freenginx-libressl

maintainer shtrophic · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from the project's official website (freenginx.org), which is the project's own infrastructure; building from a non-whitelisted but project-owned host is normal for AUR packages and poses low risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official website (freenginx.org), which is the project's own infrastructure; building from a non-whitelisted but project-owned host is normal for AUR packages and poses low risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:31 "hg+https://freenginx.org/hg/nginx-tests#revision=$_tests_commit"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer:  shtrophic <aur at shtrophic dot net>
    
      2# Contributor: Masato TOYOSHIMA <phoepsilonix@phoepsilonix.love>
    
      3
    
      4pkgbase=freenginx-libressl
    
      5pkgname=($pkgbase $pkgbase-src)
    
      6
    
      7epoch=1
    
      8pkgver=1.31.3
    
      9pkgrel=1
    
      10_tests_commit=e35d7a7d58e2
    
      11
    
      12pkgdesc='webserver in an effort to preserve free and open development of nginx (linked against libressl)'
    
      13arch=(i686 x86_64)
    
      14url=https://freenginx.org
    
      15license=(BSD-2-Clause)
    
      16depends=(libressl geoip gd libxcrypt pcre2 zlib glibc libxml2 libxslt mailcap)
    
      17makedepends=(perl mercurial)
    
      18checkdepends=(perl perl-gd perl-io-socket-ssl perl-fcgi perl-cache-memcached
    
      19	      perl-cryptx memcached ffmpeg coreutils)
    
      20backup=(etc/nginx/fastcgi.conf
    
      21	etc/nginx/fastcgi_params
    
      22	etc/nginx/koi-win
    
      23	etc/nginx/koi-utf
    
      24	etc/nginx/nginx.conf
    
      25	etc/nginx/scgi_params
    
      26	etc/nginx/uwsgi_params
    
      27	etc/nginx/win-utf
    
      28	etc/logrotate.d/nginx)
    
      29install=nginx.install
    
      30source=("$url/download/freenginx-$pkgver.tar.gz"{,.asc}
    
      31	"hg+https://freenginx.org/hg/nginx-tests#revision=$_tests_commit"
    
      32	"service"
    
      33	"logrotate")
    
      34sha256sums=('74ea2ea1c6eb2e04f0f29a5629c1e3b6ebf2e511051ddd284a6a9f98b035b624'
    
      35            'SKIP'
    
      36            'e4609f3d135266ebeb2ace3337c4218bdf8292d4436b01f3f47634989fcf8d08'
    
      37            'daa4292d37342f3a1c4e82a85d3b83e3b559f11e8cd309788dc8d6e46c0ce247'
    
      38            'b9af19a75bbeb1434bba66dd1a11295057b387a2cbff4ddf46253133909c311e')
    
      39validpgpkeys=(B0F4253373F8F6F510D42178520A9993A1C052F8)  # Maxim Dounin <mdounin@mdounin.ru>
    
      40
    
      41_common_flags=(
    
      42    --with-compat
    
      43    --with-debug
    
      44    --with-file-aio
    
      45    --with-http_addition_module
    
      46    --with-http_auth_request_module
    
      47    --with-http_dav_module
    
      48    --with-http_degradation_module
    
      49    --with-http_flv_module
    
      50    --with-http_geoip_module
    
      51    --with-http_gunzip_module
    
      52    --with-http_gzip_static_module
    
      53    --with-http_image_filter_module
    
      54    --with-http_mp4_module
    
      55    --with-http_perl_module
    
      56    --with-http_random_index_module
    
      57    --with-http_realip_module
    
      58    --with-http_secure_link_module
    
      59    --with-http_slice_module
    
      60    --with-http_ssl_module
    
      61    --with-http_stub_status_module
    
      62    --with-http_sub_module
    
      63    --with-http_v2_module
    
      64    --with-http_v3_module
    
      65    --with-http_xslt_module
    
      66    --with-mail
    
      67    --with-mail_ssl_module
    
      68    --with-pcre-jit
    
      69    --with-stream
    
      70    --with-stream_geoip_module
    
      71    --with-stream_realip_module
    
      72    --with-stream_ssl_module
    
      73    --with-stream_ssl_preread_module
    
      74    --with-threads
    
      75)
    
      76
    
      77prepare() {
    
      78	# Backup pristine version of nginx source for -src package
    
      79	test -d $srcdir/$pkgname-src && rm -r $srcdir/$pkgname-src
    
      80	cp -r $srcdir/freenginx-$pkgver $srcdir/nginx-src
    
      81}
    
      82
    
      83build() {
    
      84	cd freenginx-$pkgver
    
      85	./configure \
    
      86		--prefix=/etc/nginx \
    
      87		--conf-path=/etc/nginx/nginx.conf \
    
      88		--sbin-path=/usr/bin/nginx \
    
      89		--pid-path=/run/nginx.pid \
    
      90		--lock-path=/run/lock/nginx.lock \
    
      91		--user=http \
    
      92		--group=http \
    
      93		--http-log-path=/var/log/nginx/access.log \
    
      94		--error-log-path=stderr \
    
      95		--http-client-body-temp-path=/var/lib/nginx/client-body \
    
      96		--http-proxy-temp-path=/var/lib/nginx/proxy \
    
      97		--http-fastcgi-temp-path=/var/lib/nginx/fastcgi \
    
      98		--http-scgi-temp-path=/var/lib/nginx/scgi \
    
      99		--http-uwsgi-temp-path=/var/lib/nginx/uwsgi \
    
      100		--with-cc-opt="-I/usr/include/libressl" \
    
      101		--with-ld-opt="$LDFLAGS -L/usr/lib/libressl -Wl,-rpath=/usr/lib/libressl" \
    
      102		${_common_flags[@]}
    
      103
    
      104	make
    
      105}
    
      106
    
      107check() {
    
      108	cd nginx-tests
    
      109	TEST_NGINX_BINARY="$srcdir/freenginx-$pkgver/objs/nginx" prove -j $(nproc) .
    
      110}
    
      111
    
      112package_freenginx-libressl() {
    
      113	provides=(nginx)
    
      114	conflicts=(nginx)
    
      115
    
      116	cd freenginx-$pkgver
    
      117	make DESTDIR="$pkgdir" install
    
      118
    
      119	sed -e 's|\<user\s\+\w\+;|user http;|g' \
    
      120		-e '44s|html|/usr/share/nginx/html|' \
    
      121		-e '54s|html|/usr/share/nginx/html|' \
    
      122		-i "$pkgdir"/etc/nginx/nginx.conf
    
      123
    
      124	rm "$pkgdir"/etc/nginx/*.default
    
      125	rm "$pkgdir"/etc/nginx/mime.types # in mailcap
    
      126
    
      127	install -d "$pkgdir"/var/lib/nginx
    
      128	install -dm700 "$pkgdir"/var/lib/nginx/proxy
    
      129
    
      130	chmod 755 "$pkgdir"/var/log/nginx
    
      131	chown root:root "$pkgdir"/var/log/nginx
    
      132
    
      133	install -d "$pkgdir"/usr/share/nginx
    
      134	mv "$pkgdir"/etc/nginx/html/ "$pkgdir"/usr/share/nginx
    
      135
    
      136	install -Dm644 ../logrotate "$pkgdir"/etc/logrotate.d/nginx
    
      137	install -Dm644 ../service "$pkgdir"/usr/lib/systemd/system/nginx.service
    
      138	install -Dm644 LICENSE "$pkgdir"/usr/share/licenses/$pkgname/LICENSE
    
      139
    
      140	rmdir "$pkgdir"/run
    
      141
    
      142	install -d "$pkgdir"/usr/share/man/man8/
    
      143	gzip -9c man/nginx.8 >"$pkgdir"/usr/share/man/man8/nginx.8.gz
    
      144
    
      145	for i in ftdetect indent syntax; do
    
      146		install -Dm644 contrib/vim/${i}/nginx.vim \
    
      147			"${pkgdir}/usr/share/vim/vimfiles/${i}/nginx.vim"
    
      148	done
    
      149}
    
      150
    
      151package_freenginx-libressl-src() {
    
      152	pkgdesc="Source code of freenginx $pkgver, useful for building modules"
    
      153	arch=(any)
    
      154	provides=(nginx-src)
    
      155	conflicts=(nginx-src)
    
      156	depends=(sh bash perl)
    
      157	backup=()
    
      158
    
      159	install -d "$pkgdir/usr/src"
    
      160	test -d "$pkgdir/usr/src/nginx" && rm -r "$pkgdir/usr/src/nginx"
    
      161	cp -r ${srcdir}/nginx-src "$pkgdir/usr/src/nginx"
    
      162	cd nginx-src
    
      163	install -Dm644 LICENSE "$pkgdir"/usr/share/licenses/$provides/LICENSE
    
      164	install -d "$pkgdir"/usr/share/licenses/$pkgname
    
      165	ln -s /usr/share/licenses/$provides/LICENSE "$pkgdir"/usr/share/licenses/$pkgname/LICENSE
    
      166}
    
      167

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2