LOG_PREFIX = $(localstatedir)/logs ++DEFAULT_LOG_PREFIX = $(localstatedir)/log/squid3 + DEFAULT_CACHE_LOG = $(DEFAULT_LOG_PREFIX)/cache.log + DEFAULT_ACCESS_LOG = $(DEFAULT_LOG_PREFIX)/access.log + DEFAULT_STORE_LOG = $(DEFAULT_LOG_PREFIX)/store.log +-DEFAULT_PID_FILE = $(DEFAULT_LOG_PREFIX)/squid.pid +-DEFAULT_SWAP_DIR = $(localstatedir)/cache ++DEFAULT_PID_FILE = $(localstatedir)/run/squid3.pid ++DEFAULT_SWAP_DIR = $(localstatedir)/spool/squid3 + DEFAULT_PINGER = $(libexecdir)/`echo pinger | sed '$(transform);s/$$/$(EXEEXT)/'` + DEFAULT_UNLINKD = $(libexecdir)/`echo unlinkd | sed '$(transform);s/$$/$(EXEEXT)/'` + DEFAULT_DISKD = $(libexecdir)/`echo diskd | sed '$(transform);s/$$/$(EXEEXT)/'` --- squid3-3.0.STABLE19.orig/debian/patches/01-cf.data.debian.dpatch +++ squid3-3.0.STABLE19/debian/patches/01-cf.data.debian.dpatch @@ -0,0 +1,115 @@ +#! /bin/sh /usr/share/dpatch/dpatch-run +## 01-cf.data.debian.dpatch by Luigi Gangitano +## +## All lines beginning with `## DP:' are a description of the patch. +## DP: Default configuration file for debian + +@DPATCH@ +diff -urNad squid3~/src/cf.data.pre squid3/src/cf.data.pre +--- squid3~/src/cf.data.pre 2009-05-12 05:59:31.000000000 +0200 ++++ squid3/src/cf.data.pre 2009-05-12 06:46:45.000000000 +0200 +@@ -123,7 +123,7 @@ + If you want to use the traditional NCSA proxy authentication, set + this line to something like + +- auth_param basic program @DEFAULT_PREFIX@/libexec/ncsa_auth @DEFAULT_PREFIX@/etc/passwd ++ auth_param basic program @DEFAULT_PREFIX@/lib/squid3/ncsa_auth @DEFAULT_PREFIX@/etc/passwd + + "children" numberofchildren + The number of authenticator processes to spawn. If you start too few +@@ -185,7 +185,7 @@ + If you want to use a digest authenticator, set this line to + something like + +- auth_param digest program @DEFAULT_PREFIX@/bin/digest_pw_auth @DEFAULT_PREFIX@/etc/digpass ++ auth_param digest program @DEFAULT_PREFIX@/lib/squid3/digest_pw_auth @DEFAULT_PREFIX@/etc/digpass + + "children" numberofchildren + The number of authenticator processes to spawn (no default). +@@ -241,7 +241,7 @@ + of type proxy_auth. By default, the NTLM authenticator_program + is not used. + +- auth_param ntlm program @DEFAULT_PREFIX@/bin/ntlm_auth ++ auth_param ntlm program @DEFAULT_PREFIX@/lib/squid3/ntlm_auth + + "children" numberofchildren + The number of authenticator processes to spawn (no default). +@@ -276,7 +276,7 @@ + The only supported program for this role is the ntlm_auth + program distributed as part of Samba, version 4 or later. + +- auth_param negotiate program @DEFAULT_PREFIX@/bin/ntlm_auth --helper-protocol=gss-spnego ++ auth_param negotiate program @DEFAULT_PREFIX@/lib/squid3/ntlm_auth --helper-protocol=gss-spnego + + "children" numberofchildren + The number of authenticator processes to spawn (no default). +@@ -637,9 +637,9 @@ + # Example rule allowing access from your local networks. + # Adapt to list your (internal) IP networks from where browsing + # should be allowed +-acl localnet src 10.0.0.0/8 # RFC1918 possible internal network +-acl localnet src 172.16.0.0/12 # RFC1918 possible internal network +-acl localnet src 192.168.0.0/16 # RFC1918 possible internal network ++#acl localnet src 10.0.0.0/8 # RFC1918 possible internal network ++#acl localnet src 172.16.0.0/12 # RFC1918 possible internal network ++#acl localnet src 192.168.0.0/16 # RFC1918 possible internal network + # + acl SSL_ports port 443 + acl Safe_ports port 80 # http +@@ -700,7 +700,8 @@ + # Example rule allowing access from your local networks. + # Adapt localnet in the ACL section to list your (internal) IP networks + # from where browsing should be allowed +-http_access allow localnet ++#http_access allow localnet ++http_access allow localhost + + # And finally deny all other access to this proxy + http_access deny all +@@ -739,7 +740,7 @@ + + NOCOMMENT_START + #Allow ICP queries from local networks only +-icp_access allow localnet ++#icp_access allow localnet + icp_access deny all + NOCOMMENT_END + DOC_END +@@ -764,7 +765,7 @@ + + NOCOMMENT_START + #Allow HTCP queries from local networks only +-htcp_access allow localnet ++#htcp_access allow localnet + htcp_access deny all + NOCOMMENT_END + DOC_END +@@ -2141,7 +2142,7 @@ + + NAME: logfile_rotate + TYPE: int +-DEFAULT: 10 ++DEFAULT: 0 + LOC: Config.Log.rotateNumber + DOC_START + Specifies the number of logfile rotations to make when you +@@ -2157,6 +2158,9 @@ + purposes, so -k rotate uses another signal. It is best to get + in the habit of using 'squid -k rotate' instead of 'kill -USR1 + '. ++ ++ Note2, for Debian/Linux the default of logfile_rotate is ++ zero, since it includes external logfile-rotation methods. + DOC_END + + NAME: emulate_httpd_log +@@ -3340,7 +3344,7 @@ + NAME: visible_hostname + TYPE: string + LOC: Config.visibleHostname +-DEFAULT: none ++DEFAULT: localhost + DOC_START + If you want to present a special hostname in error messages, etc, + define this. Otherwise, the return value of gethostname()