1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
|
{ lib, stdenv, fetchurl, perl, openldap, pam, db, cyrus_sasl, libcap
, expat, libxml2, openssl, pkg-config, systemd
, cppunit
}:
stdenv.mkDerivation (finalAttrs: {
pname = "squid";
version = "6.10";
src = fetchurl {
url = "http://www.squid-cache.org/Versions/v6/squid-${finalAttrs.version}.tar.xz";
hash = "sha256-Cwexh+cj8Edw3SW+uJrsEgMKFYaWqoiS2HyLJoU0CKc=";
};
nativeBuildInputs = [ pkg-config ];
buildInputs = [
perl openldap db cyrus_sasl expat libxml2 openssl
] ++ lib.optionals stdenv.isLinux [ libcap pam systemd ];
enableParallelBuilding = true;
configureFlags = [
"--enable-ipv6"
"--disable-strict-error-checking"
"--disable-arch-native"
"--with-openssl"
"--enable-ssl-crtd"
"--enable-storeio=ufs,aufs,diskd,rock"
"--enable-removal-policies=lru,heap"
"--enable-delay-pools"
"--enable-x-accelerator-vary"
"--enable-htcp"
] ++ lib.optional (stdenv.isLinux && !stdenv.hostPlatform.isMusl)
"--enable-linux-netfilter";
doCheck = true;
nativeCheckInputs = [ cppunit ];
preCheck = ''
# tests attempt to copy around "/bin/true" to make some things
# no-ops but this doesn't work if our "true" is a multi-call
# binary, so make our own fake "true" which will work when used
# this way
echo "#!$SHELL" > fake-true
chmod +x fake-true
grep -rlF '/bin/true' test-suite/ | while read -r filename ; do
substituteInPlace "$filename" \
--replace "$(type -P true)" "$(realpath fake-true)" \
--replace "/bin/true" "$(realpath fake-true)"
done
'';
meta = with lib; {
description = "Caching proxy for the Web supporting HTTP, HTTPS, FTP, and more";
homepage = "http://www.squid-cache.org";
license = licenses.gpl2Plus;
platforms = platforms.linux;
maintainers = with maintainers; [ raskin ];
knownVulnerabilities = [ "Squid has multiple unresolved security vulnerabilities, for more information see https://megamansec.github.io/Squid-Security-Audit/" ];
};
})
|
