CHANGES revision c7de1955eb0eaeabf7042902476397692672d549
a785bf2c39c6f223a93c27bbff81591b38095577Mark Andrews -*- coding: utf-8 -*-
a785bf2c39c6f223a93c27bbff81591b38095577Mark AndrewsChanges with Apache 2.5.0
00f131293520b70728cd48840e09953fa45a745bMark Andrews
00f131293520b70728cd48840e09953fa45a745bMark Andrews *) mod_auth_digest: Actually use the secret when generating nonces. This change
00f131293520b70728cd48840e09953fa45a745bMark Andrews may cause problems if used with round robin load balancers. PR 54637
b2e71853060a384070d422afda6d1c692ff608e3Mark Andrews [Stefan Fritsch]
b2e71853060a384070d422afda6d1c692ff608e3Mark Andrews
b2e71853060a384070d422afda6d1c692ff608e3Mark Andrews *) mod_cache_socache: Use the name of the socache implementation when performing
b2e71853060a384070d422afda6d1c692ff608e3Mark Andrews a lookup rather than using the raw arguments. [Martin Ksellmann
42c1acfa478aacfbda2d298cf74a137de2df4b87Michał Kępień <martin@ksellmann.de>]
42c1acfa478aacfbda2d298cf74a137de2df4b87Michał Kępień
42c1acfa478aacfbda2d298cf74a137de2df4b87Michał Kępień *) rotatelogs: add -n number-of-files option to roate through a number
214b53880b6d77359f60feccb91bd2589059300aEvan Hunt of fixed-name logfiles. [Eric Covener]
214b53880b6d77359f60feccb91bd2589059300aEvan Hunt
214b53880b6d77359f60feccb91bd2589059300aEvan Hunt *) mod_lua: If a LuaMapHandler doesn't return any value, log a warning
dd5375de0a7a515ee4fb2fd217e9577259d38c07Mark Andrews and treat it as apache2.OK. [Eric Covener]
dd5375de0a7a515ee4fb2fd217e9577259d38c07Mark Andrews
dd5375de0a7a515ee4fb2fd217e9577259d38c07Mark Andrews *) ab: Add a new -l parameter in order not to check the length of the responses.
3a58e1fefb0a9fd5dab11f271a320c6b90473f76Mukund Sivaraman This can be usefull with dynamic pages.
3a58e1fefb0a9fd5dab11f271a320c6b90473f76Mukund Sivaraman PR9945, PR27888, PR42040 [<ccikrs1 cranbrook edu>]
3a58e1fefb0a9fd5dab11f271a320c6b90473f76Mukund Sivaraman
7c67b8c2b076971e6a9f8b0db932201366f13d47Mark Andrews *) mod_ssl: Fix possible truncation of OCSP responses when reading from the
7c67b8c2b076971e6a9f8b0db932201366f13d47Mark Andrews server. [Joe Orton]
7c67b8c2b076971e6a9f8b0db932201366f13d47Mark Andrews
5aed5dc329a2bf1340e9ff2256c1cf4e3005ea0bMark Andrews *) mod_session_dbd: Make sure that dirty flag is respected when saving
5aed5dc329a2bf1340e9ff2256c1cf4e3005ea0bMark Andrews sessions, and ensure the session ID is changed each time the session
387f5e872d40426acbc739d2e9b2bb37c123dd56Mark Andrews changes. [Takashi Sato <takashi tks.st>, Graham Leggett]
8664a1bd40814ed0b42eacfc5eb354b598dfd6dfTinderbox User
c28e44f3f8bc46c6bf1c15cc06af0c42fcd7e924Evan Hunt *) mod_dav: Sending a MERGE request against a URI handled by mod_dav_svn with
c28e44f3f8bc46c6bf1c15cc06af0c42fcd7e924Evan Hunt the source href (sent as part of the request body as XML) pointing to a
387f5e872d40426acbc739d2e9b2bb37c123dd56Mark Andrews URI that is not configured for DAV will trigger a segfault. [Ben Reser
3440cf9c60cd5d35634e7f274fd3eccbba2173a5Evan Hunt <ben reser.org>]
3440cf9c60cd5d35634e7f274fd3eccbba2173a5Evan Hunt
3440cf9c60cd5d35634e7f274fd3eccbba2173a5Evan Hunt *) mod_logio: new format-specifier %C (combined) which is the sum of received
387f5e872d40426acbc739d2e9b2bb37c123dd56Mark Andrews and sent byte counts.
