freenginx-libressl-src
LOW
maintainer shtrophic
0 votes
base
freenginx-libressl
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a tarball from the project's official domain (freenginx.org), which is plausibly the project's own infrastructure; building from a non-whitelisted but official project host is normal for AUR packages and poses low risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official domain (freenginx.org), which is plausibly the project's own infrastructure; building from a non-whitelisted but official project host is normal for AUR packages and poses low risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:31
"hg+https://freenginx.org/hg/nginx-tests#revision=$_tests_commit"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: shtrophic <aur at shtrophic dot net>
2
# Contributor: Masato TOYOSHIMA <phoepsilonix@phoepsilonix.love>
3
4
pkgbase=freenginx-libressl
5
pkgname=($pkgbase $pkgbase-src)
6
7
epoch=1
8
pkgver=1.31.4
9
pkgrel=1
10
_tests_commit=84c77c54e70f
11
12
pkgdesc='webserver in an effort to preserve free and open development of nginx (linked against libressl)'
13
arch=(i686 x86_64)
14
url=https://freenginx.org
15
license=(BSD-2-Clause)
16
depends=(libressl geoip gd libxcrypt pcre2 zlib glibc libxml2 libxslt mailcap)
17
makedepends=(perl mercurial)
18
checkdepends=(perl perl-gd perl-io-socket-ssl perl-fcgi perl-cache-memcached
19
perl-cryptx memcached ffmpeg coreutils)
20
backup=(etc/nginx/fastcgi.conf
21
etc/nginx/fastcgi_params
22
etc/nginx/koi-win
23
etc/nginx/koi-utf
24
etc/nginx/nginx.conf
25
etc/nginx/scgi_params
26
etc/nginx/uwsgi_params
27
etc/nginx/win-utf
28
etc/logrotate.d/nginx)
29
install=nginx.install
30
source=("$url/download/freenginx-$pkgver.tar.gz"{,.asc}
31
"hg+https://freenginx.org/hg/nginx-tests#revision=$_tests_commit"
32
"service"
33
"logrotate")
34
sha256sums=('23d784d93e13ac8febf6dd209631e056bc8c4046769804c6ef3c56d401734e27'
35
'SKIP'
36
'5ceb354a9eaba34fd857568bf77afe0a15ee52d87b44fc1fd17ba7daec7961ab'
37
'daa4292d37342f3a1c4e82a85d3b83e3b559f11e8cd309788dc8d6e46c0ce247'
38
'b9af19a75bbeb1434bba66dd1a11295057b387a2cbff4ddf46253133909c311e')
39
validpgpkeys=(B0F4253373F8F6F510D42178520A9993A1C052F8) # Maxim Dounin <mdounin@mdounin.ru>
40
41
_common_flags=(
42
--with-compat
43
--with-debug
44
--with-file-aio
45
--with-http_addition_module
46
--with-http_auth_request_module
47
--with-http_dav_module
48
--with-http_degradation_module
49
--with-http_flv_module
50
--with-http_geoip_module
51
--with-http_gunzip_module
52
--with-http_gzip_static_module
53
--with-http_image_filter_module
54
--with-http_mp4_module
55
--with-http_perl_module
56
--with-http_random_index_module
57
--with-http_realip_module
58
--with-http_secure_link_module
59
--with-http_slice_module
60
--with-http_ssl_module
61
--with-http_stub_status_module
62
--with-http_sub_module
63
--with-http_v2_module
64
--with-http_v3_module
65
--with-http_xslt_module
66
--with-mail
67
--with-mail_ssl_module
68
--with-pcre-jit
69
--with-stream
70
--with-stream_geoip_module
71
--with-stream_realip_module
72
--with-stream_ssl_module
73
--with-stream_ssl_preread_module
74
--with-threads
75
)
76
77
prepare() {
78
# Backup pristine version of nginx source for -src package
79
test -d $srcdir/$pkgname-src && rm -r $srcdir/$pkgname-src
80
cp -r $srcdir/freenginx-$pkgver $srcdir/nginx-src
81
}
82
83
build() {
84
cd freenginx-$pkgver
85
./configure \
86
--prefix=/etc/nginx \
87
--conf-path=/etc/nginx/nginx.conf \
88
--sbin-path=/usr/bin/nginx \
89
--pid-path=/run/nginx.pid \
90
--lock-path=/run/lock/nginx.lock \
91
--user=http \
92
--group=http \
93
--http-log-path=/var/log/nginx/access.log \
94
--error-log-path=stderr \
95
--http-client-body-temp-path=/var/lib/nginx/client-body \
96
--http-proxy-temp-path=/var/lib/nginx/proxy \
97
--http-fastcgi-temp-path=/var/lib/nginx/fastcgi \
98
--http-scgi-temp-path=/var/lib/nginx/scgi \
99
--http-uwsgi-temp-path=/var/lib/nginx/uwsgi \
100
--with-cc-opt="-I/usr/include/libressl" \
101
--with-ld-opt="$LDFLAGS -L/usr/lib/libressl -Wl,-rpath=/usr/lib/libressl" \
102
${_common_flags[@]}
103
104
make
105
}
106
107
check() {
108
cd nginx-tests
109
TEST_NGINX_BINARY="$srcdir/freenginx-$pkgver/objs/nginx" prove -j $(nproc) .
