CHANGES revision 16f23f109da3b82fdca8695789bec9f06e2e3383
f743002678eb67b99bbc29fee116b65d9530fec0wrowe -*- coding: utf-8 -*-
80833bb9a1bf25dcf19e814438a4b311d2e1f4cffuankgChanges with Apache 2.5.0
16f23f109da3b82fdca8695789bec9f06e2e3383humbedooh
e42e58d225104194ba5e894eb616be1ce2258e13jailletc *) mod_lua: Update r:setcookie() to accept a table of options and add domain,
e42e58d225104194ba5e894eb616be1ce2258e13jailletc path and httponly to the list of options available to set.
e42e58d225104194ba5e894eb616be1ce2258e13jailletc PR 56128 [Edward Lu <Chaosed0 gmail com>, Daniel Gruno]
e42e58d225104194ba5e894eb616be1ce2258e13jailletc
10b01707470385065764d144de9bb5297fe8ecf2ylavic *) mod_lua: Fix r:setcookie() to add, rather than replace,
10b01707470385065764d144de9bb5297fe8ecf2ylavic the Set-Cookie header. PR56105
10b01707470385065764d144de9bb5297fe8ecf2ylavic [Kevin J Walters <kjw ms com>, Edward Lu <Chaosed0 gmail com>]
b8efdc95bec9cf089aa1be0bfd07d46aa1137a7acovener
b8efdc95bec9cf089aa1be0bfd07d46aa1137a7acovener *) mod_proxy_fcgi: Fix error message when an unexpected protocol version
b8efdc95bec9cf089aa1be0bfd07d46aa1137a7acovener number is received from the application. PR 56110. [Jeff Trawick]
c12b284247f00b5696adabb0b855ce0669465764ylavic
c12b284247f00b5696adabb0b855ce0669465764ylavic *) mod_remoteip: Use the correct IP addresses to populate the proxy_ips field.
c12b284247f00b5696adabb0b855ce0669465764ylavic PR 55972. [Mike Rumph]
c12b284247f00b5696adabb0b855ce0669465764ylavic
6029353b43240f5fa7feede018ce0e3ab1600c96covener *) mod_proxy: Do not try to parse the regular expressions passed by
6029353b43240f5fa7feede018ce0e3ab1600c96covener ProxyPassMatch as URL as they do not follow their syntax.
6029353b43240f5fa7feede018ce0e3ab1600c96covener PR 56074. [Ruediger Pluem]
8861e3760584fe7f451b3519163502a63c406eb3humbedooh
8861e3760584fe7f451b3519163502a63c406eb3humbedooh *) mod_remoteip: Correct the trusted proxy match test. PR 54651.
8861e3760584fe7f451b3519163502a63c406eb3humbedooh [Yoshinori Ehara <yoshinori ehara gmail com>, Eugene L <eugenel amazon com>]
e1f43cac62f6960a6945e1fb6e3288ef7082ac53rpluem
e1f43cac62f6960a6945e1fb6e3288ef7082ac53rpluem *) mod_rewrite: Add %{CONN_REMOTE_ADDR} as the non-useragent counterpart to
e1f43cac62f6960a6945e1fb6e3288ef7082ac53rpluem %{REMOTE_ADDR}. PR 56094. [Edward Lu <Chaosed0 gmail com>]
e1f43cac62f6960a6945e1fb6e3288ef7082ac53rpluem
f06e7c4b1bce6b6491e5de0b7998d3f5696b293dchrisd *) mod_dir: Default to 2.2-like behavior and skip execution when method is
f06e7c4b1bce6b6491e5de0b7998d3f5696b293dchrisd neither GET nor POST, such as for DAV requests. PR 54914. [Chris Darroch]
f06e7c4b1bce6b6491e5de0b7998d3f5696b293dchrisd
179565be4043d7e5f9161aa75271fa0a001866d9covener *) mod_rewrite: Rename the handler that does per-directory internal
179565be4043d7e5f9161aa75271fa0a001866d9covener redirects to "rewrite-redirect-handler" from "redirect-handler" so
179565be4043d7e5f9161aa75271fa0a001866d9covener it is less ambiguous and less likely to be reused. [Eric Covener]
111436a32ba1254291e4883292fb116d15fe8f64covener
fce4949fb0b309a5744afcd503c6ed2d35621ee2covener *) mod_dir: Add DirectoryCheckHandler to allow a 2.2-like behavior, skipping
fce4949fb0b309a5744afcd503c6ed2d35621ee2covener execution when a handler is already set. PR53929. [Eric Covener]
fce4949fb0b309a5744afcd503c6ed2d35621ee2covener
fce4949fb0b309a5744afcd503c6ed2d35621ee2covener *) mod_rewrite: Protect against looping with the [N] flag by enforcing a
7b7430e701e9a31ce809da7c220bb8dfcf68c86etrawick default limit of 10000 iterations, and allowing each rule to change its
7b7430e701e9a31ce809da7c220bb8dfcf68c86etrawick limit. [Eric Covener]
7b7430e701e9a31ce809da7c220bb8dfcf68c86etrawick
ccc20788c1e5fc973f36df634399c89acb70deaejerenkrantz *) mod_ssl: Fix config merging of SSLOCSPEnable and SSLOCSPOverrideResponder.
ccc20788c1e5fc973f36df634399c89acb70deaejerenkrantz [Jeff Trawick]
ccc20788c1e5fc973f36df634399c89acb70deaejerenkrantz
d522f82d7ada07a0cedb8dc6b71eacf3477d7188trawick *) Add HttpContentLengthHeadZero and HttpExpectStrict directives.
d522f82d7ada07a0cedb8dc6b71eacf3477d7188trawick [Yehuda Sadeh <yehuda inktank com>, Justin Erenkrantz]
d522f82d7ada07a0cedb8dc6b71eacf3477d7188trawick
1e1539a1e7d64b1af92636b81aac5aa50ee3163bminfrin *) core: Support named groups and backreferences within the LocationMatch,
1e1539a1e7d64b1af92636b81aac5aa50ee3163bminfrin DirectoryMatch, FilesMatch and ProxyMatch directives. [Graham Leggett]
1e1539a1e7d64b1af92636b81aac5aa50ee3163bminfrin
273e512f20f262e5e2aa8e0e83371d1929fb76adjkaluza *) mod_ssl: Remove the hardcoded algorithm-type dependency for the
273e512f20f262e5e2aa8e0e83371d1929fb76adjkaluza SSLCertificateFile and SSLCertificateKeyFile directives, to enable
273e512f20f262e5e2aa8e0e83371d1929fb76adjkaluza future algorithm agility, and deprecate the SSLCertificateChainFile
efe780dcf13b2b95effabf897d694d8f23feac74trawick directive (obsoleted by SSLCertificateFile). [Kaspar Brand]
81849cd8925f6ffaf57412aaaac8a6df0d33cbb6covener
81849cd8925f6ffaf57412aaaac8a6df0d33cbb6covener *) FreeBSD: Disable IPv4-mapped listening sockets by default for versions
81849cd8925f6ffaf57412aaaac8a6df0d33cbb6covener 5+ instead of just for FreeBSD 5. PR 53824. [Jeff Trawick]
c8e4ae58e7b9eb27e5158d6980770d5064c50ba7trawick
c8e4ae58e7b9eb27e5158d6980770d5064c50ba7trawick *) mod_auth_form: Add a debug message when the fields on a form are not
c8e4ae58e7b9eb27e5158d6980770d5064c50ba7trawick recognised. [Graham Leggett]
c8e4ae58e7b9eb27e5158d6980770d5064c50ba7trawick
c8e4ae58e7b9eb27e5158d6980770d5064c50ba7trawick *) mod_ssl: Add -t -DDUMP_CA_CERTS option which dumps the filenames of all
fe83f60b41477b14a37edcfcd1f7f5c5a1ebfe44minfrin configured SSL CA certificates to stdout the same way as DUMP_CERTS does.
fe83f60b41477b14a37edcfcd1f7f5c5a1ebfe44minfrin [Jan Kaluza]
fe83f60b41477b14a37edcfcd1f7f5c5a1ebfe44minfrin
993d1261a278d7322bccef219101220b7b4fb8c5jkaluza *) mod_headers: Allow the "value" parameter of Header and RequestHeader to
993d1261a278d7322bccef219101220b7b4fb8c5jkaluza contain an ap_expr expression if prefixed with "expr=". [Eric Covener]
993d1261a278d7322bccef219101220b7b4fb8c5jkaluza
ba050a6f942b9fa0e81ed73437588005c569655ccovener *) Add suspend_connection and resume_connection hooks to notify modules
ba050a6f942b9fa0e81ed73437588005c569655ccovener when the thread/connection relationship changes. (Currently implemented
ba050a6f942b9fa0e81ed73437588005c569655ccovener only for the Event MPM; should be implemented for all async MPMs.)
ba050a6f942b9fa0e81ed73437588005c569655ccovener [Jeff Trawick]
ba050a6f942b9fa0e81ed73437588005c569655ccovener
ba050a6f942b9fa0e81ed73437588005c569655ccovener *) mod_ssl: Don't flush when an EOS is received. Prepares mod_ssl
ba050a6f942b9fa0e81ed73437588005c569655ccovener to support write completion. [Graham Leggett]
135ddda3a989215d2bedbcf1529bfb269c3eda23niq
135ddda3a989215d2bedbcf1529bfb269c3eda23niq *) prefork: Fix long delays when doing a graceful restart.
135ddda3a989215d2bedbcf1529bfb269c3eda23niq PR 54852 [Jim Jagielski, Arkadiusz Miskiewicz <arekm maven pl>]
1122585e1e00bb81e9d0f054bf5c318cec23aa7dminfrin
1122585e1e00bb81e9d0f054bf5c318cec23aa7dminfrin *) core: Add parse_errorlog_arg callback to ap_errorlog_provider
1122585e1e00bb81e9d0f054bf5c318cec23aa7dminfrin to allow providers to check the ErrorLog argument. [Jan Kaluza]
001a44c352f89c9ec332ffd3e0a6927dcd19432chumbedooh
001a44c352f89c9ec332ffd3e0a6927dcd19432chumbedooh *) core: Detect incomplete body in HTTP input filter and return
001a44c352f89c9ec332ffd3e0a6927dcd19432chumbedooh APR_INCOMPLETE. PR 55475 [Yann Ylavic <ylavic dev gmail com>]
efe780dcf13b2b95effabf897d694d8f23feac74trawick
793214f67dede32edfd9ee96c664ead04d175cbbjfclere *) mod_cgid: Use the servers Timeout for each read from a CGI script,
cc5a4a08dc9783fcbc52ce86f11e01c281a43810minfrin allow override with new CGIDRequestTimeout directive. PR43494
33124689065ade0dfc8c54d8ebb734f9439cb89btrawick [Eric Covener, Toshikuni Fukaya <toshikuni-fukaya cybozu co jp>]
33124689065ade0dfc8c54d8ebb734f9439cb89btrawick
33124689065ade0dfc8c54d8ebb734f9439cb89btrawick *) core: Add missing Reason-Phrase in HTTP response headers.
9b0076ddd1103e5fa9c1f9bafde4b06ce244fbaecovener PR 54946. [Rainer Jung]
9b0076ddd1103e5fa9c1f9bafde4b06ce244fbaecovener
9b0076ddd1103e5fa9c1f9bafde4b06ce244fbaecovener *) core: ensure any abnormal exit is reported to stderr if it's a tty.
249d09d51808cb7981af99762c3b3736ca126cd5jkaluza PR 55670 [Nick Kew]
249d09d51808cb7981af99762c3b3736ca126cd5jkaluza
249d09d51808cb7981af99762c3b3736ca126cd5jkaluza *) mod_proxy: Added support for unix domain sockets as the
249d09d51808cb7981af99762c3b3736ca126cd5jkaluza backend server endpoint [Jim Jagielski, Blaise Tarr
56589be3d7a3e9343370df240010c6928cc78b39jkaluza <blaise tarr gmail com>]
56589be3d7a3e9343370df240010c6928cc78b39jkaluza
56589be3d7a3e9343370df240010c6928cc78b39jkaluza *) mod_auth_form: Make sure the optional functions are loaded even when
652bacc79dd7f980249784cc8c4838e8f1de7e8acovener the AuthFormProvider isn't specified. [Graham Leggett]
652bacc79dd7f980249784cc8c4838e8f1de7e8acovener
652bacc79dd7f980249784cc8c4838e8f1de7e8acovener *) mod_lua: Let the Inter-VM get/set functions work with a global
652bacc79dd7f980249784cc8c4838e8f1de7e8acovener shared memory pool instead of a per-process pool. [Daniel Gruno]
77ca16c5676da23155311e13cee61e7eaba9fa3ejailletc
77ca16c5676da23155311e13cee61e7eaba9fa3ejailletc *) ldap: Support ldaps when using the Microsoft LDAP SDK.
77ca16c5676da23155311e13cee61e7eaba9fa3ejailletc PR 54626. [Jean-Frederic Clere]
77ca16c5676da23155311e13cee61e7eaba9fa3ejailletc
50cfe8bbbaf4279375802531268e2bf0155215fetrawick *) mod_proxy: Add ap_connection_reusable() for checking if a connection
50cfe8bbbaf4279375802531268e2bf0155215fetrawick is reusable as of this point in processing. [Jeff Trawick]
50cfe8bbbaf4279375802531268e2bf0155215fetrawick
50cfe8bbbaf4279375802531268e2bf0155215fetrawick *) mod_authnz_ldap: Change default value of AuthLDAPMaxSubGroupDepth to 0
f87299dab99bc04b51a6b8cad51b6795db862c0atrawick to avoid performance problems when subgroups aren't in use. [Eric Covener]
f87299dab99bc04b51a6b8cad51b6795db862c0atrawick
f87299dab99bc04b51a6b8cad51b6795db862c0atrawick *) mod_syslog: New module implementing syslog ap_error_log provider.
4d12805e6c18253040223ea637acd6b3b3c18f60jorton Previously, this code was part of core, now it's in separate module.
4d12805e6c18253040223ea637acd6b3b3c18f60jorton [Jan Kaluza]
4d12805e6c18253040223ea637acd6b3b3c18f60jorton
4d12805e6c18253040223ea637acd6b3b3c18f60jorton *) core: Add ap_errorlog_provider to make ErrorLog logging modular. Move
4d12805e6c18253040223ea637acd6b3b3c18f60jorton syslog support from core to new mod_syslog. [Jan Kaluza]
e5d909f2b06bd880fb3675cd49363df981caa631trawick
a4df2cd1e1391575a327c2a90ba4315f805a0a78covener *) core: draft-ietf-httpbis-p1-messaging-23 corrections regarding
a4df2cd1e1391575a327c2a90ba4315f805a0a78covener TE/CL conflicts. [Yann Ylavic <ylavic.dev gmail com>, Jim Jagielski]
a4df2cd1e1391575a327c2a90ba4315f805a0a78covener
cb666b29f81df1d11d65002250153353568021fccovener *) WinNT MPM: If ap_run_pre_connection() fails or sets c->aborted, don't
cb666b29f81df1d11d65002250153353568021fccovener save the socket for reuse by the next worker as if it were an
cb666b29f81df1d11d65002250153353568021fccovener APR_SO_DISCONNECTED socket. Restores 2.2 behavior. [Eric Covener]
6a80c3c6f4b8ea7ba5e89402b8b779b09ce020e0covener
1c2cab00d988fc48cbe59032cf76cc0bab20d6f7covener *) mod_lua: Add a logging hook for modifying/skipping logs. [Daniel Gruno]
6a80c3c6f4b8ea7ba5e89402b8b779b09ce020e0covener
75a230a728338d84dcfe81edd375352f34de22d0covener *) mod_status, mod_echo: Fix the display of client addresses.
75a230a728338d84dcfe81edd375352f34de22d0covener They were truncated to 31 characters which is not enough for IPv6 addresses.
75a230a728338d84dcfe81edd375352f34de22d0covener PR 54848 [Bernhard Schmidt <berni birkenwald de>]
1f50dc34ae069adeed20b2986e5ffdefa5c410e0covener
1f50dc34ae069adeed20b2986e5ffdefa5c410e0covener *) mod_authnz_fcgi: New module to enable FastCGI authorizer
1f50dc34ae069adeed20b2986e5ffdefa5c410e0covener applications to authenticate and/or authorize clients.
63a5ea80bddcc84a462e40f402b4f330e0e05411covener [Jeff Trawick]
63a5ea80bddcc84a462e40f402b4f330e0e05411covener
63a5ea80bddcc84a462e40f402b4f330e0e05411covener *) core: Add ap_log_data(), ap_log_rdata(), etc. for logging buffers.
63a5ea80bddcc84a462e40f402b4f330e0e05411covener [Jeff Trawick]
986f3ea2c314d4d4b3b937149853a0f23f6119aaminfrin
986f3ea2c314d4d4b3b937149853a0f23f6119aaminfrin *) mod_unique_id: Use output of the PRNG rather than IP address and
986f3ea2c314d4d4b3b937149853a0f23f6119aaminfrin pid, avoiding sleep() call and possible DNS issues at startup,
65a4e663b82f8bce28ac22ab2edfd7502de36998sf plus improving randomness for IPv6-only hosts.
