CHANGES revision 01402a0fbec8bd11f6c10d8ef9c9cceac68bb787
3eb95d6629bb326ae90e5eec693b7e628951751brbb -*- coding: utf-8 -*-
f905b21d99b264dbf26acc30b430ebe92838cdcejerenkrantzChanges with Apache 2.5.0
15405e91bb3fad5a80f7abe828a00b44a3a65bf8jerenkrantz *) mod_ssl: Ensure that the SSL close notify alert is flushed to the client.
15405e91bb3fad5a80f7abe828a00b44a3a65bf8jerenkrantz PR54998. [Tim Kosse <tim.kosse filezilla-project.org>, Yann Ylavic]
f905b21d99b264dbf26acc30b430ebe92838cdcejerenkrantz *) mod_log_config: Add GlobalLog to allow a globally defined log to
f905b21d99b264dbf26acc30b430ebe92838cdcejerenkrantz be inherited by virtual hosts that define a CustomLog.
0e2340134f2336b98c92d7f157fb65d0a6f477d4stoddard [Edward Lu <Chaosed0 gmail.com>]
431d6106eaf796cc8dfa8cb0db2b180dd93ed6dftrawick *) MPMs: Support SO_REUSEPORT to create multiple duplicated listener
b3edf21d591bfd0e64bbec0dda73c0e41d7ecdb6wrowe records for scalability. [Yingqi Lu <yingqi.lu@intel.com>,
b3edf21d591bfd0e64bbec0dda73c0e41d7ecdb6wrowe Jeff Trawick, Jim Jagielski]
b3edf21d591bfd0e64bbec0dda73c0e41d7ecdb6wrowe *) mod_proxy_html: support automatic detection of doctype and processing
b3edf21d591bfd0e64bbec0dda73c0e41d7ecdb6wrowe of FPIs. PR56285 [Micha Lenk <micha lenk info>, Nick Kew]
5d238058bc748dfa13ff21890ae4a58481e3be89jerenkrantz *) mod_proxy_html: skip documents shorter than 4 bytes
5d238058bc748dfa13ff21890ae4a58481e3be89jerenkrantz PR 56286 [Micha Lenk <micha lenk info>]
9282327b0ffe8981d39835130dfb334af192b508jerenkrantz *) mod_proxy_fdpass: Fix computation of the size of 'struct sockaddr_un'
9282327b0ffe8981d39835130dfb334af192b508jerenkrantz when passed to 'connec()'.
9282327b0ffe8981d39835130dfb334af192b508jerenkrantz [Graham Dumpleton <grahamd apache org>]
8fcaadcb287f361bb304d53a69d508500840fafcjerenkrantz *) mod_socache_shmcb: Correct counting of expirations for status display.
8fcaadcb287f361bb304d53a69d508500840fafcjerenkrantz Expirations happening during retrieval were not counted. [Rainer Jung]
8af88bd6958b80c224e964892b8237720b13ab1ajerenkrantz *) mod_proxy_balancer: Correctly encode user provided data in management
8af88bd6958b80c224e964892b8237720b13ab1ajerenkrantz interface. PR 56532 [Maksymilian, <max cert.cx>]
8af88bd6958b80c224e964892b8237720b13ab1ajerenkrantz *) core: Add ap_mpm_resume_suspended() API to allow a suspended connection
8af88bd6958b80c224e964892b8237720b13ab1ajerenkrantz to resume. PR56333
25b812bcab8b61981e288996b991e0ab4d224b92jerenkrantz [Artem <artemciy gmail.com>, Edward Lu <Chaosed0 gmail.com>]
87f0329e30de94828e08d53a99ea23cda86a9fccjerenkrantz *) core: Add ap_mpm_register_socket_callback_timeout() API. [Eric Covener]
87f0329e30de94828e08d53a99ea23cda86a9fccjerenkrantz *) mod_proxy_wstunnel: Honor ProxyWebsocketIdleTimeout in asynchronous
0396e75f271f51be57be778655e32ba8d64d240bwrowe processing mode. [Eric Covener]
0396e75f271f51be57be778655e32ba8d64d240bwrowe *) mod_proxy_fcgi: Fix occasional high CPU when handling request bodies.
