CHANGES revision 0481ff0599c9e3c0c7ad5c1930939dcdac908582
2cd8fa3ef9b168429dcf76603e7b95c58317dd28Mark Andrews -*- coding: utf-8 -*-
2cd8fa3ef9b168429dcf76603e7b95c58317dd28Mark AndrewsChanges with Apache 2.3.0
5ba04ba7a99371afcd4d988854ee71bffdb20df4Mark Andrews[ When backported to 2.2.x, remove entry from this file ]
5ba04ba7a99371afcd4d988854ee71bffdb20df4Mark Andrews *) mod_dbd: Handle integer configuration directive parameters with a
f6f0bf7d4bb135ba1a421520076a47a61b6870fcMark Andrews dedicated function.
4e681da26da4fff442b3ae24b0da2de1f240c43cMark Andrews *) Change the directives within the mod_session* modules to be valid
4e681da26da4fff442b3ae24b0da2de1f240c43cMark Andrews both inside and outside the location/directory sections, as
4e681da26da4fff442b3ae24b0da2de1f240c43cMark Andrews suggested by wrowe. [Graham Leggett]
4499c6cd5e376c59e06cd0be61f3620a1336bc5fMark Andrews *) mod_auth_form: Add a module capable of allowing end users to log
4499c6cd5e376c59e06cd0be61f3620a1336bc5fMark Andrews in using an HTML form, storing the credentials within mod_session.
1195e2e1f2853df56d7ec69d2e01a99d44e4d61dMark Andrews [Graham Leggett]
392cd518b3aff35c0396f84884cd51680edd68a1Mark Andrews *) Add a function to the http filters that is able to parse an HTML
392cd518b3aff35c0396f84884cd51680edd68a1Mark Andrews form request with the type of application/x-www-form-urlencoded.
392cd518b3aff35c0396f84884cd51680edd68a1Mark Andrews [Graham Leggett]
5efa612be0471cc4e133b795db3dd3addf18ba6cMark Andrews *) mod_session_crypto: Initialise SSL in the post config hook.
5efa612be0471cc4e133b795db3dd3addf18ba6cMark Andrews [Ruediger Pluem, Graham Leggett]
78ef0ebab3a4039f8efc8afdb7ee4b936ffc34caMark Andrews *) mod_session_dbd: Add a session implementation capable of storing
78ef0ebab3a4039f8efc8afdb7ee4b936ffc34caMark Andrews session information in a SQL database via the dbd interface. Useful
78ef0ebab3a4039f8efc8afdb7ee4b936ffc34caMark Andrews for sites where session privacy is important. [Graham Leggett]
d9147148dde80db2ce3390ded26333d106d3c10bTatuya JINMEI 神明達哉 *) mod_session_crypto: Add a session encoding implementation capable
75654de87118c587629b5dc6882b6c1925d34983Tatuya JINMEI 神明達哉 of encrypting and decrypting sessions wherever they may be stored.
75654de87118c587629b5dc6882b6c1925d34983Tatuya JINMEI 神明達哉 Introduces a level of privacy when sessions are stored on the
71839e2a424a904a60429a380ee7685464022e4bMark Andrews browser. [Graham Leggett]
578f588228f5e04ccf648b6ae596f396ad6a22c9Mark Andrews *) mod_session_cookie: Add a session implementation capable of storing
578f588228f5e04ccf648b6ae596f396ad6a22c9Mark Andrews session information within cookies on the browser. Useful for high
578f588228f5e04ccf648b6ae596f396ad6a22c9Mark Andrews volume sites where server bound sessions are too resource intensive.
e0199985cfe68e8556cf0060ad8f7effbcdc5628Mark Andrews [Graham Leggett]
38e8022ace865803bdd609c9763cd7d7ba2818dcMark Andrews *) mod_session: Add a generic session interface to unify the different
38e8022ace865803bdd609c9763cd7d7ba2818dcMark Andrews attempts at saving persistent sessions across requests.
445acbbea8bd5143749e97a8ff247a808321aa6cMark Andrews [Graham Leggett]
8407fbc61d73caa766c0689558525d0a76296c86Mark Andrews *) core, authn/z: Avoid calling access control hooks for internal requests
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews with configurations which match those of initial request. Revert to
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews original behaviour (call access control hooks for internal requests
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews with URIs different from initial request) if any access control hooks or
b9625d9be5d89015b75cc7c25088a8d1a3bb7655Mark Andrews providers are not registered as permitting this optimization.