110
}
111
112
package_freenginx-libressl() {
113
provides=(nginx)
114
conflicts=(nginx)
115
116
cd freenginx-$pkgver
117
make DESTDIR="$pkgdir" install
118
119
sed -e 's|\<user\s\+\w\+;|user http;|g' \
120
-e '44s|html|/usr/share/nginx/html|' \
121
-e '54s|html|/usr/share/nginx/html|' \
122
-i "$pkgdir"/etc/nginx/nginx.conf
123
124
rm "$pkgdir"/etc/nginx/*.default
125
rm "$pkgdir"/etc/nginx/mime.types # in mailcap
126
127
install -d "$pkgdir"/var/lib/nginx
128
install -dm700 "$pkgdir"/var/lib/nginx/proxy
129
130
chmod 755 "$pkgdir"/var/log/nginx
131
chown root:root "$pkgdir"/var/log/nginx
132
133
install -d "$pkgdir"/usr/share/nginx
134
mv "$pkgdir"/etc/nginx/html/ "$pkgdir"/usr/share/nginx
135
136
install -Dm644 ../logrotate "$pkgdir"/etc/logrotate.d/nginx
137
install -Dm644 ../service "$pkgdir"/usr/lib/systemd/system/nginx.service
138
install -Dm644 LICENSE "$pkgdir"/usr/share/licenses/$pkgname/LICENSE
139
140
rmdir "$pkgdir"/run
141
142
install -d "$pkgdir"/usr/share/man/man8/
143
gzip -9c man/nginx.8 >"$pkgdir"/usr/share/man/man8/nginx.8.gz
144
145
for i in ftdetect indent syntax; do
146
install -Dm644 contrib/vim/${i}/nginx.vim \
147
"${pkgdir}/usr/share/vim/vimfiles/${i}/nginx.vim"
148
done
149
}
150
151
package_freenginx-libressl-src() {
152
pkgdesc="Source code of freenginx $pkgver, useful for building modules"
153
arch=(any)
154
provides=(nginx-src)
155
conflicts=(nginx-src)
156
depends=(sh bash perl)
157
backup=()
158
159
install -d "$pkgdir/usr/src"
160
test -d "$pkgdir/usr/src/nginx" && rm -r "$pkgdir/usr/src/nginx"
161
cp -r ${srcdir}/nginx-src "$pkgdir/usr/src/nginx"
162
cd nginx-src
163
install -Dm644 LICENSE "$pkgdir"/usr/share/licenses/$provides/LICENSE
164
install -d "$pkgdir"/usr/share/licenses/$pkgname
165
ln -s /usr/share/licenses/$provides/LICENSE "$pkgdir"/usr/share/licenses/$pkgname/LICENSE
166
}
167
Changes since previous scan
--- PKGBUILD @ 2026-09-05 00:16+++ PKGBUILD @ 2026-09-17 00:27@@ -5,9 +5,9 @@ pkgname=($pkgbase $pkgbase-src) epoch=1-pkgver=1.31.3+pkgver=1.31.4 pkgrel=1-_tests_commit=e35d7a7d58e2+_tests_commit=84c77c54e70f pkgdesc='webserver in an effort to preserve free and open development of nginx (linked against libressl)' arch=(i686 x86_64)@@ -31,9 +31,9 @@ "hg+https://freenginx.org/hg/nginx-tests#revision=$_tests_commit" "service" "logrotate")-sha256sums=('74ea2ea1c6eb2e04f0f29a5629c1e3b6ebf2e511051ddd284a6a9f98b035b624'+sha256sums=('23d784d93e13ac8febf6dd209631e056bc8c4046769804c6ef3c56d401734e27' 'SKIP'- 'e4609f3d135266ebeb2ace3337c4218bdf8292d4436b01f3f47634989fcf8d08'+ '5ceb354a9eaba34fd857568bf77afe0a15ee52d87b44fc1fd17ba7daec7961ab' 'daa4292d37342f3a1c4e82a85d3b83e3b559f11e8cd309788dc8d6e46c0ce247' 'b9af19a75bbeb1434bba66dd1a11295057b387a2cbff4ddf46253133909c311e') validpgpkeys=(B0F4253373F8F6F510D42178520A9993A1C052F8) # Maxim Dounin <mdounin@mdounin.ru>Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 09:59:47 | Medium | 1 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |