BSD Ports

www/nginx-module-encrypted-session 0.10 FreeBSD

Sources of the encrypted_session module for the NGINX ports

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
Port added
Last update
Commit
f4f56c0044
License
BSD2CLAUSE
Categories
www

Description

The encrypted_session module encrypts and decrypts nginx variables with AES-256 in MAC mode, with an expiry stamp inside the ciphertext. It is meant for values that travel through the client, such as cookies, which the server must be able to read back but the client must not forge.

This port only installs the module sources. The module itself is built by the nginx ports when their ENCRYPTSESSION option is enabled.

Install

Binary package:

pkg install nginx-module-encrypted-session

From the ports tree:

cd /usr/ports/www/nginx-module-encrypted-session/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	nginx-module-encrypted-session>0:www/nginx-module-encrypted-session

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest-----
FreeBSD:14:quarterly--n/a--
FreeBSD:15:latest--n/a--
FreeBSD:15:quarterly--n/an/an/a
FreeBSD:16:latest--n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

The Makefile names none itself; they come from USES and USE_*.

The full lists below include those, and their dependencies in turn.

Required by 1

Configuration

No options to configure.

Service scripts
none

Files

distinfo 1
FileSizeSHA256
openresty-encrypted-session-nginx-module-v0.10_GH0.tar.gz11869bb5a78de4a736cc0842538246ffeb4d5f38694cd88a800179db9b7f6120daa25

Commit history 2

DateCommitCreditsLog message
f4f56c0044 Jochen Neumeister www/nginx-module-encrypted-session: Update to 0.10
The MAC of a session was compared with ngx_strncmp, which stops at the first byte that differs and so tells an attacker how much of a forged MAC was right. The comparison is CRYPTO_memcmp now. The expiry timestamp was read through a uint64_t cast of an unaligned pointer, which faults on architectures that require alignment; it is copied before it is read. Changelog: https://github.com/openresty/encrypted-session-nginx-module/compare/7ffe4ec...v0.10 Sponsored by: Netzkommune GmbH
9bf1f1fe83 Jochen Neumeister www/nginx-module-encrypted-session: Add New Port
Sources of the encrypted_session module for the NGINX ports. The module encrypts and decrypts a variable with AES, which is what the session variables of ngx_lua are built on. Sponsored by: Netzkommune GmbH