0396e75f271f51be57be778655e32ba8d64d240bwrowe [Jeff Trawick]
dc10f7a2f87d4cd7cdd16dc248b165122b4ac62btrawick *) mod_proxy_fcgi: Support iobuffersize parameter. [Jeff Trawick]
dc10f7a2f87d4cd7cdd16dc248b165122b4ac62btrawick *) mod_cache: Preserve non-cacheable headers forwarded from an origin 304
dc10f7a2f87d4cd7cdd16dc248b165122b4ac62btrawick response. PR 55547. [Yann Ylavic]
431d6106eaf796cc8dfa8cb0db2b180dd93ed6dftrawick *) mod_cache: Don't add cached/revalidated entity headers to a 304 response.
390489eb69fe15943ddf67adcc832ca8de125cd9jerenkrantz PR 55547. [Yann Ylavic]
390489eb69fe15943ddf67adcc832ca8de125cd9jerenkrantz *) mod_authnz_ldap: Fail explicitly when the filter is too long. Remove
390489eb69fe15943ddf67adcc832ca8de125cd9jerenkrantz unnecessary apr_pstrdup() and strlen(). [Graham Leggett]
a1e8b54f269a8f2388590174174509546e886e60stoddard *) Add the ldap-search option to mod_authnz_ldap, allowing authorization
a1e8b54f269a8f2388590174174509546e886e60stoddard to be based on arbitrary expressions that do not include the username.
3eb95d6629bb326ae90e5eec693b7e628951751brbb [Graham Leggett]
109d280c3fcf810e573fc1af5e141ad525c45811bjh *) Add the ldap function to the expression API, allowing LDAP filters and
109d280c3fcf810e573fc1af5e141ad525c45811bjh distinguished names based on expressions to be escaped correctly to
61d2cd001754548e90364aa3a7e76863616544b0minfrin guard against LDAP injection. [Graham Leggett]
61d2cd001754548e90364aa3a7e76863616544b0minfrin *) Add module mod_ssl_ct, which provides an implementation of Certificate
61d2cd001754548e90364aa3a7e76863616544b0minfrin Transparency (RFC 6962) for httpd. [Jeff Trawick]
9a3bbca61e24c13d8b496116ac759117136c6bf4aaron *) mod_proxy: Preserve original request headers even if they differ
9a3bbca61e24c13d8b496116ac759117136c6bf4aaron from the ones to be forwarded to the backend. PR 45387.
9a3bbca61e24c13d8b496116ac759117136c6bf4aaron [Yann Ylavic]
9a3bbca61e24c13d8b496116ac759117136c6bf4aaron *) mod_proxy: When ping/pong is configured for a worker, don't send or
64c351fd973428b5bb4c28e983fa86875ea4e60fdougm forward "100 Continue" (interim) response to the client if it does
64c351fd973428b5bb4c28e983fa86875ea4e60fdougm not expect one. [Yann Ylavic]
64c351fd973428b5bb4c28e983fa86875ea4e60fdougm *) mod_remoteip: Prevent an external proxy from presenting an internal
0506359f47150991eaaae37ca07f94117a9aa63dtrawick proxy. PR 55962. [Mike Rumph]
0506359f47150991eaaae37ca07f94117a9aa63dtrawick *) mod_ssl: Add hooks to allow other modules to perform processing at
0506359f47150991eaaae37ca07f94117a9aa63dtrawick several stages of initialization and connection handling. See
67f62b7a48ff9eb8d9f31898dceaf9f89280a723dougm mod_ssl_openssl.h. [Jeff Trawick]
9d3fdc3bb8077a46851080e17ef9f16c83720c8ftrawick *) mod_proxy_wstunnel: Avoid sending error responses down an upgraded
9d3fdc3bb8077a46851080e17ef9f16c83720c8ftrawick websockets connection as it is being close down. [Eric Covener]
219472ea2d5f1563509321d8b8a91b116792bf7adougm *) mod_proxy_wstunnel: Allow the administrator to cap the amount
219472ea2d5f1563509321d8b8a91b116792bf7adougm of time a synchronous websockets connection stays idle with
219472ea2d5f1563509321d8b8a91b116792bf7adougm ProxyWebsocketIdleTimeout. [Eric Covener]
c048b545f06921f53ceb830b30f99aed7b369d95dougm *) mod_proxy_wstunnel: Change to opt-in for asynchronous support, adding
c048b545f06921f53ceb830b30f99aed7b369d95dougm directives ProxyWebsocketAsync and ProxyWebsocketAsyncDelay.
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm [Eric Covener]
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm *) mod_proxy_wstunnel: Stop leaking websockets backend connections under
0ea12b5dcb3d1d399f9bff6f56fb445d80205f9dstriker event MPM (trunk-only). [Eric Covener]
0ea12b5dcb3d1d399f9bff6f56fb445d80205f9dstriker *) mod_proxy_http: Add detach_backend hook (potentially usable
e93624301705e3dc68992e3b488a764389eb8b98trawick in other proxy scheme handlers). [Jeff Trawick]
cba0728e3535ee87e89cdb3cb54ce91eda18f6ccaaron *) mod_deflate: Add DeflateAlterETag to control how the ETag
cba0728e3535ee87e89cdb3cb54ce91eda18f6ccaaron is modified. The 'NoChange' parameter mimics 2.2.x behavior.
cba0728e3535ee87e89cdb3cb54ce91eda18f6ccaaron PR 45023, PR 39727. [Eric Covener]
a45de374fb215f294eb1369d4406ac79d6596ee1brianp *) mod_rewrite: Add 'BNF' (backreferences-no-plus) flag to RewriteRule to
a45de374fb215f294eb1369d4406ac79d6596ee1brianp allow spaces in backreferences to be encoded as %20 instead of '+'.
a45de374fb215f294eb1369d4406ac79d6596ee1brianp [Eric Covener]
7f14bcf6b594703df385ce84ba2ee3cdf3ccbae4trawick *) mod_rewrite: Support an optional list of characters to escape in the
7f14bcf6b594703df385ce84ba2ee3cdf3ccbae4trawick argument for the 'B' (escape backreferences) flag. [Eric Covener]
0007bb1e01dd762bde7280beb57113309c1715a3trawick *) mod_ssl: Add SSLOCSPUseRequestNonce directive to control whether or not
a1be7357e2c08b9dfe52c277063d212d65b15feejim OCSP requests should use a nonce to be checked against the responder's
a1be7357e2c08b9dfe52c277063d212d65b15feejim one. PR 56233. [ Yann Ylavic ]
a1be7357e2c08b9dfe52c277063d212d65b15feejim *) mod_dir: Default to 2.2-like behavior and skip execution when method is
a1be7357e2c08b9dfe52c277063d212d65b15feejim neither GET nor POST, such as for DAV requests. PR 54914. [Chris Darroch]
6682df9b639663c50f447e5690dd62cce7b1c086trawick *) mod_rewrite: Rename the handler that does per-directory internal
6682df9b639663c50f447e5690dd62cce7b1c086trawick redirects to "rewrite-redirect-handler" from "redirect-handler" so
51c0f0fe0a49a180389009442a83f74b1916f96atrawick it is less ambiguous and less likely to be reused. [Eric Covener]
51c0f0fe0a49a180389009442a83f74b1916f96atrawick *) mod_rewrite: Protect against looping with the [N] flag by enforcing a
51c0f0fe0a49a180389009442a83f74b1916f96atrawick default limit of 10000 iterations, and allowing each rule to change its
51c0f0fe0a49a180389009442a83f74b1916f96atrawick limit. [Eric Covener]
7e8bc9ca9d1e752f6ca6debec6be8addae8bd72etrawick *) mod_ssl: Fix config merging of SSLOCSPEnable and SSLOCSPOverrideResponder.
7e8bc9ca9d1e752f6ca6debec6be8addae8bd72etrawick [Jeff Trawick]
ecb511c254d5affe7cc018482d53c19aaf145878jerenkrantz *) Add HttpContentLengthHeadZero and HttpExpectStrict directives.
ecb511c254d5affe7cc018482d53c19aaf145878jerenkrantz [Yehuda Sadeh <yehuda inktank com>, Justin Erenkrantz]
60b83cd8f9427809082340cfd7581091990962f5jwoolley *) FreeBSD: Disable IPv4-mapped listening sockets by default for versions
60b83cd8f9427809082340cfd7581091990962f5jwoolley 5+ instead of just for FreeBSD 5. PR 53824. [Jeff Trawick]
e93624301705e3dc68992e3b488a764389eb8b98trawick *) mod_auth_form: Add a debug message when the fields on a form are not
e93624301705e3dc68992e3b488a764389eb8b98trawick recognised. [Graham Leggett]
4da4d1ae427ee8827c2325dd121ac05a83afd579wrowe *) mod_ssl: Add -t -DDUMP_CA_CERTS option which dumps the filenames of all
a2d4f1da4e19836b2d6a673f80f33381a926a8bddougm configured SSL CA certificates to stdout the same way as DUMP_CERTS does.
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb [Jan Kaluza]
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb *) mod_ssl: Don't flush when an EOS is received. Prepares mod_ssl
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb to support write completion. [Graham Leggett]
4aaf7088758ca56823e585969320f2405a7cc5fcdougm *) core: Add parse_errorlog_arg callback to ap_errorlog_provider
4aaf7088758ca56823e585969320f2405a7cc5fcdougm to allow providers to check the ErrorLog argument. [Jan Kaluza]
e0596968fe84a2bdaebe0192d8d64d2e9856d4d6brianp *) mod_cgid: Use the servers Timeout for each read from a CGI script,
e0596968fe84a2bdaebe0192d8d64d2e9856d4d6brianp allow override with new CGIDRequestTimeout directive. PR43494
e0596968fe84a2bdaebe0192d8d64d2e9856d4d6brianp [Eric Covener, Toshikuni Fukaya <toshikuni-fukaya cybozu co jp>]
f33c2c86b419be97248c5289b71738b5f0c7ab0adirkx *) core: Add missing Reason-Phrase in HTTP response headers.
f33c2c86b419be97248c5289b71738b5f0c7ab0adirkx PR 54946. [Rainer Jung]
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim *) core: ensure any abnormal exit is reported to stderr if it's a tty.
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim PR 55670 [Nick Kew]
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim *) mod_lua: Let the Inter-VM get/set functions work with a global
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley shared memory pool instead of a per-process pool. [Daniel Gruno]
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley *) ldap: Support ldaps when using the Microsoft LDAP SDK.
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley PR 54626. [Jean-Frederic Clere]
47638f4a67ce38e5a83e7a303d6f2d5c9ff47b4ebrianp *) mod_proxy: Add ap_connection_reusable() for checking if a connection
47638f4a67ce38e5a83e7a303d6f2d5c9ff47b4ebrianp is reusable as of this point in processing. [Jeff Trawick]
82630c4a04be47f39298d3284b2c596244fb509bbrianp *) mod_authnz_ldap: Change default value of AuthLDAPMaxSubGroupDepth to 0
82630c4a04be47f39298d3284b2c596244fb509bbrianp to avoid performance problems when subgroups aren't in use. [Eric Covener]
35d682920b0b7073bb9ff8c8794f0f73e3ee1a47slive *) mod_syslog: New module implementing syslog ap_error_log provider.
35d682920b0b7073bb9ff8c8794f0f73e3ee1a47slive Previously, this code was part of core, now it's in separate module.
a2d4f1da4e19836b2d6a673f80f33381a926a8bddougm [Jan Kaluza]
a2d4f1da4e19836b2d6a673f80f33381a926a8bddougm *) core: Add ap_errorlog_provider to make ErrorLog logging modular. Move
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard syslog support from core to new mod_syslog. [Jan Kaluza]
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard *) WinNT MPM: If ap_run_pre_connection() fails or sets c->aborted, don't
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard save the socket for reuse by the next worker as if it were an
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard APR_SO_DISCONNECTED socket. Restores 2.2 behavior. [Eric Covener]
983988ac7b8faaf037f4df0ab29729cd047a3ffdtrawick *) mod_status, mod_echo: Fix the display of client addresses.
983988ac7b8faaf037f4df0ab29729cd047a3ffdtrawick They were truncated to 31 characters which is not enough for IPv6 addresses.
7a64b871b8b5e5a427b570e90f0e38e88266c783jim PR 54848 [Bernhard Schmidt <berni birkenwald de>]
7a64b871b8b5e5a427b570e90f0e38e88266c783jim *) core: Add ap_log_data(), ap_log_rdata(), etc. for logging buffers.
7a64b871b8b5e5a427b570e90f0e38e88266c783jim [Jeff Trawick]
a736bac16e58d5e96945f35ee3c43a2cd2f5d37ejerenkrantz *) mod_unique_id: Use output of the PRNG rather than IP address and
a736bac16e58d5e96945f35ee3c43a2cd2f5d37ejerenkrantz pid, avoiding sleep() call and possible DNS issues at startup,
a736bac16e58d5e96945f35ee3c43a2cd2f5d37ejerenkrantz plus improving randomness for IPv6-only hosts.
797d596a95d4f9900e83ec18295b4ca4951bf763jerenkrantz [Jan Kaluza <jkaluza redhat.com>]
797d596a95d4f9900e83ec18295b4ca4951bf763jerenkrantz *) mod_authnz_ldap: Support primitive LDAP servers that do not accept
5842e6b336b1cc0252b6cc2944dd81c7d3a19a1bbrianp filters, such as "SDBM-backed LDAP" on z/OS, by allowing a special
5842e6b336b1cc0252b6cc2944dd81c7d3a19a1bbrianp filter "none" to be specified in AuthLDAPURL. [Eric Covener]
2532433e80d73506f7bcc18bd0dab686f1c39397minfrin *) mod_file_cache: mod_file_cache should be able to serve files that
2532433e80d73506f7bcc18bd0dab686f1c39397minfrin haven't had a Content-Type set via e.g. mod_mime. [Eric Covener]
c148bc6b4eea544af816783400362f741c5f5fc2trawick *) core: merge AllowEncodedSlashes from the base configuration into
c148bc6b4eea544af816783400362f741c5f5fc2trawick virtual hosts. [Eric Covener]
9d432e23f6025b78322cbee43e8e89262a108e5eaaron *) AIX: Install DSO's with "cp" instead of "install" in instdso.sh
9d432e23f6025b78322cbee43e8e89262a108e5eaaron [Eric Covener]
9d432e23f6025b78322cbee43e8e89262a108e5eaaron *) mod_ldap: Don't keep retrying if a new LDAP connection times out.
9d432e23f6025b78322cbee43e8e89262a108e5eaaron [Eric Covener]
9d432e23f6025b78322cbee43e8e89262a108e5eaaron *) mod_deflate: permit compilation of mod_deflate against a zlib that has
6a5bdbbacf4a62adecde52b8f23ebcc4fa2a08b8trawick been configured with -D Z_PREFIX, which redefines the token "deflate".
6a5bdbbacf4a62adecde52b8f23ebcc4fa2a08b8trawick [Eric Covener]
10306ac2c175f420e6989568f4c8535a5dbc1349minfrin *) mod_socache_shmcb.c: Remove arbitrary restriction on shared memory size
10306ac2c175f420e6989568f4c8535a5dbc1349minfrin previously limited to 64MB. [Jens Låås <jelaas gmail.com>]
10306ac2c175f420e6989568f4c8535a5dbc1349minfrin *) mod_auth_digest: Use the secret when generating nonces in all cases and
b4e4d76bf454e1b603b410110356dbcf12f3bc42jim not only when AuthName is used in .htaccess files (this change may cause
b4e4d76bf454e1b603b410110356dbcf12f3bc42jim problems if used with round robin load balancers). Don't regenerate the
b4e4d76bf454e1b603b410110356dbcf12f3bc42jim secret on graceful restarts. PR 54637 [Stefan Fritsch]
adb1e17ae7e1cf5cf4f8f2b07d3389cb55f4becetrawick *) core: Remove apr_brigade_flatten(), buffering and duplicated code
adb1e17ae7e1cf5cf4f8f2b07d3389cb55f4becetrawick from the HTTP_IN filter, parse chunks in a single pass with zero copy.
71f891073f6fa0209870791f64cbbf28d77ffdc1brianp Reduce memory usage by 48 bytes per request. [Graham Leggett]
2864362ca8266097928e84f101010bdf814ffa08stoddard *) core: Stop the HTTP_IN filter from attempting to write error buckets
2864362ca8266097928e84f101010bdf814ffa08stoddard to the output filters, which is bogus in the proxy case. Create a
2864362ca8266097928e84f101010bdf814ffa08stoddard clean mapping from APR codes to HTTP status codes, and use it where
2864362ca8266097928e84f101010bdf814ffa08stoddard needed. [Graham Leggett]
f51dbb1f5b66d94b5c190bfcd444aa73bdc2b176trawick *) mod_proxy: Ensure network errors detected by the proxy are returned as
893c106ae59d8e96d921524b123ae26dea8ad37fgstein 504 Gateway Timout as opposed to 502 Bad Gateway, in order to be
893c106ae59d8e96d921524b123ae26dea8ad37fgstein compliant with RFC2616 14.9.4 Cache Revalidation and Reload Controls.
893c106ae59d8e96d921524b123ae26dea8ad37fgstein *) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
3aa6444bcee4e9fc32ec8860d832ff83a15784efianh [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez
e2bdfd25d9d0461e0a3ab18ceff2113215e3e115brianp *) core, mod_ssl: Enable the ability for a module to reverse the sense of
e2bdfd25d9d0461e0a3ab18ceff2113215e3e115brianp a poll event from a read to a write or vice versa. This is a step on
b9fe73991e7c592a634242a7e11f924689f58e1fgstein the way to allow mod_ssl taking full advantage of the event MPM.
b9fe73991e7c592a634242a7e11f924689f58e1fgstein [Graham Leggett]
b9fe73991e7c592a634242a7e11f924689f58e1fgstein *) mod_ldap: LDAP connections used for authentication were not respecting
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick LDAPConnectionPoolTimeout. PR 54587
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick *) core: ap_rgetline_core now pulls from r->proto_input_filters.
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick *) mod_proxy_html: process parsed comments immediately.
81b8d0f83e9d0bc2bf6900fc680737e0cac439a2brianp Fixes bug where parsed comments may be lost. [Nick Kew]
b5033962c73a470b6f36a3ac796c542a6ab4ddf6brianp *) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
d7856f850b9b51165f23ae381a891bda894e1373ianh *) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
d7856f850b9b51165f23ae381a891bda894e1373ianh *) core: Add option to add valgrind support. Use it to reduce false positive
d7856f850b9b51165f23ae381a891bda894e1373ianh warnings in mod_ssl. [Stefan Fritsch]
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick *) mod_authn_file, mod_authn_dbd, mod_authn_dbm, mod_authn_socache:
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick Cache the result of the most recent password hash verification for every
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick keep-alive connection. This saves some expensive calculations.
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick [Stefan Fritsch]
ab2053f3cdda69cfa5e4ce0800ea7af203cc6d5ddougm *) http: Remove support for Request-Range header sent by Navigator 2-3 and
ab2053f3cdda69cfa5e4ce0800ea7af203cc6d5ddougm MSIE 3. [Stefan Fritsch]
88ecd979f1112454432371f55a1420240fae3743trawick *) core, http: Extend HttpProtocol with an option to enforce stricter HTTP
88ecd979f1112454432371f55a1420240fae3743trawick conformance or to only log the found problems. [Stefan Fritsch]
548e06e26f5377b2efbb7e0dab20f536e5e24160trawick *) core: Correctly parse an IPv6 literal host specification in an absolute
548e06e26f5377b2efbb7e0dab20f536e5e24160trawick URL in the request line. [Stefan Fritsch]
c02a689f2274966ed5d1c16207f74b5128c35c86trawick *) EventOpt MPM
f51dbb1f5b66d94b5c190bfcd444aa73bdc2b176trawick *) core: Add LogLevelOverride directive that allows to override the
f51dbb1f5b66d94b5c190bfcd444aa73bdc2b176trawick loglevel for clients from certain IPs. This also works for things
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard like the SSL handshake where <If> LogLevel ... </If> is evaluated
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard too late. [Stefan Fritsch]
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard *) core: Add new directive Warning to issue warnings from a configuration
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard file. Both Warning and Error now generate a timestamped log message.
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard [Fabien Coelho]
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard *) ap_expr: Add SERVER_PROTOCOL_VERSION, ..._MAJOR, and ..._MINOR
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard variables. [Stefan Fritsch]
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard *) core: New directive RegisterHttpMethod for registering non-standard
3a9c3ec5357b36fc34766cb8166168311af3562frbb HTTP methods. [Stefan Fritsch]
94f4821a5444a4fe782f772aef5db4d8b839675djerenkrantz *) core: New directive HttpProtocol which allows to disable HTTP/0.9
94f4821a5444a4fe782f772aef5db4d8b839675djerenkrantz support. [Stefan Fritsch]
2a49e30bae376c9744b96c8681ab88122ccaa46cjerenkrantz *) mod_allowhandlers: New module to forbid specific handlers for specific
2a49e30bae376c9744b96c8681ab88122ccaa46cjerenkrantz directories. [Stefan Fritsch]
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin *) mod_systemd: New module, for integration with systemd on Linux.
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin [Jan Kaluza <jkaluza redhat.com>]
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin *) WinNT MPM: Store pid and generation for each thread in scoreboard
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin to allow tracking of threads from exiting children via mod_status
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin or other such mechanisms. [Jeff Trawick]
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin - APIs: ap_log_pid(), ap_remove_pid, ap_read_pid()
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin - core: the scoreboard (ScoreBoardFile), pid file (PidFile), and
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin mutexes (Mutex)
c49200a2bdbb8fa1f2e5c3b87cc497ecdeefa8feminfrin - mod_cache: thundering herd lock directory
c49200a2bdbb8fa1f2e5c3b87cc497ecdeefa8feminfrin - mod_lbmethod_heartbeat, mod_heartmonitor: heartbeat storage file
c49200a2bdbb8fa1f2e5c3b87cc497ecdeefa8feminfrin - mod_ldap: shared memory cache
c49200a2bdbb8fa1f2e5c3b87cc497ecdeefa8feminfrin - mod_socache_shmcb, mod_socache_dbm: shared memory or dbm for cache
103005439776bb7aeccb95ebf4761ebfef3f9c39ianh [Jeff Trawick]
103005439776bb7aeccb95ebf4761ebfef3f9c39ianh *) suexec: Add --enable-suexec-capabilites support on Linux, to use
92d311b27a6182c2eed67317990c8c168584ee75trawick setuid/setgid capability bits rather than a setuid root binary.
92d311b27a6182c2eed67317990c8c168584ee75trawick [Joe Orton]
92d311b27a6182c2eed67317990c8c168584ee75trawick *) suexec: Add support for logging to syslog as an alternative to logging
92d311b27a6182c2eed67317990c8c168584ee75trawick to a file; configure --without-suexec-logfile --with-suexec-syslog.
744ecbcc06a9128fc4730d1334cc180bf7fc521caaron [Joe Orton]
6f0dd808a674b7c09a625b36f320030f4e339f8faaron *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.
744ecbcc06a9128fc4730d1334cc180bf7fc521caaron [Matthew Steele <mdsteele google.com>]
59511de77b389ced52253d055fc470ecfedfcd99aaron *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
59511de77b389ced52253d055fc470ecfedfcd99aaron be compiled by the build compiler instead of the host compiler.
59511de77b389ced52253d055fc470ecfedfcd99aaron Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
b5cdec7910a44654cb254b99c5a39d7c180c4bcajerenkrantz PR 51257. [Guenter Knauf]
b5cdec7910a44654cb254b99c5a39d7c180c4bcajerenkrantz *) core: In maintainer mode, replace apr_palloc with a version that
b5cdec7910a44654cb254b99c5a39d7c180c4bcajerenkrantz initializes the allocated memory with non-zero values, except if
b5cdec7910a44654cb254b99c5a39d7c180c4bcajerenkrantz AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]
c10fe96ac7d024918e26af6c8ba5470273b75bb2jwoolley *) mod_policy: Add a new testing module to help server administrators
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron enforce a configurable level of protocol compliance on their
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron servers and application servers behind theirs. [Graham Leggett]
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron *) mod_firehose: Add a new debugging module able to record traffic
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron passing through the server in such a way that connections and/or
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron requests be reconstructed and replayed. [Graham Leggett]
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron *) mod_noloris
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm *) Simple MPM
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm *) mod_serf
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm [Apache 2.5.0-dev includes those bug fixes and changes with the
6362515725d2b6d66ac3b26531f8c53ac75f8c20wrowe Apache 2.4.xx tree as documented below, except as noted.]
f783dff0c8b69344a6b67e97f16b91f8b0790799dougmChanges with Apache 2.4.x and later:
6362515725d2b6d66ac3b26531f8c53ac75f8c20wrowe *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup
98ae9b96926a3dd99b195d7628c7e527e720f6acaaronChanges with Apache 2.2.x and later:
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
98ae9b96926a3dd99b195d7628c7e527e720f6acaaronChanges with Apache 2.0.x and later: