In the process, fix the packing list to obtain a clean
pkg_add/pkg_deinstall sequence (a number of empty directory
where not created in previous versions)
The generated package now includes directives to fix
file/dir ownership after install, so that the installed tree
is identical to what you obtain after 'make install' from
the port.
Summary of changes to Tomcat since 4.1.27:
. The Coyote connector (HTTP/1.1 and AJP/1.3) has been
upgraded to Coyote 1.1, which is the one used by Tomcat
5.0.x.
. Upgrade distributed jars: DBCP (1.1) commons-modeler (1.1)
Xerces (2.5.0) regexp (1.3).
. Added support for nesting a Context Listener and a Webapp
Loader within a DefaultContext.
. Minor docs updates.
. StandardContext: Fix reloading regression.
. StandardDefaultContext: Fix support for defining
ResourceLink
. StandardWrapperValve: Fix infinite recursion when logging
in certain cases
. JNDIRealm: Many bugfixes (18698, 11678, 19864, 20518,
. 14817, 22236), and allow multiple user patterns.
. CGI Servlet: Bugfixes (22857, 22858).
. WebDAV Servlet: Fix bad handling of the destinationPath
URL.
. SecurityClassLoad: Preload a few additional classes from
Coyote.
. MemoryUser: XML-escape the values when writing out the
tomcat-users.xml file.
Submitted by: Angelo Turetta <aturetta@commit.it>
PR: 58973
Tomcat 4.1.27 includes security fixes for:
. improper recycling of SSL client certificates with Coyote JK 2
. improper handling of invalid content lengths in requests, causing
HTTP processors to be left in an invalid state in Coyote HTTP/1.1,
causing a DoS condition
. URI normalization bug in Coyote
. improper handling of certain URLs in Coyote JK 2, causing a DoS
condition
PR: 55362
Submitted by: Kang Liu <lazykang@hotmail.com>
The fix consists of 2 lines at the beginning of the program:
setuid(geteuid());
setgid(getegid());
Bumped PORTREVISION of Orion, Tomcat and JBoss ports.
PR: 40470, 43679
Submitted by: Ari Suutari <ari.suutari@syncrontech.com>
Reviewed by: audit
Approved by: Silence on -audit (since Sept 13, 2002)
before the name of the application being started/stopped. The
advantage is that if there is an error, then the message will
have a space prepended instead of being appended to the previous
application name.
When the application is 'stop'ped, the error messages, if any,
are now hidden. Instead the name of the application is just
shown.
Bumped PORTREVISION.
shared among other ports, like www/orion, www/jboss2 and
www/jakarta-tomcat3.
Now displaying installation settings in pre-patch phase.
Customizing files using ${SED} in post-patch phase.
Furthermore some small changes to promote consistency and
genericity. I'm attempting to make the result of
$ diff -ruN --exclude=CVS jakarta-tomcat3 jakarta-tomcat4
as small as possible.
Bumped PORTREVISION to help portupgrade in doing what it
does best ;)
terminated. If not, it will send the process a SIGKILL
after a certain time-out period. The time-out can be
passed to the port Makefile as a parameter.
Improved documentation a bit here and there.
Added some explicit casts to make lint(1) a bit
happier :-)
Applied some refactoring here and there. Moved some
functionality into a new function 'existsProcess'.
Slightly changed the output of the program.
Bumped PORTREVISION.
not installed because there was the control program tomcat4ctl
already. For some instances, however, tomcat4ctl is not
powerful enough. For instance when setting up multiple
instances of Tomcat, see
http://jakarta.apache.org/tomcat/tomcat-4.0-doc/RUNNING.txt.
Also added tools.jar to pkg-plist. It should have been added
previously.
Bumped PORTREVISION.
Prompted by: Gavin Cameron <gavin@itworks.com.au>
to make the man page fully generic for jakarta-tomcat,
jakarta-tomcat4, orion and possibly others.
PORTREVISION is not bumped, since the resulting man
page is exactly the same.
to 3.3.1. Using HTTP_PORT i.s.o. LISTEN_PORT. Using
daemonctl.c i.s.o. tomcatctl shell script. Displaying steps
i.s.o. commands being executed. Synced man page.
in ${PREFIX}/etc/rc.d and the control script in ${PREFIX}/bin have
been refactored and now actually work very well.
Using the 'www' user and group, creating them if they don't exist.
I've used the same approach as www/apache13.
STDOUT_LOG and STDERR_LOG are now fixed (no ?= anymore) since the
package deinstall does not support a different location.
This fixes the first half of PR 28624.
See: http://www.freebsd.org/cgi/query-pr.cgi?pr=34931
Reported by: Kees Jan Koster <k.j.koster@kpn.com>