65a4e663b82f8bce28ac22ab2edfd7502de36998sf [Jan Kaluza <jkaluza redhat.com>]
65a4e663b82f8bce28ac22ab2edfd7502de36998sf
65a4e663b82f8bce28ac22ab2edfd7502de36998sf *) mod_authnz_ldap: Support primitive LDAP servers that do not accept
c7de1955eb0eaeabf7042902476397692672d549sf filters, such as "SDBM-backed LDAP" on z/OS, by allowing a special
74e7f6c55fd67b10cb400b3f6d1dc718a303d944minfrin filter "none" to be specified in AuthLDAPURL. [Eric Covener]
74e7f6c55fd67b10cb400b3f6d1dc718a303d944minfrin
74e7f6c55fd67b10cb400b3f6d1dc718a303d944minfrin *) mod_file_cache: mod_file_cache should be able to serve files that
74e7f6c55fd67b10cb400b3f6d1dc718a303d944minfrin haven't had a Content-Type set via e.g. mod_mime. [Eric Covener]
a511a29faf2ff7ead3b67680154a624effb31aafminfrin
a511a29faf2ff7ead3b67680154a624effb31aafminfrin *) core: merge AllowEncodedSlashes from the base configuration into
a511a29faf2ff7ead3b67680154a624effb31aafminfrin virtual hosts. [Eric Covener]
a511a29faf2ff7ead3b67680154a624effb31aafminfrin
a511a29faf2ff7ead3b67680154a624effb31aafminfrin *) AIX: Install DSO's with "cp" instead of "install" in instdso.sh
63921358ef93fcb41bc71d9894221ba3d7fbb87bminfrin [Eric Covener]
63921358ef93fcb41bc71d9894221ba3d7fbb87bminfrin
63921358ef93fcb41bc71d9894221ba3d7fbb87bminfrin *) mod_ldap: Don't keep retrying if a new LDAP connection times out.
deec48c67d4786bc77112ffbf3a4e70b931097edminfrin [Eric Covener]
6d601599d3d65df0410eae6e573e75b2dbfb1fb4minfrin
6d601599d3d65df0410eae6e573e75b2dbfb1fb4minfrin *) mod_deflate: permit compilation of mod_deflate against a zlib that has
6d601599d3d65df0410eae6e573e75b2dbfb1fb4minfrin been configured with -D Z_PREFIX, which redefines the token "deflate".
6d601599d3d65df0410eae6e573e75b2dbfb1fb4minfrin [Eric Covener]
4c02bab56a528a180bbe394d8b6e6fd9c1a3ac1esf
4c02bab56a528a180bbe394d8b6e6fd9c1a3ac1esf *) mod_socache_shmcb.c: Remove arbitrary restriction on shared memory size
4c02bab56a528a180bbe394d8b6e6fd9c1a3ac1esf previously limited to 64MB. [Jens Låås <jelaas gmail.com>]
4c02bab56a528a180bbe394d8b6e6fd9c1a3ac1esf
2c487ac43b583db869e743772a7a10b278aa2bcfminfrin *) mod_auth_digest: Use the secret when generating nonces in all cases and
684e0cfc200f66287a93bbd1708d1dd8a92a7eefcovener not only when AuthName is used in .htaccess files (this change may cause
684e0cfc200f66287a93bbd1708d1dd8a92a7eefcovener problems if used with round robin load balancers). Don't regenerate the
5c43d2fb853f84497b5ece2d414ef9484aa87e5fsf secret on graceful restarts. PR 54637 [Stefan Fritsch]
05a5a9c3e16f21566e1b61f4bd68025ce1b741ccjoes
05a5a9c3e16f21566e1b61f4bd68025ce1b741ccjoes *) core: Remove apr_brigade_flatten(), buffering and duplicated code
ef82e8fa164e0a1f8b813f7deb6b7ead96018c94niq from the HTTP_IN filter, parse chunks in a single pass with zero copy.
26c5829347f6a355c00f1ba0301d575056b69536niq Reduce memory usage by 48 bytes per request. [Graham Leggett]
ef82e8fa164e0a1f8b813f7deb6b7ead96018c94niq
ef82e8fa164e0a1f8b813f7deb6b7ead96018c94niq *) core: Stop the HTTP_IN filter from attempting to write error buckets
ef82e8fa164e0a1f8b813f7deb6b7ead96018c94niq to the output filters, which is bogus in the proxy case. Create a
ef82e8fa164e0a1f8b813f7deb6b7ead96018c94niq clean mapping from APR codes to HTTP status codes, and use it where
ef82e8fa164e0a1f8b813f7deb6b7ead96018c94niq needed. [Graham Leggett]
ef82e8fa164e0a1f8b813f7deb6b7ead96018c94niq
413ee814748f37be168ff12407fa6dba0ceeabe6trawick *) mod_proxy: Ensure network errors detected by the proxy are returned as
c12917da693bae4028a1d5a5e8224bceed8c739dsf 504 Gateway Timout as opposed to 502 Bad Gateway, in order to be
c12917da693bae4028a1d5a5e8224bceed8c739dsf compliant with RFC2616 14.9.4 Cache Revalidation and Reload Controls.
eafcc0ebf263d0ba69855b6e10958c4c1a2361bdsf
eafcc0ebf263d0ba69855b6e10958c4c1a2361bdsf *) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
eafcc0ebf263d0ba69855b6e10958c4c1a2361bdsf [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez
eafcc0ebf263d0ba69855b6e10958c4c1a2361bdsf <alejandro.alvarez.ayllon cern.ch>]
eafcc0ebf263d0ba69855b6e10958c4c1a2361bdsf
d7ffd2da16d58b1a0de212e4d56f7aebb72bef26sf *) core, mod_ssl: Enable the ability for a module to reverse the sense of
d7ffd2da16d58b1a0de212e4d56f7aebb72bef26sf a poll event from a read to a write or vice versa. This is a step on
d7ffd2da16d58b1a0de212e4d56f7aebb72bef26sf the way to allow mod_ssl taking full advantage of the event MPM.
4576c1a9ef54cd1e5555ee07d016a7f559f80338sf [Graham Leggett]
4576c1a9ef54cd1e5555ee07d016a7f559f80338sf
4576c1a9ef54cd1e5555ee07d016a7f559f80338sf *) mod_ldap: LDAP connections used for authentication were not respecting
9811aed12bbc71783d2e544ccb5fecd193843eadsf LDAPConnectionPoolTimeout. PR 54587
9811aed12bbc71783d2e544ccb5fecd193843eadsf
9811aed12bbc71783d2e544ccb5fecd193843eadsf *) core: ap_rgetline_core now pulls from r->proto_input_filters.
88fac54d9d64f85bbdab5d7010816f4377f95bd7rjung
88fac54d9d64f85bbdab5d7010816f4377f95bd7rjung *) mod_proxy_html: process parsed comments immediately.
bd3f5647b96d378d9c75c954e3f13582af32c643sf Fixes bug where parsed comments may be lost. [Nick Kew]
bd3f5647b96d378d9c75c954e3f13582af32c643sf
bd3f5647b96d378d9c75c954e3f13582af32c643sf *) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
bd3f5647b96d378d9c75c954e3f13582af32c643sf
bd3f5647b96d378d9c75c954e3f13582af32c643sf *) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
2a7beea91d46beb41f043a84eaad060047ee04aafabien HTML/XHTML [Nick Kew]
2a7beea91d46beb41f043a84eaad060047ee04aafabien
2a7beea91d46beb41f043a84eaad060047ee04aafabien *) core: Add option to add valgrind support. Use it to reduce false positive
2a7beea91d46beb41f043a84eaad060047ee04aafabien warnings in mod_ssl. [Stefan Fritsch]
584a85dd4047e38d3ed3a29b6662fcc9d100ae4csf
584a85dd4047e38d3ed3a29b6662fcc9d100ae4csf *) mod_authn_file, mod_authn_dbd, mod_authn_dbm, mod_authn_socache:
584a85dd4047e38d3ed3a29b6662fcc9d100ae4csf Cache the result of the most recent password hash verification for every
f21e9e3d0bfb7a507ecc5bc963f2159d693503d1sf keep-alive connection. This saves some expensive calculations.
f21e9e3d0bfb7a507ecc5bc963f2159d693503d1sf [Stefan Fritsch]
f21e9e3d0bfb7a507ecc5bc963f2159d693503d1sf
f6b9c755a0b793e8a3a3aebd327ca20a86478117sf *) http: Remove support for Request-Range header sent by Navigator 2-3 and
f6b9c755a0b793e8a3a3aebd327ca20a86478117sf MSIE 3. [Stefan Fritsch]
f6b9c755a0b793e8a3a3aebd327ca20a86478117sf
132ee6ac1c26d6e8953836316ba50734eefab47bsf *) core, http: Extend HttpProtocol with an option to enforce stricter HTTP
132ee6ac1c26d6e8953836316ba50734eefab47bsf conformance or to only log the found problems. [Stefan Fritsch]
132ee6ac1c26d6e8953836316ba50734eefab47bsf
85eacfc96a04547ef25aabbc06440039715084c2jorton *) core: Correctly parse an IPv6 literal host specification in an absolute
85eacfc96a04547ef25aabbc06440039715084c2jorton URL in the request line. [Stefan Fritsch]
85eacfc96a04547ef25aabbc06440039715084c2jorton
536d2e7cd1fdec1255b8c3bdf41fdc714c506a54trawick *) EventOpt MPM
536d2e7cd1fdec1255b8c3bdf41fdc714c506a54trawick
536d2e7cd1fdec1255b8c3bdf41fdc714c506a54trawick *) core: Add LogLevelOverride directive that allows to override the
536d2e7cd1fdec1255b8c3bdf41fdc714c506a54trawick loglevel for clients from certain IPs. This also works for things
79c5787b92ac5f0e1cc82393816c77a006399316trawick like the SSL handshake where <If> LogLevel ... </If> is evaluated
79c5787b92ac5f0e1cc82393816c77a006399316trawick too late. [Stefan Fritsch]
79c5787b92ac5f0e1cc82393816c77a006399316trawick
79c5787b92ac5f0e1cc82393816c77a006399316trawick *) core: Add new directive Warning to issue warnings from a configuration
c967bf3bc89e8aa60dbd30d9da388e448ddc1cc4trawick file. Both Warning and Error now generate a timestamped log message.
79c5787b92ac5f0e1cc82393816c77a006399316trawick [Fabien Coelho]
79c5787b92ac5f0e1cc82393816c77a006399316trawick
79c5787b92ac5f0e1cc82393816c77a006399316trawick *) ap_expr: Add SERVER_PROTOCOL_VERSION, ..._MAJOR, and ..._MINOR
79c5787b92ac5f0e1cc82393816c77a006399316trawick variables. [Stefan Fritsch]
79c5787b92ac5f0e1cc82393816c77a006399316trawick
7b395e4e878c28a4784919cfd2e704ddd14a3390jorton *) core: New directive RegisterHttpMethod for registering non-standard
7b395e4e878c28a4784919cfd2e704ddd14a3390jorton HTTP methods. [Stefan Fritsch]
7b395e4e878c28a4784919cfd2e704ddd14a3390jorton
7b395e4e878c28a4784919cfd2e704ddd14a3390jorton *) core: New directive HttpProtocol which allows to disable HTTP/0.9
536e48c08d674acac5d44929318f2ad928edc361jorton support. [Stefan Fritsch]
536e48c08d674acac5d44929318f2ad928edc361jorton
e81785da447b469da66f218b3f0244aab507958djorton *) mod_allowhandlers: New module to forbid specific handlers for specific
e81785da447b469da66f218b3f0244aab507958djorton directories. [Stefan Fritsch]
3e4e54d4e3fc0123c63d57aa84ac7ad7a8c73ff8jorton
3e4e54d4e3fc0123c63d57aa84ac7ad7a8c73ff8jorton *) mod_systemd: New module, for integration with systemd on Linux.
3e4e54d4e3fc0123c63d57aa84ac7ad7a8c73ff8jorton [Jan Kaluza <jkaluza redhat.com>]
53e9b27aba029b18be814df40bcf6f0428771d1efuankg
53e9b27aba029b18be814df40bcf6f0428771d1efuankg *) WinNT MPM: Store pid and generation for each thread in scoreboard
53e9b27aba029b18be814df40bcf6f0428771d1efuankg to allow tracking of threads from exiting children via mod_status
53e9b27aba029b18be814df40bcf6f0428771d1efuankg or other such mechanisms. [Jeff Trawick]
53e9b27aba029b18be814df40bcf6f0428771d1efuankg
6bb524f1895f30265a1431afc460977d391cb36bsf *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
6bb524f1895f30265a1431afc460977d391cb36bsf - APIs: ap_log_pid(), ap_remove_pid, ap_read_pid()
ca61ccd0c306c2c72df153688ba1b49f3eceed80sf - core: the scoreboard (ScoreBoardFile), pid file (PidFile), and
6bb524f1895f30265a1431afc460977d391cb36bsf mutexes (Mutex)
e6dd71992459d05a676b98b7963423dc5dc1e24aminfrin - mod_cache: thundering herd lock directory
e6dd71992459d05a676b98b7963423dc5dc1e24aminfrin - mod_lbmethod_heartbeat, mod_heartmonitor: heartbeat storage file
e6dd71992459d05a676b98b7963423dc5dc1e24aminfrin - mod_ldap: shared memory cache
e6dd71992459d05a676b98b7963423dc5dc1e24aminfrin - mod_socache_shmcb, mod_socache_dbm: shared memory or dbm for cache
23f1535d6a60817d2846bac0aea230ea475d7dccminfrin [Jeff Trawick]
23f1535d6a60817d2846bac0aea230ea475d7dccminfrin
23f1535d6a60817d2846bac0aea230ea475d7dccminfrin *) suexec: Add --enable-suexec-capabilites support on Linux, to use
23f1535d6a60817d2846bac0aea230ea475d7dccminfrin setuid/setgid capability bits rather than a setuid root binary.
ec7520b24cd80d34d82bbcaca153cbb23cc04bc0rjung [Joe Orton]
ec7520b24cd80d34d82bbcaca153cbb23cc04bc0rjung
ec7520b24cd80d34d82bbcaca153cbb23cc04bc0rjung *) suexec: Add support for logging to syslog as an alternative to logging
ec7520b24cd80d34d82bbcaca153cbb23cc04bc0rjung to a file; configure --without-suexec-logfile --with-suexec-syslog.
ec7520b24cd80d34d82bbcaca153cbb23cc04bc0rjung [Joe Orton]
ec7520b24cd80d34d82bbcaca153cbb23cc04bc0rjung
ec7520b24cd80d34d82bbcaca153cbb23cc04bc0rjung *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.
ec7520b24cd80d34d82bbcaca153cbb23cc04bc0rjung [Matthew Steele <mdsteele google.com>]
6249dfa569d3b4f1f539665b979a80c6e335d93etrawick
6249dfa569d3b4f1f539665b979a80c6e335d93etrawick *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
0827cb14e550f6f65018431c22c2c913631c8f25kbrand be compiled by the build compiler instead of the host compiler.
6249dfa569d3b4f1f539665b979a80c6e335d93etrawick Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
ae600ca541efc686b34f8b1f21bd3d0741d37674covener PR 51257. [Guenter Knauf]
6249dfa569d3b4f1f539665b979a80c6e335d93etrawick
cfa64348224b66dd1c9979b809406c4d15b1c137fielding *) core: In maintainer mode, replace apr_palloc with a version that
74499a117b3b2cd9666715a14f90c0e5d1a4ee8ajim initializes the allocated memory with non-zero values, except if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]
74499a117b3b2cd9666715a14f90c0e5d1a4ee8ajim
cfa64348224b66dd1c9979b809406c4d15b1c137fielding *) mod_policy: Add a new testing module to help server administrators
74499a117b3b2cd9666715a14f90c0e5d1a4ee8ajim enforce a configurable level of protocol compliance on their
cfa64348224b66dd1c9979b809406c4d15b1c137fielding servers and application servers behind theirs. [Graham Leggett]
74499a117b3b2cd9666715a14f90c0e5d1a4ee8ajim
cfa64348224b66dd1c9979b809406c4d15b1c137fielding *) mod_firehose: Add a new debugging module able to record traffic
passing through the server in such a way that connections and/or
requests be reconstructed and replayed. [Graham Leggett]
*) mod_noloris
*) APREQ
*) Simple MPM
*) mod_serf
[Apache 2.5.0-dev includes those bug fixes and changes with the
Apache 2.4.xx tree as documented below, except as noted.]
Changes with Apache 2.4.x and later:
*) http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup
Changes with Apache 2.2.x and later:
*) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
Changes with Apache 2.0.x and later:
*) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup