git: 9bf1f1fe83a3 - main - www/nginx-module-encrypted-session: Add New Port

From: Jochen Neumeister <joneum_at_FreeBSD.org>
Date: Tue, 20 Oct 2026 17:43:47 UTC
The branch main has been updated by joneum:

URL: https://cgit.FreeBSD.org/ports/commit/?id=9bf1f1fe83a343bd99a0c65d9edb53d0313400e6

commit 9bf1f1fe83a343bd99a0c65d9edb53d0313400e6
Author:     Jochen Neumeister <joneum@FreeBSD.org>
AuthorDate: 2026-10-20 17:40:59 +0000
Commit:     Jochen Neumeister <joneum@FreeBSD.org>
CommitDate: 2026-10-20 17:43:28 +0000

    www/nginx-module-encrypted-session: Add New Port
    
    Sources of the encrypted_session module for the NGINX ports.  The module
    encrypts and decrypts a variable with AES, which is what the session
    variables of ngx_lua are built on.
    
    Sponsored by:   Netzkommune GmbH
---
 www/Makefile                                       |  1 +
 www/nginx-module-encrypted-session/Makefile        | 37 ++++++++++++++++++++++
 www/nginx-module-encrypted-session/distinfo        |  3 ++
 .../files/pkg-message.in                           | 14 ++++++++
 www/nginx-module-encrypted-session/pkg-descr       |  7 ++++
 5 files changed, 62 insertions(+)

diff --git a/www/Makefile b/www/Makefile
index 913c2cd0d3a2..e1447c94fd73 100644
--- a/www/Makefile
+++ b/www/Makefile
@@ -542,6 +542,7 @@
     SUBDIR += nginx-module-array-var
     SUBDIR += nginx-module-aws-auth
     SUBDIR += nginx-module-cache-purge
+    SUBDIR += nginx-module-encrypted-session
     SUBDIR += nginx-module-fips-check
     SUBDIR += nginx-module-form-input
     SUBDIR += nginx-module-gridfs
diff --git a/www/nginx-module-encrypted-session/Makefile b/www/nginx-module-encrypted-session/Makefile
new file mode 100644
index 000000000000..cf7ca51bef43
--- /dev/null
+++ b/www/nginx-module-encrypted-session/Makefile
@@ -0,0 +1,37 @@
+PORTNAME=	nginx-module-encrypted-session
+DISTVERSION=	0.09.20240817
+CATEGORIES=	www
+
+MAINTAINER=	joneum@FreeBSD.org
+COMMENT=	Sources of the encrypted_session module for the NGINX ports
+WWW=		https://github.com/openresty/encrypted-session-nginx-module
+
+LICENSE=	BSD2CLAUSE
+
+USE_GITHUB=	yes
+GH_ACCOUNT=	openresty
+GH_PROJECT=	encrypted-session-nginx-module
+GH_TAGNAME=	7ffe4ec
+
+NO_ARCH=	yes
+NO_BUILD=	yes
+
+SUB_FILES=	pkg-message
+
+_MODDIR=	share/nginx/modules/${PORTNAME}
+MODULESDIR=	${PREFIX}/${_MODDIR}
+
+_MODFILES=	src/ddebug.h \
+		src/ngx_http_encrypted_session_cipher.c \
+		src/ngx_http_encrypted_session_cipher.h \
+		src/ngx_http_encrypted_session_module.c
+
+PLIST_FILES=	${_MODDIR}/config \
+		${_MODFILES:S!^!${_MODDIR}/!}
+
+do-install:
+	@${MKDIR} ${STAGEDIR}${MODULESDIR}/src
+	${INSTALL_DATA} ${WRKSRC}/config ${STAGEDIR}${MODULESDIR}
+	${INSTALL_DATA} ${_MODFILES:S!^!${WRKSRC}/!} ${STAGEDIR}${MODULESDIR}/src
+
+.include <bsd.port.mk>
diff --git a/www/nginx-module-encrypted-session/distinfo b/www/nginx-module-encrypted-session/distinfo
new file mode 100644
index 000000000000..50bc53854ac0
--- /dev/null
+++ b/www/nginx-module-encrypted-session/distinfo
@@ -0,0 +1,3 @@
+TIMESTAMP = 1792437052
+SHA256 (openresty-encrypted-session-nginx-module-0.09.20240817-7ffe4ec_GH0.tar.gz) = 1848ee88be81350326918930463e0f2be2013ab76ae589d01f00fd81c5da0c07
+SIZE (openresty-encrypted-session-nginx-module-0.09.20240817-7ffe4ec_GH0.tar.gz) = 11899
diff --git a/www/nginx-module-encrypted-session/files/pkg-message.in b/www/nginx-module-encrypted-session/files/pkg-message.in
new file mode 100644
index 000000000000..af9ac10a30bc
--- /dev/null
+++ b/www/nginx-module-encrypted-session/files/pkg-message.in
@@ -0,0 +1,14 @@
+[
+{ type: install
+  message: <<EOM
+This package contains the sources of the encrypted_session module only.
+It does not install a loadable module.
+
+The module itself is built by the nginx ports.  To use it, build www/nginx,
+www/nginx-devel or www/freenginx with the ENCRYPTSESSION option enabled.
+Those ports pick the sources up from
+%%PREFIX%%/share/nginx/modules/nginx-module-encrypted-session and
+produce ngx_http_encrypted_session_module.so.
+EOM
+}
+]
diff --git a/www/nginx-module-encrypted-session/pkg-descr b/www/nginx-module-encrypted-session/pkg-descr
new file mode 100644
index 000000000000..9bc9d740f8f5
--- /dev/null
+++ b/www/nginx-module-encrypted-session/pkg-descr
@@ -0,0 +1,7 @@
+The encrypted_session module encrypts and decrypts nginx variables with
+AES-256 in MAC mode, with an expiry stamp inside the ciphertext.  It is
+meant for values that travel through the client, such as cookies, which the
+server must be able to read back but the client must not forge.
+
+This port only installs the module sources.  The module itself is built by
+the nginx ports when their ENCRYPTSESSION option is enabled.