mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-24 14:41:17 +00:00
8872a08cde
fixing CVE-2019-13345
40 lines
1.2 KiB
Nix
40 lines
1.2 KiB
Nix
{ stdenv, fetchurl, perl, openldap, pam, db, cyrus_sasl, libcap
|
|
, expat, libxml2, openssl }:
|
|
|
|
stdenv.mkDerivation rec {
|
|
name = "squid-4.8";
|
|
|
|
src = fetchurl {
|
|
url = "http://www.squid-cache.org/Versions/v4/${name}.tar.xz";
|
|
sha256 = "0432m0ix046rkja7r7qpydgsm2kf1w393xym15nx6h9kv4jb7kbq";
|
|
};
|
|
|
|
buildInputs = [
|
|
perl openldap db cyrus_sasl expat libxml2 openssl
|
|
] ++ stdenv.lib.optionals stdenv.isLinux [ libcap pam ];
|
|
|
|
prePatch = ''
|
|
substituteInPlace configure --replace "/usr/local/include/libxml2" "${libxml2.dev}/include/libxml2"
|
|
'';
|
|
|
|
configureFlags = [
|
|
"--enable-ipv6"
|
|
"--disable-strict-error-checking"
|
|
"--disable-arch-native"
|
|
"--with-openssl"
|
|
"--enable-ssl-crtd"
|
|
"--enable-storeio=ufs,aufs,diskd,rock"
|
|
"--enable-removal-policies=lru,heap"
|
|
"--enable-delay-pools"
|
|
"--enable-x-accelerator-vary"
|
|
] ++ stdenv.lib.optional (stdenv.isLinux && !stdenv.hostPlatform.isMusl) "--enable-linux-netfilter";
|
|
|
|
meta = with stdenv.lib; {
|
|
description = "A caching proxy for the Web supporting HTTP, HTTPS, FTP, and more";
|
|
homepage = http://www.squid-cache.org;
|
|
license = licenses.gpl2;
|
|
platforms = platforms.linux;
|
|
maintainers = with maintainers; [ fpletz raskin ];
|
|
};
|
|
}
|