3eb95d6629bb326ae90e5eec693b7e628951751brbb -*- coding: utf-8 -*-
b9cf7102006ac2ccfebcb78174585986ff127ba9jwoolleyChanges with Apache 2.5.0
239ab9d14d3851c2efc1312b3b42c838073533f4jerenkrantz *) mod_proxy_wstunnel: Bypass the handler while the connection is not
239ab9d14d3851c2efc1312b3b42c838073533f4jerenkrantz upgraded to WebSocket, so that other modules can possibly take over
239ab9d14d3851c2efc1312b3b42c838073533f4jerenkrantz the leading HTTP requests. [Yann Ylavic]
c5fb76caa5498c60b991fcba8dfbf3c229f0f4d5rbb *) mod_proxy_scgi: ProxySCGIInternalRedirect now allows an alternate
c5fb76caa5498c60b991fcba8dfbf3c229f0f4d5rbb response header to be used by the application, for when the application
c5fb76caa5498c60b991fcba8dfbf3c229f0f4d5rbb or framework is unable to return Location in the internal-redirect
c5fb76caa5498c60b991fcba8dfbf3c229f0f4d5rbb form. [Jeff Trawick]
b9cf7102006ac2ccfebcb78174585986ff127ba9jwoolley *) ssl: Add a warning if protocol given in SSLProtocol or SSLProxyProtocol
b9cf7102006ac2ccfebcb78174585986ff127ba9jwoolley will override other parameters given in the same directive. This could be
2b13bc45632d72cdf50ac42149e4fc8bc0d05bf2stoddard a missing + or - prefix. PR 52820 [Christophe Jaillet]
2b13bc45632d72cdf50ac42149e4fc8bc0d05bf2stoddard *) mod_logio: Add LogIOTrackTTFB and %^FB logformat to log the time
2b13bc45632d72cdf50ac42149e4fc8bc0d05bf2stoddard taken to start writing response headers. [Eric Covener]
2b13bc45632d72cdf50ac42149e4fc8bc0d05bf2stoddard *) http: Add support for RFC2324/RFC7168. [Graham Leggett]
2b13bc45632d72cdf50ac42149e4fc8bc0d05bf2stoddard *) core: Cleanup the request soon/even if some output filter fails to
52617e76a53b1d90da027a5311790e1ccef8f60ftrawick handle the EOR bucket. [Yann Ylavic]
b584ec31a47334b1253f4a5ad73f023336ab2f28jwoolley *) mpm_event: Allow for timer events duplicates. [Jim Jagielski, Yann Ylavic]
b584ec31a47334b1253f4a5ad73f023336ab2f28jwoolley *) core, modules: Avoid error response/document handling by the core if some
b584ec31a47334b1253f4a5ad73f023336ab2f28jwoolley handler or input filter already did it while reading the request (causing
7ac88dc1ac207b9a434fd76c0406651d68018d69rederpj a double response body). [Yann Ylavic]
52617e76a53b1d90da027a5311790e1ccef8f60ftrawick *) mod_proxy: Fix a race condition that caused a failed worker to be retried
52617e76a53b1d90da027a5311790e1ccef8f60ftrawick before the retry period is over. [Ruediger Pluem]
d157b208942316e96c34fa8b2222ed4cc2e56783trawick *) mod_rewrite: Add support for starting External Rewriting Programs
d157b208942316e96c34fa8b2222ed4cc2e56783trawick as non-root user on UNIX systems by specifying username and group name
d157b208942316e96c34fa8b2222ed4cc2e56783trawick as third argument of RewriteMap directive. [Jan Kaluza]
dc903d97a896d4e414efb1cb49f22ce00a49f070trawick *) mod_authn_core: Add expression support to AuthName and AuthType.
dc903d97a896d4e414efb1cb49f22ce00a49f070trawick [Graham Leggett]
dc903d97a896d4e414efb1cb49f22ce00a49f070trawick *) suexec: Filter out the HTTP_PROXY environment variable because it is
dc903d97a896d4e414efb1cb49f22ce00a49f070trawick treated as alias for http_proxy by some programs. [Stefan Fritsch]
dc903d97a896d4e414efb1cb49f22ce00a49f070trawick *) mod_proxy_http: Don't expect the backend to ack the "Connection: close" to
68f803c489cf61918fb4e61745fcd1e0cc980541jerenkrantz finally close those not meant to be kept alive by SetEnv proxy-nokeepalive
68f803c489cf61918fb4e61745fcd1e0cc980541jerenkrantz or force-proxy-request-1.0, and respond with 502 instead of 400 if its
68f803c489cf61918fb4e61745fcd1e0cc980541jerenkrantz Connection header is invalid. [Yann Ylavic]
15405e91bb3fad5a80f7abe828a00b44a3a65bf8jerenkrantz *) http: Make ap_die() robust against any HTTP error code and not modify
15405e91bb3fad5a80f7abe828a00b44a3a65bf8jerenkrantz response status (finally logged) when nothing is to be done. [Yann Ylavic]
f905b21d99b264dbf26acc30b430ebe92838cdcejerenkrantz *) mod_proxy_http: Don't establish or reuse a backend connection before pre-
f905b21d99b264dbf26acc30b430ebe92838cdcejerenkrantz fetching the request body, so to minimize the delay between it is supposed
0e2340134f2336b98c92d7f157fb65d0a6f477d4stoddard to be alive and the first bytes sent: this is a best effort to prevent the
0e2340134f2336b98c92d7f157fb65d0a6f477d4stoddard backend from closing because of idle or keepalive timeout in the meantime.
431d6106eaf796cc8dfa8cb0db2b180dd93ed6dftrawick Also, handle a new "proxy-flushall" environment variable which allows to
b3edf21d591bfd0e64bbec0dda73c0e41d7ecdb6wrowe flush any forwarded body data immediately. PR 56541+37920. [Yann Ylavic]
b3edf21d591bfd0e64bbec0dda73c0e41d7ecdb6wrowe *) core: Define and UnDefine are no longer permitted in
b3edf21d591bfd0e64bbec0dda73c0e41d7ecdb6wrowe directory context. Previously they would always be evaulated
b3edf21d591bfd0e64bbec0dda73c0e41d7ecdb6wrowe as the configuration was read without regard for the directory
b3edf21d591bfd0e64bbec0dda73c0e41d7ecdb6wrowe context. [Eric Covener]
5d238058bc748dfa13ff21890ae4a58481e3be89jerenkrantz *) config: For directives that do not expect any arguments, enforce
5d238058bc748dfa13ff21890ae4a58481e3be89jerenkrantz that none are specified in the configuration file.
9282327b0ffe8981d39835130dfb334af192b508jerenkrantz [Joachim Zobel <jzobel heute-morgen.de>, Eric Covener]
9282327b0ffe8981d39835130dfb334af192b508jerenkrantz *) mod_rewrite: Improve 'bad flag delimeters' startup error by showing
8fcaadcb287f361bb304d53a69d508500840fafcjerenkrantz how the input was tokenized. PR 56528. [Edward Lu <Chaosed0 gmail.com>]
8fcaadcb287f361bb304d53a69d508500840fafcjerenkrantz *) mod_ssl: Add support for extracting subjectAltName entries of type
8fcaadcb287f361bb304d53a69d508500840fafcjerenkrantz rfc822Name and dNSName into SSL_{CLIENT,SERVER}_SAN_{Email,DNS}_n
8af88bd6958b80c224e964892b8237720b13ab1ajerenkrantz environment variables. Also addresses PR 57207. [Kaspar Brand]
8af88bd6958b80c224e964892b8237720b13ab1ajerenkrantz *) mod_proxy: Don't put non balancer-member workers in error state by
8af88bd6958b80c224e964892b8237720b13ab1ajerenkrantz default for connection or 500/503 errors, and honor status=+I for
8af88bd6958b80c224e964892b8237720b13ab1ajerenkrantz any error. PR 48388. [Yann Ylavic]
25b812bcab8b61981e288996b991e0ab4d224b92jerenkrantz *) mod_socache_memcache: Pass expiration time through to memcached. PR 55445.
87f0329e30de94828e08d53a99ea23cda86a9fccjerenkrantz [Faidon Liambotis <paravoid debian.org>, Joe Orton]
87f0329e30de94828e08d53a99ea23cda86a9fccjerenkrantz *) mod_http: Fix incorrect If-Match handling. PR 57358.
0396e75f271f51be57be778655e32ba8d64d240bwrowe [Kunihiko Sakamoto <ksakamoto google.com>]
0396e75f271f51be57be778655e32ba8d64d240bwrowe *) mod_proxy_ajp: Fix client connection errors handling and logged status
0396e75f271f51be57be778655e32ba8d64d240bwrowe when it occurs. PR 56823. [Yann Ylavic]
dc10f7a2f87d4cd7cdd16dc248b165122b4ac62btrawick *) ap_expr: Add filemod function for checking file modification dates
dc10f7a2f87d4cd7cdd16dc248b165122b4ac62btrawick [Daniel Gruno]
dc10f7a2f87d4cd7cdd16dc248b165122b4ac62btrawick *) core: Add CGIPassAuth directive to control whether HTTP authorization
431d6106eaf796cc8dfa8cb0db2b180dd93ed6dftrawick headers are passed to scripts as CGI variables. PR 56855. [Jeff
390489eb69fe15943ddf67adcc832ca8de125cd9jerenkrantz *) mod_authnz_ldap: Resolve crashes with LDAP authz and non-LDAP authn since
390489eb69fe15943ddf67adcc832ca8de125cd9jerenkrantz r1608202. [Eric Covener]
a1e8b54f269a8f2388590174174509546e886e60stoddard *) mod_buffer: Forward flushed input data immediatly and avoid (unlikely)
a1e8b54f269a8f2388590174174509546e886e60stoddard access to freed memory. [Yann Ylavic, Christophe Jaillet]
3eb95d6629bb326ae90e5eec693b7e628951751brbb *) core: Ensure that httpd exits with an error status when the MPM fails
109d280c3fcf810e573fc1af5e141ad525c45811bjh to run. [Yann Ylavic]
109d280c3fcf810e573fc1af5e141ad525c45811bjh *) apreq: Content-Length header should be always interpreted as a decimal.
61d2cd001754548e90364aa3a7e76863616544b0minfrin Leading 0 could be erroneously considered as an octal value. PR 56598.
61d2cd001754548e90364aa3a7e76863616544b0minfrin [Chris Card <ctcard hotmail com>]
61d2cd001754548e90364aa3a7e76863616544b0minfrin *) mod_proxy: Now allow for 191 character worker names, with non-fatal
61d2cd001754548e90364aa3a7e76863616544b0minfrin errors if name is truncated. PR53218. [Jim Jagielski]
9a3bbca61e24c13d8b496116ac759117136c6bf4aaron *) mod_ssl: Add optional function "ssl_get_tls_cb" to allow support
9a3bbca61e24c13d8b496116ac759117136c6bf4aaron for channel bindings. [Simo Sorce <simo redhat.com>]
9a3bbca61e24c13d8b496116ac759117136c6bf4aaron *) mod_proxy_wstunnel: Concurrent websockets messages could be
64c351fd973428b5bb4c28e983fa86875ea4e60fdougm lost or delayed with ProxyWebsocketAsync enabled.
64c351fd973428b5bb4c28e983fa86875ea4e60fdougm [Edward Lu <Chaosed0 gmail.com>]
64c351fd973428b5bb4c28e983fa86875ea4e60fdougm *) core, mod_info: Add compiled and loaded PCRE versions to version
0506359f47150991eaaae37ca07f94117a9aa63dtrawick number display. [Rainer Jung]
0506359f47150991eaaae37ca07f94117a9aa63dtrawick *) mpm_winnt: Accept utf-8 (Unicode) service names and descriptions for
0506359f47150991eaaae37ca07f94117a9aa63dtrawick internationalization. [William Rowe]
67f62b7a48ff9eb8d9f31898dceaf9f89280a723dougm *) mpm_winnt: Normalize the error and status messages emitted by service.c,
9d3fdc3bb8077a46851080e17ef9f16c83720c8ftrawick the service control interface for Windows. [William Rowe]
9d3fdc3bb8077a46851080e17ef9f16c83720c8ftrawick *) mod_authnz_ldap: Return LDAP connections to the pool before the handler
219472ea2d5f1563509321d8b8a91b116792bf7adougm is run, instead of waiting until the end of the request. [Eric Covener]
219472ea2d5f1563509321d8b8a91b116792bf7adougm *) mod_log_config: Add GlobalLog to allow a globally defined log to
c048b545f06921f53ceb830b30f99aed7b369d95dougm be inherited by virtual hosts that define a CustomLog.
c048b545f06921f53ceb830b30f99aed7b369d95dougm [Edward Lu <Chaosed0 gmail.com>]
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm *) MPMs: Support SO_REUSEPORT to create multiple duplicated listener
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm records for scalability. [Yingqi Lu <yingqi.lu@intel.com>,
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm Jeff Trawick, Jim Jagielski]
0ea12b5dcb3d1d399f9bff6f56fb445d80205f9dstriker *) mod_proxy_html: support automatic detection of doctype and processing
0ea12b5dcb3d1d399f9bff6f56fb445d80205f9dstriker of FPIs. PR56285 [Micha Lenk <micha lenk info>, Nick Kew]
e93624301705e3dc68992e3b488a764389eb8b98trawick *) mod_proxy_html: skip documents shorter than 4 bytes
cba0728e3535ee87e89cdb3cb54ce91eda18f6ccaaron PR 56286 [Micha Lenk <micha lenk info>]
cba0728e3535ee87e89cdb3cb54ce91eda18f6ccaaron *) mod_proxy_fdpass: Fix computation of the size of 'struct sockaddr_un'
a45de374fb215f294eb1369d4406ac79d6596ee1brianp when passed to 'connect()'.
a45de374fb215f294eb1369d4406ac79d6596ee1brianp [Graham Dumpleton <grahamd apache org>]
a45de374fb215f294eb1369d4406ac79d6596ee1brianp *) core: Add ap_mpm_resume_suspended() API to allow a suspended connection
7f14bcf6b594703df385ce84ba2ee3cdf3ccbae4trawick to resume. PR56333
7f14bcf6b594703df385ce84ba2ee3cdf3ccbae4trawick [Artem <artemciy gmail.com>, Edward Lu <Chaosed0 gmail.com>]
7f14bcf6b594703df385ce84ba2ee3cdf3ccbae4trawick *) core: Add ap_mpm_register_socket_callback_timeout() API. [Eric Covener]
a1be7357e2c08b9dfe52c277063d212d65b15feejim *) mod_proxy_wstunnel: Honor ProxyWebsocketIdleTimeout in asynchronous
a1be7357e2c08b9dfe52c277063d212d65b15feejim processing mode. [Eric Covener]
a1be7357e2c08b9dfe52c277063d212d65b15feejim *) mod_authnz_ldap: Fail explicitly when the filter is too long. Remove
a1be7357e2c08b9dfe52c277063d212d65b15feejim unnecessary apr_pstrdup() and strlen(). [Graham Leggett]
6682df9b639663c50f447e5690dd62cce7b1c086trawick *) Add the ldap-search option to mod_authnz_ldap, allowing authorization
6682df9b639663c50f447e5690dd62cce7b1c086trawick to be based on arbitrary expressions that do not include the username.
51c0f0fe0a49a180389009442a83f74b1916f96atrawick [Graham Leggett]
51c0f0fe0a49a180389009442a83f74b1916f96atrawick *) Add the ldap function to the expression API, allowing LDAP filters and
51c0f0fe0a49a180389009442a83f74b1916f96atrawick distinguished names based on expressions to be escaped correctly to
51c0f0fe0a49a180389009442a83f74b1916f96atrawick guard against LDAP injection. [Graham Leggett]
7e8bc9ca9d1e752f6ca6debec6be8addae8bd72etrawick *) Add module mod_ssl_ct, which provides an implementation of Certificate
7e8bc9ca9d1e752f6ca6debec6be8addae8bd72etrawick Transparency (RFC 6962) for httpd. [Jeff Trawick]
ecb511c254d5affe7cc018482d53c19aaf145878jerenkrantz *) mod_remoteip: Prevent an external proxy from presenting an internal
ecb511c254d5affe7cc018482d53c19aaf145878jerenkrantz proxy. PR 55962. [Mike Rumph]
60b83cd8f9427809082340cfd7581091990962f5jwoolley *) mod_ssl: Add hooks to allow other modules to perform processing at
60b83cd8f9427809082340cfd7581091990962f5jwoolley several stages of initialization and connection handling. See
e93624301705e3dc68992e3b488a764389eb8b98trawick *) mod_proxy_wstunnel: Avoid sending error responses down an upgraded
e93624301705e3dc68992e3b488a764389eb8b98trawick websockets connection as it is being close down. [Eric Covener]
a2d4f1da4e19836b2d6a673f80f33381a926a8bddougm *) mod_proxy_wstunnel: Allow the administrator to cap the amount
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb of time a synchronous websockets connection stays idle with
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb ProxyWebsocketIdleTimeout. [Eric Covener]
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb *) mod_proxy_wstunnel: Change to opt-in for asynchronous support, adding
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb directives ProxyWebsocketAsync and ProxyWebsocketAsyncDelay.
4aaf7088758ca56823e585969320f2405a7cc5fcdougm [Eric Covener]
4aaf7088758ca56823e585969320f2405a7cc5fcdougm *) mod_proxy_wstunnel: Stop leaking websockets backend connections under
e0596968fe84a2bdaebe0192d8d64d2e9856d4d6brianp event MPM (trunk-only). [Eric Covener]
e0596968fe84a2bdaebe0192d8d64d2e9856d4d6brianp *) mod_proxy_http: Add detach_backend hook (potentially usable
f33c2c86b419be97248c5289b71738b5f0c7ab0adirkx in other proxy scheme handlers). [Jeff Trawick]
f33c2c86b419be97248c5289b71738b5f0c7ab0adirkx *) mod_deflate: Add DeflateAlterETag to control how the ETag
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim is modified. The 'NoChange' parameter mimics 2.2.x behavior.
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim PR 45023, PR 39727. [Eric Covener]
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim *) mod_rewrite: Add 'BNF' (backreferences-no-plus) flag to RewriteRule to
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim allow spaces in backreferences to be encoded as %20 instead of '+'.
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley [Eric Covener]
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley *) mod_rewrite: Support an optional list of characters to escape in the
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley argument for the 'B' (escape backreferences) flag. [Eric Covener]
47638f4a67ce38e5a83e7a303d6f2d5c9ff47b4ebrianp *) mod_dir: Default to 2.2-like behavior and skip execution when method is
47638f4a67ce38e5a83e7a303d6f2d5c9ff47b4ebrianp neither GET nor POST, such as for DAV requests. PR 54914. [Chris Darroch]
82630c4a04be47f39298d3284b2c596244fb509bbrianp *) mod_rewrite: Rename the handler that does per-directory internal
82630c4a04be47f39298d3284b2c596244fb509bbrianp redirects to "rewrite-redirect-handler" from "redirect-handler" so
0d24ea1c99d2267096caaf0843c7e5a1ac6b7c0bmjc it is less ambiguous and less likely to be reused. [Eric Covener]
35d682920b0b7073bb9ff8c8794f0f73e3ee1a47slive *) mod_rewrite: Protect against looping with the [N] flag by enforcing a
a2d4f1da4e19836b2d6a673f80f33381a926a8bddougm default limit of 10000 iterations, and allowing each rule to change its
a2d4f1da4e19836b2d6a673f80f33381a926a8bddougm limit. [Eric Covener]
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard *) mod_ssl: Fix config merging of SSLOCSPEnable and SSLOCSPOverrideResponder.
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard [Jeff Trawick]
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard *) Add HttpContentLengthHeadZero and HttpExpectStrict directives.
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard [Yehuda Sadeh <yehuda inktank com>, Justin Erenkrantz]
983988ac7b8faaf037f4df0ab29729cd047a3ffdtrawick *) mod_ssl: Add -t -DDUMP_CA_CERTS option which dumps the filenames of all
983988ac7b8faaf037f4df0ab29729cd047a3ffdtrawick configured SSL CA certificates to stdout the same way as DUMP_CERTS does.
7a64b871b8b5e5a427b570e90f0e38e88266c783jim [Jan Kaluza]
7a64b871b8b5e5a427b570e90f0e38e88266c783jim *) mod_ssl: Don't flush when an EOS is received. Prepares mod_ssl
7a64b871b8b5e5a427b570e90f0e38e88266c783jim to support write completion. [Graham Leggett]
a736bac16e58d5e96945f35ee3c43a2cd2f5d37ejerenkrantz *) core: Add parse_errorlog_arg callback to ap_errorlog_provider
a736bac16e58d5e96945f35ee3c43a2cd2f5d37ejerenkrantz to allow providers to check the ErrorLog argument. [Jan Kaluza]
797d596a95d4f9900e83ec18295b4ca4951bf763jerenkrantz *) mod_cgid: Use the servers Timeout for each read from a CGI script,
797d596a95d4f9900e83ec18295b4ca4951bf763jerenkrantz allow override with new CGIDRequestTimeout directive. PR43494
797d596a95d4f9900e83ec18295b4ca4951bf763jerenkrantz [Eric Covener, Toshikuni Fukaya <toshikuni-fukaya cybozu co jp>]
5842e6b336b1cc0252b6cc2944dd81c7d3a19a1bbrianp *) core: ensure any abnormal exit is reported to stderr if it's a tty.
2532433e80d73506f7bcc18bd0dab686f1c39397minfrin PR 55670 [Nick Kew]
2532433e80d73506f7bcc18bd0dab686f1c39397minfrin *) mod_lua: Let the Inter-VM get/set functions work with a global
2532433e80d73506f7bcc18bd0dab686f1c39397minfrin shared memory pool instead of a per-process pool. [Daniel Gruno]
c148bc6b4eea544af816783400362f741c5f5fc2trawick *) ldap: Support ldaps when using the Microsoft LDAP SDK.
c148bc6b4eea544af816783400362f741c5f5fc2trawick PR 54626. [Jean-Frederic Clere]
9d432e23f6025b78322cbee43e8e89262a108e5eaaron *) mod_authnz_ldap: Change default value of AuthLDAPMaxSubGroupDepth to 0
9d432e23f6025b78322cbee43e8e89262a108e5eaaron to avoid performance problems when subgroups aren't in use. [Eric Covener]
9d432e23f6025b78322cbee43e8e89262a108e5eaaron *) mod_syslog: New module implementing syslog ap_error_log provider.
9d432e23f6025b78322cbee43e8e89262a108e5eaaron Previously, this code was part of core, now it's in separate module.
9d432e23f6025b78322cbee43e8e89262a108e5eaaron [Jan Kaluza]
6a5bdbbacf4a62adecde52b8f23ebcc4fa2a08b8trawick *) core: Add ap_errorlog_provider to make ErrorLog logging modular. Move
6a5bdbbacf4a62adecde52b8f23ebcc4fa2a08b8trawick syslog support from core to new mod_syslog. [Jan Kaluza]
10306ac2c175f420e6989568f4c8535a5dbc1349minfrin *) mod_status, mod_echo: Fix the display of client addresses.
10306ac2c175f420e6989568f4c8535a5dbc1349minfrin They were truncated to 31 characters which is not enough for IPv6 addresses.
10306ac2c175f420e6989568f4c8535a5dbc1349minfrin PR 54848 [Bernhard Schmidt <berni birkenwald de>]
b4e4d76bf454e1b603b410110356dbcf12f3bc42jim *) core: Add ap_log_data(), ap_log_rdata(), etc. for logging buffers.
b4e4d76bf454e1b603b410110356dbcf12f3bc42jim [Jeff Trawick]
adb1e17ae7e1cf5cf4f8f2b07d3389cb55f4becetrawick *) mod_unique_id: Use output of the PRNG rather than IP address and
adb1e17ae7e1cf5cf4f8f2b07d3389cb55f4becetrawick pid, avoiding sleep() call and possible DNS issues at startup,
71f891073f6fa0209870791f64cbbf28d77ffdc1brianp plus improving randomness for IPv6-only hosts.
71f891073f6fa0209870791f64cbbf28d77ffdc1brianp [Jan Kaluza <jkaluza redhat.com>]
2864362ca8266097928e84f101010bdf814ffa08stoddard *) mod_authnz_ldap: Support primitive LDAP servers that do not accept
2864362ca8266097928e84f101010bdf814ffa08stoddard filters, such as "SDBM-backed LDAP" on z/OS, by allowing a special
2864362ca8266097928e84f101010bdf814ffa08stoddard filter "none" to be specified in AuthLDAPURL. [Eric Covener]
f51dbb1f5b66d94b5c190bfcd444aa73bdc2b176trawick *) mod_file_cache: mod_file_cache should be able to serve files that
893c106ae59d8e96d921524b123ae26dea8ad37fgstein haven't had a Content-Type set via e.g. mod_mime. [Eric Covener]
893c106ae59d8e96d921524b123ae26dea8ad37fgstein *) core: merge AllowEncodedSlashes from the base configuration into
893c106ae59d8e96d921524b123ae26dea8ad37fgstein virtual hosts. [Eric Covener]
3aa6444bcee4e9fc32ec8860d832ff83a15784efianh *) AIX: Install DSO's with "cp" instead of "install" in instdso.sh
e2bdfd25d9d0461e0a3ab18ceff2113215e3e115brianp [Eric Covener]
e2bdfd25d9d0461e0a3ab18ceff2113215e3e115brianp *) mod_ldap: Don't keep retrying if a new LDAP connection times out.
b9fe73991e7c592a634242a7e11f924689f58e1fgstein [Eric Covener]
b9fe73991e7c592a634242a7e11f924689f58e1fgstein *) mod_deflate: permit compilation of mod_deflate against a zlib that has
b9fe73991e7c592a634242a7e11f924689f58e1fgstein been configured with -D Z_PREFIX, which redefines the token "deflate".
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick [Eric Covener]
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick *) mod_auth_digest: Use the secret when generating nonces in all cases and
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick not only when AuthName is used in .htaccess files (this change may cause
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick problems if used with round robin load balancers). Don't regenerate the
81b8d0f83e9d0bc2bf6900fc680737e0cac439a2brianp secret on graceful restarts. PR 54637 [Stefan Fritsch]
b5033962c73a470b6f36a3ac796c542a6ab4ddf6brianp *) core: Remove apr_brigade_flatten(), buffering and duplicated code
b5033962c73a470b6f36a3ac796c542a6ab4ddf6brianp from the HTTP_IN filter, parse chunks in a single pass with zero copy.
d7856f850b9b51165f23ae381a891bda894e1373ianh Reduce memory usage by 48 bytes per request. [Graham Leggett]
d7856f850b9b51165f23ae381a891bda894e1373ianh *) core: Stop the HTTP_IN filter from attempting to write error buckets
d7856f850b9b51165f23ae381a891bda894e1373ianh to the output filters, which is bogus in the proxy case. Create a
d7856f850b9b51165f23ae381a891bda894e1373ianh clean mapping from APR codes to HTTP status codes, and use it where
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick needed. [Graham Leggett]
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick *) mod_proxy: Ensure network errors detected by the proxy are returned as
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick 504 Gateway Timout as opposed to 502 Bad Gateway, in order to be
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick compliant with RFC2616 14.9.4 Cache Revalidation and Reload Controls.
ab2053f3cdda69cfa5e4ce0800ea7af203cc6d5ddougm *) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
ab2053f3cdda69cfa5e4ce0800ea7af203cc6d5ddougm [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez
88ecd979f1112454432371f55a1420240fae3743trawick *) mod_ldap: LDAP connections used for authentication were not respecting
548e06e26f5377b2efbb7e0dab20f536e5e24160trawick LDAPConnectionPoolTimeout. PR 54587
548e06e26f5377b2efbb7e0dab20f536e5e24160trawick *) core: ap_rgetline_core now pulls from r->proto_input_filters.
c02a689f2274966ed5d1c16207f74b5128c35c86trawick *) mod_proxy_html: process parsed comments immediately.
f51dbb1f5b66d94b5c190bfcd444aa73bdc2b176trawick Fixes bug where parsed comments may be lost. [Nick Kew]
f51dbb1f5b66d94b5c190bfcd444aa73bdc2b176trawick *) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard *) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard *) core: Add option to add valgrind support. Use it to reduce false positive
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard warnings in mod_ssl. [Stefan Fritsch]
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard *) mod_authn_file, mod_authn_dbd, mod_authn_dbm, mod_authn_socache:
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard Cache the result of the most recent password hash verification for every
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard keep-alive connection. This saves some expensive calculations.
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard [Stefan Fritsch]
94f4821a5444a4fe782f772aef5db4d8b839675djerenkrantz *) http: Remove support for Request-Range header sent by Navigator 2-3 and
94f4821a5444a4fe782f772aef5db4d8b839675djerenkrantz MSIE 3. [Stefan Fritsch]
2a49e30bae376c9744b96c8681ab88122ccaa46cjerenkrantz *) core, http: Extend HttpProtocol with an option to enforce stricter HTTP
2a49e30bae376c9744b96c8681ab88122ccaa46cjerenkrantz conformance or to only log the found problems. [Stefan Fritsch]
2a49e30bae376c9744b96c8681ab88122ccaa46cjerenkrantz *) core: Correctly parse an IPv6 literal host specification in an absolute
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin URL in the request line. [Stefan Fritsch]
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin *) EventOpt MPM
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin *) core: Add LogLevelOverride directive that allows to override the
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin loglevel for clients from certain IPs. This also works for things
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin like the SSL handshake where <If> LogLevel ... </If> is evaluated
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin too late. [Stefan Fritsch]
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin *) core: Add new directive Warning to issue warnings from a configuration
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin file. Both Warning and Error now generate a timestamped log message.
c49200a2bdbb8fa1f2e5c3b87cc497ecdeefa8feminfrin [Fabien Coelho]
c49200a2bdbb8fa1f2e5c3b87cc497ecdeefa8feminfrin *) ap_expr: Add SERVER_PROTOCOL_VERSION, ..._MAJOR, and ..._MINOR
c49200a2bdbb8fa1f2e5c3b87cc497ecdeefa8feminfrin variables. [Stefan Fritsch]
103005439776bb7aeccb95ebf4761ebfef3f9c39ianh *) core: New directive RegisterHttpMethod for registering non-standard
103005439776bb7aeccb95ebf4761ebfef3f9c39ianh HTTP methods. [Stefan Fritsch]
92d311b27a6182c2eed67317990c8c168584ee75trawick *) core: New directive HttpProtocol which allows to disable HTTP/0.9
92d311b27a6182c2eed67317990c8c168584ee75trawick support. [Stefan Fritsch]
92d311b27a6182c2eed67317990c8c168584ee75trawick *) mod_allowhandlers: New module to forbid specific handlers for specific
744ecbcc06a9128fc4730d1334cc180bf7fc521caaron directories. [Stefan Fritsch]
6f0dd808a674b7c09a625b36f320030f4e339f8faaron *) mod_systemd: New module, for integration with systemd on Linux.
744ecbcc06a9128fc4730d1334cc180bf7fc521caaron [Jan Kaluza <jkaluza redhat.com>]
59511de77b389ced52253d055fc470ecfedfcd99aaron *) WinNT MPM: Store pid and generation for each thread in scoreboard
59511de77b389ced52253d055fc470ecfedfcd99aaron to allow tracking of threads from exiting children via mod_status
59511de77b389ced52253d055fc470ecfedfcd99aaron or other such mechanisms. [Jeff Trawick]
b5cdec7910a44654cb254b99c5a39d7c180c4bcajerenkrantz *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
b5cdec7910a44654cb254b99c5a39d7c180c4bcajerenkrantz - APIs: ap_log_pid(), ap_remove_pid, ap_read_pid()
b5cdec7910a44654cb254b99c5a39d7c180c4bcajerenkrantz - core: the scoreboard (ScoreBoardFile), pid file (PidFile), and
b5cdec7910a44654cb254b99c5a39d7c180c4bcajerenkrantz mutexes (Mutex)
393bfaab1beb2410959a4a5e91f58446f01bac09rbb - mod_cache: thundering herd lock directory
c10fe96ac7d024918e26af6c8ba5470273b75bb2jwoolley - mod_lbmethod_heartbeat, mod_heartmonitor: heartbeat storage file
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron - mod_ldap: shared memory cache
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron - mod_socache_shmcb, mod_socache_dbm: shared memory or dbm for cache
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron [Jeff Trawick]
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron *) suexec: Add --enable-suexec-capabilites support on Linux, to use
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron setuid/setgid capability bits rather than a setuid root binary.
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron [Joe Orton]
01e8aca9299a0b872414c24c8b7724d6f88ae665ianh *) suexec: Add support for logging to syslog as an alternative to logging
01e8aca9299a0b872414c24c8b7724d6f88ae665ianh to a file; configure --without-suexec-logfile --with-suexec-syslog.
01e8aca9299a0b872414c24c8b7724d6f88ae665ianh [Joe Orton]
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm [Matthew Steele <mdsteele google.com>]
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
6362515725d2b6d66ac3b26531f8c53ac75f8c20wrowe be compiled by the build compiler instead of the host compiler.
6362515725d2b6d66ac3b26531f8c53ac75f8c20wrowe Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm PR 51257. [Guenter Knauf]
6362515725d2b6d66ac3b26531f8c53ac75f8c20wrowe *) core: In maintainer mode, replace apr_palloc with a version that
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron initializes the allocated memory with non-zero values, except if
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron *) mod_policy: Add a new testing module to help server administrators
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron enforce a configurable level of protocol compliance on their
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron servers and application servers behind theirs. [Graham Leggett]
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron *) mod_firehose: Add a new debugging module able to record traffic
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron passing through the server in such a way that connections and/or
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron requests be reconstructed and replayed. [Graham Leggett]
9379749d811388a7d0e3410940ddd6743a33d330jim *) mod_noloris
f37499bf7da81cd6b697d4667233137957426428jerenkrantz *) Simple MPM
b8c2b4dfc363e33a8a1c2464802c3fb05cab86bbwrowe *) mod_serf
421dc1d123c9adda60e024f93fb614bfada8b9e5wrowe [Apache 2.5.0-dev includes those bug fixes and changes with the
83d91d60d00dc345bfbcbc48ff206db4a6b23b2eaaron Apache 2.4.xx tree as documented below, except as noted.]
83d91d60d00dc345bfbcbc48ff206db4a6b23b2eaaronChanges with Apache 2.4.x and later:
83d91d60d00dc345bfbcbc48ff206db4a6b23b2eaaron *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup
c10fe96ac7d024918e26af6c8ba5470273b75bb2jwoolleyChanges with Apache 2.2.x and later:
c10fe96ac7d024918e26af6c8ba5470273b75bb2jwoolley *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
f37499bf7da81cd6b697d4667233137957426428jerenkrantzChanges with Apache 2.0.x and later: