www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
Build the auth_ldap module from its own source port, and add the
cert_expiry, ip_anon, stream limit_req and syslog5424 modules.
Sponsored by: Netzkommune GmbH
www/nginx-module-syslog5424: Add New Port
The syslog5424 module sends an access line in the format RFC 5424 asks for:
version, RFC 3339 timestamp, hostname, app name, process id, message id and
structured data.
Sponsored by: Netzkommune GmbH
www/nginx-module-stream-limit-req: Add New Port
The stream limit_req module rate limits incoming connections in the stream
subsystem. limit_req_zone and limit_req are spelled and counted as in the
http module, so a rate written down once reads the same for TCP, UDP and
HTTP.
Sponsored by: Netzkommune GmbH
www/nginx-module-auth-ldap: Add New Port
The auth_ldap module authenticates HTTP basic credentials against an LDAP
directory. An ldap_server block describes one directory, require rules say
who is let in, and every worker keeps a pool of connections to it.
Sponsored by: Netzkommune GmbH
www/nginx-module-ip-anon: Add New Port
The ip_anon module masks the host part of the client address.
$remote_addr_anon and $binary_remote_addr_anon carry the result, for a log
or a limit key that is not meant to name anybody.
Sponsored by: Netzkommune GmbH
www/nginx-module-cert-expiry: Add New Port
The cert_expiry module reads every file an ssl_certificate names, when the
configuration is read and again on a timer, and reports how long the
certificate still has. $ssl_expiry_days carries the days left into a log
format.
Sponsored by: Netzkommune GmbH
mkimg: Ignore redundant %align values
Partitions are trivially aligned to sector boundaries, so asking e.g.
for a partition to be aligned to a 64-byte boundary is pointless but
harmless. Treat it as such, with a warning (in case the request was
a mistake, e.g. requesting 1-byte instead of 1M-byte alignment) rather
than as an error.
Reviewed by: markj
Suggested by: markj
MFC after: 1 week
Sponsored by: Amazon
Differential Revision: https://reviews.freebsd.org/D60819
vmimage.subr: Support partition alignment
If VM_PARTALIGN is set, pass %${VM_PARTALIGN} to mkimg in the
specification of swap, config, root, and ESP partitions. (Boot
partitions are not aligned, both because they're small and in
case firmware makes assumptions about their locations.)
Reviewed by: lwhsu, imp
MFC after: 1 week
Sponsored by: Amazon
Differential Revision: https://reviews.freebsd.org/D60454
mii: Fix SMSC name
The LAN8700 / LAN8710 PHYs were Standard Microsystems Corporation parts,
which early on used SMC as an abbreviation but they were using SMSC when
they were exclusively an IC maker (as opposed to full add-in NICs).
SMSC was acquired by Microchip in 2012. I kept the pre-acquisition
name, as NetBSD (from where we obtained miidevs) uses SMSC.
Reviewed by: adrian
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D56819
(cherry picked from commit 89c883c09ab5e0fdca7ac5dfe74fcc46b7669eb5)
(cherry picked from commit f2f67df8c92b51d0bff9c226755cd31c8d685573)
sound: Use GID_WHEEL/0666 instead of GID_AUDIO/0660 to create the mixer cdev
This change got accidentally carried over after an MFC, because in all
audio devices are now created with GID_AUDIO/0660 in -CURRENT.
Fixes: 2b61245f5a16 ("sound: Simplify how snd_mixer is fetched and how the cdev is created")
PR: 299683
Sponsored by: The FreeBSD Foundation