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews Introduce wrappers for access control hook and provider registration
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews which can accept additional mode and flag data. [Chris Darroch]
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews *) http_filters: Don't spin if get an error when reading the
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews next chunk. PR 44381 [Ruediger Pluem]
3dc3d557be91d59317b34fc5a9ae79b1925d5878Mark Andrews *) mod_dav: Return "method not allowed" if the destination URI of a WebDAV
c5076a76f6562b5aa48e6a1c680c343b53846157Mark Andrews copy / move operation is no DAV resource. PR 44734 [Ruediger Pluem]
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews *) Introduced ap_expr API for expression evaluation.
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews This is adapted from mod_include, which is the first module
86548554f6180bbe051c8cd8f03c93fc9b6a7825Mark Andrews to use the new API.
5ed76fa7ea83d3ce7a33d365aa3b84410c3b8773Mark Andrews *) mod_authz_dbd: When redirecting after successful login/logout per
5ed76fa7ea83d3ce7a33d365aa3b84410c3b8773Mark Andrews AuthzDBDRedirectQuery, do not report authorization failure, and use
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews first row returned by database query instead of last row.
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews [Chris Darroch]
b21b49a1d43dbc44d2b15674ce03a13562165566Mark Andrews *) mod_rewrite: Initialize hash needed by ap_register_rewrite_mapfunc early
b21b49a1d43dbc44d2b15674ce03a13562165566Mark Andrews enough. PR 44641 [Daniel Lescohier <daniel.lescohier cnet.com>]
ea38808b7dc1b2e760f18f2cc3ae07deaf15ba1aMark Andrews *) mod_authn_dbd: Disambiguate and tidy database authentication
de6ceebf98bedee0b1e1e81d078befbd728b801cMark Andrews error messages. PR 43210. [Chris Darroch, Phil Endecott
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews <spam_from_apache_bugzilla chezphil.org>]
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews *) mod_cache: Handle If-Range correctly if the cached resource was stale.
ed6e3610e3e56aac554dc93cad461a0016e961f9Mark Andrews PR 44579 [Ruediger Pluem]
1cf54d1966b3de8f6593e9e80eae9a80a1c011adMark Andrews *) mod_speling: remove regression from 1.3/2.0 behavior and
c3c72c1033b9d085b1a1fe74a9e3efb6db724ce2Mark Andrews drop dependency between mod_speling and AcceptPathInfo.
b4fe7caac90b28629d207b40a77862e2535f925cMark Andrews PR 43562 [Jose Kahan <jose w3.org>]
a0a19510c03e6004fd11ec278745d499751cd081Mark Andrews *) mod_ldap: Correctly return all requested attribute values
c2ec022f5784a2ff844f7d062c2022197dc4ad09Mark Andrews when some attributes have a null value.
c2ec022f5784a2ff844f7d062c2022197dc4ad09Mark Andrews PR 44560 [Anders Kaseorg <anders kaseorg.com>]
46ed893dd0c8096d2bcbf31e6dcf79b2786e7b7fMark Andrews *) core: check symlink ownership if both FollowSymlinks and
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews SymlinksIfOwnerMatch are set [Nick Kew]
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews *) core: fix origin checking in SymlinksIfOwnerMatch
ea17e969771f19485dc7ab2f731d641128a9ee3bMark Andrews PR 36783 [Robert L Mathews <rob-apache.org.bugs tigertech.net>]
ea17e969771f19485dc7ab2f731d641128a9ee3bMark Andrews *) rotatelogs: Added '-f' option to force rotatelogs to create the
5eb0659963ec2aa5158425b39620ec1b30c83c7bMark Andrews logfile as soon as started, and not wait until it reads the
5eb0659963ec2aa5158425b39620ec1b30c83c7bMark Andrews first entry. [Jim Jagielski]
7952b2b43e880b18e63613805f71fd3e8624bb44Mark Andrews *) mod_proxy: Do not try a direct connection if the connection via a
6fac7ff1f9ec9c3873d3b55c5079fa79aba1f146Mark Andrews remote proxy failed before and the request has a request body.
6fac7ff1f9ec9c3873d3b55c5079fa79aba1f146Mark Andrews [Ruediger Pluem]
e1f638a7141a4c1364e4ca45025241c9e2fecf74Mark Andrews *) mod_substitute: The default is now flattening the buckets after
4995dba770c1f5f421cf22a2e9e138586a153765Mark Andrews each substitution. This was mostly done to abide by the
4995dba770c1f5f421cf22a2e9e138586a153765Mark Andrews Principle Of Least Astonishment. The newly added 'q' flag allows for
4995dba770c1f5f421cf22a2e9e138586a153765Mark Andrews the quicker, more efficient bucket-splitting if the user so
4995dba770c1f5f421cf22a2e9e138586a153765Mark Andrews desires. [Jim Jagielski]
b39213ce599dc433c6f99144c97ca3d562f40344Mark Andrews *) Added 'disablereuse' option for ProxyPass which, essentially,
154bd87b5c9d603329dd691b822525c6885f21d4Mark Andrews disables connection pooling for the backend servers.
8862388bcb44f634cbfc3e69f11ff4cb76590a4bMark Andrews [Jim Jagielski]
6ec0f98cf6e88aeba1615763fdec253bf391f22eMark Andrews *) Activate mod_cache, mod_file_cache and mod_disc_cache as part of the
80cc19dc262cead5a8af41838ebfae5a6e587605Mark Andrews 'most' set for '--enable-modules' and '--enable-shared-mods'. Include
80cc19dc262cead5a8af41838ebfae5a6e587605Mark Andrews mod_mem_cache in 'all' as well. [Dirk-Willem van Gulik]
d4e1933abc4bfa3d42dcc2f093c81816a317dde6Mark Andrews *) Also install mod_so.h, mod_rewrite.h and mod_cache.h; as these
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews contain public function declarations which are useful for
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews third party module authors. PR 42431 [Dirk-Willem van Gulik].
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews *) mod_dir, mod_negotiation: pass the output filter information
7c82b7ae3f3006e20d00529a15372d6cba133c20Mark Andrews to newly created sub requests; as these are later on used
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews as true requests with an internal redirect. This allows for
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews mod_cache et.al. to trap the results of the redirect.
7c82b7ae3f3006e20d00529a15372d6cba133c20Mark Andrews [Dirk-Willem van Gulik, Ruediger Pluem]
39e5cab80a2abc95ca034ac79ea3f973fc66f5b3Mark Andrews *) ab: Use a 64 bit unsigned int instead of a signed long to count the
0b9af9eb37f624033652f6cc463262474ee13344Mark Andrews bytes transferred to avoid integer overflows. PR 44346 [Ruediger Pluem]
3b1fce680f1dbe9467cd3b0ab3138ea52d5a976fMark Andrews *) mod_proxy_ajp: Do not retry request in the case that we either failed to
3b1fce680f1dbe9467cd3b0ab3138ea52d5a976fMark Andrews sent a part of the request body or if the request is not idempotent.
ead4d2d676b12a856769d3750861c6efbb95f709Mark Andrews PR 44334 [Ruediger Pluem]
0822cc50657c972c6a5ee29cba9506847c7ea7c2Mark Andrews *) rotatelogs: Don't leak memory when reopening the logfile.
bdb609f5874056f6f1cd212ebf8700132e683fe5Mark Andrews PR 40183 [Ruediger Pluem, Takashi Sato <serai lans-tv.com>]
c5cde9d5a70c921da901a23845e740ccc7a8c4e4Mark Andrews *) mod_ldap: Add support (taking advantage of the new APR capability)
bae21f249ead77e442a025b9b18d90e21ebf72ceMark Andrews for ldap rebind callback while chasing referrals. This allows direct
321df4df1972da49223fc8ee1180f94b88295568Mark Andrews searches on LDAP servers (in particular MS Active Directory 2003+)
a3a09ca2497e925a9f0ba76f1525c6c60e5d5094Mark Andrews using referrals without the use of the global catalog.
7f5a3cea4e93ad683b13ebef8a6589afd97fb762Mark Andrews PRs 26538, 40268, and 42557 [Paul J. Reder]
9c3df90dd3767bcc14c4028fb3d81b26d056e821Mark Andrews *) ab: Do not try to read non existing response bodies of HEAD requests.
9c3df90dd3767bcc14c4028fb3d81b26d056e821Mark Andrews PR 34275 [Takashi Sato <serai lans-tv.com>]
50105afc551903541608b11851d73278b23579a3Mark Andrews *) Support chroot on Unix-family platforms
1285fa26e632e3b386435b730b47b5ff1a03e553Mark Andrews PR 43596 [Dimitar Pashev <mitko banksoft-bg.com>]
5a680f4170ba77be1e31cf1fc40ab43856919078Mark Andrews *) mod_proxy_http: Return HTTP status codes instead of apr_status_t
5a680f4170ba77be1e31cf1fc40ab43856919078Mark Andrews values for errors encountered while forwarding the request body
ad35e0aec9dae18ee31e760beab1602f7eb4ef05Mark Andrews PR 44165 [Eric Covener]
2047977ce2dfcfe3a0fa2d638c3242841310fad3Mark Andrews *) mod_ssl: Added server name indication support (SNI, RFC 4366).
8c5d451ea2898586c00932efeb5123b41afc9650Mark Andrews PR 34607. [Kaspar Brand <asfbugz velox.ch>]. A test configuration
9c8fb5f756d99a4ecba95df9a00757384f3b71b7Mark Andrews can be created with test/make_sni.sh [Dirk-Willem van Gulik].
fa7ee558e0536a94bfdb154a7c7ba298535459c4Mark Andrews *) ApacheMonitor.exe: Introduce --kill argument for use by the
d81018ac98b287438248cd0e3a1c230eb40b0b55Mark Andrews installer. This will permit the installation tool to remove
1d7cbe71b99ea0e883a4cf8af8a91bba04a3597eMark Andrews all running instances before attempting to remove the .exe.
1d7cbe71b99ea0e883a4cf8af8a91bba04a3597eMark Andrews [William Rowe]
c569a0e4d518bf30be1b2ba9cc3592fe470e9822Mark Andrews *) mod_proxy: Lower memory consumption for short lived connections.
c569a0e4d518bf30be1b2ba9cc3592fe470e9822Mark Andrews PR 44026. [Ruediger Pluem]
89783da064f4f9bf2e82d2b3941ddeffe2a8c30dMark Andrews *) mod_proxy: Keep connections to the backend persistent in the HTTPS case.
50105afc551903541608b11851d73278b23579a3Mark Andrews [Ruediger Pluem]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews *) rotatelogs: Improve atomicity when using -l and cleaup code.
a03848252fa85734ca75beae3d0b01bb503c0a8bMark Andrews PR 44004 [Rainer Jung]
a03848252fa85734ca75beae3d0b01bb503c0a8bMark Andrews *) mod_ssl: Add support for OCSP validation of client certificates.
d7282a5fe88699990943df5ee6a7a48ee7ee2f7bMark Andrews PR 41123. [Marc Stern <marc.stern approach.be>, Joe Orton]
22fa4e3206c2048cabaf75a3ae21132fd5542848Mark Andrews *) mod_unique_id: Fix timestamp value in UNIQUE_ID.
3ad4e307b64bcf8baa984e10a4e7549dbeaea31dMark Andrews PR 37064 [Kobayashi <kobayashi firstserver.co.jp>]
3f08fb69eb3b5f6eaa3c57160dff0998e1569283Mark Andrews *) mod_serf: New module for Reverse Proxying. [Paul Querna]
91c79af4755df2d892511512e0fc886639518a92Mark Andrews *) core: Add the option to keep aside a request body up to a certain
91c79af4755df2d892511512e0fc886639518a92Mark Andrews size that would otherwise be discarded, to be consumed by filters
bf74532c942054bccc3df5227009ce52063a9dafMark Andrews such as mod_include. When enabled for a directory, POST requests
80c5a37ddcb42239f6b7d16b66ca0426ca6ffe2cMark Andrews to shtml files can be passed through to embedded scripts as POST
2558e3f25d4972a028c99141bd26d3f3087630d5Mark Andrews requests, rather being downgraded to GET requests. [Graham Leggett]
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews *) mod_ssl: Fix TLS upgrade (RFC 2817) support. PR 41231. [Joe Orton]
74cb99072c4b0ebd2ccafcfa284288fa760f7a1aMark Andrews *) scoreboard: Correctly declare ap_time_process_request.
902aebfb5ad7c735f74f700da288dc4519b83123Mark Andrews *) core; scoreboard: ap_get_scoreboard_worker(sbh) now takes the sbh member
22cd704fca51434f7aba193fd94d3291cc94ba2bMark Andrews from the connection rec, ap_get_scoreboard_worker(proc, thread) will now
22cd704fca51434f7aba193fd94d3291cc94ba2bMark Andrews provide the unusual legacy lookup. [William Rowe]
7554feaef6057f5ea2926076900ac7634b911456Mark Andrews *) mpm winnt: fix null pointer dereference
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews PR 42572 [Davi Arnaut]
aa20b1b625dc406e1d9c3ff95d2a4af432e119faMark Andrews *) core: reinstate location walk to fix config for subrequests
aa20b1b625dc406e1d9c3ff95d2a4af432e119faMark Andrews PR 41960 [Jose Kahan <jose w3.org>]
54a8b1e6ede781e9f4059512530046db8c4de1ddMark Andrews *) mod_log_config: Add format options for %p so that the actual local
c4b8c7555d4abcfa4706c0551b00d71554250936Mark Andrews or remote port can be logged. PR 43415. [Adam Hasselbalch Hansen
c4b8c7555d4abcfa4706c0551b00d71554250936Mark Andrews <ahh@one.com>, Ruediger Pluem, Jeff Trawick]
c4b8c7555d4abcfa4706c0551b00d71554250936Mark Andrews *) mod_authnz_ldap, mod_authn_dbd: Tidy up the code to expose authn
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews parameters to the environment. Improve portability to
4b28ee17ca96def8c7e7a8a45af55da81545f20aMark Andrews EBCDIC machines by using apr_toupper(). [Martin Kraemer]
f7e94169a9814c8e7d2ac8ac62bf0ccafb5a2cb6Mark Andrews *) mod_ldap, mod_authnzldap: Add support for nested groups (i.e. the ability
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews to authorize an authenticated user via a "require ldap-group X" directive
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews where the user is not in group X, but is in a subgroup contained in X.
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews PR 42891 [Paul J. Reder]
807d4a4c54ab9a328afeb5f69dc680ffbcb384c8Tatuya JINMEI 神明達哉 *) mod_ssl: Add support for caching SSL Sessions in memcached. [Paul Querna]
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews *) ab: Add -r option to continue after socket receive errors.
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews [Filip Hanik <devlist hanik.com>]
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews *) mod_ldap: Fix the search limit parameter to ldap_search_ext_s()
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews for SDKs that define LDAP_NO_LIMIT to something other than -1.
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews [David Jones <oscaremma gmail.com>]
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews *) apxs: Enhance -q flag to print all known variables and their values
b3d3e578410209d849efb59c9ea4925ca5c9ca68Mark Andrews when invoked without variable name(s).
b3d3e578410209d849efb59c9ea4925ca5c9ca68Mark Andrews [William Rowe, Sander Temme]
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews *) apxs: Eliminate run-time check for mod_so. PR 40653.
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews [David M. Lee <dmlee crossroads.com>]
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews *) beos MPM: Create pmain pool and run modules' child_init hooks when
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews entering ap_mpm_run(), then destroy pmain when exiting ap_mpm_run().
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews [Chris Darroch]
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews *) netware MPM: Destroy pmain pool when exiting ap_mpm_run() so that
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews cleanups registered in modules' child_init hooks are performed.
90c4900d5cf1a1b556ae4c1de6338b2e7475ee55Mark Andrews [Chris Darroch]
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews *) mod_dbd: Stash DBD connections in request_config of initial request
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews only, or else sub-requests and internal redirections may cause
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews entire DBD pool to be stashed in a single HTTP request. [Chris Darroch]
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews *) Fix issue which could cause error messages to be written to access logs
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews on Win32. PR 40476. [Tom Donovan <Tom.Donovan acm.org>]
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews *) The LockFile directive, which specifies the location of
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews the accept() mutex lockfile, is deprecated. Instead, the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews AcceptMutex directive now takes an optional lockfile
029a79c8807a5378a31f0f92e9c600bd46be17c9Mark Andrews location parameter, ala SSLMutex. [Jim Jagielski]
6ec7bd9c691cf7b7a1d4f507e89f2b7cb22a12dcMark Andrews *) mod_authn_dbd: Export any additional columns queried in the SQL select
61fb42c4ef45d88e115bd769c30c4f36b461870bMark Andrews into the environment with the name AUTHENTICATE_<COLUMN>. This brings
61fb42c4ef45d88e115bd769c30c4f36b461870bMark Andrews mod_authn_dbd behaviour in line with mod_authnz_ldap. [Graham Leggett]
9cc75a3e5b0b54c5015e3f73a4a64d273560d5e3Mark Andrews *) mod_dbd: Key the storage of prepared statements on the hex string
9cc75a3e5b0b54c5015e3f73a4a64d273560d5e3Mark Andrews value of server_rec, rather than the server name, as the server name
c3f9bda20f0993bc7aa4c654e7e2082adfbaa47fMark Andrews may change (eg when the server name is set) at any time, causing
94d1015e65882e0f0c527abb0e8f66a609f46cb8Mark Andrews weird behaviour in modules dependent on mod_dbd. [Graham Leggett]
f0e57c23e01731ed9e7f2dae585e6c643e590111Mark Andrews *) mod_proxy_fcgi: Added win32 build. [Mladen Turk]
dbbcb98a7069e5b79c5100b3c9cc3f3e5704d14eMark Andrews *) sendfile_nonblocking() takes the _brigade_ as an argument, gets
c52ae25dd70636c673d4a299859137a1c8ba611aMark Andrews the first bucket from the brigade, finds it not to be a FILE
c52ae25dd70636c673d4a299859137a1c8ba611aMark Andrews bucket and barfs. The fix is to pass a bucket rather than a brigade.
6286983c506433d642b23e64845c50be30f2a7f6Mark Andrews [Niklas Edmundsson <nikke acc.umu.se>]
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews *) mod_rewrite: support rewritemap by SQL query [Nick Kew]
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews *) ap_get_server_version() has been removed. Third-party modules must
f470686d921e6aa26726109226310a42ad8a44f3Mark Andrews now use ap_get_server_banner() or ap_get_server_description().
f470686d921e6aa26726109226310a42ad8a44f3Mark Andrews [Jeff Trawick]
fd447061627e77db3ccf2536e14134e50647b9beMark Andrews *) All MPMs: Introduce a check_config phase between pre_config and
fd447061627e77db3ccf2536e14134e50647b9beMark Andrews open_logs, to allow modules to review interdependent configuration
fd447061627e77db3ccf2536e14134e50647b9beMark Andrews directive values and adjust them while messages can still be logged
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews to the console. Handle relevant MPM directives during this phase
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews and format messages for both the console and the error log, as
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews appropriate. [Chris Darroch]
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews *) mod_proxy: don't URLencode tilde in path component
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews [Stijn Hoop <stijn sandcat.nl>]
7052e191ce63fdf063a977695718ff426a27628eMark Andrews *) mpm_winnt: Fix return values from wait_for_many_objects.
7052e191ce63fdf063a977695718ff426a27628eMark Andrews The return value is index to the signaled thread in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews creted_threads array. We can not use WAIT_TIMEOUT because
7052e191ce63fdf063a977695718ff426a27628eMark Andrews his value is defined as 258, thus limiting the MaxThreads
6f3e68a8dbad508b815f42a0250122ca5e58972eMark Andrews to that value. [Mladen Turk]
62bdc6103b8245b812eef9faabee8e644afcc25fMark Andrews *) core: Do not allow internal redirects like the DirectoryIndex of mod_dir
185fd227381269568e193147a98f292210a16f2cMark Andrews to circumvent the symbolic link checks imposed by FollowSymLinks and
fb31e2890814be0ac3c343d91144f89ce5e05784Mark Andrews SymLinksIfOwnerMatch. [Nick Kew, Ruediger Pluem, William Rowe]
d5ad558234adfef1b847b534dd7b4c6302cc5ea3Mark Andrews *) mod_proxy: Support environment variable interpolation in reverse
ce75d8bec3e93ef9fbd4a235f14f99483b3f238fMark Andrews proxying directives. [Nick Kew]
62700b67eb8abb7d13f9c3c1bc4b60a1477d35d8Mark Andrews *) core: Add the filename of the configuration file to the warning message
f853c77478af94109291ea93f800444b949be558Mark Andrews about the useless use of AllowOverride. PR 39992.
cdb6532e86a8f3d3d563b6da8c333bdf377d51ddMark Andrews [Darryl Miles <darryl darrylmiles.org>]
7ad4d54f29c315cbcb241ca5fc12ba1e0744358bMark Andrews *) New SSLLogLevelDebugDump [ None (default) | IO (not bytes) | Bytes ]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configures the I/O Dump of SSL traffic, when LogLevel is set to Debug.
6fd711065f5878c526f88f2825ab8024e2296644Mark Andrews The default is none as this is far greater debugging resolution than
5e41884b4a1871eb83e66f0d68ca4d04bbbc857eMark Andrews the typical administrator is prepared to untangle. [William Rowe]
54a565b1409a0c259ee3b20791db1b4636addc5eMark Andrews *) mod_disk_cache: If possible, check if the size of an object to cache is
93a90ddd6b588a381b6894974a2d48727f19d42bMark Andrews within the configured boundaries before actually saving data.
93a90ddd6b588a381b6894974a2d48727f19d42bMark Andrews [Niklas Edmundsson <nikke acc.umu.se>]
eabf7ff29a88c578619fdc0d307f9e0bad0d6ce8Mark Andrews *) mod_cache: Convert all values to seconds before comparing them when
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews checking whether to send a Warning header for a stale response.
30b89a5ad95b5775abf6cce8ecc84a061babf76dMark Andrews PR 39713. [Owen Taylor <otaylor redhat.com>]
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews *) mod_disk_cache: Delete temporary files if they cannot be renamed to their
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews final name. [Davi Arnaut <davi haxent.com.br>]
5caf500beeb91b96a2bb2fd55080141569aead97Mark Andrews *) Worker and event MPMs: Remove improper scoreboard updates which were
881702c9c0079cd48a45054fd90d043f3a8b7e11Mark Andrews performed in the event of a fork() failure. [Chris Darroch]
012dedf87438043ff00d4deec8b488eec2be2a1cMark Andrews *) Add support for fcgi:// proxies to mod_rewrite.
6f808593181c16d5a7625cb527a5755872f9680cMark Andrews [Markus Schiegl <ms schiegl.com>]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews *) Remove incorrect comments from scoreboard.h regarding conditional
1576cde466a8de10e84f9887ec073ebaf5973aefMark Andrews loading of worker_score structure with mod_status, and remove unused
1edbf336252ea6a94d58f3f1a135567e2956e8caMark Andrews definitions relating to old life_status field.
e407562a75eb93073bb72089cced150d7ffe4d4fTatuya JINMEI 神明達哉 [Chris Darroch <chrisd pearsoncmg.com>]
8cb1558ff82868e45e76aa64e2ff72986aeebce2Tatuya JINMEI 神明達哉 *) Remove allocation of memory for unused array of lb_score pointers
6da7c87a77ecfd9ccce36f96b4ccd20e1b9cccf1Tatuya JINMEI 神明達哉 in ap_init_scoreboard(). [Chris Darroch <chrisd pearsoncmg.com>]
582b6dc68b2defc1d8795df8f1da31bd1825c30bTatuya JINMEI 神明達哉 *) Add mod_proxy_fcgi, a FastCGI back end for mod_proxy.
668767dc6471dfed4741869c8dd20af8e9ace3cdTatuya JINMEI 神明達哉 [Garrett Rooney, Jim Jagielski, Paul Querna]
bb030ee88e51488a464146dfce4db74d16e05a0cMark Andrews *) Event MPM: Fill in the scoreboard's tid field. PR 38736.
bb030ee88e51488a464146dfce4db74d16e05a0cMark Andrews [Chris Darroch <chrisd pearsoncmg.com>]
e724512f2be8d3de5f2982ebba0b2cdaf8325702Mark Andrews *) mod_charset_lite: Remove Content-Length when output filter can
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews invalidate it. Warn when input filter can invalidate it.
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews [Jeff Trawick]
b657d7db3b73701430b7d1fa17e9c016fd859088Mark Andrews *) Authz: Add the new module mod_authn_core that will provide common
b657d7db3b73701430b7d1fa17e9c016fd859088Mark Andrews authn directives such as 'AuthType', 'AuthName'. Move the directives
8d42bb315ce6745e5631eda4eac59d3b981e58c6Mark Andrews 'AuthType' and 'AuthName' out of the core module and merge mod_authz_alias
8d42bb315ce6745e5631eda4eac59d3b981e58c6Mark Andrews into mod_authn_core. [Brad Nicholes]
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews *) Authz: Move the directives 'Order', 'Allow', 'Deny' and 'Satisfy'
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews into the new module mod_access_compat which can be loaded to provide
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews support for these directives.
89639a5e13cace9166bf14931b9e1ce9dc8c47a3Mark Andrews [Brad Nicholes]
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews *) Authz: Move the 'Require' directive from the core module as well as
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews add the directives '<SatisfyAll>', '<SatisfyOne>', '<RequireAlias>'
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews and 'Reject' to mod_authz_core. The new directives introduce 'AND/OR'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews logic into the authorization processing. [Brad Nicholes]
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews *) Authz: Add the new module mod_authz_core which acts as the
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews authorization provider vector and contains common authz
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews directives. [Brad Nicholes]
93d6dfaf66258337985427c86181f01fc51f0bb4Mark Andrews *) Authz: Renamed mod_authz_dbm authz providers from 'group' and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'file-group' to 'dbm-group' and 'dbm-file-group'. [Brad Nicholes]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews *) Authz: Added the new authz providers 'env', 'ip', 'host', 'all' to handle
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews host-based access control provided by mod_authz_host and invoked
1160ecfd146301ff0d053ed054e5276f33f28b4eMark Andrews through the 'Require' directive. [Brad Nicholes]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews *) Authz: Convert all of the authz modules from hook based to
d3fc633c344e15179480d887aeecf4a6263baeabMark Andrews provider based. [Brad Nicholes]
73d74334741756eab4a9afd8d3c4e7c08da9a844Mark Andrews *) mod_cache: Add CacheMinExpire directive to set the minimum time in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews seconds to cache a document.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [Brian Akins <brian.akins turner.com>, Ruediger Pluem]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews *) mod_authz_dbd: SQL authz with Login/Session support [Nick Kew]
0b1da8124c817270f5dfe46cd0211b993c931a91Mark Andrews *) Fix typo in ProxyStatus syntax error message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [Christophe Jaillet <christophe.jaillet wanadoo.fr>]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews *) Asynchronous write completion for the Event MPM. [Brian Pane]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews *) Added an End-Of-Request bucket type. The logging of a request and
0b1da8124c817270f5dfe46cd0211b993c931a91Mark Andrews the freeing of its pool are now done when the EOR bucket is destroyed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This has the effect of delaying the logging until right after the last
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the response is sent; ap_core_output_filter() calls the access logger
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews indirectly when it destroys the EOR bucket. [Brian Pane]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews *) Rewrite of logresolve support utility: IPv6 addresses are now supported
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and the format of statistical output has changed. [Colm MacCarthaigh]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews *) Rewrite of ap_coreoutput_filter to do nonblocking writes [Brian Pane]
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews *) Added new connection states for handler and write completion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [Brian Pane]
20d90a37532b92b0471c56fb583d6b2ddc32caa6Mark Andrews *) mod_cgid: Refuse to work on Solaris 10 due to OS bugs. PR 34264.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [Justin Erenkrantz]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews *) Teach mod_ssl to use arbitrary OIDs in an SSLRequire directive,
4607e7a9b8dfb1b41c70e51c2b603daaf22cf302Mark Andrews allowing string-valued client certificate attributes to be used for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews access control, as in: SSLRequire "value" in OID("1.3.6.1.4.1.18060.1")
2f025ec6fe68421d942330afaf1980b7a4976e30Mark Andrews [Martin Kraemer, David Reid]
c528ef03d9cdfd7eed4fe6b93563dd599bbb25b0Mark Andrews [Apache 2.1.0-dev includes those bug fixes and changes with the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Apache 2.2.xx tree as documented, and except as noted, below.]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark AndrewsChanges with Apache 2.2.x and later:
c282d16311ce06b6bcb594be716cde4ad5c40af9Mark Andrews *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark AndrewsChanges with Apache 2.0.x and later:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup
5e9f6125246cec57771bcdeefed03153d41c23fdMark AndrewsChanges with Apache 1.3.x and later: