CHANGES revision 8152945ae46857b170cb227e79bb799f4fc7710d
0e536bbae2129c15074567ddc69d4f0eaad13935slive -*- coding: utf-8 -*-
0e536bbae2129c15074567ddc69d4f0eaad13935sliveChanges with Apache 2.5.0
e942c741056732f50da2074b36fe59805d370650slive
5f5d1b4cc970b7f06ff8ef6526128e9a27303d88nd *) Add the ldap function to the expression API, allowing LDAP filters and
d5d794fc2f4cc9ca6d6da17cfa2cdcd8d244bacdnd distinguished names based on expressions to be escaped correctly to
d5d794fc2f4cc9ca6d6da17cfa2cdcd8d244bacdnd guard against LDAP injection. [Graham Leggett]
db479b48bd4d75423ed4a45e15b75089d1a8ad72fielding
db479b48bd4d75423ed4a45e15b75089d1a8ad72fielding *) Add module mod_ssl_ct, which provides an implementation of Certificate
db479b48bd4d75423ed4a45e15b75089d1a8ad72fielding Transparency (RFC 6962) for httpd. [Jeff Trawick]
db479b48bd4d75423ed4a45e15b75089d1a8ad72fielding
db479b48bd4d75423ed4a45e15b75089d1a8ad72fielding *) mod_cache: Fix AH00784 errors on Windows when the the CacheLock directive
db479b48bd4d75423ed4a45e15b75089d1a8ad72fielding is enabled. [Eric Covener]
d5d794fc2f4cc9ca6d6da17cfa2cdcd8d244bacdnd
d5d794fc2f4cc9ca6d6da17cfa2cdcd8d244bacdnd *) mod_proxy: Preserve original request headers even if they differ
d5d794fc2f4cc9ca6d6da17cfa2cdcd8d244bacdnd from the ones to be forwarded to the backend. PR 45387.
d5d794fc2f4cc9ca6d6da17cfa2cdcd8d244bacdnd [Yann Ylavic]
d5d794fc2f4cc9ca6d6da17cfa2cdcd8d244bacdnd
d5d794fc2f4cc9ca6d6da17cfa2cdcd8d244bacdnd *) mod_proxy: When ping/pong is configured for a worker, don't send or
d5d794fc2f4cc9ca6d6da17cfa2cdcd8d244bacdnd forward "100 Continue" (interim) response to the client if it does
d5d794fc2f4cc9ca6d6da17cfa2cdcd8d244bacdnd not expect one. [Yann Ylavic]
d5d794fc2f4cc9ca6d6da17cfa2cdcd8d244bacdnd
d5d794fc2f4cc9ca6d6da17cfa2cdcd8d244bacdnd *) mod_remoteip: Prevent an external proxy from presenting an internal
7db9f691a00ead175b03335457ca296a33ddf31bnd proxy. PR 55962. [Mike Rumph]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) mod_ssl: Add hooks to allow other modules to perform processing at
febb2f4c6098caee670d460bf6e9b5912571bb5fnd several stages of initialization and connection handling. See
febb2f4c6098caee670d460bf6e9b5912571bb5fnd mod_ssl_openssl.h. [Jeff Trawick]
2665093172eec6fcb025b25bb9b93ef3cb3f88d9slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) mod_proxy_wstunnel: Avoid sending error responses down an upgraded
0e536bbae2129c15074567ddc69d4f0eaad13935slive websockets connection as it is being close down. [Eric Covener]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) mod_proxy_wstunnel: Allow the administrator to cap the amount
0e536bbae2129c15074567ddc69d4f0eaad13935slive of time a synchronous websockets connection stays idle with
895fd561a92fa02367e8ce11aa28d799b7c5b8cfslive ProxyWebsocketIdleTimeout. [Eric Covener]
895fd561a92fa02367e8ce11aa28d799b7c5b8cfslive
895fd561a92fa02367e8ce11aa28d799b7c5b8cfslive *) mod_proxy_wstunnel: Change to opt-in for asynchronous support, adding
895fd561a92fa02367e8ce11aa28d799b7c5b8cfslive directives ProxyWebsocketAsync and ProxyWebsocketAsyncDelay.
895fd561a92fa02367e8ce11aa28d799b7c5b8cfslive [Eric Covener]
895fd561a92fa02367e8ce11aa28d799b7c5b8cfslive
895fd561a92fa02367e8ce11aa28d799b7c5b8cfslive *) mod_proxy_wstunnel: Stop leaking websockets backend connections under
0e536bbae2129c15074567ddc69d4f0eaad13935slive event MPM (trunk-only). [Eric Covener]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) mod_proxy_wstunnel: Don't issue AH02447 and log a 500 on routine
0e536bbae2129c15074567ddc69d4f0eaad13935slive hangups from websockets origin servers. PR 56299
0e536bbae2129c15074567ddc69d4f0eaad13935slive [Yann Ylavic, Edward Lu <Chaosed0 gmail com>, Eric Covener]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) mod_proxy_wstunnel: Don't pool backend websockets connections,
0e536bbae2129c15074567ddc69d4f0eaad13935slive because we need to handshake every time. PR 55890.
0e536bbae2129c15074567ddc69d4f0eaad13935slive [Eric Covener]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) mod_proxy_http: Add detach_backend hook (potentially usable
0e536bbae2129c15074567ddc69d4f0eaad13935slive in other proxy scheme handlers). [Jeff Trawick]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
97a9a944b5887e91042b019776c41d5dd74557aferikabele *) mod_deflate: Add DeflateAlterETag to control how the ETag
0e536bbae2129c15074567ddc69d4f0eaad13935slive is modified. The 'NoChange' parameter mimics 2.2.x behavior.
895fd561a92fa02367e8ce11aa28d799b7c5b8cfslive PR 45023, PR 39727. [Eric Covener]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
895fd561a92fa02367e8ce11aa28d799b7c5b8cfslive *) mod_rewrite: Add 'BNF' (backreferences-no-plus) flag to RewriteRule to
febb2f4c6098caee670d460bf6e9b5912571bb5fnd allow spaces in backreferences to be encoded as %20 instead of '+'.
febb2f4c6098caee670d460bf6e9b5912571bb5fnd [Eric Covener]
febb2f4c6098caee670d460bf6e9b5912571bb5fnd
febb2f4c6098caee670d460bf6e9b5912571bb5fnd *) mod_expires: don't add Expires header to error responses (4xx/5xx),
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh be they generated or forwarded. PR 55669. [ Yann Ylavic ]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) mod_rewrite: Support an optional list of characters to escape in the
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh argument for the 'B' (escape backreferences) flag. [Eric Covener]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) mod_ssl: Add SSLOCSPUseRequestNonce directive to control whether or not
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh OCSP requests should use a nonce to be checked against the responder's
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh one. PR 56233. [ Yann Ylavic ]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) mod_dir: Default to 2.2-like behavior and skip execution when method is
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh neither GET nor POST, such as for DAV requests. PR 54914. [Chris Darroch]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) mod_rewrite: Rename the handler that does per-directory internal
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh redirects to "rewrite-redirect-handler" from "redirect-handler" so
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh it is less ambiguous and less likely to be reused. [Eric Covener]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) mod_rewrite: Protect against looping with the [N] flag by enforcing a
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh default limit of 10000 iterations, and allowing each rule to change its
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh limit. [Eric Covener]
febb2f4c6098caee670d460bf6e9b5912571bb5fnd
febb2f4c6098caee670d460bf6e9b5912571bb5fnd *) mod_ssl: Fix config merging of SSLOCSPEnable and SSLOCSPOverrideResponder.
febb2f4c6098caee670d460bf6e9b5912571bb5fnd [Jeff Trawick]
febb2f4c6098caee670d460bf6e9b5912571bb5fnd
febb2f4c6098caee670d460bf6e9b5912571bb5fnd *) Add HttpContentLengthHeadZero and HttpExpectStrict directives.
febb2f4c6098caee670d460bf6e9b5912571bb5fnd [Yehuda Sadeh <yehuda inktank com>, Justin Erenkrantz]
febb2f4c6098caee670d460bf6e9b5912571bb5fnd
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) FreeBSD: Disable IPv4-mapped listening sockets by default for versions
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh 5+ instead of just for FreeBSD 5. PR 53824. [Jeff Trawick]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) mod_auth_form: Add a debug message when the fields on a form are not
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh recognised. [Graham Leggett]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) mod_ssl: Add -t -DDUMP_CA_CERTS option which dumps the filenames of all
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh configured SSL CA certificates to stdout the same way as DUMP_CERTS does.
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh [Jan Kaluza]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) mod_ssl: Don't flush when an EOS is received. Prepares mod_ssl
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh to support write completion. [Graham Leggett]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) core: Add parse_errorlog_arg callback to ap_errorlog_provider
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh to allow providers to check the ErrorLog argument. [Jan Kaluza]
febb2f4c6098caee670d460bf6e9b5912571bb5fnd
febb2f4c6098caee670d460bf6e9b5912571bb5fnd *) mod_cgid: Use the servers Timeout for each read from a CGI script,
febb2f4c6098caee670d460bf6e9b5912571bb5fnd allow override with new CGIDRequestTimeout directive. PR43494
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh [Eric Covener, Toshikuni Fukaya <toshikuni-fukaya cybozu co jp>]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) core: Add missing Reason-Phrase in HTTP response headers.
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh PR 54946. [Rainer Jung]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) core: ensure any abnormal exit is reported to stderr if it's a tty.
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh PR 55670 [Nick Kew]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) mod_lua: Let the Inter-VM get/set functions work with a global
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh shared memory pool instead of a per-process pool. [Daniel Gruno]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) ldap: Support ldaps when using the Microsoft LDAP SDK.
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh PR 54626. [Jean-Frederic Clere]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) mod_proxy: Add ap_connection_reusable() for checking if a connection
febb2f4c6098caee670d460bf6e9b5912571bb5fnd is reusable as of this point in processing. [Jeff Trawick]
febb2f4c6098caee670d460bf6e9b5912571bb5fnd
febb2f4c6098caee670d460bf6e9b5912571bb5fnd *) mod_authnz_ldap: Change default value of AuthLDAPMaxSubGroupDepth to 0
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh to avoid performance problems when subgroups aren't in use. [Eric Covener]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) mod_syslog: New module implementing syslog ap_error_log provider.
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh Previously, this code was part of core, now it's in separate module.
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh [Jan Kaluza]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) core: Add ap_errorlog_provider to make ErrorLog logging modular. Move
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh syslog support from core to new mod_syslog. [Jan Kaluza]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) WinNT MPM: If ap_run_pre_connection() fails or sets c->aborted, don't
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh save the socket for reuse by the next worker as if it were an
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh APR_SO_DISCONNECTED socket. Restores 2.2 behavior. [Eric Covener]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
febb2f4c6098caee670d460bf6e9b5912571bb5fnd *) mod_status, mod_echo: Fix the display of client addresses.
febb2f4c6098caee670d460bf6e9b5912571bb5fnd They were truncated to 31 characters which is not enough for IPv6 addresses.
febb2f4c6098caee670d460bf6e9b5912571bb5fnd PR 54848 [Bernhard Schmidt <berni birkenwald de>]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) core: Add ap_log_data(), ap_log_rdata(), etc. for logging buffers.
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh [Jeff Trawick]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) mod_unique_id: Use output of the PRNG rather than IP address and
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh pid, avoiding sleep() call and possible DNS issues at startup,
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh plus improving randomness for IPv6-only hosts.
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh [Jan Kaluza <jkaluza redhat.com>]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) mod_authnz_ldap: Support primitive LDAP servers that do not accept
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh filters, such as "SDBM-backed LDAP" on z/OS, by allowing a special
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh filter "none" to be specified in AuthLDAPURL. [Eric Covener]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) mod_file_cache: mod_file_cache should be able to serve files that
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh haven't had a Content-Type set via e.g. mod_mime. [Eric Covener]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) core: merge AllowEncodedSlashes from the base configuration into
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh virtual hosts. [Eric Covener]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) AIX: Install DSO's with "cp" instead of "install" in instdso.sh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh [Eric Covener]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) mod_ldap: Don't keep retrying if a new LDAP connection times out.
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh [Eric Covener]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
febb2f4c6098caee670d460bf6e9b5912571bb5fnd *) mod_deflate: permit compilation of mod_deflate against a zlib that has
febb2f4c6098caee670d460bf6e9b5912571bb5fnd been configured with -D Z_PREFIX, which redefines the token "deflate".
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh [Eric Covener]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) mod_socache_shmcb.c: Remove arbitrary restriction on shared memory size
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh previously limited to 64MB. [Jens Låås <jelaas gmail.com>]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) mod_auth_digest: Use the secret when generating nonces in all cases and
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh not only when AuthName is used in .htaccess files (this change may cause
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh problems if used with round robin load balancers). Don't regenerate the
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh secret on graceful restarts. PR 54637 [Stefan Fritsch]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh *) core: Remove apr_brigade_flatten(), buffering and duplicated code
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh from the HTTP_IN filter, parse chunks in a single pass with zero copy.
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh Reduce memory usage by 48 bytes per request. [Graham Leggett]
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh
febb2f4c6098caee670d460bf6e9b5912571bb5fnd *) core: Stop the HTTP_IN filter from attempting to write error buckets
febb2f4c6098caee670d460bf6e9b5912571bb5fnd to the output filters, which is bogus in the proxy case. Create a
febb2f4c6098caee670d460bf6e9b5912571bb5fnd clean mapping from APR codes to HTTP status codes, and use it where
0e536bbae2129c15074567ddc69d4f0eaad13935slive needed. [Graham Leggett]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) mod_proxy: Ensure network errors detected by the proxy are returned as
febb2f4c6098caee670d460bf6e9b5912571bb5fnd 504 Gateway Timout as opposed to 502 Bad Gateway, in order to be
febb2f4c6098caee670d460bf6e9b5912571bb5fnd compliant with RFC2616 14.9.4 Cache Revalidation and Reload Controls.
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
0e536bbae2129c15074567ddc69d4f0eaad13935slive [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez
0e536bbae2129c15074567ddc69d4f0eaad13935slive <alejandro.alvarez.ayllon cern.ch>]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) core, mod_ssl: Enable the ability for a module to reverse the sense of
0e536bbae2129c15074567ddc69d4f0eaad13935slive a poll event from a read to a write or vice versa. This is a step on
febb2f4c6098caee670d460bf6e9b5912571bb5fnd the way to allow mod_ssl taking full advantage of the event MPM.
538db8b3c2fd334e7493e4bed7b2b779c74bcbb9yoshiki [Graham Leggett]
538db8b3c2fd334e7493e4bed7b2b779c74bcbb9yoshiki
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) mod_ldap: LDAP connections used for authentication were not respecting
0e536bbae2129c15074567ddc69d4f0eaad13935slive LDAPConnectionPoolTimeout. PR 54587
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) core: ap_rgetline_core now pulls from r->proto_input_filters.
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) mod_proxy_html: process parsed comments immediately.
0e536bbae2129c15074567ddc69d4f0eaad13935slive Fixes bug where parsed comments may be lost. [Nick Kew]
febb2f4c6098caee670d460bf6e9b5912571bb5fnd
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
febb2f4c6098caee670d460bf6e9b5912571bb5fnd HTML/XHTML [Nick Kew]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) core: Add option to add valgrind support. Use it to reduce false positive
0e536bbae2129c15074567ddc69d4f0eaad13935slive warnings in mod_ssl. [Stefan Fritsch]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
febb2f4c6098caee670d460bf6e9b5912571bb5fnd *) mod_authn_file, mod_authn_dbd, mod_authn_dbm, mod_authn_socache:
75e2d0e6909f807c83e7c64b662e7f3f3c010463yoshiki Cache the result of the most recent password hash verification for every
febb2f4c6098caee670d460bf6e9b5912571bb5fnd keep-alive connection. This saves some expensive calculations.
febb2f4c6098caee670d460bf6e9b5912571bb5fnd [Stefan Fritsch]
febb2f4c6098caee670d460bf6e9b5912571bb5fnd
febb2f4c6098caee670d460bf6e9b5912571bb5fnd *) http: Remove support for Request-Range header sent by Navigator 2-3 and
febb2f4c6098caee670d460bf6e9b5912571bb5fnd MSIE 3. [Stefan Fritsch]
860b4efe27e7c1c9a2bf5c872b29c90f76849b51jim
9ae29c80979ffef9a4079a98411536f646cb2124trawick *) core, http: Extend HttpProtocol with an option to enforce stricter HTTP
0e536bbae2129c15074567ddc69d4f0eaad13935slive conformance or to only log the found problems. [Stefan Fritsch]
febb2f4c6098caee670d460bf6e9b5912571bb5fnd
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) core: Correctly parse an IPv6 literal host specification in an absolute
e4a4820f42cdc4d678ea7bd54ca4195bb17948b5trawick URL in the request line. [Stefan Fritsch]
e4a4820f42cdc4d678ea7bd54ca4195bb17948b5trawick
98f1378491b66e5383a5340d9afe91dabf7f5010colm *) EventOpt MPM
98f1378491b66e5383a5340d9afe91dabf7f5010colm
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) core: Add LogLevelOverride directive that allows to override the
febb2f4c6098caee670d460bf6e9b5912571bb5fnd loglevel for clients from certain IPs. This also works for things
0e536bbae2129c15074567ddc69d4f0eaad13935slive like the SSL handshake where <If> LogLevel ... </If> is evaluated
febb2f4c6098caee670d460bf6e9b5912571bb5fnd too late. [Stefan Fritsch]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) core: Add new directive Warning to issue warnings from a configuration
0e536bbae2129c15074567ddc69d4f0eaad13935slive file. Both Warning and Error now generate a timestamped log message.
0e536bbae2129c15074567ddc69d4f0eaad13935slive [Fabien Coelho]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
febb2f4c6098caee670d460bf6e9b5912571bb5fnd *) ap_expr: Add SERVER_PROTOCOL_VERSION, ..._MAJOR, and ..._MINOR
0e536bbae2129c15074567ddc69d4f0eaad13935slive variables. [Stefan Fritsch]
febb2f4c6098caee670d460bf6e9b5912571bb5fnd
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) core: New directive RegisterHttpMethod for registering non-standard
0e536bbae2129c15074567ddc69d4f0eaad13935slive HTTP methods. [Stefan Fritsch]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) core: New directive HttpProtocol which allows to disable HTTP/0.9
0e536bbae2129c15074567ddc69d4f0eaad13935slive support. [Stefan Fritsch]
febb2f4c6098caee670d460bf6e9b5912571bb5fnd
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) mod_allowhandlers: New module to forbid specific handlers for specific
0e536bbae2129c15074567ddc69d4f0eaad13935slive directories. [Stefan Fritsch]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) mod_systemd: New module, for integration with systemd on Linux.
0e536bbae2129c15074567ddc69d4f0eaad13935slive [Jan Kaluza <jkaluza redhat.com>]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick *) WinNT MPM: Store pid and generation for each thread in scoreboard
febb2f4c6098caee670d460bf6e9b5912571bb5fnd to allow tracking of threads from exiting children via mod_status
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick or other such mechanisms. [Jeff Trawick]
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick - APIs: ap_log_pid(), ap_remove_pid, ap_read_pid()
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick - core: the scoreboard (ScoreBoardFile), pid file (PidFile), and
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick mutexes (Mutex)
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick - mod_cache: thundering herd lock directory
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick - mod_lbmethod_heartbeat, mod_heartmonitor: heartbeat storage file
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick - mod_ldap: shared memory cache
febb2f4c6098caee670d460bf6e9b5912571bb5fnd - mod_socache_shmcb, mod_socache_dbm: shared memory or dbm for cache
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick [Jeff Trawick]
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick *) suexec: Add --enable-suexec-capabilites support on Linux, to use
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick setuid/setgid capability bits rather than a setuid root binary.
febb2f4c6098caee670d460bf6e9b5912571bb5fnd [Joe Orton]
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick *) suexec: Add support for logging to syslog as an alternative to logging
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick to a file; configure --without-suexec-logfile --with-suexec-syslog.
0e536bbae2129c15074567ddc69d4f0eaad13935slive [Joe Orton]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.
0e536bbae2129c15074567ddc69d4f0eaad13935slive [Matthew Steele <mdsteele google.com>]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
febb2f4c6098caee670d460bf6e9b5912571bb5fnd be compiled by the build compiler instead of the host compiler.
febb2f4c6098caee670d460bf6e9b5912571bb5fnd Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
287b17b746df229d6211c624b8a3e1edda21cecdsf PR 51257. [Guenter Knauf]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) core: In maintainer mode, replace apr_palloc with a version that
0e536bbae2129c15074567ddc69d4f0eaad13935slive initializes the allocated memory with non-zero values, except if
0e536bbae2129c15074567ddc69d4f0eaad13935slive AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]
febb2f4c6098caee670d460bf6e9b5912571bb5fnd
febb2f4c6098caee670d460bf6e9b5912571bb5fnd *) mod_policy: Add a new testing module to help server administrators
0e536bbae2129c15074567ddc69d4f0eaad13935slive enforce a configurable level of protocol compliance on their
0e536bbae2129c15074567ddc69d4f0eaad13935slive servers and application servers behind theirs. [Graham Leggett]
febb2f4c6098caee670d460bf6e9b5912571bb5fnd
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) mod_firehose: Add a new debugging module able to record traffic
0e536bbae2129c15074567ddc69d4f0eaad13935slive passing through the server in such a way that connections and/or
0e536bbae2129c15074567ddc69d4f0eaad13935slive requests be reconstructed and replayed. [Graham Leggett]
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) mod_noloris
d03aa31ada476d8eb97feaec2b1099809e7f3d57niq
d03aa31ada476d8eb97feaec2b1099809e7f3d57niq *) APREQ
d03aa31ada476d8eb97feaec2b1099809e7f3d57niq
d03aa31ada476d8eb97feaec2b1099809e7f3d57niq *) Simple MPM
d03aa31ada476d8eb97feaec2b1099809e7f3d57niq
d03aa31ada476d8eb97feaec2b1099809e7f3d57niq *) mod_serf
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive [Apache 2.5.0-dev includes those bug fixes and changes with the
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedooh Apache 2.4.xx tree as documented below, except as noted.]
287b17b746df229d6211c624b8a3e1edda21cecdsf
69cdc59729e1a733aafee3ef613eadfb8e437c11humbedoohChanges with Apache 2.4.x and later:
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup
287b17b746df229d6211c624b8a3e1edda21cecdsf
0e536bbae2129c15074567ddc69d4f0eaad13935sliveChanges with Apache 2.2.x and later:
0e536bbae2129c15074567ddc69d4f0eaad13935slive
0e536bbae2129c15074567ddc69d4f0eaad13935slive *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
7db9f691a00ead175b03335457ca296a33ddf31bnd
Changes with Apache 2.0.x and later:
*) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup