CHANGES revision 3f414998b6d7e96a9f699621352fc61516b1a316
d3ed5b56cb6b58f87ffd125bed48f7668f13de1edirkx -*- coding: utf-8 -*-
893328ef6ff86d0ca27774778d84410353789fb0fieldingChanges with Apache 2.5.0
893328ef6ff86d0ca27774778d84410353789fb0fielding *) mod_authn_socache: Support optional initialization arguments for
0202d2114cc6d7042995100519cce45c808c153bnd socache providers. [Chris Darroch]
0202d2114cc6d7042995100519cce45c808c153bnd *) mod_session: Reset the max-age on session save. PR 47476. [Alexey
893328ef6ff86d0ca27774778d84410353789fb0fielding Varlamov <alexey.v.varlamov gmail com>]
893328ef6ff86d0ca27774778d84410353789fb0fielding *) mod_session: After parsing the value of the header specified by the
0202d2114cc6d7042995100519cce45c808c153bnd SessionHeader directive, remove the value from the response. PR 55279.
0202d2114cc6d7042995100519cce45c808c153bnd [Graham Leggett]
0202d2114cc6d7042995100519cce45c808c153bnd *) mod_auth_form: Make sure the optional functions are loaded even when
0202d2114cc6d7042995100519cce45c808c153bnd the AuthFormProvider isn't specified. [Graham Leggett]
893328ef6ff86d0ca27774778d84410353789fb0fielding *) core: Don't truncate output when sending is interrupted by a signal,
893328ef6ff86d0ca27774778d84410353789fb0fielding such as from an exiting CGI process. PR 55643. [Jeff Trawick]
0d50a692ff2ac7bdb42e417737ed86ebf0a41671ben *) core: Add missing Reason-Phrase in HTTP response headers.
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz PR 54946. [Rainer Jung]
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz *) mod_rewrite: Make rewrite websocket aware to allow proxying.
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz PR 55598. [Chris Harris <chris.harris kitware com>]
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz *) mod_ssl: Improve handling of ephemeral DH and ECDH keys by
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz allowing custom parameters to be configured via SSLCertificateFile,
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz and by adding standardized DH parameters for 1024/2048/3072/4096 bits.
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz Unless custom parameters are configured, the standardized parameters
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz are applied based on the certificate's RSA/DSA key size. [Kaspar Brand]
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz *) mod_ssl, configure: Require OpenSSL 0.9.8a or later. [Kaspar Brand]
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz *) mod_lua: Let the Inter-VM get/set functions work with a global
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz shared memory pool instead of a per-process pool. [Daniel Gruno]
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz *) WinNT MPM: Exit the child if the parent process crashes or is terminated.
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz [Oracle Corporation]
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz *) ldap: Support ldaps when using the Microsoft LDAP SDK.
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz PR 54626. [Jean-Frederic Clere]
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz *) mod_proxy: Add ap_connection_reusable() for checking if a connection
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz is reusable as of this point in processing. [Jeff Trawick]
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz *) mod_ssl: drop support for export-grade ciphers with ephemeral RSA
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz keys, and unconditionally disable aNULL, eNULL and EXP ciphers
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz (not overridable via SSLCipherSuite). [Kaspar Brand]
893328ef6ff86d0ca27774778d84410353789fb0fielding *) mod_authnz_ldap: Change default value of AuthLDAPMaxSubGroupDepth to 0
893328ef6ff86d0ca27774778d84410353789fb0fielding to avoid performance problems when subgroups aren't in use. [Eric Covener]
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz *) mod_syslog: New module implementing syslog ap_error_log provider.
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz Previously, this code was part of core, now it's in separate module.
893328ef6ff86d0ca27774778d84410353789fb0fielding [Jan Kaluza]
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz *) core: Add ap_errorlog_provider to make ErrorLog logging modular. Move
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz syslog support from core to new mod_syslog. [Jan Kaluza]
893328ef6ff86d0ca27774778d84410353789fb0fielding *) mod_proxy_fcgi: Handle reading protocol data that is split between
893328ef6ff86d0ca27774778d84410353789fb0fielding packets. [Jeff Trawick]
893328ef6ff86d0ca27774778d84410353789fb0fielding *) mod_proxy_fcgi: Remove 64K limit on encoded length of all envvars.
42f9227f80ce22e944d427e3d7490fa1dd07f9f2rbb An individual envvar with an encoded length of more than 16K will be
893328ef6ff86d0ca27774778d84410353789fb0fielding omitted. [Jeff Trawick]
893328ef6ff86d0ca27774778d84410353789fb0fielding *) core: draft-ietf-httpbis-p1-messaging-23 corrections regarding
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz TE/CL conflicts. [Yann Ylavic <ylavic.dev gmail com>, Jim Jagielski]
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz *) mod_proxy_fcgi: Use apr_socket_timeout_get instead of hard-coded
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz 30 seconds timeout. [Jan Kaluza]
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz *) WinNT MPM: If ap_run_pre_connection() fails or sets c->aborted, don't
893328ef6ff86d0ca27774778d84410353789fb0fielding save the socket for reuse by the next worker as if it were an
893328ef6ff86d0ca27774778d84410353789fb0fielding APR_SO_DISCONNECTED socket. Restores 2.2 behavior. [Eric Covener]
893328ef6ff86d0ca27774778d84410353789fb0fielding *) mod_cache: Avoid a crash with strcmp() when the hostname is not provided.
42f9227f80ce22e944d427e3d7490fa1dd07f9f2rbb [Graham Leggett]
893328ef6ff86d0ca27774778d84410353789fb0fielding *) mod_lua: Add rudimentary support for WebSocket interaction. This is
893328ef6ff86d0ca27774778d84410353789fb0fielding currently request-bound and only supports the WS protocol. [Daniel Gruno]
893328ef6ff86d0ca27774778d84410353789fb0fielding *) mod_lua: Add getcookie/setcookie for reading/writing HTTP cookies
893328ef6ff86d0ca27774778d84410353789fb0fielding [Daniel Gruno]
893328ef6ff86d0ca27774778d84410353789fb0fielding *) WinNT MPM: Don't crash during child process initialization if the
623882f55701a4c5a6bded180f60d86a524ac341sascha Listen protocol is unrecognized. [Jeff Trawick]
c066cdcb75ca262e424345b347b86e7ce2285869jerenkrantz *) mod_lua: Add a logging hook for modifying/skipping logs. [Daniel Gruno]
c066cdcb75ca262e424345b347b86e7ce2285869jerenkrantz *) mod_status, mod_echo: Fix the display of client addresses.
c15906bab97b9b71b6dc08c1aa2f5c0b72b5ca4edreid They were truncated to 31 characters which is not enough for IPv6 addresses.
c15906bab97b9b71b6dc08c1aa2f5c0b72b5ca4edreid PR 54848 [Bernhard Schmidt <berni birkenwald de>]
96e6cafca226a8a2a64a7bbdc634b5b2679c9e0csascha *) mod_lua: If the first yield() of a LuaOutputFilter returns a string, it should
893328ef6ff86d0ca27774778d84410353789fb0fielding be prefixed to the response as documented. [Eric Covener]
893328ef6ff86d0ca27774778d84410353789fb0fielding *) mod_lua: Remove ETAG, Content-Length, and Content-MD5 when a LuaOutputFilter
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz is configured without mod_filter. [Eric Covener]
893328ef6ff86d0ca27774778d84410353789fb0fielding *) mod_lua: Register LuaOutputFilter scripts as changing the content and
893328ef6ff86d0ca27774778d84410353789fb0fielding content-length by default, when run my mod_filter. Previously,
893328ef6ff86d0ca27774778d84410353789fb0fielding growing or shrinking a response that started with Content-Length set
893328ef6ff86d0ca27774778d84410353789fb0fielding would require mod_filter and FilterProtocol change=yes. [Eric Covnener]
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz *) mod_lua: Return a 500 error if a LuaHook* script doesn't return a
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz numeric return code. [Eric Covener]
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz *) Add experimental cmake-based build system for Windows. [Jeff Trawick,
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz Tom Donovan]
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz *) mod_authnz_fcgi: New module to enable FastCGI authorizer
893328ef6ff86d0ca27774778d84410353789fb0fielding applications to authenticate and/or authorize clients.
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz [Jeff Trawick]
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz *) core: Add util_fcgi.h and associated definitions and support
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz routines for FastCGI, based largely on mod_proxy_fcgi.
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz [Jeff Trawick]
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz *) core: Add ap_log_data(), ap_log_rdata(), etc. for logging buffers.
893328ef6ff86d0ca27774778d84410353789fb0fielding [Jeff Trawick]
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz *) mod_unique_id: Use output of the PRNG rather than IP address and
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz pid, avoiding sleep() call and possible DNS issues at startup,
99d360dcbb5ac2be27694be74cc6124dbadf3315jerenkrantz plus improving randomness for IPv6-only hosts.
1e5333ef1a0edb888d75c0cdd90b33fa7e89fc31wsanchez [Jan Kaluza <jkaluza redhat.com>]
1d13cbde60ace1b56ca57b9f0f74168bb1288174trawick *) mod_authnz_ldap: Support primitive LDAP servers that do not accept
80b1e2ff2e3515fdab14675684b2640ceb6ce1c7trawick filters, such as "SDBM-backed LDAP" on z/OS, by allowing a special
1d13cbde60ace1b56ca57b9f0f74168bb1288174trawick filter "none" to be specified in AuthLDAPURL. [Eric Covener]
ab44eb80e084a02a66a58336d6fcfbbe48310439trawick *) mod_file_cache: mod_file_cache should be able to serve files that
ab44eb80e084a02a66a58336d6fcfbbe48310439trawick haven't had a Content-Type set via e.g. mod_mime. [Eric Covener]
ab44eb80e084a02a66a58336d6fcfbbe48310439trawick *) core: merge AllowEncodedSlashes from the base configuration into
ab44eb80e084a02a66a58336d6fcfbbe48310439trawick virtual hosts. [Eric Covener]
9045837071eae7a4b55204a21f31ccee17749af3jerenkrantz *) AIX: Install DSO's with "cp" instead of "install" in instdso.sh
893328ef6ff86d0ca27774778d84410353789fb0fielding [Eric Covener]
893328ef6ff86d0ca27774778d84410353789fb0fielding *) mod_ldap: Don't keep retrying if a new LDAP connection times out.
893328ef6ff86d0ca27774778d84410353789fb0fielding [Eric Covener]
544c23d79a3a7596a3612224ed3ac9fa8372929djerenkrantz *) mod_deflate: permit compilation of mod_deflate against a zlib that has
893328ef6ff86d0ca27774778d84410353789fb0fielding been configured with -D Z_PREFIX, which redefines the token "deflate".
893328ef6ff86d0ca27774778d84410353789fb0fielding [Eric Covener]
544c23d79a3a7596a3612224ed3ac9fa8372929djerenkrantz *) mod_socache_shmcb.c: Remove arbitrary restriction on shared memory size
96e6cafca226a8a2a64a7bbdc634b5b2679c9e0csascha previously limited to 64MB. [Jens Låås <jelaas gmail.com>]
0464cb46220c1025cbfe1365a6bd352e67d2e766jorton *) mod_auth_digest: Use the secret when generating nonces in all cases and
0464cb46220c1025cbfe1365a6bd352e67d2e766jorton not only when AuthName is used in .htaccess files (this change may cause
4028d805f3ab215e39bae405d35e001a538bc50eminfrin problems if used with round robin load balancers). Don't regenerate the
4028d805f3ab215e39bae405d35e001a538bc50eminfrin secret on graceful restarts. PR 54637 [Stefan Fritsch]
4028d805f3ab215e39bae405d35e001a538bc50eminfrin *) core: Remove apr_brigade_flatten(), buffering and duplicated code
4028d805f3ab215e39bae405d35e001a538bc50eminfrin from the HTTP_IN filter, parse chunks in a single pass with zero copy.
4028d805f3ab215e39bae405d35e001a538bc50eminfrin Reduce memory usage by 48 bytes per request. [Graham Leggett]
4028d805f3ab215e39bae405d35e001a538bc50eminfrin *) core: Stop the HTTP_IN filter from attempting to write error buckets
4028d805f3ab215e39bae405d35e001a538bc50eminfrin to the output filters, which is bogus in the proxy case. Create a
4028d805f3ab215e39bae405d35e001a538bc50eminfrin clean mapping from APR codes to HTTP status codes, and use it where
4028d805f3ab215e39bae405d35e001a538bc50eminfrin needed. [Graham Leggett]
4028d805f3ab215e39bae405d35e001a538bc50eminfrin *) mod_proxy: Ensure network errors detected by the proxy are returned as
4028d805f3ab215e39bae405d35e001a538bc50eminfrin 504 Gateway Timout as opposed to 502 Bad Gateway, in order to be
4028d805f3ab215e39bae405d35e001a538bc50eminfrin compliant with RFC2616 14.9.4 Cache Revalidation and Reload Controls.
4028d805f3ab215e39bae405d35e001a538bc50eminfrin *) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
f0528865c2e6c22ecc51eeecc496251489029bddjorton [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez
f0528865c2e6c22ecc51eeecc496251489029bddjorton *) core, mod_ssl: Enable the ability for a module to reverse the sense of
f0528865c2e6c22ecc51eeecc496251489029bddjorton a poll event from a read to a write or vice versa. This is a step on
f0528865c2e6c22ecc51eeecc496251489029bddjorton the way to allow mod_ssl taking full advantage of the event MPM.
f0528865c2e6c22ecc51eeecc496251489029bddjorton [Graham Leggett]
f0528865c2e6c22ecc51eeecc496251489029bddjorton *) mod_ldap: LDAP connections used for authentication were not respecting
f0528865c2e6c22ecc51eeecc496251489029bddjorton LDAPConnectionPoolTimeout. PR 54587
893328ef6ff86d0ca27774778d84410353789fb0fielding *) core: ap_rgetline_core now pulls from r->proto_input_filters.
HTML/XHTML [Nick Kew]
[Jan Kaluza <jkaluza redhat.com>]
*) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
setuid/setgid capability bits rather than a setuid root binary.
[Matthew Steele <mdsteele google.com>]
passing through the server in such a way that connections and/or
Apache 2.4.xx tree as documented below, except as noted.]
Changes with Apache 2.4.x and later:
Changes with Apache 2.2.x and later:
Changes with Apache 2.0.x and later: