.devcontainer/Dockerfile

+# Copyright 2018-2023 Istituto Nazionale di Fisica Nucleare
+# SPDX-License-Identifier: EUPL-1.2
+
+FROM almalinux:9
+
+# Allow customization of build user ID and name
+ARG USERNAME=vscode
+ARG USER_UID=1000
+ARG USER_GID=${USER_UID}
+
+COPY library-scripts/*.sh /tmp/library-scripts/
+
+RUN \
+    sh /tmp/library-scripts/provide-dev-deps.sh && \
+    sh /tmp/library-scripts/provide-user.sh ${USERNAME} ${USER_UID} ${USER_GID} && \
+    dnf clean all && rm -rf /var/cache/dnf
+
+USER $USERNAME

.devcontainer/README.md

+# `ngx_http_voms_module` for developers
+
+A devcontainer is ready to use for the developers. A set of packages without nginx are already installed.
+
+## How to build and install nginx with or without httpg patch
+
+To build and install the latest stable version of [nginx](http://nginx.org/en/download.html) you have to copy the `nginx.repo` file (it is contained in the `docker` directory) into the `/etc/yum.repos.d/` directory and install nginx with `yum`:
+
+```shell
+$ sudo cp docker/nginx.repo /etc/yum.repos.d/
+$ sudo yum install -y nginx
+```
+
+Otherwise, if you want to build and install the latest stable version of [nginx](http://nginx.org/en/download.html) with the httpg patch, a bash library is ready to use. You can source it and follow the commands below:
+
+```shell
+$ source .devcontainer/assets/build-library.sh
+$ downloadNginx
+$ buildHttpgNginxRPM
+$ sudo rpm -ivh ~/rpmbuild/RPMS/x86_64/nginx-*.httpg.x86_64.rpm
+```
+
+## How to build and install the `ngx_http_voms_module`
+
+If you want to build and install the `ngx_http_voms_module`, nginx have to be installed in the container (see the previous section). When this requirement is satisfied, you can use the library contained in the `.devcontainer/assets` folder as follows (NOTE: if you have already download nginx source file, you can skip the relative command):
+
+```shell
+$ source .devcontainer/assets/build-library.sh
+$ downloadNginx
+$ buildVomsModuleRPM
+$ sudo rpm -ivh ~/rpmbuild/RPMS/x86_64/nginx-module-http-voms-*.x86_64.rpm
+```
+## How to manage this project
+
+If you want to understand how this project works, start from the CI. Three stages are defined:
+
+### 1. build-rpms
+
+Starting from a clear AlmaLinux 9, we install all the useful packages to compile nginx and to build a rpm package. The bash steps that achieves these results are defined in the `.devcontainer/assets/build-library.sh` file, so you can read that bash script to learn which nginx version we use, how to download it, how to set up the environment and how to build the rpm. 
+
+It is important to underline that to build the nginx rpm we use the spec file in the `rpm` repo, that is the official nginx 1.24.0 spec file increased by the HTTPG patch. To build the `ngx_http_voms_module` we have defined an appropriate spec file indeed. The files that are used to build the rpm module are written, called and collocated following the common practices of the nginx modules: a source file is defined in the `src` folder, the `config` and the `config.make` files are in the root project directory.
+
+At the end of this stage, all the useful rpms are saved as job artifacts.
+
+### 2. docker-build-rpms
+
+In this stage we set up a docker image with nginx, the httpg patch and the `ngx_http_voms_module`. To do this, we use a set of scripts in the [`helper-scripts`](https://baltig.infn.it/mw-devel/helper-scripts.git) project.
+
+The dockerfile and all the files needed for its compilation are in the `docker` directory. The image starts from AlmaLinux 9, defines a user and installs a set of useful packages. After that we import the nginx repo file, in this way we can download a lot of packages provided by nginx, including its last stable version. In the end we install the rpm packages that we build in the previous stage and the njs module.
+
+### 3. push-to-dockerhub
+
+In this last stage we push on dockerhub the image that we have builded in the previous stage. Note that this stage is run only when we push something in the master branch.

.devcontainer/assets/build-library.sh

+#!/usr/bin/env bash
+
+# Copyright 2018-2023 Istituto Nazionale di Fisica Nucleare
+# SPDX-License-Identifier: EUPL-1.2
+
+downloadNginx() {
+
+  # check if ~/rpmbuild exists and is not empty
+  if [ -d ${HOME}/rpmbuild ] && [ "$(ls -A ${HOME}/rpmbuild)" ]; then
+    >&2 echo "Error: ${HOME}/rpmbuild already exists and is not empty"
+    return 1
+  fi
+
+  # set nginx version
+  if [ -z ${ngxVersion} ]; then
+    ngxVersion=1.26.2-1
+  fi
+  elVersion=$(rpmbuild --eval %{rhel})
+  echo "Downloading nginx version ${ngxVersion} (EL${elVersion})"
+  src_package_name="nginx-${ngxVersion}.el${elVersion}.ngx.src.rpm"
+  src_package_url="https://nginx.org/packages/centos/${elVersion}/SRPMS/${src_package_name}"
+
+  wget ${src_package_url}
+  rpm -i ${src_package_name}
+
+}
+
+buildHttpgNginxRPM() {
+
+  if ! printenv CI_PROJECT_DIR > /dev/null; then
+    >&2 echo "CI_PROJECT_DIR is not set in the environment, assuming the current working directory '${PWD}'"
+    export CI_PROJECT_DIR="${PWD}"
+  fi
+
+  sh ${CI_PROJECT_DIR}/rpm/addPatchToNginxSpec.sh
+
+  # build rpm
+  rpmlint ~/rpmbuild/SPECS/nginx.spec
+  rpmbuild -ba ~/rpmbuild/SPECS/nginx.spec
+}
+
+buildVomsModuleRPM() {
+
+  if [ -z ${CI_PROJECT_DIR} ]; then
+    CI_PROJECT_DIR="/workspaces/ngx_http_voms_module"
+  fi
+
+  # set voms modules sources
+  cd ~/rpmbuild/SOURCES/
+  mkdir ngx-http-voms-module
+  cp ${CI_PROJECT_DIR}/config ngx-http-voms-module/
+  cp ${CI_PROJECT_DIR}/config.make ngx-http-voms-module/
+  cp -r ${CI_PROJECT_DIR}/src ngx-http-voms-module/
+  cp ${CI_PROJECT_DIR}/rpm/nginx-module-http-voms.spec ~/rpmbuild/SPECS
+
+  # build rpm
+  rpmlint ~/rpmbuild/SPECS/nginx-module-http-voms.spec
+  rpmbuild -ba ~/rpmbuild/SPECS/nginx-module-http-voms.spec
+
+  cd ${CI_PROJECT_DIR}
+
+}

.devcontainer/devcontainer.json

+// For format details, see https://aka.ms/vscode-remote/devcontainer.json or this file's README at:
+// https://github.com/microsoft/vscode-dev-containers/tree/v0.159.0/containers/cpp
+{
+  "name": "C++",
+  "build": {
+    "dockerfile": "Dockerfile",
+  },
+  "runArgs": [
+    "--cap-add=SYS_PTRACE",
+    "--security-opt",
+    "seccomp=unconfined"
+  ],
+  // Set *default* container specific settings.json values on container create.
+  "settings": {
+    "terminal.integrated.defaultProfile.linux": "bash"
+  },
+  // Add the IDs of extensions you want installed when the container is created.
+  "extensions": [
+    "ms-vscode.cpptools",
+  ],
+  // Use 'forwardPorts' to make a list of ports inside the container available locally.
+  // "forwardPorts": [],
+  // Use 'postCreateCommand' to run commands after the container is created.
+  //"postCreateCommand": "sudo debuginfo-install -y voms",
+  // Comment out this line to run as root instead.
+  "remoteUser": "vscode",
+  "remoteEnv": {"NGX_HTTP_VOMS_MODULE_ROOT": "${containerWorkspaceFolder}"}
+}
\ No newline at end of file

.devcontainer/library-scripts/provide-dev-deps.sh

+#!/usr/bin/env bash
+
+# Copyright 2018-2023 Istituto Nazionale di Fisica Nucleare
+# SPDX-License-Identifier: EUPL-1.2
+
+set -ex
+
+dnf install -y epel-release
+dnf update -y
+
+dnf install -y --setopt=tsflags=nodocs \
+    which \
+    wget \
+    sudo \
+    file \
+    git \
+    gcc-c++ \
+    gd-devel \
+    gettext \
+    ccache \
+    libxslt-devel \
+    lcov \
+    perl-ExtUtils-Embed \
+    perl-Digest-SHA \
+    readline-devel \
+    boost-devel \
+    voms-devel \
+    make \
+    patch \
+    zlib-devel \
+    pcre2-devel \
+    rpmdevtools \
+    rpmlint \
+    cpan \
+    voms-clients-cpp
\ No newline at end of file

.devcontainer/library-scripts/provide-user.sh

+#!/usr/bin/env bash
+
+# Copyright 2018-2023 Istituto Nazionale di Fisica Nucleare
+# SPDX-License-Identifier: EUPL-1.2
+
+USERNAME=${1}
+USER_UID=${2}
+USER_GID=${3}
+
+set -e
+
+if [ "$(id -u)" -ne 0 ]; then
+    echo -e 'Script must be run as root. Use sudo, su, or add "USER root" to your Dockerfile before running this script.'
+    exit 1
+fi
+
+groupadd --gid $USER_GID $USERNAME
+useradd --uid $USER_UID --gid $USER_GID -m $USERNAME
+
+echo $USERNAME ALL=\(root\) NOPASSWD:ALL > /etc/sudoers.d/$USERNAME
+chmod 0440 /etc/sudoers.d/$USERNAME
+
+CODESPACES_BASH="$(cat \
+<<'EOF'
+
+# Codespaces bash prompt theme
+__bash_prompt() {
+    local userpart='`export XIT=$? \
+        && [ ! -z "${GITHUB_USER}" ] && echo -n "\[\033[0;32m\]@${GITHUB_USER} " || echo -n "\[\033[0;32m\]\u " \
+        && [ "$XIT" -ne "0" ] && echo -n "\[\033[1;31m\]➜" || echo -n "\[\033[0m\]➜"`'
+    local gitbranch='`\
+        export BRANCH=$(git rev-parse --abbrev-ref HEAD 2>/dev/null); \
+        if [ "${BRANCH}" = "HEAD" ]; then \
+            export BRANCH=$(git describe --contains --all HEAD 2>/dev/null); \
+        fi; \
+        if [ "${BRANCH}" != "" ]; then \
+            echo -n "\[\033[0;36m\](\[\033[1;31m\]${BRANCH}" \
+            && if git ls-files --error-unmatch -m --directory --no-empty-directory -o --exclude-standard ":/*" > /dev/null 2>&1; then \
+                    echo -n " \[\033[1;33m\]✗"; \
+            fi \
+            && echo -n "\[\033[0;36m\]) "; \
+        fi`'
+    local lightblue='\[\033[1;34m\]'
+    local removecolor='\[\033[0m\]'
+    PS1="${userpart} ${lightblue}\w ${gitbranch}${removecolor}\$ "
+    unset -f __bash_prompt
+}
+__bash_prompt
+
+EOF
+)"
+
+USER_RC_PATH="/home/${USERNAME}"
+echo "${CODESPACES_BASH}" >> "${USER_RC_PATH}/.bashrc"
+chown ${USERNAME}:${USER_GID} "${USER_RC_PATH}/.bashrc"
+
+echo "Done!"

.gitignore

 .vscode
 servroot*
-nginx
\ No newline at end of file
+nginx
+docker/artifacts
+node_modules
+t/*
+!t/README.md
+!t/*.t
+!t/setup.sh
+!t/conf.d
+!t/proxies.d
+!t/openssl.conf
+!t/socket.js
+

.gitlab-ci.yml

 
 stages:
-  - build-ngx
-  - build-voms
+  - build
   - docker-build
+  - docker-push
 
-build-ngx-httpg-rpm:
-  stage: build-ngx
-  image: centos:7
+build-rpms-el8:
+  stage: build
+  image: almalinux:8
   script: 
     - env | sort
-    - cd && sh docker/library-scripts/provide-deps.sh
-    - sh rpm/build-httpg-nginx-rpm.sh
-    - mkdir ngx-artifacts
-    - cp rpmbuild/SRPMS/* ngx-artifacts/
-    - cp rpmbuild/RPMS/x86_64/* ngx-artifacts/
+    - dnf -y install epel-release
+    - dnf install -y wget openssl-devel zlib-devel pcre2-devel make rpmdevtools rpmlint boost-devel voms-devel gcc-c++
+    - source .devcontainer/assets/build-library.sh
+    - CI_PROJECT_DIR=$PWD
+    - downloadNginx
+    - buildHttpgNginxRPM
+    - buildVomsModuleRPM
+    - cd ${CI_PROJECT_DIR}/docker && mkdir artifacts
+    - cp ~/rpmbuild/SRPMS/* artifacts/
+    - cp ~/rpmbuild/RPMS/x86_64/* artifacts/
   artifacts:
     paths:
-      - ngx-artifacts/
+      - docker/artifacts/
 
-build-voms-rpm:
-  stage: build-voms
-  image: centos:7
-  script:
+build-rpms-el9:
+  stage: build
+  image: almalinux:9
+  script: 
     - env | sort
-    - cd && sh docker/library-scripts/provide-deps.sh
-    - sh rpm/build-voms-rpm.sh
-    - mkdir voms-artifacts
-    - cp rpmbuild/SRPMS/* voms-artifacts/
-    - cp rpmbuild/RPMS/x86_64/* voms-artifacts/
+    - dnf -y install epel-release
+    - dnf install -y wget openssl-devel zlib-devel pcre2-devel make rpmdevtools rpmlint boost-devel voms-devel gcc-c++
+    - source .devcontainer/assets/build-library.sh
+    - CI_PROJECT_DIR=$PWD
+    - downloadNginx
+    - buildHttpgNginxRPM
+    - buildVomsModuleRPM
+    - cd ${CI_PROJECT_DIR}/docker && mkdir artifacts
+    - cp ~/rpmbuild/SRPMS/* artifacts/
+    - cp ~/rpmbuild/RPMS/x86_64/* artifacts/
   artifacts:
     paths:
-      - voms-artifacts/
+      - docker/artifacts/
 
-build-container:
+docker-build-rpms:
   stage: docker-build
   image: docker:latest
   services:
     - name: docker:dind
       command: ["--tls=false"]
   dependencies:
-    - build-ngx-httpg-rpm
-    - build-voms-rpm
+    - build-rpms-el8
+    - build-rpms-el9
   script:
     - apk add git bash
     - git clone https://baltig.infn.it/mw-devel/helper-scripts.git helper-scripts
     - cp helper-scripts/scripts/* /usr/local/bin
-    - cp ngx-artifacts/* ${CI_PROJECT_DIR}/docker/
-    - cp voms-artifacts/* ${CI_PROJECT_DIR}/docker/
+    - rm ${CI_PROJECT_DIR}/docker/artifacts/*-debuginfo*.rpm
+    - docker login -u gitlab-ci-token -p ${CI_JOB_TOKEN} ${CI_REGISTRY}
+    - export DOCKER_REGISTRY_HOST=${CI_REGISTRY}
+    - export DOCKER_REGISTRY_NAMESPACE=${CI_PROJECT_PATH}
+    - cd docker && build-docker-image.sh && push-docker-image.sh
+
+push-to-dockerhub:
+  stage: docker-push
+  image: docker:latest
+  services:
+    - name: docker:dind
+      command: ["--tls=false"]
+  dependencies:
+    - docker-build-rpms
+  script:
+    - apk add git bash
+    - git clone https://baltig.infn.it/mw-devel/helper-scripts.git helper-scripts
+    - cp helper-scripts/scripts/* /usr/local/bin
+    - export DOCKER_PUSH_TO_DOCKERHUB=y
+    - env | sort
+    - docker login -u gitlab-ci-token -p ${CI_JOB_TOKEN} ${CI_REGISTRY}
+    - export DOCKER_REGISTRY_HOST=${CI_REGISTRY}
+    - export DOCKER_REGISTRY_NAMESPACE=${CI_PROJECT_PATH}
+    - cd docker && pull-docker-image.sh && unset DOCKER_REGISTRY_HOST
+    - docker login -u ${DOCKERHUB_USER} -p ${DOCKERHUB_PASSWORD} && push-docker-image.sh
+  only:
+    - master

README.md

-# ngx_http_voms_module
+# `ngx_http_voms_module`
 
-[![pipeline status](https://baltig.infn.it/storm2/ngx_http_voms_module/badges/master/pipeline.svg)](https://baltig.infn.it/storm2/ngx_http_voms_module/commits/master)
+[![pipeline status](https://baltig.infn.it/cnafsd/ngx_http_voms_module/badges/master/pipeline.svg)](https://baltig.infn.it/cnafsd/ngx_http_voms_module/commits/master)
 
 ## Description
 
-*ngx_http_voms_module* is a module for the [Nginx web server](https://www.nginx.org/) that enables client-side authentication based on X.509 proxy certificates augmented with VOMS Attribute Certificates, typically obtained from a [Virtual Organization Membership Service](https://italiangrid.github.io/voms/) (VOMS) server.
+`ngx_http_voms_module` is a module for the [Nginx web server](https://www.nginx.org/) that enables client-side authentication based on X.509 proxy certificates augmented with VOMS Attribute Certificates, typically obtained from a [Virtual Organization Membership Service](https://italiangrid.github.io/voms/) (VOMS) server.
 
-The module defines a set of [*embedded* variables](#embedded-variables), whose values are extracted from the first Attribute Certificate found in the certificate chain.
+The module defines a set of *embedded* variables, whose values are extracted from the first Attribute Certificate found in the certificate chain.
 
-## Installation
-
-The generic installation instructions are:
-
-```shell
-$ cd nginx-x.y.z
-$ ./configure --add-module=/path/to/ngx_http_voms_module
-$ make && make install
-```
-
-The module is written in C++, using features from C++14 that are supported by gcc v. 4.8.5 (the version available in CentOS 7) enabling the option `-std=c++1y` (see [`config.make`](config.make)).
-
-A Docker image is available for use in the context of the StoRM2 project, where the OpenResty distribution is used:
-
-```shell
-$ docker run --rm -it -v /path/to/ngx_http_voms_module:/home/build/ngx_http_voms_module storm2/ngx-voms-build
-$ cd openresty-x.y.z
-$ ./configure ${RESTY_CONFIG_OPTIONS} --add-module=../ngx_http_voms_module
-$ make && make install
-```
-
-## Embedded Variables
+### Embedded Variables
 
 The module makes the following embedded variables available for use in an Nginx configuration file:
 
-### voms_user
+#### voms_user
 
 The Subject of the End-Entity certificate, used to sign the proxy.
 
 _Example_: ``/C=IT/O=IGI/CN=test0``
 
-### ssl_client_ee_s_dn
+#### ssl_client_ee_s_dn
 
 Like `voms_user`, the Subject of the End-Entity certificate. Unlike `voms_user`, it is available even for non-VOMS proxies and is formatted according to RFC 2253.
 
 _Example_: `CN=test0,O=IGI,C=IT`
 
-### voms_user_ca
+#### voms_user_ca
 
 The Issuer (Certificate Authority) of the End-Entity certificate.
 
 _Example_: `/C=IT/O=IGI/CN=Test CA`
 
-### ssl_client_ee_i_dn
+#### ssl_client_ee_i_dn
 
 Like `voms_user_ca`, the Issuer of the End-Entity certificate. Unlike `voms_user_ca`, it is available even for non-VOMS proxies and is formatted according to RFC 2253.
 
 _Example_: `CN=Test CA,O=IGI,C=IT`
 
-### voms_fqans
+#### voms_fqans
 
 A comma-separated list of Fully Qualified Attribute Names. See [The VOMS Attribute Certificate Format](http://ogf.org/documents/GFD.182.pdf) for more details.
 
 _Example_: `/test.vo/exp1,/test.vo/exp2,/test.vo/exp3/Role=PIPPO`
 
-### voms_server
+#### voms_server
 
 The Subject of the VOMS server certificate, used to sign the Attribute Certificate.
 
 _Example_: `/C=IT/O=IGI/CN=voms.example`
 
-### voms_server_ca
+#### voms_server_ca
 
 The Issuer (Certificate Authority) of the VOMS server certificate.
 
 _Example_: `/C=IT/O=IGI/CN=Test CA`
 
-### voms_vo
+#### voms_vo
 
 The name of the Virtual Organization (VO) to which the End Entity belongs.
 
 _Example_: `test.vo`
 
-### voms_server_uri
+#### voms_server_uri
 
 The hostname and port of the VOMS network service that issued the Attribute Certificate, in the form _hostname_ :_port_.
 
 _Example_: `voms.example:15000`
 
-### voms_not_before
+#### voms_not_before
 
 The date before which the Attribute Certificate is not yet valid, in the form _YYYYMMDDhhmmss_ `Z`.
 
 _Example_: `20180101000000Z`
 
-### voms_not_after
+#### voms_not_after
 
 The date after which the Attribute Certificate is not valid anymore, in the form _YYYYMMDDhhmmss_ `Z`.
 
 _Example_: `20180101120000Z`
 
-### voms_generic_attributes
+#### voms_generic_attributes
 
 A comma-separated list of attributes, each defined by three properties and formatted as `n=`_name_ `v=`_value_ `q=`_qualifier_. The qualifier typically coincides with the name of the VO.
 
 _Example_: `n=nickname v=newland q=test.vo,n=nickname v=giaco q=test.vo`
 
-### voms_serial
+#### voms_serial
 
 The serial number of the Attribute Certificate in hexadecimal format.
 
 _Example_: `7B`
 
+## Installation
+
+### prerequisites
+The software dependecies are listed in the [provide-deps](docker/library-scripts/provide-deps.sh) script in the `docker` directory.
+
+The nginx source files are also needed. To download them in ```/tmp/nginx-x.y.z``` you can execute:
+
+```shell
+$ ngxVersion=<version>
+$ wget -O /tmp/nginx-$ngxVersion.tar.gz https://nginx.org/download/nginx-$ngxVersion.tar.gz
+$ cd /tmp && tar -xzvf /tmp/nginx-$ngxVersion.tar.gz && cd -
+```
+
+### Generic installation
+The generic installation instructions are:
+
+```shell
+$ cd /tmp/nginx-x.y.z
+$ ./configure --add-module=/path/to/ngx_http_voms_module
+$ make && make install
+```
+
+### Docker container
+
+A Docker image with nginx and the `ngx_http_voms_module` is available, you can find it [here](https://hub.docker.com/r/cnafsd/nginx-httpg-voms).
+
+### For the developers
+A [.devcontainer](.devcontainer) is provided for the developers with all the instructions on how to use it, how to build the rpm module and how to install it.
+
 ## Testing
 
-Setup and files to test the *ngx_http_voms_module* are contained in the [`t`](t) folder.
+Setup and files to test the `ngx_http_voms_module` are contained in the [`t`](t) folder.

config.make

-echo "objs/addon/src/ngx_http_voms_module.o: CFLAGS += --std=c++1y -Werror" >> $NGX_MAKEFILE
+echo "objs/addon/src/ngx_http_voms_module.o: CFLAGS += -Werror" >> $NGX_MAKEFILE
 

.env → docker/.env

-DOCKER_IMAGE=storm2/vanilla-nginx-voms
+DOCKER_IMAGE=cnafsd/nginx-httpg-voms
 DOCKER_VERBOSE=y
 DOCKER_GIT_TAG_ENABLED=y

docker/Dockerfile

-# Copyright 2018-2022 Istituto Nazionale di Fisica Nucleare
+# Copyright 2018-2023 Istituto Nazionale di Fisica Nucleare
 # SPDX-License-Identifier: EUPL-1.2
 
-FROM centos:7
+ARG EL_VERSION=9
+
+FROM almalinux:${EL_VERSION}
+
+# https://docs.docker.com/reference/dockerfile/#understand-how-arg-and-from-interact
+ARG EL_VERSION
 
 # Allow customization of nginx user ID and name
 ARG USERNAME=nginx
@@ -10,17 +15,29 @@ ARG USER_GID=${USER_UID}
 
 # install dependencies
 COPY library-scripts/*.sh /tmp/library-scripts/
-RUN yum update -y && \
+RUN dnf update -y && \
     sh /tmp/library-scripts/provide-deps.sh && \
     sh /tmp/library-scripts/provide-user.sh ${USERNAME} ${USER_UID} ${USER_GID} && \
     mkdir /pkgs && \
-    yum clean all && rm -rf /var/cache/yum
+    dnf clean all && rm -rf /var/cache/dnf
+
+COPY artifacts/*.rpm /pkgs/
+
+# install nginx httpg + voms and njs dynamic modules (latest version)
+COPY nginx.repo /etc/yum.repos.d/nginx.repo
+RUN rpm -ivh /pkgs/nginx-*.el${EL_VERSION}.httpg.x86_64.rpm && \
+    rpm -ivh /pkgs/nginx-module-http-voms-*.el${EL_VERSION}.x86_64.rpm && \
+    dnf install -y nginx-module-njs \
+# forward request and error logs to docker log collector
+    && ln -sf /dev/stdout /var/log/nginx/access.log \
+    && ln -sf /dev/stderr /var/log/nginx/error.log
+
+# install nginx + voms and njs dynamic modules
+# RUN dnf -y install nginx nginx-module-njs && \
+#     rpm -ivh /pkgs/nginx-module-http-voms-1.24.0-1.el${EL_VERSION}.x86_64.rpm
+
+EXPOSE 80
 
-# install nginx with patch for HTTPG and voms module
-COPY ngx-artifacts/*.rpm /pkgs/
-COPY voms-artifacts/*.rpm /pkgs/
+STOPSIGNAL SIGQUIT
 
-# import test 
-COPY t /home/nginx/t
-COPY test-ngx-voms.sh /home/nginx/
-RUN sudo chown -R nginx:nginx /home/nginx/
+CMD ["nginx", "-g", "daemon off;"]

docker/library-scripts/provide-deps.sh

 #!/usr/bin/env bash
 
-# Copyright 2018-2022 Istituto Nazionale di Fisica Nucleare
+# Copyright 2018-2023 Istituto Nazionale di Fisica Nucleare
 # SPDX-License-Identifier: EUPL-1.2
 
 set -ex
 
-yum -y install epel-release
-yum-config-manager --add-repo https://openresty.org/package/centos/openresty.repo && \
+dnf -y install epel-release wget
 
-yum -y install \
+# https://openresty.org/en/linux-packages.html#centos
+wget https://openresty.org/package/centos/openresty2.repo
+mv openresty2.repo /etc/yum.repos.d/openresty.repo
+
+dnf config-manager --set-enabled crb
+dnf -y install \
     hostname \
     which \
-    wget \
     tar \
     sudo \
     file \
@@ -31,4 +34,5 @@ yum -y install \
     perl-Test-Nginx \
     perl-Digest-SHA \
     cpan \
-    Test::Nginx
\ No newline at end of file
+    voms-clients-cpp \
+    procps-ng

docker/library-scripts/provide-user.sh

 #!/usr/bin/env bash
 
-# Copyright 2018-2022 Istituto Nazionale di Fisica Nucleare
+# Copyright 2018-2023 Istituto Nazionale di Fisica Nucleare
 # SPDX-License-Identifier: EUPL-1.2
 
 USERNAME=${1}

docker/nginx.repo

+[nginx-stable]
+name=nginx stable repo
+baseurl=http://nginx.org/packages/centos/$releasever/$basearch/
+gpgcheck=1
+enabled=1
+gpgkey=https://nginx.org/keys/nginx_signing.key
+module_hotfixes=true
+
+[nginx-mainline]
+name=nginx mainline repo
+baseurl=http://nginx.org/packages/mainline/centos/$releasever/$basearch/
+gpgcheck=1
+enabled=0
+gpgkey=https://nginx.org/keys/nginx_signing.key
+module_hotfixes=true

rpm/addPatchToNginxSpec.sh

+#!/usr/bin/env bash
+
+set -ex
+
+# Add the httpg patch
+# Set the nginx spec file with the httpg patch
+PATCH_NAME="nginx-httpg_no_delegation.patch"
+SPEC_FILE="${HOME}/rpmbuild/SPECS/nginx.spec"
+if grep --extended-regexp --quiet "^Patch.*: $PATCH_NAME" "$SPEC_FILE"; then
+  >&2 echo "The patch $PATCH_NAME is already included in the spec file $SPEC_FILE"
+  exit 0
+fi
+# Copy the patch in the rpmbuild directory
+cp ${CI_PROJECT_DIR}/${PATCH_NAME} ~/rpmbuild/SOURCES/
+pushd ~/rpmbuild/SOURCES/
+# Find the highest existing Patch number in the spec file
+LAST_PATCH_NUM=$(grep -oP "^Patch\K[0-9]+" $SPEC_FILE | sort -n | tail -1)
+if [ -z "$LAST_PATCH_NUM" ]; then
+  # There are no existing patches: find the highest Source number in the spec file
+  LAST_SOURCE_NUM=$(grep -oP "^Source\K[0-9]+" $SPEC_FILE | sort -n | tail -1)
+  # Add the patch to the spec file after the last Source
+  sed -i.backup "/^Source${LAST_SOURCE_NUM}/a Patch0: ${PATCH_NAME}" "${SPEC_FILE}"
+else
+  # Add the new patch to the spec file after the last Patch
+  sed -i.backup "/^Patch${LAST_PATCH_NUM}/a Patch$((LAST_PATCH_NUM + 1)): ${PATCH_NAME}" "${SPEC_FILE}"
+fi
+# Add httpg to release
+sed -i '/%define base_release/ s/ngx/httpg/' "${SPEC_FILE}"
+
+diff "${SPEC_FILE}.backup" "${SPEC_FILE}" || true
+
+popd

rpm/build-httpg-nginx-rpm.sh

-#!/usr/bin/env bash
-
-# Copyright 2018-2022 Istituto Nazionale di Fisica Nucleare
-# SPDX-License-Identifier: EUPL-1.2
-
-set -ex
-
-ngxVersion=1.22.1
-
-# set environment to build rpm
-rpmdev-setuptree
-cat <<EOF > ${HOME}/.rpmmacros
-%_topdir %{getenv:HOME}/rpmbuild
-EOF
-
-# download nginx sources
-cd ~/rpmbuild/SOURCES/
-wget http://nginx.org/packages/centos/7/SRPMS/nginx-$ngxVersion-1.el7.ngx.src.rpm
-rpm2cpio nginx-$ngxVersion-1.el7.ngx.src.rpm | cpio -idm
-
-# set the nginx spec file with the httpg patch
-cp ~/nginx-httpg_no_delegation.patch ${HOME}/rpmbuild/SOURCES/
-cp ~/rpm/nginx.spec ~/rpmbuild/SPECS
-
-# build rpm
-rpmlint ~/rpmbuild/SPECS/nginx.spec
-rpmbuild -ba ~/rpmbuild/SPECS/nginx.spec

rpm/build-voms-rpm.sh

-#!/usr/bin/env bash
-
-# Copyright 2018-2022 Istituto Nazionale di Fisica Nucleare
-# SPDX-License-Identifier: EUPL-1.2
-
-set -ex
-
-ngxVersion=1.22.1
-
-# set environment to build rpm
-rpmdev-setuptree
-cat <<EOF > ${HOME}/.rpmmacros
-%_topdir %{getenv:HOME}/rpmbuild
-EOF
-
-# set sources
-cd ~/rpmbuild/SOURCES
-wget -O nginx-$ngxVersion.tar.gz https://nginx.org/download/nginx-$ngxVersion.tar.gz
-wget -O ./ngx-http-echo-module.tar.gz https://github.com/openresty/echo-nginx-module/archive/refs/tags/v0.63.tar.gz
-tar xzf ngx-http-echo-module.tar.gz
-
-# set voms modules sources
-mkdir ngx-http-voms-module
-cp ~/config ngx-http-voms-module/
-cp ~/config.make ngx-http-voms-module/
-cp -r ~/src ngx-http-voms-module/
-cp ~/rpm/nginx-module-http-voms.spec ~/rpmbuild/SPECS
-
-# build and install rpm
-rpmlint ~/rpmbuild/SPECS/nginx-module-http-voms.spec
-rpmbuild -ba ~/rpmbuild/SPECS/nginx-module-http-voms.spec

rpm/nginx-module-http-voms.spec

 %define nginx_user nginx
 %define nginx_group nginx
-%define base_version 1.22.1
+%define base_version 1.26.2
 %define bdir %{_builddir}/%{name}-%{base_version}
 
 Name:           nginx-module-http-voms
-Version:        1.22.1
+Version:        %{base_version}
 Release:        1%{?dist}
 Summary:        nginx http voms dynamic modules
 
 License:        EUPL-1.2
-URL:            https://github.com/lauracappelli/nginx-sd-rpm
+URL:            https://baltig.infn.it/cnafsd/ngx_http_voms_module
 
 Source0:        https://nginx.org/download/nginx-%{base_version}.tar.gz
 Source1:        ngx-http-voms-module
-Source2:        echo-nginx-module-0.63
 
 BuildRequires:  gcc, make
 BuildRequires:  voms-devel
@@ -38,7 +37,7 @@ tar --strip-components=1 -zxf %{SOURCE0}
 
 %define CONFIG_PATH %(echo "--prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp")
 %define CONFIG_ARGS %(echo "--user=nginx --group=nginx --with-compat --with-http_ssl_module")
-%define MODULE_CONFIG_ARGS %(echo "--add-dynamic-module=%SOURCE1 --add-dynamic-module=%SOURCE2")
+%define MODULE_CONFIG_ARGS %(echo "--add-dynamic-module=%SOURCE1")
 
 
 %build
@@ -75,10 +74,9 @@ To enable these modules, add the following to /etc/nginx/nginx.conf
 and reload nginx:
 
     load_module modules/ngx_http_voms_module.so;
-    load_module modules/ngx_http_echo_module.so;
 
 Please refer to the modules documentation for further details:
-https://baltig.infn.it/storm2/ngx_http_voms_module
+https://baltig.infn.it/cnafsd/ngx_http_voms_module
 
 ----------------------------------------------------------------------
 BANNER
@@ -86,5 +84,11 @@ fi
 
 
 %changelog
+* Fri Oct 18 2024 Francesco Giacomini
+- nginx http voms module updated to 1.26.2-1.0.0
+
+* Wed Apr 12 2023 Laura Cappelli
+- nginx http voms module updated to 1.24.0-1.0.0
+
 * Fri Nov 18 2022 Laura Cappelli
-- nginx http voms module updated to 1.22.1-1.0.0
\ No newline at end of file
+- nginx http voms module updated to 1.22.1-1.0.0

rpm/nginx.spec

-#
-%define nginx_home %{_localstatedir}/cache/nginx
-%define nginx_user nginx
-%define nginx_group nginx
-%define nginx_loggroup adm
-
-BuildRequires: systemd
-Requires(post): systemd
-Requires(preun): systemd
-Requires(postun): systemd
-
-%if 0%{?rhel}
-%define _group System Environment/Daemons
-%endif
-
-%if (0%{?rhel} == 7) && (0%{?amzn} == 0)
-%define epoch 1
-Epoch: %{epoch}
-Requires(pre): shadow-utils
-Requires: openssl >= 1.0.2
-BuildRequires: openssl-devel >= 1.0.2
-%define dist .el7
-%endif
-
-%if (0%{?rhel} == 7) && (0%{?amzn} == 2)
-%define epoch 1
-Epoch: %{epoch}
-Requires(pre): shadow-utils
-Requires: openssl11 >= 1.1.1
-BuildRequires: openssl11-devel >= 1.1.1
-%endif
-
-%if 0%{?rhel} == 8
-%define epoch 1
-Epoch: %{epoch}
-Requires(pre): shadow-utils
-BuildRequires: openssl-devel >= 1.1.1
-%define _debugsource_template %{nil}
-%endif
-
-%if 0%{?rhel} == 9
-%define epoch 1
-Epoch: %{epoch}
-Requires(pre): shadow-utils
-BuildRequires: openssl-devel
-%define _debugsource_template %{nil}
-%endif
-
-%if 0%{?suse_version} >= 1315
-%define _group Productivity/Networking/Web/Servers
-%define nginx_loggroup trusted
-Requires(pre): shadow
-BuildRequires: libopenssl-devel
-%define _debugsource_template %{nil}
-%endif
-
-%if 0%{?fedora}
-%define _debugsource_template %{nil}
-%global _hardened_build 1
-%define _group System Environment/Daemons
-BuildRequires: openssl-devel
-Requires(pre): shadow-utils
-%endif
-
-# end of distribution specific definitions
-
-%define base_version 1.22.1
-%define base_release 1%{?dist}.ngx
-
-%define bdir %{_builddir}/%{name}-%{base_version}
-
-%define WITH_CC_OPT $(echo %{optflags} $(pcre2-config --cflags)) -fPIC
-%define WITH_LD_OPT -Wl,-z,relro -Wl,-z,now -pie
-
-%define BASE_CONFIGURE_ARGS $(echo "--prefix=%{_sysconfdir}/nginx --sbin-path=%{_sbindir}/nginx --modules-path=%{_libdir}/nginx/modules --conf-path=%{_sysconfdir}/nginx/nginx.conf --error-log-path=%{_localstatedir}/log/nginx/error.log --http-log-path=%{_localstatedir}/log/nginx/access.log --pid-path=%{_localstatedir}/run/nginx.pid --lock-path=%{_localstatedir}/run/nginx.lock --http-client-body-temp-path=%{_localstatedir}/cache/nginx/client_temp --http-proxy-temp-path=%{_localstatedir}/cache/nginx/proxy_temp --http-fastcgi-temp-path=%{_localstatedir}/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=%{_localstatedir}/cache/nginx/uwsgi_temp --http-scgi-temp-path=%{_localstatedir}/cache/nginx/scgi_temp --user=%{nginx_user} --group=%{nginx_group} --with-compat --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module")
-
-Summary: High performance web server
-Name: nginx
-Version: %{base_version}
-Release: %{base_release}
-Vendor: NGINX Packaging <nginx-packaging@f5.com>
-URL: https://nginx.org/
-Group: %{_group}
-
-Source0: https://nginx.org/download/%{name}-%{version}.tar.gz
-Source1: logrotate
-Source2: nginx.conf
-Source3: nginx.default.conf
-Source4: nginx.service
-Source5: nginx.upgrade.sh
-Source6: nginx.suse.logrotate
-Source7: nginx-debug.service
-Source8: nginx.copyright
-Source9: nginx.check-reload.sh
-Patch0: nginx-httpg_no_delegation.patch
-
-
-
-License: 2-clause BSD-like license
-
-BuildRoot: %{_tmppath}/%{name}-%{base_version}-%{base_release}-root
-BuildRequires: zlib-devel
-BuildRequires: pcre2-devel
-
-Provides: webserver
-Provides: nginx-r%{base_version}
-
-%description
-nginx [engine x] is an HTTP and reverse proxy server, as well as
-a mail proxy server.
-
-%if 0%{?suse_version} >= 1315
-%debug_package
-%endif
-
-%prep
-%autosetup -p1
-%patch0 -p1  
-
-%build
-./configure %{BASE_CONFIGURE_ARGS} \
-    --with-cc-opt="%{WITH_CC_OPT}" \
-    --with-ld-opt="%{WITH_LD_OPT}" \
-    --with-debug
-make %{?_smp_mflags}
-%{__mv} %{bdir}/objs/nginx \
-    %{bdir}/objs/nginx-debug
-./configure %{BASE_CONFIGURE_ARGS} \
-    --with-cc-opt="%{WITH_CC_OPT}" \
-    --with-ld-opt="%{WITH_LD_OPT}"
-make %{?_smp_mflags}
-
-%install
-%{__rm} -rf $RPM_BUILD_ROOT
-%{__make} DESTDIR=$RPM_BUILD_ROOT INSTALLDIRS=vendor install
-
-%{__mkdir} -p $RPM_BUILD_ROOT%{_datadir}/nginx
-%{__mv} $RPM_BUILD_ROOT%{_sysconfdir}/nginx/html $RPM_BUILD_ROOT%{_datadir}/nginx/
-
-%{__rm} -f $RPM_BUILD_ROOT%{_sysconfdir}/nginx/*.default
-%{__rm} -f $RPM_BUILD_ROOT%{_sysconfdir}/nginx/fastcgi.conf
-
-%{__mkdir} -p $RPM_BUILD_ROOT%{_localstatedir}/log/nginx
-%{__mkdir} -p $RPM_BUILD_ROOT%{_localstatedir}/run/nginx
-%{__mkdir} -p $RPM_BUILD_ROOT%{_localstatedir}/cache/nginx
-
-%{__mkdir} -p $RPM_BUILD_ROOT%{_libdir}/nginx/modules
-cd $RPM_BUILD_ROOT%{_sysconfdir}/nginx && \
-    %{__ln_s} ../..%{_libdir}/nginx/modules modules && cd -
-
-%{__mkdir} -p $RPM_BUILD_ROOT%{_datadir}/doc/%{name}-%{base_version}
-%{__install} -m 644 -p %{SOURCE8} \
-    $RPM_BUILD_ROOT%{_datadir}/doc/%{name}-%{base_version}/COPYRIGHT
-
-%{__mkdir} -p $RPM_BUILD_ROOT%{_sysconfdir}/nginx/conf.d
-%{__rm} $RPM_BUILD_ROOT%{_sysconfdir}/nginx/nginx.conf
-%{__install} -m 644 -p %{SOURCE2} \
-    $RPM_BUILD_ROOT%{_sysconfdir}/nginx/nginx.conf
-%{__install} -m 644 -p %{SOURCE3} \
-    $RPM_BUILD_ROOT%{_sysconfdir}/nginx/conf.d/default.conf
-
-%{__install} -p -D -m 0644 %{bdir}/objs/nginx.8 \
-    $RPM_BUILD_ROOT%{_mandir}/man8/nginx.8
-
-%{__mkdir} -p $RPM_BUILD_ROOT%{_unitdir}
-%{__install} -m644 %SOURCE4 \
-    $RPM_BUILD_ROOT%{_unitdir}/nginx.service
-%{__install} -m644 %SOURCE7 \
-    $RPM_BUILD_ROOT%{_unitdir}/nginx-debug.service
-%{__mkdir} -p $RPM_BUILD_ROOT%{_libexecdir}/initscripts/legacy-actions/nginx
-%{__install} -m755 %SOURCE5 \
-    $RPM_BUILD_ROOT%{_libexecdir}/initscripts/legacy-actions/nginx/upgrade
-%{__install} -m755 %SOURCE9 \
-    $RPM_BUILD_ROOT%{_libexecdir}/initscripts/legacy-actions/nginx/check-reload
-
-# install log rotation stuff
-%{__mkdir} -p $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d
-%if 0%{?suse_version}
-%{__install} -m 644 -p %{SOURCE6} \
-    $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/nginx
-%else
-%{__install} -m 644 -p %{SOURCE1} \
-    $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/nginx
-%endif
-
-%{__install} -m755 %{bdir}/objs/nginx-debug \
-    $RPM_BUILD_ROOT%{_sbindir}/nginx-debug
-
-%{__rm} $RPM_BUILD_ROOT%{_sysconfdir}/nginx/koi-utf
-%{__rm} $RPM_BUILD_ROOT%{_sysconfdir}/nginx/koi-win
-%{__rm} $RPM_BUILD_ROOT%{_sysconfdir}/nginx/win-utf
-
-%check
-%{__rm} -rf $RPM_BUILD_ROOT/usr/src
-cd %{bdir}
-grep -v 'usr/src' debugfiles.list > debugfiles.list.new && mv debugfiles.list.new debugfiles.list
-cat /dev/null > debugsources.list
-%if 0%{?suse_version} >= 1500
-cat /dev/null > debugsourcefiles.list
-%endif
-
-%clean
-%{__rm} -rf $RPM_BUILD_ROOT
-
-%files
-%defattr(-,root,root)
-
-%{_sbindir}/nginx
-%{_sbindir}/nginx-debug
-
-%dir %{_sysconfdir}/nginx
-%dir %{_sysconfdir}/nginx/conf.d
-%{_sysconfdir}/nginx/modules
-
-%config(noreplace) %{_sysconfdir}/nginx/nginx.conf
-%config(noreplace) %{_sysconfdir}/nginx/conf.d/default.conf
-%config(noreplace) %{_sysconfdir}/nginx/mime.types
-%config(noreplace) %{_sysconfdir}/nginx/fastcgi_params
-%config(noreplace) %{_sysconfdir}/nginx/scgi_params
-%config(noreplace) %{_sysconfdir}/nginx/uwsgi_params
-
-%config(noreplace) %{_sysconfdir}/logrotate.d/nginx
-%{_unitdir}/nginx.service
-%{_unitdir}/nginx-debug.service
-%dir %{_libexecdir}/initscripts/legacy-actions/nginx
-%{_libexecdir}/initscripts/legacy-actions/nginx/*
-
-%attr(0755,root,root) %dir %{_libdir}/nginx
-%attr(0755,root,root) %dir %{_libdir}/nginx/modules
-%dir %{_datadir}/nginx
-%dir %{_datadir}/nginx/html
-%{_datadir}/nginx/html/*
-
-%attr(0755,root,root) %dir %{_localstatedir}/cache/nginx
-%attr(0755,root,root) %dir %{_localstatedir}/log/nginx
-
-%dir %{_datadir}/doc/%{name}-%{base_version}
-%doc %{_datadir}/doc/%{name}-%{base_version}/COPYRIGHT
-%{_mandir}/man8/nginx.8*
-
-%pre
-# Add the "nginx" user
-getent group %{nginx_group} >/dev/null || groupadd -r %{nginx_group}
-getent passwd %{nginx_user} >/dev/null || \
-    useradd -r -g %{nginx_group} -s /sbin/nologin \
-    -d %{nginx_home} -c "nginx user"  %{nginx_user}
-exit 0
-
-%post
-# Register the nginx service
-if [ $1 -eq 1 ]; then
-    /usr/bin/systemctl preset nginx.service >/dev/null 2>&1 ||:
-    /usr/bin/systemctl preset nginx-debug.service >/dev/null 2>&1 ||:
-    # print site info
-    cat <<BANNER
-----------------------------------------------------------------------
-
-Thanks for using nginx!
-
-Please find the official documentation for nginx here:
-* https://nginx.org/en/docs/
-
-Please subscribe to nginx-announce mailing list to get
-the most important news about nginx:
-* https://nginx.org/en/support.html
-
-Commercial subscriptions for nginx are available on:
-* https://nginx.com/products/
-
-----------------------------------------------------------------------
-BANNER
-
-    # Touch and set permisions on default log files on installation
-
-    if [ -d %{_localstatedir}/log/nginx ]; then
-        if [ ! -e %{_localstatedir}/log/nginx/access.log ]; then
-            touch %{_localstatedir}/log/nginx/access.log
-            %{__chmod} 640 %{_localstatedir}/log/nginx/access.log
-            %{__chown} nginx:%{nginx_loggroup} %{_localstatedir}/log/nginx/access.log
-        fi
-
-        if [ ! -e %{_localstatedir}/log/nginx/error.log ]; then
-            touch %{_localstatedir}/log/nginx/error.log
-            %{__chmod} 640 %{_localstatedir}/log/nginx/error.log
-            %{__chown} nginx:%{nginx_loggroup} %{_localstatedir}/log/nginx/error.log
-        fi
-    fi
-fi
-
-%preun
-if [ $1 -eq 0 ]; then
-    /usr/bin/systemctl --no-reload disable nginx.service >/dev/null 2>&1 ||:
-    /usr/bin/systemctl stop nginx.service >/dev/null 2>&1 ||:
-fi
-
-%postun
-/usr/bin/systemctl daemon-reload >/dev/null 2>&1 ||:
-if [ $1 -ge 1 ]; then
-    /sbin/service nginx status  >/dev/null 2>&1 || exit 0
-    /sbin/service nginx upgrade >/dev/null 2>&1 || echo \
-        "Binary upgrade failed, please check nginx's error.log"
-fi
-
-%changelog
-* Wed Oct 19 2022 Nginx Packaging <nginx-packaging@f5.com> - 1.22.1-1%{?dist}.ngx
-- 1.22.1-1
-
-* Tue May 24 2022 Konstantin Pavlov <thresh@nginx.com> - 1.22.0-1%{?dist}.ngx
-- 1.22.0-1
-
-* Tue Jan 25 2022 Mikhail Isachenkov <mikhail.isachenkov@nginx.com> - 1.21.6-1%{?dist}.ngx
-- 1.21.6-1
-
-* Tue Dec 28 2021 Konstantin Pavlov <thresh@nginx.com> - 1.21.5-1%{?dist}.ngx
-- 1.21.5-1
-- built with PCRE2
-
-* Tue Nov  2 2021 Konstantin Pavlov <thresh@nginx.com> - 1.21.4-1%{?dist}.ngx
-- 1.21.4-1
-
-* Tue Sep  7 2021 Konstantin Pavlov <thresh@nginx.com> - 1.21.3-1%{?dist}.ngx
-- 1.21.3-1
-
-* Tue Aug 31 2021 Andrei Belov <defan@nginx.com> - 1.21.2-1%{?dist}.ngx
-- 1.21.2-1
-
-* Tue Jul  6 2021 Konstantin Pavlov <thresh@nginx.com> - 1.21.1-1%{?dist}.ngx
-- 1.21.1-1
-
-* Tue May 25 2021 Konstantin Pavlov <thresh@nginx.com> - 1.21.0-1%{?dist}.ngx
-- 1.21.0-1
-
-* Tue Apr 13 2021 Andrei Belov <defan@nginx.com> - 1.19.10-1%{?dist}.ngx
-- 1.19.10-1
-
-* Tue Mar 30 2021 Konstantin Pavlov <thresh@nginx.com> - 1.19.9-1%{?dist}.ngx
-- 1.19.9-1
-
-* Tue Mar  9 2021 Konstantin Pavlov <thresh@nginx.com> - 1.19.8-1%{?dist}.ngx
-- 1.19.8-1
-
-* Tue Feb 16 2021 Konstantin Pavlov <thresh@nginx.com> - 1.19.7-1%{?dist}.ngx
-- 1.19.7-1
-
-* Tue Dec 15 2020 Konstantin Pavlov <thresh@nginx.com> - 1.19.6-1%{?dist}.ngx
-- 1.19.6-1
-
-* Tue Nov 24 2020 Konstantin Pavlov <thresh@nginx.com> - 1.19.5-1%{?dist}.ngx
-- 1.19.5-1
-
-* Tue Oct 27 2020 Andrei Belov <defan@nginx.com> - 1.19.4-1%{?dist}.ngx
-- 1.19.4-1
-
-* Tue Sep 29 2020 Konstantin Pavlov <thresh@nginx.com> - 1.19.3-1%{?dist}.ngx
-- 1.19.3
-
-* Tue Aug 11 2020 Konstantin Pavlov <thresh@nginx.com> - 1.19.2-1%{?dist}.ngx
-- 1.19.2
-
-* Tue Jul  7 2020 Konstantin Pavlov <thresh@nginx.com> - 1.19.1-1%{?dist}.ngx
-- 1.19.1
-
-* Tue May 26 2020 Konstantin Pavlov <thresh@nginx.com> - 1.19.0-1%{?dist}.ngx
-- 1.19.0
-
-* Tue Apr 14 2020 Konstantin Pavlov <thresh@nginx.com> - 1.17.10-1%{?dist}.ngx
-- 1.17.10
-
-* Tue Mar  3 2020 Konstantin Pavlov <thresh@nginx.com> - 1.17.9-1%{?dist}.ngx
-- 1.17.9
-
-* Tue Jan 21 2020 Konstantin Pavlov <thresh@nginx.com> - 1.17.8-1%{?dist}.ngx
-- 1.17.8
-
-* Tue Dec 24 2019 Konstantin Pavlov <thresh@nginx.com> - 1.17.7-1%{?dist}.ngx
-- 1.17.7
-
-* Tue Nov 19 2019 Konstantin Pavlov <thresh@nginx.com> - 1.17.6-1%{?dist}.ngx
-- 1.17.6
-
-* Tue Oct 22 2019 Andrei Belov <defan@nginx.com> - 1.17.5-1%{?dist}.ngx
-- 1.17.5
-
-* Tue Sep 24 2019 Konstantin Pavlov <thresh@nginx.com> - 1.17.4-1%{?dist}.ngx
-- 1.17.4
-
-* Tue Aug 13 2019 Andrei Belov <defan@nginx.com> - 1.17.3-1%{?dist}.ngx
-- 1.17.3
-
-* Tue Jul 23 2019 Konstantin Pavlov <thresh@nginx.com> - 1.17.2-1%{?dist}.ngx
-- 1.17.2
-
-* Tue Jun 25 2019 Andrei Belov <defan@nginx.com> - 1.17.1-1%{?dist}.ngx
-- 1.17.1
-
-* Tue May 21 2019 Konstantin Pavlov <thresh@nginx.com> - 1.17.0-1%{?dist}.ngx
-- 1.17.0
-
-* Tue Apr 16 2019 Konstantin Pavlov <thresh@nginx.com> - 1.15.12-1%{?dist}.ngx
-- 1.15.12
-
-* Tue Apr  9 2019 Konstantin Pavlov <thresh@nginx.com> - 1.15.11-1%{?dist}.ngx
-- 1.15.11
-
-* Tue Mar 26 2019 Konstantin Pavlov <thresh@nginx.com> - 1.15.10-1%{?dist}.ngx
-- 1.15.10
-
-* Tue Feb 26 2019 Konstantin Pavlov <thresh@nginx.com> - 1.15.9-1%{?dist}.ngx
-- 1.15.9
-
-* Tue Dec 25 2018 Konstantin Pavlov <thresh@nginx.com> - 1.15.8-1%{?dist}.ngx
-- 1.15.8
-
-* Tue Nov 27 2018 Konstantin Pavlov <thresh@nginx.com> - 1.15.7-1%{?dist}.ngx
-- 1.15.7
-
-* Tue Nov  6 2018 Konstantin Pavlov <thresh@nginx.com> - 1.15.6-1%{?dist}.ngx
-- 1.15.6
-- Security: fixes CVE-2018-16843.
-- Security: fixes CVE-2018-16844.
-- Security: fixes CVE-2018-16845.
-
-* Tue Oct  2 2018 Konstantin Pavlov <thresh@nginx.com> - 1.15.5-1%{?dist}.ngx
-- 1.15.5
-
-* Tue Sep 25 2018 Konstantin Pavlov <thresh@nginx.com> - 1.15.4-1%{?dist}.ngx
-- 1.15.4
-
-* Tue Aug 28 2018 Konstantin Pavlov <thresh@nginx.com> - 1.15.3-1%{?dist}.ngx
-- 1.15.3
-
-* Tue Jul 24 2018 Konstantin Pavlov <thresh@nginx.com> - 1.15.2-1%{?dist}.ngx
-- 1.15.2
-
-* Tue Jul  3 2018 Konstantin Pavlov <thresh@nginx.com> - 1.15.1-1%{?dist}.ngx
-- 1.15.1
-
-* Tue Jun  5 2018 Konstantin Pavlov <thresh@nginx.com> - 1.15.0-1%{?dist}.ngx
-- 1.15.0
-
-* Mon Apr  9 2018 Konstantin Pavlov <thresh@nginx.com> - 1.13.12-1%{?dist}.ngx
-- 1.13.12
-
-* Tue Apr  3 2018 Konstantin Pavlov <thresh@nginx.com> - 1.13.11-1%{?dist}.ngx
-- 1.13.11
-
-* Tue Mar 20 2018 Konstantin Pavlov <thresh@nginx.com> - 1.13.10-1%{?dist}.ngx
-- 1.13.10
-
-* Tue Feb 20 2018 Konstantin Pavlov <thresh@nginx.com> - 1.13.9-1%{?dist}.ngx
-- 1.13.9
-
-* Tue Dec 26 2017 Konstantin Pavlov <thresh@nginx.com> - 1.13.8-1%{?dist}.ngx
-- 1.13.8
-
-* Tue Nov 21 2017 Konstantin Pavlov <thresh@nginx.com> - 1.13.7-1%{?dist}.ngx
-- 1.13.7
-
-* Thu Sep 14 2017 Konstantin Pavlov <thresh@nginx.com> - 1.13.6-1%{?dist}.ngx
-- 1.13.6
-- Bugfix: in systemd service support
-  (https://trac.nginx.org/nginx/ticket/1380).
-
-* Thu Sep 14 2017 Konstantin Pavlov <thresh@nginx.com> - 1.13.5-1%{?dist}.ngx
-- 1.13.5
-
-* Tue Aug  8 2017 Sergey Budnevitch <sb@nginx.com> - 1.13.4-1%{?dist}.ngx
-- 1.13.4
-
-* Tue Jul 11 2017 Konstantin Pavlov <thresh@nginx.com> - 1.13.3-1%{?dist}.ngx
-- 1.13.3
-- Security: fixes CVE-2017-7529.
-
-* Tue Jun 27 2017 Konstantin Pavlov <thresh@nginx.com> - 1.13.2-1%{?dist}.ngx
-- 1.13.2
-
-* Tue May 30 2017 Konstantin Pavlov <thresh@nginx.com> - 1.13.1-1%{?dist}.ngx
-- 1.13.1
-
-* Tue Apr 25 2017 Konstantin Pavlov <thresh@nginx.com> - 1.13.0-1%{?dist}.ngx
-- 1.13.0
-
-* Tue Apr  4 2017 Konstantin Pavlov <thresh@nginx.com> - 1.11.13-1%{?dist}.ngx
-- 1.11.13
-- Made upgrade loops/timeouts configurable via /etc/defaults/nginx.
-
-* Fri Mar 24 2017 Konstantin Pavlov <thresh@nginx.com> - 1.11.12-1%{?dist}.ngx
-- 1.11.12
-
-* Tue Mar 21 2017 Konstantin Pavlov <thresh@nginx.com> - 1.11.11-1%{?dist}.ngx
-- 1.11.11
-
-* Tue Feb 14 2017 Konstantin Pavlov <thresh@nginx.com> - 1.11.10-1%{?dist}.ngx
-- 1.11.10
-
-* Tue Jan 24 2017 Konstantin Pavlov <thresh@nginx.com> - 1.11.9-1%{?dist}.ngx
-- 1.11.9
-- Extended hardening build flags.
-- Added check-reload target to init script / systemd service.
-
-* Tue Dec 27 2016 Konstantin Pavlov <thresh@nginx.com> - 1.11.8-1%{?dist}.ngx
-- 1.11.8
-
-* Tue Dec 13 2016 Konstantin Pavlov <thresh@nginx.com> - 1.11.7-1%{?dist}.ngx
-- 1.11.7
-
-* Fri Nov 25 2016 Konstantin Pavlov <thresh@nginx.com> - 1.11.6-1%{?dist}.ngx
-- 1.11.6
-
-* Mon Oct 10 2016 Andrei Belov <defan@nginx.com> - 1.11.5-1%{?dist}.ngx
-- 1.11.5
-
-* Tue Sep 13 2016 Konstantin Pavlov <thresh@nginx.com> - 1.11.4-1%{?dist}.ngx
-- 1.11.4
-- njs updated to 0.1.2.
-
-* Tue Jul 26 2016 Konstantin Pavlov <thresh@nginx.com> - 1.11.3-1%{?dist}.ngx
-- 1.11.3
-- njs updated to 0.1.0.
-- njs stream dynamic module added to nginx-module-njs package.
-- geoip stream dynamic module added to nginx-module-geoip package.
-
-* Tue Jul  5 2016 Konstantin Pavlov <thresh@nginx.com> - 1.11.2-1%{?dist}.ngx
-- 1.11.2
-- njs updated to ef2b708510b1.
-
-* Tue May 31 2016 Konstantin Pavlov <thresh@nginx.com> - 1.11.1-1%{?dist}.ngx
-- 1.11.1
-
-* Tue May 24 2016 Sergey Budnevitch <sb@nginx.com> - 1.11.0-1%{?dist}.ngx
-- 1.11.0
-- Bugfix: fixed logrotate error if nginx is not running.
-
-* Tue Apr 19 2016 Konstantin Pavlov <thresh@nginx.com> - 1.9.15-1%{?dist}.ngx
-- 1.9.15
-- njs updated to 1c50334fbea6.
-
-* Tue Apr  5 2016 Konstantin Pavlov <thresh@nginx.com> - 1.9.14-1%{?dist}.ngx
-- 1.9.14
-
-* Tue Mar 29 2016 Konstantin Pavlov <thresh@nginx.com> - 1.9.13-1%{?dist}.ngx
-- 1.9.13
-- Fixed modules path
-- Added perl and njs dynamic modules subpackages
-
-* Wed Feb 24 2016 Sergey Budnevitch <sb@nginx.com> - 1.9.12-1%{?dist}.ngx
-- 1.9.12
-- common configure args are now in variable
-- xslt, image-filter and geoip dynamic modules added
-
-* Tue Feb  9 2016 Sergey Budnevitch <sb@nginx.com> - 1.9.11-1%{?dist}.ngx
-- 1.9.11
-- dynamic modules path and symlink in /etc/nginx added
-
-* Tue Jan 26 2016 Konstantin Pavlov <thresh@nginx.com> - 1.9.10-1%{?dist}.ngx
-- 1.9.10
-
-* Wed Dec  9 2015 Konstantin Pavlov <thresh@nginx.com> - 1.9.9-1%{?dist}.ngx
-- 1.9.9
-
-* Tue Dec  8 2015 Konstantin Pavlov <thresh@nginx.com> - 1.9.8-1%{?dist}.ngx
-- 1.9.8
-- http_slice module enabled
-
-* Tue Nov 17 2015 Konstantin Pavlov <thresh@nginx.com> - 1.9.7-1%{?dist}.ngx
-- 1.9.7
-
-* Tue Oct 27 2015 Sergey Budnevitch <sb@nginx.com> - 1.9.6-1%{?dist}.ngx
-- 1.9.6
-
-* Tue Sep 22 2015 Andrei Belov <defan@nginx.com> - 1.9.5-1%{?dist}.ngx
-- 1.9.5
-- http_spdy module replaced with http_v2 module
-
-* Tue Aug 18 2015 Konstantin Pavlov <thresh@nginx.com> - 1.9.4-1%{?dist}.ngx
-- 1.9.4
-
-* Tue Jul 14 2015 Sergey Budnevitch <sb@nginx.com> - 1.9.3-1%{?dist}.ngx
-- 1.9.3
-
-* Tue Jun 16 2015 Sergey Budnevitch <sb@nginx.com> - 1.9.2-1%{?dist}.ngx
-- 1.9.2
-
-* Tue May 26 2015 Sergey Budnevitch <sb@nginx.com> - 1.9.1-1%{?dist}.ngx
-- 1.9.1
-
-* Tue Apr 28 2015 Sergey Budnevitch <sb@nginx.com> - 1.9.0-1%{?dist}.ngx
-- 1.9.0
-- thread pool support added
-- stream module added
-- example_ssl.conf removed
-
-* Tue Apr  7 2015 Sergey Budnevitch <sb@nginx.com> - 1.7.12-1%{?dist}.ngx
-- 1.7.12
-
-* Tue Mar 24 2015 Sergey Budnevitch <sb@nginx.com> - 1.7.11-1%{?dist}.ngx
-- 1.7.11
-
-* Tue Feb 10 2015 Sergey Budnevitch <sb@nginx.com> - 1.7.10-1%{?dist}.ngx
-- 1.7.10
-
-* Tue Dec 23 2014 Sergey Budnevitch <sb@nginx.com> - 1.7.9-1%{?dist}.ngx
-- 1.7.9
-- init-script now sends signal only to the PID derived from pidfile
-
-* Tue Dec  2 2014 Sergey Budnevitch <sb@nginx.com> - 1.7.8-1%{?dist}.ngx
-- 1.7.8
-- package with debug symbols added
-
-* Tue Oct 28 2014 Sergey Budnevitch <sb@nginx.com> - 1.7.7-1%{?dist}.ngx
-- 1.7.7
-
-* Tue Sep 30 2014 Sergey Budnevitch <sb@nginx.com> - 1.7.6-1%{?dist}.ngx
-- 1.7.6
-
-* Tue Sep 16 2014 Sergey Budnevitch <sb@nginx.com> - 1.7.5-1%{?dist}.ngx
-- 1.7.5
-
-* Tue Aug  5 2014 Sergey Budnevitch <sb@nginx.com> - 1.7.4-1%{?dist}.ngx
-- 1.7.4
-- init-script now returns 0 on stop command if nginx is not running
-
-* Tue Jul  8 2014 Sergey Budnevitch <sb@nginx.com> - 1.7.3-1%{?dist}.ngx
-- 1.7.3
-
-* Tue Jun 17 2014 Sergey Budnevitch <sb@nginx.com> - 1.7.2-1%{?dist}.ngx
-- 1.7.2
-
-* Tue May 27 2014 Sergey Budnevitch <sb@nginx.com> - 1.7.1-1%{?dist}.ngx
-- 1.7.1
-
-* Thu Apr 24 2014 Konstantin Pavlov <thresh@nginx.com> - 1.7.0-1%{?dist}.ngx
-- 1.7.0
-
-* Tue Apr  8 2014 Sergey Budnevitch <sb@nginx.com> - 1.5.13-1%{?dist}.ngx
-- 1.5.13
-
-* Tue Mar 18 2014 Sergey Budnevitch <sb@nginx.com> - 1.5.12-1%{?dist}.ngx
-- 1.5.12
-- warning added when binary upgrade returns non-zero exit code
-
-* Tue Mar  4 2014 Sergey Budnevitch <sb@nginx.com> - 1.5.11-1%{?dist}.ngx
-- 1.5.11
-
-* Tue Feb  4 2014 Sergey Budnevitch <sb@nginx.com> - 1.5.10-1%{?dist}.ngx
-- 1.5.10
-
-* Wed Jan 22 2014 Sergey Budnevitch <sb@nginx.com> - 1.5.9-1%{?dist}.ngx
-- 1.5.9
-
-* Tue Dec 17 2013 Sergey Budnevitch <sb@nginx.com> - 1.5.8-1%{?dist}.ngx
-- 1.5.8
-
-* Fri Nov 29 2013 Sergey Budnevitch <sb@nginx.com> - 1.5.7-1%{?dist}.ngx
-- 1.5.7
-- init script now honours additional options sourced from /etc/default/nginx
-
-* Tue Oct  1 2013 Sergey Budnevitch <sb@nginx.com> - 1.5.6-1%{?dist}.ngx
-- 1.5.6
-
-* Tue Sep 17 2013 Andrei Belov <defan@nginx.com> - 1.5.5-1%{?dist}.ngx
-- 1.5.5
-
-* Tue Aug 27 2013 Sergey Budnevitch <sb@nginx.com> - 1.5.4-1%{?dist}.ngx
-- 1.5.4
-- auth request module added
-
-* Tue Jul 30 2013 Sergey Budnevitch <sb@nginx.com> - 1.5.3-1%{?dist}.ngx
-- 1.5.3
-
-* Tue Jul  2 2013 Sergey Budnevitch <sb@nginx.com> - 1.5.2-1%{?dist}.ngx
-- 1.5.2
-
-* Tue Jun  4 2013 Sergey Budnevitch <sb@nginx.com> - 1.5.1-1%{?dist}.ngx
-- 1.5.1
-- dpkg-buildflags options now passed by --with-{cc,ld}-opt
-
-* Mon May  6 2013 Sergey Budnevitch <sb@nginx.com> - 1.5.0-1%{?dist}.ngx
-- 1.5.0
-- fixed openssl version detection with dash as /bin/sh
-
-* Tue Apr 16 2013 Sergey Budnevitch <sb@nginx.com> - 1.3.16-1%{?dist}.ngx
-- 1.3.16
-
-* Tue Mar 26 2013 Sergey Budnevitch <sb@nginx.com> - 1.3.15-1%{?dist}.ngx
-- 1.3.15
-- gunzip module added
-- spdy module added if openssl version >= 1.0.1
-- set permissions on default log files at installation
-