CHANGES revision b6b7079ea8e24865adc82c4be6758b31cf4aa429
280a8a0544b4aeb52414d20e8c6e6c5b1108562eTinderbox User -*- coding: utf-8 -*-
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan HuntChanges with Apache 2.5.0
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User *) core: Avoid useless warning message when parsing a section guarded by
19558a04decde0e7261d489d92d04ad88104217bTinderbox User <IfDefine foo> if $(foo) is used within the section.
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt PR 56858 [Christophe Jaillet]
969eaf7df8ac651946f76b6631ff5db568c11ef6Tinderbox User *) mod_proxy_fcgi: Fix faulty logging of large amounts of stderr from the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews application. PR 56858. [Manuel Mausz <manuel-asf mausz.at>]
f4ee48be3994797a8332b86c101db4d7b54799ceTinderbox User *) mod_ratelimit: Drop severity of AH01455 and AH01457 (ap_pass_brigade
a2c370ca12bb0360ff7e969474ead3f788c65fffTinderbox User failed) messages from ERROR to TRACE1. Other filters do not bother
8de3f14f1c300c3e1ed99084cc03485b42c92bf1Tinderbox User re-reporting failures from lower level filters. PR56832. [Eric Covener]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) mod_proxy_http: Proxy responses with error status and
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User "ProxyErrorOverride On" hang until proxy timeout.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews PR53420 [Rainer Jung]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) mod_proxy_wstunnel: Concurrent websockets messages could be
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews lost or delayed with ProxyWebsocketAsync enabled.
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews [Edward Lu <Chaosed0 gmail.com>]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews *) core, mod_info: Add compiled and loaded PCRE versions to version
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews number display. [Rainer Jung]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) mpm_winnt: Accept utf-8 (Unicode) service names and descriptions for
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews internationalization. [William Rowe]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews *) mpm_winnt: Normalize the error and status messages emitted by service.c,
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User the service control interface for Windows. [William Rowe]
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt *) SECURITY: CVE-2013-5704 (cve.mitre.org)
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews core: HTTP trailers could be used to replace HTTP headers
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User late during request processing, potentially undoing or
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews otherwise confusing modules that examined or modified
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews request headers earlier. Adds "MergeTrailers" directive to restore
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt legacy behavior. [Edward Lu, Yann Ylavic, Joe Orton, Eric Covener]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User *) http_protocol: fix logic in ap_method_list_(add|remove) in order:
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews - to correctly reset bits
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User - not to modify the 'method_mask' bitfield unnecessarily
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt *) mod_log_config: Allow three character log formats to be registered. For
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews backwards compatibility, the first character of a three-character format
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User must be the '^' (caret) character. [Eric Covener]
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt *) mod_authnz_ldap: Return LDAP connections to the pool before the handler
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews is run, instead of waiting until the end of the request. [Eric Covener]
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt *) mod_ldap: Be more conservative with the last-used time for
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews LDAPConnectionPoolTTL. PR54587 [Eric Covener]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) mod_deflate: Don't fail when flushing inflated data to the user-agent
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt and that coincides with the end of stream ("Zlib error flushing inflate
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews buffer"). PR 56196. [Christoph Fausak <christoph fausak glueckkanja.com>]
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt *) mod_proxy: Don't limit the size of the connectable Unix Domain Socket
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews paths. [Christophe Jaillet, Yann Ylavic]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) mod_ssl: dump SSL IO/state for the write side of the connection(s),
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews like reads (level TRACE4). [Yann Ylavic]
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater *) mod_proxy: Shutdown (eg. close notify) the backend connection before
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews closing. [Yann Ylavic]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews *) mpm_event[opt]: Send the SSL close notify alert when the KeepAliveTimeout
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews expires. PR54998. [Yann Ylavic]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews *) mod_ssl: Ensure that the SSL close notify alert is flushed to the client.
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews PR54998. [Tim Kosse <tim.kosse filezilla-project.org>, Yann Ylavic]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews *) mod_log_config: Add GlobalLog to allow a globally defined log to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews be inherited by virtual hosts that define a CustomLog.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews [Edward Lu <Chaosed0 gmail.com>]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews *) MPMs: Support SO_REUSEPORT to create multiple duplicated listener
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews records for scalability. [Yingqi Lu <yingqi.lu@intel.com>,
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt Jeff Trawick, Jim Jagielski]
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User *) mod_proxy_html: support automatic detection of doctype and processing
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews of FPIs. PR56285 [Micha Lenk <micha lenk info>, Nick Kew]
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews *) mod_proxy_html: skip documents shorter than 4 bytes
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews PR 56286 [Micha Lenk <micha lenk info>]
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt *) mod_proxy_fdpass: Fix computation of the size of 'struct sockaddr_un'
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt when passed to 'connect()'.
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt [Graham Dumpleton <grahamd apache org>]
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt *) core: Add ap_mpm_resume_suspended() API to allow a suspended connection
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt to resume. PR56333
7cc0a5d21ef046bfd630c4769943d896a7d7472cTinderbox User [Artem <artemciy gmail.com>, Edward Lu <Chaosed0 gmail.com>]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews *) core: Add ap_mpm_register_socket_callback_timeout() API. [Eric Covener]
549c517e2ecad52bb1d32f08920e29d4e8cda71eTinderbox User *) mod_proxy_wstunnel: Honor ProxyWebsocketIdleTimeout in asynchronous
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews processing mode. [Eric Covener]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews *) mod_authnz_ldap: Fail explicitly when the filter is too long. Remove
8f4e6ea383aa9a953c0adb5be6c4d8dc8dbd5c4aWitold Krecicki unnecessary apr_pstrdup() and strlen(). [Graham Leggett]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews *) Add the ldap-search option to mod_authnz_ldap, allowing authorization
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews to be based on arbitrary expressions that do not include the username.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews [Graham Leggett]
aef6cf0f147a5014d4891c9689b9f463399e16e7Tinderbox User *) Add the ldap function to the expression API, allowing LDAP filters and
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews distinguished names based on expressions to be escaped correctly to
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User guard against LDAP injection. [Graham Leggett]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User *) Add module mod_ssl_ct, which provides an implementation of Certificate
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews Transparency (RFC 6962) for httpd. [Jeff Trawick]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews *) mod_proxy: Preserve original request headers even if they differ
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User from the ones to be forwarded to the backend. PR 45387.
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews [Yann Ylavic]
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt *) mod_remoteip: Prevent an external proxy from presenting an internal
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews proxy. PR 55962. [Mike Rumph]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson *) mod_ssl: Add hooks to allow other modules to perform processing at
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User several stages of initialization and connection handling. See
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews *) mod_proxy_wstunnel: Avoid sending error responses down an upgraded
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User websockets connection as it is being close down. [Eric Covener]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User *) mod_proxy_wstunnel: Allow the administrator to cap the amount
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews of time a synchronous websockets connection stays idle with
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt ProxyWebsocketIdleTimeout. [Eric Covener]
28a5dd720187fddb16055a0f64b63a7b66f29f64Mark Andrews *) mod_proxy_wstunnel: Change to opt-in for asynchronous support, adding
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews directives ProxyWebsocketAsync and ProxyWebsocketAsyncDelay.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews [Eric Covener]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) mod_proxy_wstunnel: Stop leaking websockets backend connections under
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews event MPM (trunk-only). [Eric Covener]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) mod_proxy_http: Add detach_backend hook (potentially usable
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews in other proxy scheme handlers). [Jeff Trawick]
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont *) mod_deflate: Add DeflateAlterETag to control how the ETag
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews is modified. The 'NoChange' parameter mimics 2.2.x behavior.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews PR 45023, PR 39727. [Eric Covener]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews *) mod_rewrite: Add 'BNF' (backreferences-no-plus) flag to RewriteRule to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews allow spaces in backreferences to be encoded as %20 instead of '+'.
8f4e6ea383aa9a953c0adb5be6c4d8dc8dbd5c4aWitold Krecicki [Eric Covener]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews *) mod_rewrite: Support an optional list of characters to escape in the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews argument for the 'B' (escape backreferences) flag. [Eric Covener]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews *) mod_ssl: Add SSLOCSPUseRequestNonce directive to control whether or not
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews OCSP requests should use a nonce to be checked against the responder's
7f9e2fff07b9c17e0d7a0ea7abc9304ce9d01b61Tinderbox User one. PR 56233. [ Yann Ylavic ]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews *) mod_dir: Default to 2.2-like behavior and skip execution when method is
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews neither GET nor POST, such as for DAV requests. PR 54914. [Chris Darroch]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) mod_rewrite: Rename the handler that does per-directory internal
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews redirects to "rewrite-redirect-handler" from "redirect-handler" so
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews it is less ambiguous and less likely to be reused. [Eric Covener]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) mod_rewrite: Protect against looping with the [N] flag by enforcing a
01a5c5503482fb3ba52088bf0178a7213273bf96Mark Andrews default limit of 10000 iterations, and allowing each rule to change its
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User limit. [Eric Covener]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User *) mod_ssl: Fix config merging of SSLOCSPEnable and SSLOCSPOverrideResponder.
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater [Jeff Trawick]
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt *) Add HttpContentLengthHeadZero and HttpExpectStrict directives.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews [Yehuda Sadeh <yehuda inktank com>, Justin Erenkrantz]
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater *) mod_ssl: Add -t -DDUMP_CA_CERTS option which dumps the filenames of all
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User configured SSL CA certificates to stdout the same way as DUMP_CERTS does.
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews [Jan Kaluza]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews *) mod_ssl: Don't flush when an EOS is received. Prepares mod_ssl
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User to support write completion. [Graham Leggett]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User *) core: Add parse_errorlog_arg callback to ap_errorlog_provider
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews to allow providers to check the ErrorLog argument. [Jan Kaluza]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews *) mod_cgid: Use the servers Timeout for each read from a CGI script,
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User allow override with new CGIDRequestTimeout directive. PR43494
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater [Eric Covener, Toshikuni Fukaya <toshikuni-fukaya cybozu co jp>]
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews *) core: ensure any abnormal exit is reported to stderr if it's a tty.
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt PR 55670 [Nick Kew]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User *) mod_lua: Let the Inter-VM get/set functions work with a global
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson shared memory pool instead of a per-process pool. [Daniel Gruno]
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews *) ldap: Support ldaps when using the Microsoft LDAP SDK.
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt PR 54626. [Jean-Frederic Clere]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User *) mod_proxy: Add ap_connection_reusable() for checking if a connection
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater is reusable as of this point in processing. [Jeff Trawick]
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews *) mod_authnz_ldap: Change default value of AuthLDAPMaxSubGroupDepth to 0
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt to avoid performance problems when subgroups aren't in use. [Eric Covener]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User *) mod_syslog: New module implementing syslog ap_error_log provider.
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic Updater Previously, this code was part of core, now it's in separate module.
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt *) core: Add ap_errorlog_provider to make ErrorLog logging modular. Move
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews syslog support from core to new mod_syslog. [Jan Kaluza]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson *) mod_status, mod_echo: Fix the display of client addresses.
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User They were truncated to 31 characters which is not enough for IPv6 addresses.
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews PR 54848 [Bernhard Schmidt <berni birkenwald de>]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews *) core: Add ap_log_data(), ap_log_rdata(), etc. for logging buffers.
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User [Jeff Trawick]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User *) mod_unique_id: Use output of the PRNG rather than IP address and
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews pid, avoiding sleep() call and possible DNS issues at startup,
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt plus improving randomness for IPv6-only hosts.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews [Jan Kaluza <jkaluza redhat.com>]
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User *) mod_authnz_ldap: Support primitive LDAP servers that do not accept
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User filters, such as "SDBM-backed LDAP" on z/OS, by allowing a special
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User filter "none" to be specified in AuthLDAPURL. [Eric Covener]
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User *) mod_file_cache: mod_file_cache should be able to serve files that
34d1f3b65324f8fcf358fa2f47891441d4b1d2f0Tinderbox User haven't had a Content-Type set via e.g. mod_mime. [Eric Covener]
fab54780409846f7c71f6026d665f18c77c649efTinderbox User *) core: merge AllowEncodedSlashes from the base configuration into
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews virtual hosts. [Eric Covener]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) AIX: Install DSO's with "cp" instead of "install" in instdso.sh
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User [Eric Covener]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) mod_ldap: Don't keep retrying if a new LDAP connection times out.
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox User [Eric Covener]
8927a982bde7e4b665966b55f0fa57c5cf21b9d8Mark Andrews *) mod_deflate: permit compilation of mod_deflate against a zlib that has
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User been configured with -D Z_PREFIX, which redefines the token "deflate".
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews [Eric Covener]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) mod_auth_digest: Use the secret when generating nonces in all cases and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews not only when AuthName is used in .htaccess files (this change may cause
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews problems if used with round robin load balancers). Don't regenerate the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews secret on graceful restarts. PR 54637 [Stefan Fritsch]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) core: Remove apr_brigade_flatten(), buffering and duplicated code
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews from the HTTP_IN filter, parse chunks in a single pass with zero copy.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Reduce memory usage by 48 bytes per request. [Graham Leggett]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) core: Stop the HTTP_IN filter from attempting to write error buckets
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to the output filters, which is bogus in the proxy case. Create a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews clean mapping from APR codes to HTTP status codes, and use it where
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews needed. [Graham Leggett]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) mod_proxy: Ensure network errors detected by the proxy are returned as
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews 504 Gateway Timout as opposed to 502 Bad Gateway, in order to be
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews compliant with RFC2616 14.9.4 Cache Revalidation and Reload Controls.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) mod_ldap: LDAP connections used for authentication were not respecting
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews LDAPConnectionPoolTimeout. PR 54587
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) core: ap_rgetline_core now pulls from r->proto_input_filters.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) mod_proxy_html: process parsed comments immediately.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Fixes bug where parsed comments may be lost. [Nick Kew]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) core: Add option to add valgrind support. Use it to reduce false positive
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews warnings in mod_ssl. [Stefan Fritsch]
a2c370ca12bb0360ff7e969474ead3f788c65fffTinderbox User *) mod_authn_file, mod_authn_dbd, mod_authn_dbm, mod_authn_socache:
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews Cache the result of the most recent password hash verification for every
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews keep-alive connection. This saves some expensive calculations.
7d638dd31ecb633aaefca994b60b70c58b5def03Tinderbox User [Stefan Fritsch]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) http: Remove support for Request-Range header sent by Navigator 2-3 and
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews MSIE 3. [Stefan Fritsch]
76408aae412cda298c5e43da0eebb23c875a4426Tinderbox User *) core, http: Extend HttpProtocol with an option to enforce stricter HTTP
7f9e2fff07b9c17e0d7a0ea7abc9304ce9d01b61Tinderbox User conformance or to only log the found problems. [Stefan Fritsch]
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User *) core: Correctly parse an IPv6 literal host specification in an absolute
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews URL in the request line. [Stefan Fritsch]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) EventOpt MPM
a2c370ca12bb0360ff7e969474ead3f788c65fffTinderbox User *) core: Add LogLevelOverride directive that allows to override the
a2c370ca12bb0360ff7e969474ead3f788c65fffTinderbox User loglevel for clients from certain IPs. This also works for things
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews like the SSL handshake where <If> LogLevel ... </If> is evaluated
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews too late. [Stefan Fritsch]
a2c370ca12bb0360ff7e969474ead3f788c65fffTinderbox User *) core: Add new directive Warning to issue warnings from a configuration
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User file. Both Warning and Error now generate a timestamped log message.
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson [Fabien Coelho]
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User *) ap_expr: Add SERVER_PROTOCOL_VERSION, ..._MAJOR, and ..._MINOR
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User variables. [Stefan Fritsch]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) core: New directive RegisterHttpMethod for registering non-standard
a2c370ca12bb0360ff7e969474ead3f788c65fffTinderbox User HTTP methods. [Stefan Fritsch]
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt *) core: New directive HttpProtocol which allows to disable HTTP/0.9
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User support. [Stefan Fritsch]
3857cb6fcabeb79d85de4b3e3e4ab99912b701f8Mark Andrews *) mod_allowhandlers: New module to forbid specific handlers for specific
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews directories. [Stefan Fritsch]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews *) mod_systemd: New module, for integration with systemd on Linux.
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User [Jan Kaluza <jkaluza redhat.com>]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User *) WinNT MPM: Store pid and generation for each thread in scoreboard
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews to allow tracking of threads from exiting children via mod_status
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt or other such mechanisms. [Jeff Trawick]
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - APIs: ap_log_pid(), ap_remove_pid, ap_read_pid()
8292deab031e7599cd7622aa7675fbe139ca6095Mark Andrews - core: the scoreboard (ScoreBoardFile), pid file (PidFile), and
c1e2310a3725eeed45e5e7c86750c64c5a02e993Francis Dupont mutexes (Mutex)
c1e2310a3725eeed45e5e7c86750c64c5a02e993Francis Dupont - mod_cache: thundering herd lock directory
4b61b671f5de767ec1d1b8e6cf7b849bddf08e98Tinderbox User - mod_lbmethod_heartbeat, mod_heartmonitor: heartbeat storage file
4b61b671f5de767ec1d1b8e6cf7b849bddf08e98Tinderbox User - mod_ldap: shared memory cache
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews - mod_socache_shmcb, mod_socache_dbm: shared memory or dbm for cache
3759f10fc543747668b1ca4b4671f35b0dea8445Francis Dupont [Jeff Trawick]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews *) suexec: Add --enable-suexec-capabilites support on Linux, to use
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews setuid/setgid capability bits rather than a setuid root binary.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews *) suexec: Add support for logging to syslog as an alternative to logging
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews to a file; configure --without-suexec-logfile --with-suexec-syslog.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews [Matthew Steele <mdsteele google.com>]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews be compiled by the build compiler instead of the host compiler.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater PR 51257. [Guenter Knauf]
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews *) core: In maintainer mode, replace apr_palloc with a version that
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt initializes the allocated memory with non-zero values, except if
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater *) mod_policy: Add a new testing module to help server administrators
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews enforce a configurable level of protocol compliance on their
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews servers and application servers behind theirs. [Graham Leggett]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews *) mod_firehose: Add a new debugging module able to record traffic
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews passing through the server in such a way that connections and/or
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater requests be reconstructed and replayed. [Graham Leggett]
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews *) mod_noloris
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews *) Simple MPM
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews [Apache 2.5.0-dev includes those bug fixes and changes with the
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews Apache 2.4.xx tree as documented below, except as noted.]
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark AndrewsChanges with Apache 2.4.x and later:
01a5c5503482fb3ba52088bf0178a7213273bf96Mark Andrews *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark AndrewsChanges with Apache 2.2.x and later:
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
3bd8b5a8fb126e45c67ff53b68183c889cc27918Tinderbox UserChanges with Apache 2.0.x and later: