CHANGES revision 9f07b6dc343a4e3eba5f4c47050a77441723ce89
4d237bbe075b1d2c19428cd954d721d65b31f67cwrowe -*- coding: utf-8 -*-
bf52162f2d05c1fb1a107c7ef108de73f739b3edpquernaChanges with Apache 2.3.1
bf52162f2d05c1fb1a107c7ef108de73f739b3edpquerna[ When backported to 2.2.x, remove entry from this file ]
bf52162f2d05c1fb1a107c7ef108de73f739b3edpquerna
86bb763be5d87c295c8844d30078da2ddb964f73rpluem *) mod_proxy_scgi: Added. [André Malo]
86bb763be5d87c295c8844d30078da2ddb964f73rpluem
ba217dc41cebc0976010ee177f8fedac782d1f6fminfrin *) mod_cache: Introduce 'no-cache' per-request environment variable
ba217dc41cebc0976010ee177f8fedac782d1f6fminfrin to prevent the saving of an otherwise cacheable response.
86bb763be5d87c295c8844d30078da2ddb964f73rpluem [Eric Covener]
86bb763be5d87c295c8844d30078da2ddb964f73rpluem
ba217dc41cebc0976010ee177f8fedac782d1f6fminfrin *) mod_rewrite: Introduce DiscardPathInfo|DPI flag to stop the troublesome
ea6ff3396df1d6d43ee0ecfa3e26ada981d8e9a3sctemme way that per-directory rewrites append the previous notion of PATH_INFO
ea6ff3396df1d6d43ee0ecfa3e26ada981d8e9a3sctemme to each substitution before evaluating subsequent rules.
8a0c75e992cc657a98317e78374b800d16963cfatrawick PR38642 [Eric Covener]
ba217dc41cebc0976010ee177f8fedac782d1f6fminfrin
8315a125b56710a222167e4d65b96c3c891f4b25sf *) mod_cgid: Do not add an empty argument when calling the CGI script.
8315a125b56710a222167e4d65b96c3c891f4b25sf PR 46380 [Ruediger Pluem]
8315a125b56710a222167e4d65b96c3c891f4b25sf
8315a125b56710a222167e4d65b96c3c891f4b25sf *) scoreboard: Remove unused sb_type from process_score.
3f985866b9b5b49fb57735b5eb135591163f30dfsf [Torsten Foertsch <torsten.foertsch@gmx.net>, Chris Darroch]
3f985866b9b5b49fb57735b5eb135591163f30dfsf
7f51e5c395d431b8c20226f77de28efe13272bfasf *) mod_ssl: Add SSLRenegBufferSize directive to allow changing the
7f51e5c395d431b8c20226f77de28efe13272bfasf size of the buffer used for the request-body where necessary
7f51e5c395d431b8c20226f77de28efe13272bfasf during a per-dir renegotiation. PR 39243. [Joe Orton]
7f51e5c395d431b8c20226f77de28efe13272bfasf
17d64c884a44f5ca72f6901afd3e50991bfc1c63sf *) mod_proxy_fdpass: New module to pass a client connection over to a separate
17d64c884a44f5ca72f6901afd3e50991bfc1c63sf process that is reading from a unix daemon socket.
17d64c884a44f5ca72f6901afd3e50991bfc1c63sf
a6e4caaa97e433cc2ef78d957bc32756d9c49f79sf *) mod_ssl: Improve environment variable extraction to be more
a6e4caaa97e433cc2ef78d957bc32756d9c49f79sf efficient and to correctly handle DNs with duplicate tags.
a6e4caaa97e433cc2ef78d957bc32756d9c49f79sf PR 45975. [Joe Orton]
a6e4caaa97e433cc2ef78d957bc32756d9c49f79sf
a6e4caaa97e433cc2ef78d957bc32756d9c49f79sf *) Remove the obsolete serial attribute from the RPM spec file. Compile
a6e4caaa97e433cc2ef78d957bc32756d9c49f79sf against the external pcre. Add missing binaries fcgistarter, and
a6e4caaa97e433cc2ef78d957bc32756d9c49f79sf mod_socache* and mod_session*. [Graham Leggett]
a96ba81cada826f2a9ab1e24218a77bfadfc31d8sf
a96ba81cada826f2a9ab1e24218a77bfadfc31d8sfChanges with Apache 2.3.0
a96ba81cada826f2a9ab1e24218a77bfadfc31d8sf
a96ba81cada826f2a9ab1e24218a77bfadfc31d8sf *) mod_ratelimit: New module to do bandwidth rate limiting. [Paul Querna]
4f133508c93204c06e1acba9774ff184e5812606niq
4f133508c93204c06e1acba9774ff184e5812606niq *) Remove X-Pad header which was added as a work around to a bug in
4f133508c93204c06e1acba9774ff184e5812606niq Netscape 2.x to 4.0b2. [Takashi Sato <takashi lans-tv.com>]
87587593f1a53030e840acc0dec6cc881022ea40covener
87587593f1a53030e840acc0dec6cc881022ea40covener *) Add DTrace Statically Defined Tracing (SDT) probes.
87587593f1a53030e840acc0dec6cc881022ea40covener [Theo Schlossnagle <jesus omniti.com>, Paul Querna]
87587593f1a53030e840acc0dec6cc881022ea40covener
87587593f1a53030e840acc0dec6cc881022ea40covener *) mod_proxy_balancer: Move all load balancing implementations
52071e4b9f49c3a1c2c767c7ea80ec92cf9032c9covener as individual, self-contained mod_proxy submodules under
52071e4b9f49c3a1c2c767c7ea80ec92cf9032c9covener modules/proxy/balancers [Jim Jagielski]
52071e4b9f49c3a1c2c767c7ea80ec92cf9032c9covener
89b8bbc89404e7071e573c4f0a17f528996e855djorton *) Rename APIs to include ap_ prefix:
89b8bbc89404e7071e573c4f0a17f528996e855djorton find_child_by_pid -> ap_find_child_by_pid
89b8bbc89404e7071e573c4f0a17f528996e855djorton suck_in_APR -> ap_suck_in_APR
e1d4c4e8366f46dc5dc1e6e24b4c7ac448dfa061sf sys_privileges_handlers -> ap_sys_privileges_handlers
e1d4c4e8366f46dc5dc1e6e24b4c7ac448dfa061sf unixd_accept -> ap_unixd_accept
6bc4f334a04802bab835893d0c42af8bfb9c3c41sf unixd_config -> ap_unixd_config
6bc4f334a04802bab835893d0c42af8bfb9c3c41sf unixd_killpg -> ap_unixd_killpg
53593dbd8fece82cb66a23f0b7024d8d713d66f1sf unixd_set_global_mutex_perms -> ap_unixd_set_global_mutex_perms
53593dbd8fece82cb66a23f0b7024d8d713d66f1sf unixd_set_proc_mutex_perms -> ap_unixd_set_proc_mutex_perms
79e3f2f950745953fff4a6a8dfe1f7cce31ce287sf unixd_set_rlimit -> ap_unixd_set_rlimit
79e3f2f950745953fff4a6a8dfe1f7cce31ce287sf [Paul Querna]
ab2b977442827214b1d884decf3e3f1579fd45e1rpluem
ab2b977442827214b1d884decf3e3f1579fd45e1rpluem *) core: When the ap_http_header_filter processes an error bucket, cleanup
ab2b977442827214b1d884decf3e3f1579fd45e1rpluem the passed brigade before returning AP_FILTER_ERROR down the filter
195edf54eccd8c5a436c7dd17f5f604e7074d5d1sf chain. This unambiguously ensures the same error bucket isn't revisited
195edf54eccd8c5a436c7dd17f5f604e7074d5d1sf [Ruediger Pluem]
195edf54eccd8c5a436c7dd17f5f604e7074d5d1sf
3709b26f3370ae89c5324a3c03fab56a93b09ecdsf *) mod_lbmethod_heartbeat: New module to load balance mod_proxy workers
3709b26f3370ae89c5324a3c03fab56a93b09ecdsf based on heartbeats. [Paul Querna]
3709b26f3370ae89c5324a3c03fab56a93b09ecdsf
03577bc320125eaa2b27ee7af78b894ee6dfe121takashi *) mod_heartmonitor: New module to collect heartbeats, and write out a file
03577bc320125eaa2b27ee7af78b894ee6dfe121takashi so that other modules can load balance traffic as needed. [Paul Querna]
03577bc320125eaa2b27ee7af78b894ee6dfe121takashi
f5119c5d7cfe8c6d53cb29d43f8746684068ed82minfrin *) mod_heartbeat: New module to generate multicast heartbeats to know if a
f5119c5d7cfe8c6d53cb29d43f8746684068ed82minfrin server is online. [Paul Querna]
f5119c5d7cfe8c6d53cb29d43f8746684068ed82minfrin
f5119c5d7cfe8c6d53cb29d43f8746684068ed82minfrin *) core: Error responses set by filters were being coerced into 500 errors,
f74d35a61a835e15412b99b8aebe4958fe4e94a5takashi sometimes appended to the original error response. Log entry of:
94713632faf403489b3f8b4e0ed65e1011ac4991takashi 'Handler for (null) returned invalid result code -3'
f74d35a61a835e15412b99b8aebe4958fe4e94a5takashi [Eric Covener]
20216b769716c4346cce373f2028d7dbebf03886poirier
20216b769716c4346cce373f2028d7dbebf03886poirier *) mod_buffer: Honour the flush bucket and flush the buffer in the
20216b769716c4346cce373f2028d7dbebf03886poirier input filter. Make sure that metadata buckets are written to
7317a32e0c621c9a28f6f10e83e6c5dc63e3f3bdsf the buffer, not to the final brigade. [Graham Leggett]
7317a32e0c621c9a28f6f10e83e6c5dc63e3f3bdsf
7317a32e0c621c9a28f6f10e83e6c5dc63e3f3bdsf *) mod_buffer: Optimise the buffering of heap buckets when the heap
ecc6e723b804fb4b8f858910eff3f88242ec56fasf buckets stay exactly APR_BUCKET_BUFF_SIZE long. [Graham Leggett,
ecc6e723b804fb4b8f858910eff3f88242ec56fasf Ruediger Pluem]
ecc6e723b804fb4b8f858910eff3f88242ec56fasf
ecc6e723b804fb4b8f858910eff3f88242ec56fasf *) mod_buffer: Optional support for buffering of the input and output
ecc6e723b804fb4b8f858910eff3f88242ec56fasf filter stacks. Can collapse many small buckets into fewer larger
ecc6e723b804fb4b8f858910eff3f88242ec56fasf buckets, and prevents excessively small chunks being sent over
727d68c6009030f56a350b4603384ce4fb844341minfrin the wire. [Graham Leggett]
727d68c6009030f56a350b4603384ce4fb844341minfrin
727d68c6009030f56a350b4603384ce4fb844341minfrin *) mod_privileges: new module to make httpd on Solaris privileges-aware
ed6dfb7d7057dc4f42348f12d7bff9fe98fc73cfminfrin and to enable different virtualhosts to run with different
ed6dfb7d7057dc4f42348f12d7bff9fe98fc73cfminfrin privileges and Unix user/group IDs [Nick Kew]
ed6dfb7d7057dc4f42348f12d7bff9fe98fc73cfminfrin
4dee28b6fc8fff5efde4e7821aeb6defed3fb84dsf *) authn/z: Remove mod_authn_default and mod_authz_default.
4dee28b6fc8fff5efde4e7821aeb6defed3fb84dsf [Chris Darroch]
4dee28b6fc8fff5efde4e7821aeb6defed3fb84dsf
23247a8f748077bc788a5fbaf91d5fad34d0b7d1sf *) authz: Fix handling of authz configurations, make default authz
23247a8f748077bc788a5fbaf91d5fad34d0b7d1sf logic replicate 2.2.x authz logic, and replace <Satisfy*>, Reject,
23247a8f748077bc788a5fbaf91d5fad34d0b7d1sf and AuthzMergeRules directives with Match, <Match*>, and AuthzMerge
23247a8f748077bc788a5fbaf91d5fad34d0b7d1sf directives. [Chris Darroch]
58015652ffe00f004c6404a0631474f23dadc7dasf
58015652ffe00f004c6404a0631474f23dadc7dasf *) mod_authn_core: Prevent crash when provider alias created to
58015652ffe00f004c6404a0631474f23dadc7dasf provider which is not yet registered. [Chris Darroch]
2af38cc44e48753913565b38a7a9f325f898a293minfrin
2af38cc44e48753913565b38a7a9f325f898a293minfrin *) mod_authn_core: Add AuthType of None to support disabling
745417156908df54538ca284b382ce8d27b30066minfrin authentication. [Chris Darroch]
2af38cc44e48753913565b38a7a9f325f898a293minfrin
fc2f0972572614b50523bc5ddb3f866ca4acd2f0sf *) core: Allow <Limit> and <LimitExcept> directives to nest, and
fc2f0972572614b50523bc5ddb3f866ca4acd2f0sf constrain their use to conform with that of other access control
fc2f0972572614b50523bc5ddb3f866ca4acd2f0sf and authorization directives. [Chris Darroch]
251430bcaff1fa6a77953bfe56475eb6cc7abc78sf
251430bcaff1fa6a77953bfe56475eb6cc7abc78sf *) unixd: turn existing code into a module, and turn the set user/group
251430bcaff1fa6a77953bfe56475eb6cc7abc78sf and chroot into a child_init function. [Nick Kew]
7b467aa53854c95318a1c709709c1619a4f47118minfrin
7b467aa53854c95318a1c709709c1619a4f47118minfrin *) core: Add ap_timeout_parameter_parse to public API. [Ruediger Pluem]
7b467aa53854c95318a1c709709c1619a4f47118minfrin
7b467aa53854c95318a1c709709c1619a4f47118minfrin *) mod_dir: Support "DirectoryIndex disabled"
7ba7402d405dc9e3c1083e34049ed933472ca910poirier Suggested By André Warnier <aw ice-sa.com> [Eric Covener]
7ba7402d405dc9e3c1083e34049ed933472ca910poirier
7ba7402d405dc9e3c1083e34049ed933472ca910poirier *) mod_ssl: Send Content-Type application/ocsp-request for POST requests to
7ba7402d405dc9e3c1083e34049ed933472ca910poirier OSCP responders. PR 46014 [Dr Stephen Henson <steve openssl.org>]
7ba7402d405dc9e3c1083e34049ed933472ca910poirier
4286d2e267e788d856092bf2ccf461e7ca99570frpluem *) Export and install the mod_rewrite.h header to ensure the optional
4286d2e267e788d856092bf2ccf461e7ca99570frpluem rewrite_mapfunc_t and ap_register_rewrite_mapfunc functions are
4286d2e267e788d856092bf2ccf461e7ca99570frpluem available to third party modules. [Graham Leggett]
4286d2e267e788d856092bf2ccf461e7ca99570frpluem
43563ad04e4bae7b42f7a34a87b7c60dc69c0c3fpoirier *) mod_authnz_ldap: don't return NULL-valued environment variables to
5357892a1e367372dc2d4a315156e3e44dc5d56dpoirier other modules. PR 39045 [Francois Pesce <francois.pesce gmail.com>]
5357892a1e367372dc2d4a315156e3e44dc5d56dpoirier
b42af5f6edf4fe4b820288c37920a7a6fd65f1f1poirier *) Don't adjust case in pathname components that are not of interest
b42af5f6edf4fe4b820288c37920a7a6fd65f1f1poirier to mod_mime. Fixes mod_negotiation's use of such components.
b42af5f6edf4fe4b820288c37920a7a6fd65f1f1poirier PR 43250 [Basant Kumar Kukreja <basant.kukreja sun.com>]
49cea03e96dc4707bce15d6318eb013cb8668d96minfrin
49cea03e96dc4707bce15d6318eb013cb8668d96minfrin *) Be tolerant in what you accept - accept slightly broken
49cea03e96dc4707bce15d6318eb013cb8668d96minfrin status lines from a backend provide they include a valid status code.
49cea03e96dc4707bce15d6318eb013cb8668d96minfrin PR 44995 [Rainer Jung <rainer.jung kippdata.de>]
847b3922f7dcde6830f4aad49d29c84b4569c260minfrin
63eaa8ed62d63de0a44346b8af48e08e562db01eminfrin *) New module mod_sed: filter Request/Response bodies through sed
63eaa8ed62d63de0a44346b8af48e08e562db01eminfrin [Basant Kumar Kukreja <basant.kukreja sun.com>]
847b3922f7dcde6830f4aad49d29c84b4569c260minfrin
1af2b28846e2647963db788b081676884fb7df8crpluem *) mod_auth_form: Make sure that basic authentication is correctly
1af2b28846e2647963db788b081676884fb7df8crpluem faked directly after login. [Graham Leggett]
1af2b28846e2647963db788b081676884fb7df8crpluem
845258fbf5102b8b09fe9b7f4cb4ea4c089344c3poirier *) mod_session_cookie, mod_session_dbd: Make sure cookies are set both
845258fbf5102b8b09fe9b7f4cb4ea4c089344c3poirier within the output headers and error output headers, so that the
845258fbf5102b8b09fe9b7f4cb4ea4c089344c3poirier session is maintained across redirects. [Graham Leggett]
5d36cddfe00d5c6ad18845fcc04e6f7662050fafminfrin
5d36cddfe00d5c6ad18845fcc04e6f7662050fafminfrin *) mod_auth_form: Make sure the logged in user is populated correctly
5d36cddfe00d5c6ad18845fcc04e6f7662050fafminfrin after a form login. Fixes a missing REMOTE_USER variable directly
20aa41f86a5b451529d26d9b901eea69989e5c0aminfrin following a login. [Graham Leggett]
20aa41f86a5b451529d26d9b901eea69989e5c0aminfrin
20aa41f86a5b451529d26d9b901eea69989e5c0aminfrin *) mod_session_cookie: Make sure that cookie attributes are correctly
8c92aeeb75b1b393f61a3e01c495484737a0ff8cminfrin included in the blank cookie when cookies are removed. This fixes an
8c92aeeb75b1b393f61a3e01c495484737a0ff8cminfrin inability to log out when using mod_auth_form. [Graham Leggett]
8c92aeeb75b1b393f61a3e01c495484737a0ff8cminfrin
1018201f5223624476334c6e23aead02db7c4040minfrin *) mod_autoindex: add configuration option to insert string
1018201f5223624476334c6e23aead02db7c4040minfrin in HTML HEAD. [Nick Kew]
e5db2522dbe503cbf5399094b6239c88c246a8c5poirier
e5db2522dbe503cbf5399094b6239c88c246a8c5poirier *) mod_session: Prevent a segfault when a CGI script sets a cookie with a
e5db2522dbe503cbf5399094b6239c88c246a8c5poirier null value. [David Shane Holden <dpejesh apache.org>]
e5db2522dbe503cbf5399094b6239c88c246a8c5poirier
ad7e5e9fb8f63a5155bb392114162997505ff772minfrin *) mod_headers: Prevent Header edit from processing only the first header
ad7e5e9fb8f63a5155bb392114162997505ff772minfrin of possibly multiple headers with the same name and deleting the
ad7e5e9fb8f63a5155bb392114162997505ff772minfrin remaining ones. PR 45333. [Ruediger Pluem]
ad7e5e9fb8f63a5155bb392114162997505ff772minfrin
ad7e5e9fb8f63a5155bb392114162997505ff772minfrin *) mod_rewrite: Preserve the query string with [proxy,noescape]. PR 45247
ad7e5e9fb8f63a5155bb392114162997505ff772minfrin [Tom Donovan]
59cb8d601b8c44476e59310f68b9c373d8fc62a6minfrin
59cb8d601b8c44476e59310f68b9c373d8fc62a6minfrin *) core, authn/z: Determine registered authn/z providers directly in
59cb8d601b8c44476e59310f68b9c373d8fc62a6minfrin ap_setup_auth_internal(), which allows optional functions that just
59cb8d601b8c44476e59310f68b9c373d8fc62a6minfrin wrapped ap_list_provider_names() to be removed from authn/z modules.
ec8b1faa56744b338f6d6421144b56c2bb3faae6poirier [Chris Darroch]
ec8b1faa56744b338f6d6421144b56c2bb3faae6poirier
10abdcbd7b30d957d15c61ea8100ba97a627ac95minfrin *) authn/z: Convert common provider version strings to macros.
10abdcbd7b30d957d15c61ea8100ba97a627ac95minfrin [Chris Darroch]
87e0bf269cc3386ee8e6ab561ff00770151f4f53niq
87e0bf269cc3386ee8e6ab561ff00770151f4f53niq *) ab: Make ab.c compile on VC6. PR 45024 [Ruediger Pluem]
87e0bf269cc3386ee8e6ab561ff00770151f4f53niq
3c67b7956d44501360506a9f13a5011be73b30ecminfrin *) configure: Don't reject libtool 2.x
3c67b7956d44501360506a9f13a5011be73b30ecminfrin PR 44817 [Arfrever Frehtes Taifersar Arahesis <Arfrever.FTA gmail.com>]
3c67b7956d44501360506a9f13a5011be73b30ecminfrin
3c67b7956d44501360506a9f13a5011be73b30ecminfrin *) core: When testing for slash-terminated configuration paths in
97d20d37d21b8d427a920e211858172f0a82427epoirier ap_location_walk(), don't look past the start of an empty string
97d20d37d21b8d427a920e211858172f0a82427epoirier such as that created by a <Location ""> directive.
97d20d37d21b8d427a920e211858172f0a82427epoirier [Chris Darroch]
8e04e8ec7d682bff5e6dccdd70c082971a88cb8bniq
8e04e8ec7d682bff5e6dccdd70c082971a88cb8bniq *) core, mod_proxy: If a kept_body is present, it becomes safe for
8e04e8ec7d682bff5e6dccdd70c082971a88cb8bniq subrequests to support message bodies. Make sure that safety
53c999a82fcca729dabc8a512b3fb996d61fd814niq checks within the core and within the proxy are not triggered
53c999a82fcca729dabc8a512b3fb996d61fd814niq when kept_body is present. This makes it possible to embed
53c999a82fcca729dabc8a512b3fb996d61fd814niq proxied POST requests within mod_include. [Graham Leggett]
53c999a82fcca729dabc8a512b3fb996d61fd814niq
25d0f8adcab13255494a3572edff1a25f6fbeea3rpluem *) mod_auth_form: Make sure the input filter stack is properly set
25d0f8adcab13255494a3572edff1a25f6fbeea3rpluem up before reading the login form. Make sure the kept body filter
25d0f8adcab13255494a3572edff1a25f6fbeea3rpluem is correctly inserted to ensure the body can be read a second
25d0f8adcab13255494a3572edff1a25f6fbeea3rpluem time safely should the authn be successful. [Graham Leggett,
dd9ae259e1578c4388739c880ede97c55cec543frpluem Ruediger Pluem]
dd9ae259e1578c4388739c880ede97c55cec543frpluem
dd9ae259e1578c4388739c880ede97c55cec543frpluem *) mod_request: Insert the KEPT_BODY filter via the insert_filter
0938450cadc9a083d112a86bc7dd7ae34f791364trawick hook instead of during fixups. Add a safety check to ensure the
0938450cadc9a083d112a86bc7dd7ae34f791364trawick filters cannot be inserted more than once. [Graham Leggett,
0938450cadc9a083d112a86bc7dd7ae34f791364trawick Ruediger Pluem]
8bed7ee6d97933b958e97e222f37154d83e384e5jorton
8bed7ee6d97933b958e97e222f37154d83e384e5jorton *) core: Do not allow Options ALL if not all options are allowed to be
8bed7ee6d97933b958e97e222f37154d83e384e5jorton overwritten. PR 44262 [Michał Grzędzicki <lazy iq.pl>]
8bed7ee6d97933b958e97e222f37154d83e384e5jorton
8bed7ee6d97933b958e97e222f37154d83e384e5jorton *) ap_cache_cacheable_headers_out() will (now) always
d33ddda47790d3295f4218f87e3a296cf51a9becmjc merge an error heaeders _before_ clearing them and _before_
c7d46b58052fe666c74a47bd26b6cb1e351492adrpluem merging in the actual entity headers and doing normal
4e08c8c1a91e2887b41d8cacd3aa532355d0237drpluem hop-by-hop cleansing. [Dirk-Willem van Gulik].
7a25b029b69f169bd22718165dff3b271114f92eniq
43d051c8401a1f3b4f7853cd897d3565ab814ea7poirier *) cache: retire ap_cache_cacheable_hdrs_out() which was used
43d051c8401a1f3b4f7853cd897d3565ab814ea7poirier for both in- and out-put headers; and replace it by a single
43d051c8401a1f3b4f7853cd897d3565ab814ea7poirier ap_cache_cacheable_headers() wrapped in a in- and out-put
2f34374f6e04b9094a1d13a5ed823f331ba841a3rpluem specific ap_cache_cacheable_headers_in()/out(). The latter
2f34374f6e04b9094a1d13a5ed823f331ba841a3rpluem which will also merge error and ensure content-type. To keep
2f34374f6e04b9094a1d13a5ed823f331ba841a3rpluem cache modules consistent with ease. This API change bumps
7a25b029b69f169bd22718165dff3b271114f92eniq up the minor MM by one [Dirk-Willem van Gulik].
7a25b029b69f169bd22718165dff3b271114f92eniq
7a25b029b69f169bd22718165dff3b271114f92eniq *) mod_rewrite: Allow Cookie option to set secure and HttpOnly flags.
2f34374f6e04b9094a1d13a5ed823f331ba841a3rpluem PR 44799 [Christian Wenz <christian wenz.org>]
3e6a46d2fecf446daf0e280a49fa5565f5f635eajorton
3e6a46d2fecf446daf0e280a49fa5565f5f635eajorton *) Move the KeptBodySize directive, kept_body filters and the
3e6a46d2fecf446daf0e280a49fa5565f5f635eajorton ap_parse_request_body function out of the http module and into a
137e484e5f984ceff1102e1212dda8ac0413231aniq new module called mod_request, reducing the size of the core.
0df8f79d2324b131c36955d7e474a735a762f9eeniq [Graham Leggett]
0df8f79d2324b131c36955d7e474a735a762f9eeniq
0df8f79d2324b131c36955d7e474a735a762f9eeniq *) mod_dbd: Handle integer configuration directive parameters with a
30e3e760b737f13ce800fa02c5930ade7659ba66niq dedicated function.
30e3e760b737f13ce800fa02c5930ade7659ba66niq
30e3e760b737f13ce800fa02c5930ade7659ba66niq *) Change the directives within the mod_session* modules to be valid
80370e62044bea458bcd0545c59cb864ed117b04niq both inside and outside the location/directory sections, as
e991c6fc032c59eb6cb751d9d382e933a53a2866niq suggested by wrowe. [Graham Leggett]
e991c6fc032c59eb6cb751d9d382e933a53a2866niq
e991c6fc032c59eb6cb751d9d382e933a53a2866niq *) mod_auth_form: Add a module capable of allowing end users to log
9a00e2d46c44c111d6952e553a2f1a61b7594eb3rpluem in using an HTML form, storing the credentials within mod_session.
9a00e2d46c44c111d6952e553a2f1a61b7594eb3rpluem [Graham Leggett]
9a00e2d46c44c111d6952e553a2f1a61b7594eb3rpluem
33d9be77cc6f5fc8734e9c1f526b82d359955152rpluem *) Add a function to the http filters that is able to parse an HTML
9a00e2d46c44c111d6952e553a2f1a61b7594eb3rpluem form request with the type of application/x-www-form-urlencoded.
33d9be77cc6f5fc8734e9c1f526b82d359955152rpluem [Graham Leggett]
da128c59ec571c4dff70f41ecba9c8a9974c6cd6niq
172e83c0f024fe6396dd1f3ca3492fd83c304db5jim *) mod_session_crypto: Initialise SSL in the post config hook.
da128c59ec571c4dff70f41ecba9c8a9974c6cd6niq [Ruediger Pluem, Graham Leggett]
45932a847f237b4d8f0667b138bd3f8a15fb53ffniq
45932a847f237b4d8f0667b138bd3f8a15fb53ffniq *) mod_session_dbd: Add a session implementation capable of storing
45932a847f237b4d8f0667b138bd3f8a15fb53ffniq session information in a SQL database via the dbd interface. Useful
186e9d990f453d16826ab87a87df7b87e6e05921rpluem for sites where session privacy is important. [Graham Leggett]
186e9d990f453d16826ab87a87df7b87e6e05921rpluem
186e9d990f453d16826ab87a87df7b87e6e05921rpluem *) mod_session_crypto: Add a session encoding implementation capable
186e9d990f453d16826ab87a87df7b87e6e05921rpluem of encrypting and decrypting sessions wherever they may be stored.
6861702c2d883e5c0744d5f7528d2060671ad24dtakashi Introduces a level of privacy when sessions are stored on the
6861702c2d883e5c0744d5f7528d2060671ad24dtakashi browser. [Graham Leggett]
6861702c2d883e5c0744d5f7528d2060671ad24dtakashi
6861702c2d883e5c0744d5f7528d2060671ad24dtakashi *) mod_session_cookie: Add a session implementation capable of storing
6861702c2d883e5c0744d5f7528d2060671ad24dtakashi session information within cookies on the browser. Useful for high
f1f779c42f76118102fdecbe8777b47a1fc693a7rjung volume sites where server bound sessions are too resource intensive.
f1f779c42f76118102fdecbe8777b47a1fc693a7rjung [Graham Leggett]
f1f779c42f76118102fdecbe8777b47a1fc693a7rjung
292cb7b720095e7bb434d79ae53b02d332aeb99acovener *) mod_session: Add a generic session interface to unify the different
292cb7b720095e7bb434d79ae53b02d332aeb99acovener attempts at saving persistent sessions across requests.
292cb7b720095e7bb434d79ae53b02d332aeb99acovener [Graham Leggett]
292cb7b720095e7bb434d79ae53b02d332aeb99acovener
137e484e5f984ceff1102e1212dda8ac0413231aniq *) core, authn/z: Avoid calling access control hooks for internal requests
137e484e5f984ceff1102e1212dda8ac0413231aniq with configurations which match those of initial request. Revert to
137e484e5f984ceff1102e1212dda8ac0413231aniq original behaviour (call access control hooks for internal requests
137e484e5f984ceff1102e1212dda8ac0413231aniq with URIs different from initial request) if any access control hooks or
137e484e5f984ceff1102e1212dda8ac0413231aniq providers are not registered as permitting this optimization.
137e484e5f984ceff1102e1212dda8ac0413231aniq Introduce wrappers for access control hook and provider registration
4e08c8c1a91e2887b41d8cacd3aa532355d0237drpluem which can accept additional mode and flag data. [Chris Darroch]
d0cd62f11bcd8fa9bf758c5125f55cea5d9038dfrpluem
d0cd62f11bcd8fa9bf758c5125f55cea5d9038dfrpluem *) Introduced ap_expr API for expression evaluation.
d0cd62f11bcd8fa9bf758c5125f55cea5d9038dfrpluem This is adapted from mod_include, which is the first module
51d55be8bbc6652c13bc80d920f4331f7152dceerjung to use the new API.
51d55be8bbc6652c13bc80d920f4331f7152dceerjung [Nick Kew]
51d55be8bbc6652c13bc80d920f4331f7152dceerjung
0af58edfee6112cc3399e0e693340e525b96ab1ctrawick *) mod_authz_dbd: When redirecting after successful login/logout per
0af58edfee6112cc3399e0e693340e525b96ab1ctrawick AuthzDBDRedirectQuery, do not report authorization failure, and use
0af58edfee6112cc3399e0e693340e525b96ab1ctrawick first row returned by database query instead of last row.
0af58edfee6112cc3399e0e693340e525b96ab1ctrawick [Chris Darroch]
27c7a7cad9e83eeebad0a4d5a321144394adc3f9trawick
27c7a7cad9e83eeebad0a4d5a321144394adc3f9trawick *) mod_ldap: Correctly return all requested attribute values
27c7a7cad9e83eeebad0a4d5a321144394adc3f9trawick when some attributes have a null value.
8f2700898323915da289644dc1f3ee11a5e5b4earpluem PR 44560 [Anders Kaseorg <anders kaseorg.com>]
8f2700898323915da289644dc1f3ee11a5e5b4earpluem
8f2700898323915da289644dc1f3ee11a5e5b4earpluem *) core: check symlink ownership if both FollowSymlinks and
8f2700898323915da289644dc1f3ee11a5e5b4earpluem SymlinksIfOwnerMatch are set [Nick Kew]
e7983ce746b0df56a1b74b42da6d82f5ecb99349covener
e7983ce746b0df56a1b74b42da6d82f5ecb99349covener *) core: fix origin checking in SymlinksIfOwnerMatch
e7983ce746b0df56a1b74b42da6d82f5ecb99349covener PR 36783 [Robert L Mathews <rob-apache.org.bugs tigertech.net>]
e7983ce746b0df56a1b74b42da6d82f5ecb99349covener
bbcfb8ab8e22f90fdf346e9993bd58ba2203b182trawick *) Activate mod_cache, mod_file_cache and mod_disc_cache as part of the
bbcfb8ab8e22f90fdf346e9993bd58ba2203b182trawick 'most' set for '--enable-modules' and '--enable-shared-mods'. Include
bbcfb8ab8e22f90fdf346e9993bd58ba2203b182trawick mod_mem_cache in 'all' as well. [Dirk-Willem van Gulik]
d1745d6933c22c807cf2388332426defd1b19f03covener
d1745d6933c22c807cf2388332426defd1b19f03covener *) Also install mod_so.h, mod_rewrite.h and mod_cache.h; as these
d1745d6933c22c807cf2388332426defd1b19f03covener contain public function declarations which are useful for
d1745d6933c22c807cf2388332426defd1b19f03covener third party module authors. PR 42431 [Dirk-Willem van Gulik].
b20f76a400e77d3631f3507ff22d68ae6bd25323trawick
222834d5a33b915037094af014905f3683cae78btrawick *) mod_dir, mod_negotiation: pass the output filter information
222834d5a33b915037094af014905f3683cae78btrawick to newly created sub requests; as these are later on used
2db5d76ac4c75aadecf38e20569bccbfd2360ba7rpluem as true requests with an internal redirect. This allows for
2db5d76ac4c75aadecf38e20569bccbfd2360ba7rpluem mod_cache et.al. to trap the results of the redirect.
2db5d76ac4c75aadecf38e20569bccbfd2360ba7rpluem [Dirk-Willem van Gulik, Ruediger Pluem]
df46ff21c57d00f6addccaaf9b1484f2b56b8577pquerna
7f4ac5a4cd99a9cae866b5908e358bd932736307chrisd *) mod_ldap: Add support (taking advantage of the new APR capability)
1c03114a0f0315ed19a05f654021da9f66005897rjung for ldap rebind callback while chasing referrals. This allows direct
1c03114a0f0315ed19a05f654021da9f66005897rjung searches on LDAP servers (in particular MS Active Directory 2003+)
89691c9bd17f5f53fa0aa8d3fe2e1faee5a5d984rpluem using referrals without the use of the global catalog.
89691c9bd17f5f53fa0aa8d3fe2e1faee5a5d984rpluem PRs 26538, 40268, and 42557 [Paul J. Reder]
89691c9bd17f5f53fa0aa8d3fe2e1faee5a5d984rpluem
89691c9bd17f5f53fa0aa8d3fe2e1faee5a5d984rpluem *) mod_ssl: Added server name indication support (SNI, RFC 4366).
3e9c0665b06e44cf776528c6954ed3ca34a77c7fsctemme PR 34607. [Kaspar Brand <asfbugz velox.ch>]. A test configuration
51a475d92e7d68ee6d7b57aa7fd6e73b2712ce31sctemme can be created with test/make_sni.sh [Dirk-Willem van Gulik].
3e9c0665b06e44cf776528c6954ed3ca34a77c7fsctemme
019f2b58acb34e31ea3a062bdb5e6c863cd82d66trawick *) ApacheMonitor.exe: Introduce --kill argument for use by the
873c287c391b0bbc4719b68bb84946515811e1batrawick installer. This will permit the installation tool to remove
6707208ba4e9a5841ca1ab830830fd286ea5b7c5trawick all running instances before attempting to remove the .exe.
6707208ba4e9a5841ca1ab830830fd286ea5b7c5trawick [William Rowe]
873c287c391b0bbc4719b68bb84946515811e1batrawick
832853bb93c1831daf24e4727c5ca0e1b1786e83lars *) mod_ssl: Add support for OCSP validation of client certificates.
832853bb93c1831daf24e4727c5ca0e1b1786e83lars PR 41123. [Marc Stern <marc.stern approach.be>, Joe Orton]
832853bb93c1831daf24e4727c5ca0e1b1786e83lars
d2696ac6757b3d8bdaa27634a141ac8c8a045e08fielding *) mod_serf: New module for Reverse Proxying. [Paul Querna]
d2696ac6757b3d8bdaa27634a141ac8c8a045e08fielding
d2696ac6757b3d8bdaa27634a141ac8c8a045e08fielding *) core: Add the option to keep aside a request body up to a certain
d2696ac6757b3d8bdaa27634a141ac8c8a045e08fielding size that would otherwise be discarded, to be consumed by filters
1782dcd420de504978945e6b812523eeae6d56a2lars such as mod_include. When enabled for a directory, POST requests
1782dcd420de504978945e6b812523eeae6d56a2lars to shtml files can be passed through to embedded scripts as POST
d2696ac6757b3d8bdaa27634a141ac8c8a045e08fielding requests, rather being downgraded to GET requests. [Graham Leggett]
1782dcd420de504978945e6b812523eeae6d56a2lars
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem *) mod_ssl: Fix TLS upgrade (RFC 2817) support. PR 41231. [Joe Orton]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem
59dc8d935dbf862712683bbc9e267bd08ced0b14fielding *) scoreboard: Correctly declare ap_time_process_request.
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem PR 43789 [Tom Donovan <Tom.Donovan acm.org>]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem *) core; scoreboard: ap_get_scoreboard_worker(sbh) now takes the sbh member
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem from the connection rec, ap_get_scoreboard_worker(proc, thread) will now
cf8d02ea0c91653917b044529f3133c5a1bb9200fielding provide the unusual legacy lookup. [William Rowe]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem *) mpm winnt: fix null pointer dereference
17ac330ebaa71b24cb77580411a231ee45996e03pquerna PR 42572 [Davi Arnaut]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem *) mod_authnz_ldap, mod_authn_dbd: Tidy up the code to expose authn
9f38f3ec3e8087985d108a24ae796962fef83644takashi parameters to the environment. Improve portability to
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem EBCDIC machines by using apr_toupper(). [Martin Kraemer]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem
d4ee4552489641d35d1195bbbd6021351c4b79aarjung *) mod_ldap, mod_authnzldap: Add support for nested groups (i.e. the ability
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem to authorize an authenticated user via a "require ldap-group X" directive
9e152751ed380f87c5ecae4fb0221c956e5fbd24rjung where the user is not in group X, but is in a subgroup contained in X.
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem PR 42891 [Paul J. Reder]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem
abb99af8aa7da2cb4c324133a4e10bd7a50f875erpluem *) mod_ssl: Add support for caching SSL Sessions in memcached. [Paul Querna]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem *) mod_ldap: Fix the search limit parameter to ldap_search_ext_s()
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem for SDKs that define LDAP_NO_LIMIT to something other than -1.
382d14411b582d97075a836190d74c778977505fcovener [David Jones <oscaremma gmail.com>]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem *) apxs: Enhance -q flag to print all known variables and their values
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem when invoked without variable name(s).
06e6657fd0f376a16db696876f9bff5927cc3cb0trawick [William Rowe, Sander Temme]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem *) apxs: Eliminate run-time check for mod_so. PR 40653.
0e9dae659943679108357054e9aa7657cdc52dc4minfrin [David M. Lee <dmlee crossroads.com>]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem *) beos MPM: Create pmain pool and run modules' child_init hooks when
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem entering ap_mpm_run(), then destroy pmain when exiting ap_mpm_run().
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem [Chris Darroch]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem
d03aa31ada476d8eb97feaec2b1099809e7f3d57niq *) netware MPM: Destroy pmain pool when exiting ap_mpm_run() so that
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem cleanups registered in modules' child_init hooks are performed.
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem [Chris Darroch]
a7757dd38bb2a1afc93e241b7ea67b3de85ecc8bminfrin
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem *) mod_dbd: Stash DBD connections in request_config of initial request
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem only, or else sub-requests and internal redirections may cause
df46ff21c57d00f6addccaaf9b1484f2b56b8577pquerna entire DBD pool to be stashed in a single HTTP request. [Chris Darroch]
df46ff21c57d00f6addccaaf9b1484f2b56b8577pquerna
df46ff21c57d00f6addccaaf9b1484f2b56b8577pquerna *) Fix issue which could cause error messages to be written to access logs
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem on Win32. PR 40476. [Tom Donovan <Tom.Donovan acm.org>]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem *) The LockFile directive, which specifies the location of
a5cce34e21a5b472f3806b4526043887bcb7e9eajim the accept() mutex lockfile, is deprecated. Instead, the
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem AcceptMutex directive now takes an optional lockfile
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem location parameter, ala SSLMutex. [Jim Jagielski]
8c3667cd1d0db08647793137c0d1aa7f6526bebfniq
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem *) mod_authn_dbd: Export any additional columns queried in the SQL select
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem into the environment with the name AUTHENTICATE_<COLUMN>. This brings
8c3667cd1d0db08647793137c0d1aa7f6526bebfniq mod_authn_dbd behaviour in line with mod_authnz_ldap. [Graham Leggett]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem
6824182b3b8e045db97a228d3127bdfcbdfeb0bcniq *) mod_dbd: Key the storage of prepared statements on the hex string
6824182b3b8e045db97a228d3127bdfcbdfeb0bcniq value of server_rec, rather than the server name, as the server name
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem may change (eg when the server name is set) at any time, causing
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem weird behaviour in modules dependent on mod_dbd. [Graham Leggett]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem
0c26d213d85bc40fc05963c63bf670b42b352d25niq *) mod_proxy_fcgi: Added win32 build. [Mladen Turk]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem *) sendfile_nonblocking() takes the _brigade_ as an argument, gets
92357fb76d3ad043e29ba2ba2041a7bdb8d13390niq the first bucket from the brigade, finds it not to be a FILE
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem bucket and barfs. The fix is to pass a bucket rather than a brigade.
9f07b6dc343a4e3eba5f4c47050a77441723ce89nd [Niklas Edmundsson <nikke acc.umu.se>]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem *) mod_rewrite: support rewritemap by SQL query [Nick Kew]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem
f7cec4a86292b160401472286a17497ae0d4df18covener *) ap_get_server_version() has been removed. Third-party modules must
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem now use ap_get_server_banner() or ap_get_server_description().
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem [Jeff Trawick]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem *) All MPMs: Introduce a check_config phase between pre_config and
1464434c2c104e0ba224644c42552330f5158537covener open_logs, to allow modules to review interdependent configuration
8d574b3ac4185e4f71c8b9aae76e7122a78201c4rpluem directive values and adjust them while messages can still be logged
8d574b3ac4185e4f71c8b9aae76e7122a78201c4rpluem to the console. Handle relevant MPM directives during this phase
8d574b3ac4185e4f71c8b9aae76e7122a78201c4rpluem and format messages for both the console and the error log, as
7f4ac5a4cd99a9cae866b5908e358bd932736307chrisd appropriate. [Chris Darroch]
92357fb76d3ad043e29ba2ba2041a7bdb8d13390niq
8d574b3ac4185e4f71c8b9aae76e7122a78201c4rpluem *) mod_proxy: don't URLencode tilde in path component
509111f5f58a9effd4c832f6a0cbd6ad9d549188jorton [Stijn Hoop <stijn sandcat.nl>]
509111f5f58a9effd4c832f6a0cbd6ad9d549188jorton
509111f5f58a9effd4c832f6a0cbd6ad9d549188jorton *) mpm_winnt: Fix return values from wait_for_many_objects.
0e2a2eae9b72ac099aa25d7419e55af13b004be9minfrin The return value is index to the signaled thread in the
235b900b78cf6849f8344e377a91ded37d9cc9depquerna creted_threads array. We can not use WAIT_TIMEOUT because
235b900b78cf6849f8344e377a91ded37d9cc9depquerna his value is defined as 258, thus limiting the MaxThreads
235b900b78cf6849f8344e377a91ded37d9cc9depquerna to that value. [Mladen Turk]
66b8ec445dced7a2036bcd3b87b6fc3f08a1ab24jorton
66b8ec445dced7a2036bcd3b87b6fc3f08a1ab24jorton *) core: Do not allow internal redirects like the DirectoryIndex of mod_dir
66b8ec445dced7a2036bcd3b87b6fc3f08a1ab24jorton to circumvent the symbolic link checks imposed by FollowSymLinks and
66b8ec445dced7a2036bcd3b87b6fc3f08a1ab24jorton SymLinksIfOwnerMatch. [Nick Kew, Ruediger Pluem, William Rowe]
0e2a2eae9b72ac099aa25d7419e55af13b004be9minfrin
0e2a2eae9b72ac099aa25d7419e55af13b004be9minfrin *) New SSLLogLevelDebugDump [ None (default) | IO (not bytes) | Bytes ]
0e2a2eae9b72ac099aa25d7419e55af13b004be9minfrin configures the I/O Dump of SSL traffic, when LogLevel is set to Debug.
0e2a2eae9b72ac099aa25d7419e55af13b004be9minfrin The default is none as this is far greater debugging resolution than
0e2a2eae9b72ac099aa25d7419e55af13b004be9minfrin the typical administrator is prepared to untangle. [William Rowe]
8d574b3ac4185e4f71c8b9aae76e7122a78201c4rpluem
6f33babce8f8bc723f0b2c755aef049cd509504fpquerna *) mod_disk_cache: If possible, check if the size of an object to cache is
6f33babce8f8bc723f0b2c755aef049cd509504fpquerna within the configured boundaries before actually saving data.
0a12339f39799193ac6866fce812a1deb8f4a1abpquerna [Niklas Edmundsson <nikke acc.umu.se>]
0a12339f39799193ac6866fce812a1deb8f4a1abpquerna
0a12339f39799193ac6866fce812a1deb8f4a1abpquerna *) mod_disk_cache: Delete temporary files if they cannot be renamed to their
3fb118bc4e1a634f71c1fa509819ceac36c79dcbpquerna final name. [Davi Arnaut <davi haxent.com.br>]
3fb118bc4e1a634f71c1fa509819ceac36c79dcbpquerna
3fb118bc4e1a634f71c1fa509819ceac36c79dcbpquerna *) Worker and event MPMs: Remove improper scoreboard updates which were
fb59af4ce3fcdd314b848359faeddf1e51bb24c5jim performed in the event of a fork() failure. [Chris Darroch]
fb59af4ce3fcdd314b848359faeddf1e51bb24c5jim
fb59af4ce3fcdd314b848359faeddf1e51bb24c5jim *) Add support for fcgi:// proxies to mod_rewrite.
fb59af4ce3fcdd314b848359faeddf1e51bb24c5jim [Markus Schiegl <ms schiegl.com>]
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna *) Remove incorrect comments from scoreboard.h regarding conditional
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna loading of worker_score structure with mod_status, and remove unused
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna definitions relating to old life_status field.
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna [Chris Darroch <chrisd pearsoncmg.com>]
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna *) Remove allocation of memory for unused array of lb_score pointers
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna in ap_init_scoreboard(). [Chris Darroch <chrisd pearsoncmg.com>]
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna *) Add mod_proxy_fcgi, a FastCGI back end for mod_proxy.
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna [Garrett Rooney, Jim Jagielski, Paul Querna]
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna
19e5deda3a29d71ac1cc4bfecce39f96ea3ab55dcovener *) Event MPM: Fill in the scoreboard's tid field. PR 38736.
19e5deda3a29d71ac1cc4bfecce39f96ea3ab55dcovener [Chris Darroch <chrisd pearsoncmg.com>]
19e5deda3a29d71ac1cc4bfecce39f96ea3ab55dcovener
19e5deda3a29d71ac1cc4bfecce39f96ea3ab55dcovener *) mod_charset_lite: Remove Content-Length when output filter can
19e5deda3a29d71ac1cc4bfecce39f96ea3ab55dcovener invalidate it. Warn when input filter can invalidate it.
3ec1e3a35106ec4c8bcf8fae6a20cb623aed0b62pquerna [Jeff Trawick]
3ec1e3a35106ec4c8bcf8fae6a20cb623aed0b62pquerna
3ec1e3a35106ec4c8bcf8fae6a20cb623aed0b62pquerna *) Authz: Add the new module mod_authn_core that will provide common
97f7daaffd9b6c1031302d7e551d5279fa0d0d72pquerna authn directives such as 'AuthType', 'AuthName'. Move the directives
97f7daaffd9b6c1031302d7e551d5279fa0d0d72pquerna 'AuthType' and 'AuthName' out of the core module and merge mod_authz_alias
97f7daaffd9b6c1031302d7e551d5279fa0d0d72pquerna into mod_authn_core. [Brad Nicholes]
847db8b2f0188cd9c840acbe4fea77a32748b2edpquerna
97f7daaffd9b6c1031302d7e551d5279fa0d0d72pquerna *) Authz: Move the directives 'Order', 'Allow', 'Deny' and 'Satisfy'
97f7daaffd9b6c1031302d7e551d5279fa0d0d72pquerna into the new module mod_access_compat which can be loaded to provide
527fc83e2bf315b2026a9ac6b1e6ce83143609bbcovener support for these directives.
527fc83e2bf315b2026a9ac6b1e6ce83143609bbcovener [Brad Nicholes]
527fc83e2bf315b2026a9ac6b1e6ce83143609bbcovener
527fc83e2bf315b2026a9ac6b1e6ce83143609bbcovener *) Authz: Move the 'Require' directive from the core module as well as
527fc83e2bf315b2026a9ac6b1e6ce83143609bbcovener add the directives '<SatisfyAll>', '<SatisfyOne>', '<RequireAlias>'
99c8705f69fae71940ad9b091bd2f588a7b9f484minfrin and 'Reject' to mod_authz_core. The new directives introduce 'AND/OR'
99c8705f69fae71940ad9b091bd2f588a7b9f484minfrin logic into the authorization processing. [Brad Nicholes]
99c8705f69fae71940ad9b091bd2f588a7b9f484minfrin
99c8705f69fae71940ad9b091bd2f588a7b9f484minfrin *) Authz: Add the new module mod_authz_core which acts as the
9376e7dc573bb2721491c79b92f9c06fdfacebe6minfrin authorization provider vector and contains common authz
9376e7dc573bb2721491c79b92f9c06fdfacebe6minfrin directives. [Brad Nicholes]
9376e7dc573bb2721491c79b92f9c06fdfacebe6minfrin
9376e7dc573bb2721491c79b92f9c06fdfacebe6minfrin *) Authz: Renamed mod_authz_dbm authz providers from 'group' and
edaefb8bf78debc86ef7de441c7983d8b05517e1minfrin 'file-group' to 'dbm-group' and 'dbm-file-group'. [Brad Nicholes]
edaefb8bf78debc86ef7de441c7983d8b05517e1minfrin
edaefb8bf78debc86ef7de441c7983d8b05517e1minfrin *) Authz: Added the new authz providers 'env', 'ip', 'host', 'all' to handle
edaefb8bf78debc86ef7de441c7983d8b05517e1minfrin host-based access control provided by mod_authz_host and invoked
edaefb8bf78debc86ef7de441c7983d8b05517e1minfrin through the 'Require' directive. [Brad Nicholes]
b5cbd7bc65a5c0eda246b0cd32e7d9ed124d66c4niq
b5cbd7bc65a5c0eda246b0cd32e7d9ed124d66c4niq *) Authz: Convert all of the authz modules from hook based to
b5cbd7bc65a5c0eda246b0cd32e7d9ed124d66c4niq provider based. [Brad Nicholes]
b5cbd7bc65a5c0eda246b0cd32e7d9ed124d66c4niq
2ac474e42b9281e247e7082e30c50c5bef1f2cc3rjung *) mod_cache: Add CacheMinExpire directive to set the minimum time in
2ac474e42b9281e247e7082e30c50c5bef1f2cc3rjung seconds to cache a document.
6ad55f63504cf5fe5205ed9495664519afeadcd9chrisd [Brian Akins <brian.akins turner.com>, Ruediger Pluem]
6ad55f63504cf5fe5205ed9495664519afeadcd9chrisd
6ad55f63504cf5fe5205ed9495664519afeadcd9chrisd *) mod_authz_dbd: SQL authz with Login/Session support [Nick Kew]
809ec9d7cc8bc12d7dc6fafba24f3acad3e49d81chrisd
809ec9d7cc8bc12d7dc6fafba24f3acad3e49d81chrisd *) Fix typo in ProxyStatus syntax error message.
809ec9d7cc8bc12d7dc6fafba24f3acad3e49d81chrisd [Christophe Jaillet <christophe.jaillet wanadoo.fr>]
809ec9d7cc8bc12d7dc6fafba24f3acad3e49d81chrisd
809ec9d7cc8bc12d7dc6fafba24f3acad3e49d81chrisd *) Asynchronous write completion for the Event MPM. [Brian Pane]
f436f5cf34615c3c7d49dd229560ba658033f9eachrisd
f436f5cf34615c3c7d49dd229560ba658033f9eachrisd *) Added an End-Of-Request bucket type. The logging of a request and
f436f5cf34615c3c7d49dd229560ba658033f9eachrisd the freeing of its pool are now done when the EOR bucket is destroyed.
ce6098001014d149e90e56ab0e89c1b4aab30136chrisd This has the effect of delaying the logging until right after the last
ce6098001014d149e90e56ab0e89c1b4aab30136chrisd of the response is sent; ap_core_output_filter() calls the access logger
ce6098001014d149e90e56ab0e89c1b4aab30136chrisd indirectly when it destroys the EOR bucket. [Brian Pane]
7245e9b991db85d9d9a587fe5f4051f642ebdc3cchrisd
7245e9b991db85d9d9a587fe5f4051f642ebdc3cchrisd *) Rewrite of logresolve support utility: IPv6 addresses are now supported
7245e9b991db85d9d9a587fe5f4051f642ebdc3cchrisd and the format of statistical output has changed. [Colm MacCarthaigh]
7245e9b991db85d9d9a587fe5f4051f642ebdc3cchrisd
38b062650152074931a68e933461762c5e233cfcniq *) Rewrite of ap_coreoutput_filter to do nonblocking writes [Brian Pane]
38b062650152074931a68e933461762c5e233cfcniq
38b062650152074931a68e933461762c5e233cfcniq *) Added new connection states for handler and write completion
9257af3c6aaeaf201fccb3e3c87cf8c41783fdb7rpluem [Brian Pane]
9257af3c6aaeaf201fccb3e3c87cf8c41783fdb7rpluem
d1c1b82647a997922859ec76b82e62a956078dbccovener *) mod_cgid: Refuse to work on Solaris 10 due to OS bugs. PR 34264.
63de18ba5e922ffaab500317d7d1d0ad6b27b7e2covener [Justin Erenkrantz]
63de18ba5e922ffaab500317d7d1d0ad6b27b7e2covener
91ef999a69527d2a64983681c92aaef9270697b4rpluem *) Teach mod_ssl to use arbitrary OIDs in an SSLRequire directive,
91ef999a69527d2a64983681c92aaef9270697b4rpluem allowing string-valued client certificate attributes to be used for
91ef999a69527d2a64983681c92aaef9270697b4rpluem access control, as in: SSLRequire "value" in OID("1.3.6.1.4.1.18060.1")
cf95511601acd18c75339ef5d90a298e070617ccminfrin [Martin Kraemer, David Reid]
cf95511601acd18c75339ef5d90a298e070617ccminfrin
cf95511601acd18c75339ef5d90a298e070617ccminfrin [Apache 2.1.0-dev includes those bug fixes and changes with the
cf95511601acd18c75339ef5d90a298e070617ccminfrin Apache 2.2.xx tree as documented, and except as noted, below.]
e82c197ca8872669af89367746826fe6b9955bb3niq
e82c197ca8872669af89367746826fe6b9955bb3niqChanges with Apache 2.2.x and later:
e82c197ca8872669af89367746826fe6b9955bb3niq
baef4b5261d84ad9bacb2f4e745b33f35534c25aniq *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
baef4b5261d84ad9bacb2f4e745b33f35534c25aniq
baef4b5261d84ad9bacb2f4e745b33f35534c25aniqChanges with Apache 2.0.x and later:
baef4b5261d84ad9bacb2f4e745b33f35534c25aniq
742ec45ed2ac00ab03080e898332352220cc1f13niq *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup
742ec45ed2ac00ab03080e898332352220cc1f13niq
a5e068c4aa3d0084a41e178c7c0c1b1ae2f28125jimChanges with Apache 1.3.x and later:
742ec45ed2ac00ab03080e898332352220cc1f13niq
f82568a780e35e8786958c49a1259434e2088b9cniq *) http://svn.apache.org/viewvc/httpd/httpd/branches/1.3.x/src/CHANGES?view=markup
f82568a780e35e8786958c49a1259434e2088b9cniq