summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-12-15 21:00:24 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-12-15 21:00:24 +0000
commit7168f1e7c10cbd17d1f7ebdd69c5ba26741014ea (patch)
tree6b22bbe6bfbc14308a157e3f8b9367803da0c77d
parentDisabling ocsp-stapling by default due to general abandonment. (diff)
downloadapache2-progress-linux.tar.xz
apache2-progress-linux.zip
Releasing progress-linux version 2.4.62-3~progress7.99u1.HEADprogress-linux/2.4.62-3_progress7.99u1progress-linux
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
-rw-r--r--debian/changelog55
1 files changed, 55 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog
index cfeef9d..8603314 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,58 @@
+apache2 (2.4.62-3~progress7.99u1) graograman-backports; urgency=medium
+
+ * Uploading to graograman-backports, remaining changes:
+ - Updating maintainer field.
+ - Updating uploaders field.
+ - Updating bugs field.
+ - Updating vcs fields.
+ - Setting Restart to always in systemd unit.
+ - Exporting hostname variable in global environment.
+ - Setting ServerTokens to Prod in security.conf.
+ - Setting ServerSignature to Off in security.conf.
+ - Setting Content-Security-Policy to "default-src https: 'self'; style-
+ src https: 'self' 'unsafe-inline'".
+ - Setting HSTS options to "max-age=63072000; includeSubDomains;
+ preload".
+ - Setting additional Set-Cookie options HttpOnly;SameSite=Strict;Secure.
+ - Setting SSLCipherSuite to EECDH+AESGCM:EDH+AESGCM.
+ - Setting SSLCompression to off.
+ - Setting SSLHonorCipherOrder to on.
+ - Setting SSLOpenSSLConfCmd Curves to X25519:prime256v1.
+ - Setting SSLProtocol to -all +TLSv1.3.
+ - Setting Cache-Control headers to "max-age=0, no-cache, no-store, no-
+ transform, private".
+ - Setting X-Frame-Options to deny.
+ - Adding configuration file to no accidentally serve git files.
+ - Setting Referrer-Policy to no-referrer.
+ - Setting X-Content-Type-Options to nosniff.
+ - Setting SSLUseStapling to on.
+ - Setting SSLStaplingCache to shmcb:/var/run/ocsp(32768).
+ - Setting SSLStaplingResponderTimeout to 5.
+ - Setting SSLStaplingReturnResponderErrors to off.
+ - Adding configuration file to rewrite http to https.
+ - Adding configuration file for dehydrated ssl certificates.
+ - Adding configuration file for DH parameter.
+ - Adding configuration file for snakeoil ssl certificates.
+ - Setting X-XSS-Protection to "1; mode=block".
+ - Enabling headers module.
+ - Enabling http2 module.
+ - Enabling rewrite module.
+ - Enabling ssl module.
+ - Renaming default-ssl.conf site to 000-default-ssl.conf.
+ - Setting ServerAdmin to root@localhost in default sites.
+ - Setting example ServerName localhost in default sites.
+ - Trimming default sites.
+ - Enabling default-ssl site by default.
+ - Depending on ssl-cert or dehydrated.
+ - Enabling rewrite http to https.
+ - Enabling snakeoil ssl certificates.
+ - Enabling DH parameter.
+ - Enabling dehydrated ssl certificates.
+ * Merging debian version 2.4.62-3.
+ * Disabling ocsp-stapling by default due to general abandonment.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org> Sun, 15 Dec 2024 21:59:24 +0100
+
apache2 (2.4.62-3) unstable; urgency=medium
* Fix debian/changelog