CHANGES revision 8e5473283d39355bc2596504d1b26bafa497d1dc
6a01f2d5ec2024b68edd1d42056b41a88dc0a935aaron -*- coding: utf-8 -*-
52489511342e4ff3fe399e57f29d38e5c4227bc8trawickChanges with Apache 2.5.0
52489511342e4ff3fe399e57f29d38e5c4227bc8trawick
52489511342e4ff3fe399e57f29d38e5c4227bc8trawick *) mod_socache_shmcb: Correct counting of expirations for status display.
52489511342e4ff3fe399e57f29d38e5c4227bc8trawick Expirations happening during retrieval were not counted. [Rainer Jung]
8864d6f5f4744b5d2b638e2a53e2660bcf8b5ab5dougm
8864d6f5f4744b5d2b638e2a53e2660bcf8b5ab5dougm *) mod_proxy_balancer: Correctly encode user provided data in management
8864d6f5f4744b5d2b638e2a53e2660bcf8b5ab5dougm interface. PR 56532 [Maksymilian, <max cert.cx>]
ea512a4af20e6b6e6931de4929d54d93f03a0139ianh
1e83c8de3aa48b316b28057d53995272baf1260cwrowe *) mod_proxy_wstunnel: Fix the use of SSL connections with the "wss:"
1dfb5e008f35ed13c343b7f6306675e33c399792gstein scheme. PR55320. [Alex Liu <alex.leo.ca gmail.com>]
1dfb5e008f35ed13c343b7f6306675e33c399792gstein
1dfb5e008f35ed13c343b7f6306675e33c399792gstein *) core: Add ap_mpm_resume_suspended() API to allow a suspended connection
1dfb5e008f35ed13c343b7f6306675e33c399792gstein to resume. PR56333
eadb64379834961679105b7fd4178253fbb9f95dtrawick [Artem <artemciy gmail.com>, Edward Lu <Chaosed0 gmail.com>]
eadb64379834961679105b7fd4178253fbb9f95dtrawick
eadb64379834961679105b7fd4178253fbb9f95dtrawick *) core: Add ap_mpm_register_socket_callback_timeout() API. [Eric Covener]
eadb64379834961679105b7fd4178253fbb9f95dtrawick
eadb64379834961679105b7fd4178253fbb9f95dtrawick *) mod_proxy_wstunnel: Honor ProxyWebsocketIdleTimeout in asynchronous
c7e917aa56886c47bfe061c5e9f603a5aaef0d87trawick processing mode. [Eric Covener]
c7e917aa56886c47bfe061c5e9f603a5aaef0d87trawick
c7e917aa56886c47bfe061c5e9f603a5aaef0d87trawick *) mod_proxy_fcgi: Fix occasional high CPU when handling request bodies.
b8daf4c5ea3d5bb2111b1b021de6d3cd891e403bcoar [Jeff Trawick]
b8daf4c5ea3d5bb2111b1b021de6d3cd891e403bcoar
b8daf4c5ea3d5bb2111b1b021de6d3cd891e403bcoar *) mod_proxy_fcgi: Support iobuffersize parameter. [Jeff Trawick]
b8daf4c5ea3d5bb2111b1b021de6d3cd891e403bcoar
b8daf4c5ea3d5bb2111b1b021de6d3cd891e403bcoar *) mod_cache: Preserve non-cacheable headers forwarded from an origin 304
6b6083e6518007139257ee449c2af3032d2437d0trawick response. PR 55547. [Yann Ylavic]
6b6083e6518007139257ee449c2af3032d2437d0trawick
6b6083e6518007139257ee449c2af3032d2437d0trawick *) mod_cache: Don't add cached/revalidated entity headers to a 304 response.
88dd056b9863502bba82c2889a0c4cde9fc0ba93trawick PR 55547. [Yann Ylavic]
88dd056b9863502bba82c2889a0c4cde9fc0ba93trawick
88dd056b9863502bba82c2889a0c4cde9fc0ba93trawick *) mod_cache: Retry unconditional request with the full URL (including the
88dd056b9863502bba82c2889a0c4cde9fc0ba93trawick query-string) when the origin server's 304 response does not match the
7ef3a1797818c6d25efe8c5fadb5eec3b965a6fabrianp conditions used to revalidate the stale entry. [Yann Ylavic].
7ef3a1797818c6d25efe8c5fadb5eec3b965a6fabrianp
7ef3a1797818c6d25efe8c5fadb5eec3b965a6fabrianp *) mod_authnz_ldap: Fail explicitly when the filter is too long. Remove
1e83c8de3aa48b316b28057d53995272baf1260cwrowe unnecessary apr_pstrdup() and strlen(). [Graham Leggett]
1e83c8de3aa48b316b28057d53995272baf1260cwrowe
1e83c8de3aa48b316b28057d53995272baf1260cwrowe *) Add the ldap-search option to mod_authnz_ldap, allowing authorization
1e83c8de3aa48b316b28057d53995272baf1260cwrowe to be based on arbitrary expressions that do not include the username.
1e83c8de3aa48b316b28057d53995272baf1260cwrowe [Graham Leggett]
1e83c8de3aa48b316b28057d53995272baf1260cwrowe
1e83c8de3aa48b316b28057d53995272baf1260cwrowe *) Add the ldap function to the expression API, allowing LDAP filters and
1e83c8de3aa48b316b28057d53995272baf1260cwrowe distinguished names based on expressions to be escaped correctly to
1e83c8de3aa48b316b28057d53995272baf1260cwrowe guard against LDAP injection. [Graham Leggett]
1e83c8de3aa48b316b28057d53995272baf1260cwrowe
7f683bb300df767164724ebc664f339ac396b434dougm *) Add module mod_ssl_ct, which provides an implementation of Certificate
7f683bb300df767164724ebc664f339ac396b434dougm Transparency (RFC 6962) for httpd. [Jeff Trawick]
7f683bb300df767164724ebc664f339ac396b434dougm
7f683bb300df767164724ebc664f339ac396b434dougm *) mod_proxy: Preserve original request headers even if they differ
7f683bb300df767164724ebc664f339ac396b434dougm from the ones to be forwarded to the backend. PR 45387.
7f683bb300df767164724ebc664f339ac396b434dougm [Yann Ylavic]
7f683bb300df767164724ebc664f339ac396b434dougm
26dfa083a1662d57ba7cc410eec4e0696b9be469wrowe *) mod_proxy: When ping/pong is configured for a worker, don't send or
26dfa083a1662d57ba7cc410eec4e0696b9be469wrowe forward "100 Continue" (interim) response to the client if it does
26dfa083a1662d57ba7cc410eec4e0696b9be469wrowe not expect one. [Yann Ylavic]
26dfa083a1662d57ba7cc410eec4e0696b9be469wrowe
4760aa1f19600972cf531ad7da73c1ee5a0225cedougm *) mod_remoteip: Prevent an external proxy from presenting an internal
4760aa1f19600972cf531ad7da73c1ee5a0225cedougm proxy. PR 55962. [Mike Rumph]
87a1c79b7b37702a254920ca5214fb282a4fb085dougm
994c3fbc3335e8fe883b1ce4515efc0c85061cdfaaron *) mod_ssl: Add hooks to allow other modules to perform processing at
d5d164b22a2004abed640cb52fc275f00ed92f69jerenkrantz several stages of initialization and connection handling. See
e93d563852e1fa7a8c73af3b807916b41942d2f6dreid mod_ssl_openssl.h. [Jeff Trawick]
e93d563852e1fa7a8c73af3b807916b41942d2f6dreid
e93d563852e1fa7a8c73af3b807916b41942d2f6dreid *) mod_proxy_wstunnel: Avoid sending error responses down an upgraded
e93d563852e1fa7a8c73af3b807916b41942d2f6dreid websockets connection as it is being close down. [Eric Covener]
e93d563852e1fa7a8c73af3b807916b41942d2f6dreid
525508562a53864b78cf8da91ac13be9c072bba7jerenkrantz *) mod_proxy_wstunnel: Allow the administrator to cap the amount
525508562a53864b78cf8da91ac13be9c072bba7jerenkrantz of time a synchronous websockets connection stays idle with
525508562a53864b78cf8da91ac13be9c072bba7jerenkrantz ProxyWebsocketIdleTimeout. [Eric Covener]
f1fe10268cdadb775eef841aa4fa7305291d35fdtrawick
f1fe10268cdadb775eef841aa4fa7305291d35fdtrawick *) mod_proxy_wstunnel: Change to opt-in for asynchronous support, adding
f1fe10268cdadb775eef841aa4fa7305291d35fdtrawick directives ProxyWebsocketAsync and ProxyWebsocketAsyncDelay.
f1fe10268cdadb775eef841aa4fa7305291d35fdtrawick [Eric Covener]
f04ad0ba7fe0eea5ea7a92f852cef75747ab2090trawick
f04ad0ba7fe0eea5ea7a92f852cef75747ab2090trawick *) mod_proxy_wstunnel: Stop leaking websockets backend connections under
f04ad0ba7fe0eea5ea7a92f852cef75747ab2090trawick event MPM (trunk-only). [Eric Covener]
65a1588701f9e5d0f62261d0da85733a23edc92ftrawick
65a1588701f9e5d0f62261d0da85733a23edc92ftrawick *) mod_proxy_wstunnel: Don't issue AH02447 and log a 500 on routine
65a1588701f9e5d0f62261d0da85733a23edc92ftrawick hangups from websockets origin servers. PR 56299
65a1588701f9e5d0f62261d0da85733a23edc92ftrawick [Yann Ylavic, Edward Lu <Chaosed0 gmail com>, Eric Covener]
65a1588701f9e5d0f62261d0da85733a23edc92ftrawick
d5d164b22a2004abed640cb52fc275f00ed92f69jerenkrantz *) mod_proxy_wstunnel: Don't pool backend websockets connections,
d5d164b22a2004abed640cb52fc275f00ed92f69jerenkrantz because we need to handshake every time. PR 55890.
d5d164b22a2004abed640cb52fc275f00ed92f69jerenkrantz [Eric Covener]
360a9d933a8c25f5975e0ddc883607a5d37e408estoddard
360a9d933a8c25f5975e0ddc883607a5d37e408estoddard *) mod_proxy_http: Add detach_backend hook (potentially usable
360a9d933a8c25f5975e0ddc883607a5d37e408estoddard in other proxy scheme handlers). [Jeff Trawick]
360a9d933a8c25f5975e0ddc883607a5d37e408estoddard
9b8afc47122e9b0eabb860b6ba2cf9c061c6060fstoddard *) mod_deflate: Add DeflateAlterETag to control how the ETag
9b8afc47122e9b0eabb860b6ba2cf9c061c6060fstoddard is modified. The 'NoChange' parameter mimics 2.2.x behavior.
9b8afc47122e9b0eabb860b6ba2cf9c061c6060fstoddard PR 45023, PR 39727. [Eric Covener]
9b8afc47122e9b0eabb860b6ba2cf9c061c6060fstoddard
a21148678a1459064627d917a66669e7e8d140e6stoddard *) mod_rewrite: Add 'BNF' (backreferences-no-plus) flag to RewriteRule to
a21148678a1459064627d917a66669e7e8d140e6stoddard allow spaces in backreferences to be encoded as %20 instead of '+'.
910df8b3f50a0515b430b999d4750de94c509f2atrawick [Eric Covener]
c6a9d49433c9ba5b18b26c3d764f1bbcb9746090wrowe
c6a9d49433c9ba5b18b26c3d764f1bbcb9746090wrowe *) mod_rewrite: Support an optional list of characters to escape in the
c6a9d49433c9ba5b18b26c3d764f1bbcb9746090wrowe argument for the 'B' (escape backreferences) flag. [Eric Covener]
51be7fc538641ed7cb22e959eb31629f7183f70fianh
51be7fc538641ed7cb22e959eb31629f7183f70fianh *) mod_ssl: Add SSLOCSPUseRequestNonce directive to control whether or not
bb6a7fc0427d0d197c50de34b94a0d23e5732696wrowe OCSP requests should use a nonce to be checked against the responder's
bb6a7fc0427d0d197c50de34b94a0d23e5732696wrowe one. PR 56233. [ Yann Ylavic ]
bb6a7fc0427d0d197c50de34b94a0d23e5732696wrowe
bb6a7fc0427d0d197c50de34b94a0d23e5732696wrowe *) mod_dir: Default to 2.2-like behavior and skip execution when method is
decd0c23bb26f6662f4b963cf86ee569613bffeagregames neither GET nor POST, such as for DAV requests. PR 54914. [Chris Darroch]
decd0c23bb26f6662f4b963cf86ee569613bffeagregames
decd0c23bb26f6662f4b963cf86ee569613bffeagregames *) mod_rewrite: Rename the handler that does per-directory internal
e1753aabf5df187b5b04e72a958af4b65b1a125daaron redirects to "rewrite-redirect-handler" from "redirect-handler" so
e1753aabf5df187b5b04e72a958af4b65b1a125daaron it is less ambiguous and less likely to be reused. [Eric Covener]
e1753aabf5df187b5b04e72a958af4b65b1a125daaron
e1753aabf5df187b5b04e72a958af4b65b1a125daaron *) mod_rewrite: Protect against looping with the [N] flag by enforcing a
e1753aabf5df187b5b04e72a958af4b65b1a125daaron default limit of 10000 iterations, and allowing each rule to change its
e1753aabf5df187b5b04e72a958af4b65b1a125daaron limit. [Eric Covener]
e1753aabf5df187b5b04e72a958af4b65b1a125daaron
e57f991fe2b9a4c080cd50ca913a2a5693b096b5aaron *) mod_ssl: Fix config merging of SSLOCSPEnable and SSLOCSPOverrideResponder.
e57f991fe2b9a4c080cd50ca913a2a5693b096b5aaron [Jeff Trawick]
e57f991fe2b9a4c080cd50ca913a2a5693b096b5aaron
924c8dd40352ca7775704a31a7a77ab86dc951b4ianh *) Add HttpContentLengthHeadZero and HttpExpectStrict directives.
924c8dd40352ca7775704a31a7a77ab86dc951b4ianh [Yehuda Sadeh <yehuda inktank com>, Justin Erenkrantz]
910df8b3f50a0515b430b999d4750de94c509f2atrawick
910df8b3f50a0515b430b999d4750de94c509f2atrawick *) FreeBSD: Disable IPv4-mapped listening sockets by default for versions
910df8b3f50a0515b430b999d4750de94c509f2atrawick 5+ instead of just for FreeBSD 5. PR 53824. [Jeff Trawick]
910df8b3f50a0515b430b999d4750de94c509f2atrawick
0d628dd174dd6de13463b10d2599f6cac24e9fe8brianp *) mod_auth_form: Add a debug message when the fields on a form are not
0d628dd174dd6de13463b10d2599f6cac24e9fe8brianp recognised. [Graham Leggett]
0d628dd174dd6de13463b10d2599f6cac24e9fe8brianp
2fee4fe267fa3577fd71d8c314fe9b527e2b90c0brianp *) mod_ssl: Add -t -DDUMP_CA_CERTS option which dumps the filenames of all
2fee4fe267fa3577fd71d8c314fe9b527e2b90c0brianp configured SSL CA certificates to stdout the same way as DUMP_CERTS does.
2fee4fe267fa3577fd71d8c314fe9b527e2b90c0brianp [Jan Kaluza]
2fee4fe267fa3577fd71d8c314fe9b527e2b90c0brianp
7bf77d70b6830636bc36e6b76a228c301be23ff7brianp *) mod_ssl: Don't flush when an EOS is received. Prepares mod_ssl
7bf77d70b6830636bc36e6b76a228c301be23ff7brianp to support write completion. [Graham Leggett]
7bf77d70b6830636bc36e6b76a228c301be23ff7brianp
185b73b1f914e5d8f99f31225cc656b882dcbf73ianh *) core: Add parse_errorlog_arg callback to ap_errorlog_provider
6ef713e25735887d4a59a879b97a68bd575ecb92trawick to allow providers to check the ErrorLog argument. [Jan Kaluza]
cef5cb47e2ea4c174c01762d4430613db0f41e5cstoddard
cef5cb47e2ea4c174c01762d4430613db0f41e5cstoddard *) mod_cgid: Use the servers Timeout for each read from a CGI script,
cef5cb47e2ea4c174c01762d4430613db0f41e5cstoddard allow override with new CGIDRequestTimeout directive. PR43494
1eb1f02a23de724c105b2c6c9fbd469a611059c6trawick [Eric Covener, Toshikuni Fukaya <toshikuni-fukaya cybozu co jp>]
8abd60101b9794e224795ccf68b8ba984efbc94astoddard
8abd60101b9794e224795ccf68b8ba984efbc94astoddard *) core: Add missing Reason-Phrase in HTTP response headers.
ca47a2b6bcea23e8af185c68f256dcbbfd2a0f9dtrawick PR 54946. [Rainer Jung]
ca47a2b6bcea23e8af185c68f256dcbbfd2a0f9dtrawick
6ef713e25735887d4a59a879b97a68bd575ecb92trawick *) core: ensure any abnormal exit is reported to stderr if it's a tty.
6ef713e25735887d4a59a879b97a68bd575ecb92trawick PR 55670 [Nick Kew]
ca47a2b6bcea23e8af185c68f256dcbbfd2a0f9dtrawick
26d590c0e5338f66ca1aad6f925374843fac5121stoddard *) mod_lua: Let the Inter-VM get/set functions work with a global
26d590c0e5338f66ca1aad6f925374843fac5121stoddard shared memory pool instead of a per-process pool. [Daniel Gruno]
26d590c0e5338f66ca1aad6f925374843fac5121stoddard
26d590c0e5338f66ca1aad6f925374843fac5121stoddard *) ldap: Support ldaps when using the Microsoft LDAP SDK.
26d590c0e5338f66ca1aad6f925374843fac5121stoddard PR 54626. [Jean-Frederic Clere]
2b31ac2c6342d2afcf67b7b0f08c928a87f98c74wrowe
d472f67198d6b15dd1270136f180cca9c9263243trawick *) mod_proxy: Add ap_connection_reusable() for checking if a connection
d472f67198d6b15dd1270136f180cca9c9263243trawick is reusable as of this point in processing. [Jeff Trawick]
d472f67198d6b15dd1270136f180cca9c9263243trawick
d472f67198d6b15dd1270136f180cca9c9263243trawick *) mod_authnz_ldap: Change default value of AuthLDAPMaxSubGroupDepth to 0
d472f67198d6b15dd1270136f180cca9c9263243trawick to avoid performance problems when subgroups aren't in use. [Eric Covener]
d472f67198d6b15dd1270136f180cca9c9263243trawick
d472f67198d6b15dd1270136f180cca9c9263243trawick *) mod_syslog: New module implementing syslog ap_error_log provider.
a3bb95a3600153c7f09f62749e32093658943c32brianp Previously, this code was part of core, now it's in separate module.
a3bb95a3600153c7f09f62749e32093658943c32brianp [Jan Kaluza]
a3bb95a3600153c7f09f62749e32093658943c32brianp
b760518cc17e7124ba546ed63063603f1ab82a40aaron *) core: Add ap_errorlog_provider to make ErrorLog logging modular. Move
b760518cc17e7124ba546ed63063603f1ab82a40aaron syslog support from core to new mod_syslog. [Jan Kaluza]
b760518cc17e7124ba546ed63063603f1ab82a40aaron
b760518cc17e7124ba546ed63063603f1ab82a40aaron *) WinNT MPM: If ap_run_pre_connection() fails or sets c->aborted, don't
b760518cc17e7124ba546ed63063603f1ab82a40aaron save the socket for reuse by the next worker as if it were an
b760518cc17e7124ba546ed63063603f1ab82a40aaron APR_SO_DISCONNECTED socket. Restores 2.2 behavior. [Eric Covener]
b760518cc17e7124ba546ed63063603f1ab82a40aaron
b760518cc17e7124ba546ed63063603f1ab82a40aaron *) mod_status, mod_echo: Fix the display of client addresses.
23d8f62856c1531526042e1c5edf44557cadd2e5trawick They were truncated to 31 characters which is not enough for IPv6 addresses.
23d8f62856c1531526042e1c5edf44557cadd2e5trawick PR 54848 [Bernhard Schmidt <berni birkenwald de>]
23d8f62856c1531526042e1c5edf44557cadd2e5trawick
705c8ed3ef608706c91ca12483d7b54ff9007cc9jerenkrantz *) core: Add ap_log_data(), ap_log_rdata(), etc. for logging buffers.
705c8ed3ef608706c91ca12483d7b54ff9007cc9jerenkrantz [Jeff Trawick]
705c8ed3ef608706c91ca12483d7b54ff9007cc9jerenkrantz
ef154948c97c53cdc1ad5329cb83c32ad26cf416aaron *) mod_unique_id: Use output of the PRNG rather than IP address and
ef154948c97c53cdc1ad5329cb83c32ad26cf416aaron pid, avoiding sleep() call and possible DNS issues at startup,
ef154948c97c53cdc1ad5329cb83c32ad26cf416aaron plus improving randomness for IPv6-only hosts.
c6741d11357aace4c9ba39535d3cb2d751f46114trawick [Jan Kaluza <jkaluza redhat.com>]
c6741d11357aace4c9ba39535d3cb2d751f46114trawick
c6741d11357aace4c9ba39535d3cb2d751f46114trawick *) mod_authnz_ldap: Support primitive LDAP servers that do not accept
c6741d11357aace4c9ba39535d3cb2d751f46114trawick filters, such as "SDBM-backed LDAP" on z/OS, by allowing a special
7230f1eb017a35b7d20e0e9ec0d234766f2a732dtrawick filter "none" to be specified in AuthLDAPURL. [Eric Covener]
7230f1eb017a35b7d20e0e9ec0d234766f2a732dtrawick
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick *) mod_file_cache: mod_file_cache should be able to serve files that
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick haven't had a Content-Type set via e.g. mod_mime. [Eric Covener]
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick *) core: merge AllowEncodedSlashes from the base configuration into
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick virtual hosts. [Eric Covener]
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick *) AIX: Install DSO's with "cp" instead of "install" in instdso.sh
6b477c0a238733ca8fd156629310513d29dc7e02trawick [Eric Covener]
6b477c0a238733ca8fd156629310513d29dc7e02trawick
6b477c0a238733ca8fd156629310513d29dc7e02trawick *) mod_ldap: Don't keep retrying if a new LDAP connection times out.
6b477c0a238733ca8fd156629310513d29dc7e02trawick [Eric Covener]
2b31ac2c6342d2afcf67b7b0f08c928a87f98c74wrowe
2b31ac2c6342d2afcf67b7b0f08c928a87f98c74wrowe *) mod_deflate: permit compilation of mod_deflate against a zlib that has
557eb8d48357657fa898250560f089c65539c634gregames been configured with -D Z_PREFIX, which redefines the token "deflate".
557eb8d48357657fa898250560f089c65539c634gregames [Eric Covener]
557eb8d48357657fa898250560f089c65539c634gregames
adb8c5e5291be5943122bbff404bc1018c79d555ianh *) mod_socache_shmcb.c: Remove arbitrary restriction on shared memory size
25b715e9687f82ea055fdea2a9761c7e5f1ac6eetrawick previously limited to 64MB. [Jens Låås <jelaas gmail.com>]
25b715e9687f82ea055fdea2a9761c7e5f1ac6eetrawick
25b715e9687f82ea055fdea2a9761c7e5f1ac6eetrawick *) mod_auth_digest: Use the secret when generating nonces in all cases and
25b715e9687f82ea055fdea2a9761c7e5f1ac6eetrawick not only when AuthName is used in .htaccess files (this change may cause
51ced3b28ef430a96586284d4320f7dbdaf7225ebrianp problems if used with round robin load balancers). Don't regenerate the
51ced3b28ef430a96586284d4320f7dbdaf7225ebrianp secret on graceful restarts. PR 54637 [Stefan Fritsch]
51ced3b28ef430a96586284d4320f7dbdaf7225ebrianp
a222035458f89e2db231450ba6d5fae8052da5f5aaron *) core: Remove apr_brigade_flatten(), buffering and duplicated code
a222035458f89e2db231450ba6d5fae8052da5f5aaron from the HTTP_IN filter, parse chunks in a single pass with zero copy.
a222035458f89e2db231450ba6d5fae8052da5f5aaron Reduce memory usage by 48 bytes per request. [Graham Leggett]
a222035458f89e2db231450ba6d5fae8052da5f5aaron
4a872628ca5bf20847f442a625c255b643120db0wrowe *) core: Stop the HTTP_IN filter from attempting to write error buckets
4a872628ca5bf20847f442a625c255b643120db0wrowe to the output filters, which is bogus in the proxy case. Create a
4a872628ca5bf20847f442a625c255b643120db0wrowe clean mapping from APR codes to HTTP status codes, and use it where
74528257888620220641cd28366731539a37e1f3ianh needed. [Graham Leggett]
74528257888620220641cd28366731539a37e1f3ianh
74528257888620220641cd28366731539a37e1f3ianh *) mod_proxy: Ensure network errors detected by the proxy are returned as
0632de713e41fa3aa928a1777677b0d79843ae2bdougm 504 Gateway Timout as opposed to 502 Bad Gateway, in order to be
0632de713e41fa3aa928a1777677b0d79843ae2bdougm compliant with RFC2616 14.9.4 Cache Revalidation and Reload Controls.
0cc82c261350ab8dc8a9992cad7197c4d22d597eianh
f2afeedf074acc1a698a9527154eacd138e6c5a1trawick *) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
855e263a93fde2e30d10a48a9ffc047039bfc9d9brianp [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez
855e263a93fde2e30d10a48a9ffc047039bfc9d9brianp <alejandro.alvarez.ayllon cern.ch>]
855e263a93fde2e30d10a48a9ffc047039bfc9d9brianp
855e263a93fde2e30d10a48a9ffc047039bfc9d9brianp *) core, mod_ssl: Enable the ability for a module to reverse the sense of
54b3b7946d22324cea615d7c8a4ff0c9eadd1f8crbb a poll event from a read to a write or vice versa. This is a step on
54b3b7946d22324cea615d7c8a4ff0c9eadd1f8crbb the way to allow mod_ssl taking full advantage of the event MPM.
54b3b7946d22324cea615d7c8a4ff0c9eadd1f8crbb [Graham Leggett]
54b3b7946d22324cea615d7c8a4ff0c9eadd1f8crbb
54b3b7946d22324cea615d7c8a4ff0c9eadd1f8crbb *) mod_ldap: LDAP connections used for authentication were not respecting
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb LDAPConnectionPoolTimeout. PR 54587
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb *) core: ap_rgetline_core now pulls from r->proto_input_filters.
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb *) mod_proxy_html: process parsed comments immediately.
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb Fixes bug where parsed comments may be lost. [Nick Kew]
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb
f9f506f0686ad065b4c6fe14dd962cdd478350dbianh *) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
f9f506f0686ad065b4c6fe14dd962cdd478350dbianh
f9f506f0686ad065b4c6fe14dd962cdd478350dbianh *) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
9d0665da83d1e22c0ea0e5f6f940f70f75bf5237ianh HTML/XHTML [Nick Kew]
9d0665da83d1e22c0ea0e5f6f940f70f75bf5237ianh
9d0665da83d1e22c0ea0e5f6f940f70f75bf5237ianh *) core: Add option to add valgrind support. Use it to reduce false positive
9d0665da83d1e22c0ea0e5f6f940f70f75bf5237ianh warnings in mod_ssl. [Stefan Fritsch]
9d0665da83d1e22c0ea0e5f6f940f70f75bf5237ianh
47c2fb4c1f155ddb6954e46e7f6d125eef78b3bbaaron *) mod_authn_file, mod_authn_dbd, mod_authn_dbm, mod_authn_socache:
47c2fb4c1f155ddb6954e46e7f6d125eef78b3bbaaron Cache the result of the most recent password hash verification for every
47c2fb4c1f155ddb6954e46e7f6d125eef78b3bbaaron keep-alive connection. This saves some expensive calculations.
47c2fb4c1f155ddb6954e46e7f6d125eef78b3bbaaron [Stefan Fritsch]
9ca934cec0a1cc3c425fde5dc51956bce6cd3183brianp
9ca934cec0a1cc3c425fde5dc51956bce6cd3183brianp *) http: Remove support for Request-Range header sent by Navigator 2-3 and
9ca934cec0a1cc3c425fde5dc51956bce6cd3183brianp MSIE 3. [Stefan Fritsch]
0cdca1e056a05a09fe16fe736abcf79969c9767ejerenkrantz
0cdca1e056a05a09fe16fe736abcf79969c9767ejerenkrantz *) core, http: Extend HttpProtocol with an option to enforce stricter HTTP
0cdca1e056a05a09fe16fe736abcf79969c9767ejerenkrantz conformance or to only log the found problems. [Stefan Fritsch]
f2afeedf074acc1a698a9527154eacd138e6c5a1trawick
f2afeedf074acc1a698a9527154eacd138e6c5a1trawick *) core: Correctly parse an IPv6 literal host specification in an absolute
f2afeedf074acc1a698a9527154eacd138e6c5a1trawick URL in the request line. [Stefan Fritsch]
0a2d57d962bef3a8898723925b3fb02d2e836994dougm
0a2d57d962bef3a8898723925b3fb02d2e836994dougm *) EventOpt MPM
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames
06461d67f387ea068187e6dfa036875a8205c04cjerenkrantz *) core: Add LogLevelOverride directive that allows to override the
06461d67f387ea068187e6dfa036875a8205c04cjerenkrantz loglevel for clients from certain IPs. This also works for things
900127764fb985c340ee4979cac97146a330c694trawick like the SSL handshake where <If> LogLevel ... </If> is evaluated
900127764fb985c340ee4979cac97146a330c694trawick too late. [Stefan Fritsch]
1a6a0072a95887164091e366ba0e89c2b39a954abrianp
1a6a0072a95887164091e366ba0e89c2b39a954abrianp *) core: Add new directive Warning to issue warnings from a configuration
1a6a0072a95887164091e366ba0e89c2b39a954abrianp file. Both Warning and Error now generate a timestamped log message.
6f4c27ba6e152792f3729069e8d8313ebc87cc60jwoolley [Fabien Coelho]
6f4c27ba6e152792f3729069e8d8313ebc87cc60jwoolley
6f4c27ba6e152792f3729069e8d8313ebc87cc60jwoolley *) ap_expr: Add SERVER_PROTOCOL_VERSION, ..._MAJOR, and ..._MINOR
23ce412bd50a47accab4dd26019b78810bbf46ebtrawick variables. [Stefan Fritsch]
23ce412bd50a47accab4dd26019b78810bbf46ebtrawick
23ce412bd50a47accab4dd26019b78810bbf46ebtrawick *) core: New directive RegisterHttpMethod for registering non-standard
6865813dee5d3c1ebf12dd810368171792a0190atrawick HTTP methods. [Stefan Fritsch]
6865813dee5d3c1ebf12dd810368171792a0190atrawick
6865813dee5d3c1ebf12dd810368171792a0190atrawick *) core: New directive HttpProtocol which allows to disable HTTP/0.9
97719ad970d779ac48af9364ab0ea9fdcc27470ajwoolley support. [Stefan Fritsch]
97719ad970d779ac48af9364ab0ea9fdcc27470ajwoolley
97719ad970d779ac48af9364ab0ea9fdcc27470ajwoolley *) mod_allowhandlers: New module to forbid specific handlers for specific
5ad238c42b1e159ee8f164515e0c4ee6c727c2fdtrawick directories. [Stefan Fritsch]
5ad238c42b1e159ee8f164515e0c4ee6c727c2fdtrawick
5ad238c42b1e159ee8f164515e0c4ee6c727c2fdtrawick *) mod_systemd: New module, for integration with systemd on Linux.
ba00c3b7c20f00ce631b89ae3b1cd3bae8d1b165rbb [Jan Kaluza <jkaluza redhat.com>]
ba00c3b7c20f00ce631b89ae3b1cd3bae8d1b165rbb
ba00c3b7c20f00ce631b89ae3b1cd3bae8d1b165rbb *) WinNT MPM: Store pid and generation for each thread in scoreboard
ba00c3b7c20f00ce631b89ae3b1cd3bae8d1b165rbb to allow tracking of threads from exiting children via mod_status
ba00c3b7c20f00ce631b89ae3b1cd3bae8d1b165rbb or other such mechanisms. [Jeff Trawick]
ba00c3b7c20f00ce631b89ae3b1cd3bae8d1b165rbb
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb - APIs: ap_log_pid(), ap_remove_pid, ap_read_pid()
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb - core: the scoreboard (ScoreBoardFile), pid file (PidFile), and
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb mutexes (Mutex)
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb - mod_cache: thundering herd lock directory
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb - mod_lbmethod_heartbeat, mod_heartmonitor: heartbeat storage file
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb - mod_ldap: shared memory cache
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb - mod_socache_shmcb, mod_socache_dbm: shared memory or dbm for cache
fa449f5bc87c5d87c4c60e778c9c882e7254de7ejwoolley [Jeff Trawick]
fa449f5bc87c5d87c4c60e778c9c882e7254de7ejwoolley
fa449f5bc87c5d87c4c60e778c9c882e7254de7ejwoolley *) suexec: Add --enable-suexec-capabilites support on Linux, to use
fa449f5bc87c5d87c4c60e778c9c882e7254de7ejwoolley setuid/setgid capability bits rather than a setuid root binary.
fa449f5bc87c5d87c4c60e778c9c882e7254de7ejwoolley [Joe Orton]
1c0b7c3bdace07946457fa7ba04b7f97b6599792rbb
227d23a7db41dd89f52391c9356dbb1adcd675e0jwoolley *) suexec: Add support for logging to syslog as an alternative to logging
227d23a7db41dd89f52391c9356dbb1adcd675e0jwoolley to a file; configure --without-suexec-logfile --with-suexec-syslog.
227d23a7db41dd89f52391c9356dbb1adcd675e0jwoolley [Joe Orton]
227d23a7db41dd89f52391c9356dbb1adcd675e0jwoolley
227d23a7db41dd89f52391c9356dbb1adcd675e0jwoolley *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.
227d23a7db41dd89f52391c9356dbb1adcd675e0jwoolley [Matthew Steele <mdsteele google.com>]
1c0b7c3bdace07946457fa7ba04b7f97b6599792rbb
17bc0e8f2e3816e25bc8fd3fadf39357340aebd0jerenkrantz *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
17bc0e8f2e3816e25bc8fd3fadf39357340aebd0jerenkrantz be compiled by the build compiler instead of the host compiler.
17bc0e8f2e3816e25bc8fd3fadf39357340aebd0jerenkrantz Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
17bc0e8f2e3816e25bc8fd3fadf39357340aebd0jerenkrantz PR 51257. [Guenter Knauf]
17bc0e8f2e3816e25bc8fd3fadf39357340aebd0jerenkrantz
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb *) core: In maintainer mode, replace apr_palloc with a version that
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb initializes the allocated memory with non-zero values, except if
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb *) mod_policy: Add a new testing module to help server administrators
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb enforce a configurable level of protocol compliance on their
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb servers and application servers behind theirs. [Graham Leggett]
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb
cf233fb4b439415a2bf7bab7e622afd994e0bebftrawick *) mod_firehose: Add a new debugging module able to record traffic
cf233fb4b439415a2bf7bab7e622afd994e0bebftrawick passing through the server in such a way that connections and/or
cf233fb4b439415a2bf7bab7e622afd994e0bebftrawick requests be reconstructed and replayed. [Graham Leggett]
cf233fb4b439415a2bf7bab7e622afd994e0bebftrawick
ae64f3e7385f21ca9d4f30cc7f8702a9ac1034b6trawick *) mod_noloris
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames *) APREQ
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames *) Simple MPM
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames *) mod_serf
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames [Apache 2.5.0-dev includes those bug fixes and changes with the
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames Apache 2.4.xx tree as documented below, except as noted.]
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregamesChanges with Apache 2.4.x and later:
8d49090fd56a8ce06c7f7135f19e5ff8e24b5ff3gregames
f99bffd6087564cf9c05cc29d1c6b38d94e0ed30gregames *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup
270609308f247c5e934b400b5f1691c2cca16c61jerenkrantz
270609308f247c5e934b400b5f1691c2cca16c61jerenkrantzChanges with Apache 2.2.x and later:
270609308f247c5e934b400b5f1691c2cca16c61jerenkrantz
8458877c9ba0af86acd590eea531476adde3d02dmartin *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
8458877c9ba0af86acd590eea531476adde3d02dmartin
8458877c9ba0af86acd590eea531476adde3d02dmartinChanges with Apache 2.0.x and later:
8458877c9ba0af86acd590eea531476adde3d02dmartin
8458877c9ba0af86acd590eea531476adde3d02dmartin *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup
644be6f54749d2d9950d2c4d2ac448f7af016d26martin
644be6f54749d2d9950d2c4d2ac448f7af016d26martin