git: d0561be52fd1 - main - www/mod_tls: Remove port

Go to: [ bottom of page ] [ top of archives ] [ this month ]
From: Bernard Spil <brnrd_at_FreeBSD.org>
Date: Tue, 27 Oct 2026 12:54:00 UTC
The branch main has been updated by brnrd:

URL: https://cgit.FreeBSD.org/ports/commit/?id=d0561be52fd10ceb8ae55b3b8fd6e2c1b2fb7ea0

commit d0561be52fd10ceb8ae55b3b8fd6e2c1b2fb7ea0
Author:     Bernard Spil <brnrd@FreeBSD.org>
AuthorDate: 2026-10-27 12:52:59 +0000
Commit:     Bernard Spil <brnrd@FreeBSD.org>
CommitDate: 2026-10-27 12:52:59 +0000

    www/mod_tls: Remove port
    
    Project is no longer maintained
    API changes in rustls prevent builing
    Removed (as experimental module) from Apache httpd in 2025-01-23
---
 MOVED                                    |  1 +
 www/Makefile                             |  1 -
 www/mod_tls/Makefile                     | 40 ---------------------------
 www/mod_tls/distinfo                     |  3 ---
 www/mod_tls/files/001-mod_tls.conf.in    | 21 ---------------
 www/mod_tls/files/patch-src_tls__cache.c | 46 --------------------------------
 www/mod_tls/pkg-descr                    |  2 --
 www/mod_tls/pkg-message                  | 18 -------------
 www/mod_tls/pkg-plist                    |  8 ------
 9 files changed, 1 insertion(+), 139 deletions(-)

diff --git a/MOVED b/MOVED
index 47505c657c89..1a82280fd681 100644
--- a/MOVED
+++ b/MOVED
@@ -5766,3 +5766,4 @@ devel/p5-DateTime-Format-IBeat||2026-10-25|Has expired: Upstream distribution ha
 www/p5-CGI-Response||2026-10-25|Has expired: Legacy functionality
 www/p5-WebService-Linode||2026-10-25|Has expired: Defunct service
 misc/py-kartograph||2026-10-25|Removed: Contains python2 code, no users and no upstream activity for 12+ years
+www/mod_tls||2026-10-27|Removed: No longer maintained, removed from Apache httpd 2025-01-23
diff --git a/www/Makefile b/www/Makefile
index c8a4a03c4949..94ba9659b27d 100644
--- a/www/Makefile
+++ b/www/Makefile
@@ -484,7 +484,6 @@
     SUBDIR += mod_scgi
     SUBDIR += mod_security
     SUBDIR += mod_setenvifplus
-    SUBDIR += mod_tls
     SUBDIR += mod_umask
     SUBDIR += mod_webauth
     SUBDIR += mod_webkit
diff --git a/www/mod_tls/Makefile b/www/mod_tls/Makefile
deleted file mode 100644
index e252b339990b..000000000000
--- a/www/mod_tls/Makefile
+++ /dev/null
@@ -1,40 +0,0 @@
-PORTNAME=	mod_tls
-PORTVERSION=	0.14.0
-PORTREVISION=	2
-CATEGORIES=	www security
-MASTER_SITES=	https://github.com/icing/mod_tls/releases/download/v${DISTVERSION}/
-PKGNAMEPREFIX=	${APACHE_PKGNAMEPREFIX}
-
-MAINTAINER=	brnrd@FreeBSD.org
-COMMENT=	rustls based TLS for Apache httpd
-WWW=		https://github.com/icing/mod_tls
-
-LICENSE=	APACHE20
-LICENSE_FILE=	${WRKSRC}/LICENSE
-
-BUILD_DEPENDS=	rustls-ffi>0.14.0:security/rustls-ffi
-LIB_DEPENDS=	librustls.so:security/rustls-ffi
-
-INSTALL_TARGET=	install-strip
-
-USES=		apache libtool
-GNU_CONFIGURE=	yes
-CONFIGURE_ARGS=	--with-rustls=${LOCALBASE}
-
-MODULENAME=	mod_tls
-
-SUB_FILES=	001-mod_tls.conf
-PORTDOCS=	README README.md
-
-OPTIONS_DEFINE=	DOCS
-
-.include <bsd.port.pre.mk>
-
-post-install:
-	${STRIP_CMD} ${STAGEDIR}${PREFIX}/${APACHEMODDIR}/${MODULENAME}.so.0.0.0
-	${MKDIR} ${STAGEDIR}${PREFIX}/${APACHEETCDIR}/modules.d
-	${INSTALL_DATA} ${WRKDIR}/001-mod_tls.conf \
-		${STAGEDIR}${PREFIX}/${APACHEETCDIR}/modules.d/001-mod_tls.conf.sample
-	${RM} ${STAGEDIR}${DOCSDIR}/LICENSE
-
-.include <bsd.port.post.mk>
diff --git a/www/mod_tls/distinfo b/www/mod_tls/distinfo
deleted file mode 100644
index d9c451c07181..000000000000
--- a/www/mod_tls/distinfo
+++ /dev/null
@@ -1,3 +0,0 @@
-TIMESTAMP = 1730551891
-SHA256 (mod_tls-0.14.0.tar.gz) = 701db868a4fb2cd85b272e5defc2841dcc81eda2546bfa6fbf5c209774b4edcb
-SIZE (mod_tls-0.14.0.tar.gz) = 563693
diff --git a/www/mod_tls/files/001-mod_tls.conf.in b/www/mod_tls/files/001-mod_tls.conf.in
deleted file mode 100644
index 3f2bd2b240b7..000000000000
--- a/www/mod_tls/files/001-mod_tls.conf.in
+++ /dev/null
@@ -1,21 +0,0 @@
-# To enable, uncomment the LoadModule line
-
-# LoadModule tls_module %%APACHE_MODDIR%%/mod_tls.so
-
-<IfModule tls_module>
-    TLSEngine 443
-    TLSStrictSNI on
-</IfModule>
-
-# Switching from mod_ssl to mod_tls
-#
-# Replace the mod_ssl config
-#
-#     SSLEngine on
-#     SSLCertificateFile file_with_certificate.pem
-#     SSLCertificateKeyFile file_with_key.pem
-#
-# with
-#
-#     TLSEngine 443
-#     TLSCertificate file_with_certificate.pem file_with_key.pem
diff --git a/www/mod_tls/files/patch-src_tls__cache.c b/www/mod_tls/files/patch-src_tls__cache.c
deleted file mode 100644
index bad88a64c3bf..000000000000
--- a/www/mod_tls/files/patch-src_tls__cache.c
+++ /dev/null
@@ -1,46 +0,0 @@
-From 0f869da21f79bd15435418f32fa51f3f7ca86743 Mon Sep 17 00:00:00 2001
-From: Daniel McCarney <daniel@binaryparadox.net>
-Date: Thu, 6 Feb 2025 10:59:39 -0500
-Subject: [PATCH] tls_cache: fix implicit conversion err on i386/i686
-
-Previously on arch's where `apr_ssize_t` is an `int` (e.g. i386) the
-`tls_cache_get()` function produced an implicit conversion error of the
-form:
-
-```
-error: implicit conversion changes signedness: 'unsigned int' to 'apr_ssize_t' (aka 'int')
-```
-
-This commit resolves this error by:
-
-1. Checking the two casts performed by this function are within the
-   range of the types being cast to.
-2. Making the cast to `apr_ssize_t` explicit.
----
- src/tls_cache.c | 6 +++++-
- 1 file changed, 5 insertions(+), 1 deletion(-)
-
-diff --git a/src/tls_cache.c b/src/tls_cache.c
-index 5fc874f..428a59e 100644
---- src/tls_cache.c.orig
-+++ src/tls_cache.c
-@@ -231,6 +231,10 @@ static rustls_result tls_cache_get(
-     unsigned int vlen, klen;
-     const unsigned char *kdata;
- 
-+    if (key->len > UINT_MAX || key->len > SSIZE_MAX) {
-+        return RUSTLS_RESULT_INVALID_PARAMETER;
-+    }
-+
-     if (!sc->global->session_cache) goto not_found;
-     tls_cache_lock(sc->global);
- 
-@@ -241,7 +245,7 @@ static rustls_result tls_cache_get(
-         sc->global->session_cache, cc->server, kdata, klen, buf, &vlen, c->pool);
- 
-     if (APLOGctrace4(c)) {
--        apr_ssize_t n = klen;
-+        apr_ssize_t n = (apr_ssize_t) klen;
-         ap_log_cerror(APLOG_MARK, APLOG_TRACE4, rv, c, "retrieve key %d[%8x], found %d val",
-             klen, apr_hashfunc_default((const char*)kdata, &n), vlen);
-     }
diff --git a/www/mod_tls/pkg-descr b/www/mod_tls/pkg-descr
deleted file mode 100644
index c4767ff09d20..000000000000
--- a/www/mod_tls/pkg-descr
+++ /dev/null
@@ -1,2 +0,0 @@
-A module for Apache httpd that uses rustls to provide a memory safe TLS
-implementation in Rust.
diff --git a/www/mod_tls/pkg-message b/www/mod_tls/pkg-message
deleted file mode 100644
index 41ad11adbc90..000000000000
--- a/www/mod_tls/pkg-message
+++ /dev/null
@@ -1,18 +0,0 @@
-[
-{ type: install
-  message: <<EOM
-
-To enable mod_tls, uncomment the LoadModule line in
-apache24/modules.d/001-mod_tls.conf
-
-    LoadModule tls_module  ${modDir}/mod_tls.so
-
-This module can co-exist with mod_ssl, it is your configuration that
-uses one or the other.
-
-To switch from mod_ssl, check the documentation on
-https://github.com/icing/mod_tls#configuration.
-
-EOM
-}
-]
diff --git a/www/mod_tls/pkg-plist b/www/mod_tls/pkg-plist
deleted file mode 100644
index 98d22e927cf9..000000000000
--- a/www/mod_tls/pkg-plist
+++ /dev/null
@@ -1,8 +0,0 @@
-@sample %%APACHEETCDIR%%/modules.d/001-mod_tls.conf.sample
-lib/mod_tls.a
-lib/%%AP_MODULE%%
-lib/%%AP_MODULE%%.0
-lib/%%AP_MODULE%%.0.0.0
-%%APACHEMODDIR%%/%%AP_MODULE%%
-%%APACHEMODDIR%%/%%AP_MODULE%%.0.0.0
-