541ce84ff2f0c54340da8b3e04c5686ed82420e1Mark Andrews PR54015 [Christophe Jaillet]
541ce84ff2f0c54340da8b3e04c5686ed82420e1Mark Andrews
032d2134a4c1808696688db9bf6f20253e5d05b5Mark Andrews *) core: Remove apr_brigade_flatten(), buffering and duplicated code
032d2134a4c1808696688db9bf6f20253e5d05b5Mark Andrews from the HTTP_IN filter, parse chunks in a single pass with zero copy.
032d2134a4c1808696688db9bf6f20253e5d05b5Mark Andrews Reduce memory usage by 48 bytes per request. [Graham Leggett]
fb9ef31fed818384ef8997f2dc5f27252c6f767eEvan Hunt
fb9ef31fed818384ef8997f2dc5f27252c6f767eEvan Hunt *) mod_deflate: Remove assumptions as to when an EOS bucket might arrive.
fb9ef31fed818384ef8997f2dc5f27252c6f767eEvan Hunt Gracefully step aside if the body size is zero. [Graham Leggett]
823ccd1f02802966395d58c916e9f988320fd6eeEvan Hunt
823ccd1f02802966395d58c916e9f988320fd6eeEvan Hunt *) 'AuthGroupFile' and 'AuthUserFile' do not accept anymore the optional
823ccd1f02802966395d58c916e9f988320fd6eeEvan Hunt 'standard' keyword . It was unused and not documented.
b6fa637fc8c92f42a21e6f97259598968717af3dEvan Hunt PR54463 [Tianyin Xu <tixu cs.ucsd.edu> and Christophe Jaillet]
b6fa637fc8c92f42a21e6f97259598968717af3dEvan Hunt
b6fa637fc8c92f42a21e6f97259598968717af3dEvan Hunt *) mod_proxy_http: Make the proxy-interim-response environment variable
b6fa637fc8c92f42a21e6f97259598968717af3dEvan Hunt effective by formally overriding origin server behaviour. [Graham
ace5680c122ef239e64eec1120f13f5a7f087d79Mark Andrews Leggett, Co-Advisor <coad measurement-factory.com>]
ace5680c122ef239e64eec1120f13f5a7f087d79Mark Andrews
ace5680c122ef239e64eec1120f13f5a7f087d79Mark Andrews *) core: Stop the HTTP_IN filter from attempting to write error buckets
59d940391ce90963cd3f4b22201b3fca2ffda22aMark Andrews to the output filters, which is bogus in the proxy case. Create a
59d940391ce90963cd3f4b22201b3fca2ffda22aMark Andrews clean mapping from APR codes to HTTP status codes, and use it where
59d940391ce90963cd3f4b22201b3fca2ffda22aMark Andrews needed. [Graham Leggett]
6b432e11497f905a6b6f048df3e8a01ce8abbb1eMark Andrews
6b432e11497f905a6b6f048df3e8a01ce8abbb1eMark Andrews *) mod_proxy: Ensure we don't attempt to amend a table we are iterating
6b432e11497f905a6b6f048df3e8a01ce8abbb1eMark Andrews through, ensuring that all headers listed by Connection are removed.
cb9345c996de9d9c990009f14fc83fbbe9c5e3e6Mark Andrews [Graham Leggett, Co-Advisor <coad measurement-factory.com>]
cb9345c996de9d9c990009f14fc83fbbe9c5e3e6Mark Andrews
cb9345c996de9d9c990009f14fc83fbbe9c5e3e6Mark Andrews *) core: apachectl -S prints wildcard name-based virtual hosts twice.
c935952ede45595a821cfed7f73b57f3b239ca2bMark Andrews PR54948 [Eric Covener]
c935952ede45595a821cfed7f73b57f3b239ca2bMark Andrews
c935952ede45595a821cfed7f73b57f3b239ca2bMark Andrews *) mod_proxy: Reject invalid values for Max-Forwards. [Graham Leggett,
9604a49da0130534f2f4aaa0cbfa78b5f589196fMark Andrews Co-Advisor <coad measurement-factory.com>]
9604a49da0130534f2f4aaa0cbfa78b5f589196fMark Andrews
9604a49da0130534f2f4aaa0cbfa78b5f589196fMark Andrews *) mod_cache: If a 304 response indicates an entity not currently cached, then
da5b569ddb9b8bf84242f3085d18e215ec490fdaMark Andrews the cache MUST disregard the response and repeat the request without the
da5b569ddb9b8bf84242f3085d18e215ec490fdaMark Andrews conditional. [Graham Leggett, Co-Advisor <coad measurement-factory.com>]
da5b569ddb9b8bf84242f3085d18e215ec490fdaMark Andrews
c83a3061551c86bd661839be935de061f7322f5cEvan Hunt *) mod_proxy: Fix seg-faults when using the global pool on threaded
c83a3061551c86bd661839be935de061f7322f5cEvan Hunt MPMs [Thomas Eckert <thomas.r.w.eckert gmail.com>, Jim Jagielski]
c83a3061551c86bd661839be935de061f7322f5cEvan Hunt
c83a3061551c86bd661839be935de061f7322f5cEvan Hunt *) mod_proxy: Ensure network errors detected by the proxy are returned as
ac9072210cea5283e554f1787876b647a08fda96Mark Andrews 504 Gateway Timout as opposed to 502 Bad Gateway, in order to be
ac9072210cea5283e554f1787876b647a08fda96Mark Andrews compliant with RFC2616 14.9.4 Cache Revalidation and Reload Controls.
ac9072210cea5283e554f1787876b647a08fda96Mark Andrews [Graham Leggett, Co-Advisor <coad measurement-factory.com>]
ac9072210cea5283e554f1787876b647a08fda96Mark Andrews
512765ba1e3f0b29e2c1ae4b0138838c6422f2bdEvan Hunt *) mod_cache: Ensure that we don't attempt to replace a cached response
512765ba1e3f0b29e2c1ae4b0138838c6422f2bdEvan Hunt with an older response as per RFC2616 13.12. [Graham Leggett, Co-Advisor
27a262bc4d38c7a8230677ac2685ec7a4f509f70Mark Andrews <coad measurement-factory.com>]
27a262bc4d38c7a8230677ac2685ec7a4f509f70Mark Andrews
27a262bc4d38c7a8230677ac2685ec7a4f509f70Mark Andrews *) core, mod_cache: Ensure RFC2616 compliance in ap_meets_conditions()
27a262bc4d38c7a8230677ac2685ec7a4f509f70Mark Andrews with weak validation combined with If-Range and Range headers. Break
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman out explicit conditional header checks to be useable elsewhere in the
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman server. Ensure weak validation RFC compliance in the byteranges filter.
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman Ensure RFC validation compliance when serving cached entities. PR 16142
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman [Graham Leggett, Co-Advisor <coad measurement-factory.com>]
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman *) core: Add the ability to do explicit matching on weak and strong ETags
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman as per RFC2616 Section 13.3.3. [Graham Leggett, Co-Advisor
0d24df5c0b2f9546f403113df8ac4457223bc92fEvan Hunt <coad measurement-factory.com>]
0d24df5c0b2f9546f403113df8ac4457223bc92fEvan Hunt
0d24df5c0b2f9546f403113df8ac4457223bc92fEvan Hunt *) mod_cache: Ensure that updated responses to HEAD requests don't get
7c1c9b4dcd9efa507cdb58d3d83e99ab4836096dMark Andrews mistakenly paired with a previously cached body. Ensure that any existing
7c1c9b4dcd9efa507cdb58d3d83e99ab4836096dMark Andrews body is removed when a HEAD request is cached. [Graham Leggett,
7c1c9b4dcd9efa507cdb58d3d83e99ab4836096dMark Andrews Co-Advisor <coad measurement-factory.com>]
9689922a0d936b04feb418fbaf4c1420f745ea58Mark Andrews
9689922a0d936b04feb418fbaf4c1420f745ea58Mark Andrews *) mod_cache: Honour Cache-Control: no-store in a request. [Graham Leggett]
9689922a0d936b04feb418fbaf4c1420f745ea58Mark Andrews
02989eceeff85cd6c5dd31848a12674f74bba7cfEvan Hunt *) mod_cache: RFC2616 14.9.3 The s-maxage directive also implies the
02989eceeff85cd6c5dd31848a12674f74bba7cfEvan Hunt semantics of the proxy-revalidate directive. [Graham Leggett]
02989eceeff85cd6c5dd31848a12674f74bba7cfEvan Hunt
34f649fa22a16acb488ccf0f8a41d541c6ba7da1Evan Hunt *) mod_cache: Make sure that contradictory entity headers present in a 304
34f649fa22a16acb488ccf0f8a41d541c6ba7da1Evan Hunt Not Modified response are caught and cause the entity to be removed.
34f649fa22a16acb488ccf0f8a41d541c6ba7da1Evan Hunt [Graham Leggett]
34f649fa22a16acb488ccf0f8a41d541c6ba7da1Evan Hunt
8b9c4592ed718c4187971f1104381faf538bf4f7Evan Hunt *) mod_cache: Make sure Vary processing handles multivalued Vary headers and
8b9c4592ed718c4187971f1104381faf538bf4f7Evan Hunt multivalued headers referred to via Vary. [Graham Leggett]
8b9c4592ed718c4187971f1104381faf538bf4f7Evan Hunt
8b9c4592ed718c4187971f1104381faf538bf4f7Evan Hunt *) mod_cache: When serving from cache, only the last header of a multivalued
264e17e73941059877ccf3c96f26aac15a25500bMukund Sivaraman header was taken into account. Fixed. [Graham Leggett]
264e17e73941059877ccf3c96f26aac15a25500bMukund Sivaraman
264e17e73941059877ccf3c96f26aac15a25500bMukund Sivaraman *) mod_cache: Ignore response headers specified by no-cache=header and
264e17e73941059877ccf3c96f26aac15a25500bMukund Sivaraman private=header as specified by RFC2616 14.9.1 What is Cacheable. Ensure
9a8b2b3ab35fbbdf03acba32dade90ad91f75742Mukund Sivaraman that these headers are still processed when multiple Cache-Control
9a8b2b3ab35fbbdf03acba32dade90ad91f75742Mukund Sivaraman headers are present in the response. PR 54706 [Graham Leggett,
9a8b2b3ab35fbbdf03acba32dade90ad91f75742Mukund Sivaraman Yann Ylavic <ylavic.dev gmail.com>]
eeb16584fbd3564136cb4c950fc5e1b54690de68Mukund Sivaraman
eeb16584fbd3564136cb4c950fc5e1b54690de68Mukund Sivaraman *) mod_cache: Invalidate cached entities in response to RFC2616 Section
eeb16584fbd3564136cb4c950fc5e1b54690de68Mukund Sivaraman 13.10 Invalidation After Updates or Deletions. PR 15868 [Graham
eeb16584fbd3564136cb4c950fc5e1b54690de68Mukund Sivaraman Leggett]
eeb16584fbd3564136cb4c950fc5e1b54690de68Mukund Sivaraman
9540b42695c15fdd5f01b4c663e21936e6c38c82Mukund Sivaraman *) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
9540b42695c15fdd5f01b4c663e21936e6c38c82Mukund Sivaraman [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez
9540b42695c15fdd5f01b4c663e21936e6c38c82Mukund Sivaraman <alejandro.alvarez.ayllon cern.ch>]
9540b42695c15fdd5f01b4c663e21936e6c38c82Mukund Sivaraman
9540b42695c15fdd5f01b4c663e21936e6c38c82Mukund Sivaraman *) mod_dav: Do not segfault on PROPFIND with a zero length DBM.
fec9247b8f1ab52e999643ae03f0550387ec359fMukund Sivaraman PR 52559 [Diego Santa Cruz <diego.santaCruz spinetix.com>]
fec9247b8f1ab52e999643ae03f0550387ec359fMukund Sivaraman
fec9247b8f1ab52e999643ae03f0550387ec359fMukund Sivaraman *) mod_dav: Do not fail PROPPATCH when prop namespace is not known.
fec9247b8f1ab52e999643ae03f0550387ec359fMukund Sivaraman PR 52559 [Diego Santa Cruz <diego.santaCruz spinetix.com>]
fec9247b8f1ab52e999643ae03f0550387ec359fMukund Sivaraman
0d7548ee341c83c540624a423e2c701b6e9ddc4eEvan Hunt *) mod_dav: When a PROPPATCH attempts to remove a non-existent dead
0d7548ee341c83c540624a423e2c701b6e9ddc4eEvan Hunt property on a resource for which there is no dead property in the same
0d7548ee341c83c540624a423e2c701b6e9ddc4eEvan Hunt namespace httpd segfaults. PR 52559 [Diego Santa Cruz
2883bbaef3b2b712acfb89358f5a9c7ebb62733bEvan Hunt <diego.santaCruz spinetix.com>]
527163f0e5e8639bcceb7fe52387285042f5b24cEvan Hunt
527163f0e5e8639bcceb7fe52387285042f5b24cEvan Hunt *) mod_dav: Ensure URI is correctly uriencoded on return. PR 54611
62a6147e51fd1ccb9ec1c1b6c97b6e9b9ef1f002Evan Hunt [Timothy Wood <tjw omnigroup.com>]
62a6147e51fd1ccb9ec1c1b6c97b6e9b9ef1f002Evan Hunt
62a6147e51fd1ccb9ec1c1b6c97b6e9b9ef1f002Evan Hunt *) mod_dav: Sending a If or If-Match header with an invalid ETag doesn't
4c432aae90bc9b220725ca7df5a6af40cf4c74b3Mark Andrews result in a 412 Precondition Failed. PR 54610 [Timothy Wood
4c432aae90bc9b220725ca7df5a6af40cf4c74b3Mark Andrews <tjw omnigroup.com>]
4c432aae90bc9b220725ca7df5a6af40cf4c74b3Mark Andrews
3195754154292f0651c195433607696a259a98e2Evan Hunt *) mod_dav: Make sure that when we prepare an If URL for Etag comparison,
3195754154292f0651c195433607696a259a98e2Evan Hunt we compare unencoded paths. PR 53910 [Timothy Wood <tjw omnigroup.com>]
911576956388270fe2401fbf9236d8879d2795e9Evan Hunt
911576956388270fe2401fbf9236d8879d2795e9Evan Hunt *) core, mod_ssl: Lift the restriction that prevents mod_ssl taking
911576956388270fe2401fbf9236d8879d2795e9Evan Hunt full advantage of the event MPM. Enable the ability for a module
911576956388270fe2401fbf9236d8879d2795e9Evan Hunt to reverse the sense of a poll event from a read to a write or vice
fd0d60b3a0139c040fedb0bb765fd9667831412eMark Andrews versa. [Graham Leggett]
fd0d60b3a0139c040fedb0bb765fd9667831412eMark Andrews
fd0d60b3a0139c040fedb0bb765fd9667831412eMark Andrews *) htpasswd: Add -v option to verify a password. [Stefan Fritsch]
3001a1b4e6298466882a4147307b4c28a3b08f91Mark Andrews
3001a1b4e6298466882a4147307b4c28a3b08f91Mark Andrews *) htpasswd, htdbm: Fix password generation. PR 54735. [Stefan Fritsch]
3001a1b4e6298466882a4147307b4c28a3b08f91Mark Andrews
1bce43adcc11d21afaf645cbe466553aabc725b2Mark Andrews *) mod_dav: Improve error handling in dav_method_put(), add new
1bce43adcc11d21afaf645cbe466553aabc725b2Mark Andrews dav_join_error() function. PR 54145. [Ben Reser <ben reser.org>]
da4823c08a9a41e7b5ff1f3a83c80007f60fd21cMark Andrews
da4823c08a9a41e7b5ff1f3a83c80007f60fd21cMark Andrews *) mod_auth_digest: Fix crashes if shm initialization failed. [Stefan
da4823c08a9a41e7b5ff1f3a83c80007f60fd21cMark Andrews Fritsch]
52cae869e0296713b764f6065bdad80832d4c493Mark Andrews
52cae869e0296713b764f6065bdad80832d4c493Mark Andrews *) mod_ldap: LDAP connections used for authentication were not respecting
52cae869e0296713b764f6065bdad80832d4c493Mark Andrews LDAPConnectionPoolTimeout. PR 54587
403e7b451207fe6514a5d641562713b1af233b9cEvan Hunt
403e7b451207fe6514a5d641562713b1af233b9cEvan Hunt *) core: ap_rgetline_core now pulls from r->proto_input_filters.
403e7b451207fe6514a5d641562713b1af233b9cEvan Hunt
62b5dd5b09cb575281f8193476b58a4bd9870fc9Evan Hunt *) mod_proxy_html: process parsed comments immediately.
62b5dd5b09cb575281f8193476b58a4bd9870fc9Evan Hunt Fixes bug where parsed comments may be lost. [Nick Kew]
7fcbbd6fa9ed199cf6947bb6b204da5438211faaMark Andrews
7fcbbd6fa9ed199cf6947bb6b204da5438211faaMark Andrews *) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
8c31a25f3ff5d6783c7add7c887e52f7031d173dMark Andrews
8c31a25f3ff5d6783c7add7c887e52f7031d173dMark Andrews *) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
8c31a25f3ff5d6783c7add7c887e52f7031d173dMark Andrews HTML/XHTML [Nick Kew]
8bcd80824c51c802c2927236b012cd526f569b04Mark Andrews
3be4330b77e6de0c6aa7cca74c1ae17fc661ac32Tinderbox User *) core: Add option to add valgrind support. Use it to reduce false positive
8bcd80824c51c802c2927236b012cd526f569b04Mark Andrews warnings in mod_ssl. [Stefan Fritsch]
7fcbbd6fa9ed199cf6947bb6b204da5438211faaMark Andrews
7fcbbd6fa9ed199cf6947bb6b204da5438211faaMark Andrews *) mod_lua: Add bindings for apr_dbd/mod_dbd database access
7fcbbd6fa9ed199cf6947bb6b204da5438211faaMark Andrews [Daniel Gruno]
559cbe04e73cf601784a371e09554c20407a6c7bEvan Hunt
559cbe04e73cf601784a371e09554c20407a6c7bEvan Hunt *) mod_authn_file, mod_authn_dbd, mod_authn_dbm, mod_authn_socache:
559cbe04e73cf601784a371e09554c20407a6c7bEvan Hunt Cache the result of the most recent password hash verification for every
559cbe04e73cf601784a371e09554c20407a6c7bEvan Hunt keep-alive connection. This saves some expensive calculations.
559cbe04e73cf601784a371e09554c20407a6c7bEvan Hunt [Stefan Fritsch]
6ef61e764583887172e27c3bc681e36cfa27b469Mark Andrews
94a94fca2444bb18b4bf74d6c5dbcbb89f139237Mark Andrews *) http: Remove support for Request-Range header sent by Navigator 2-3 and
b81977ae70138c9befd8fa4bb66b6145e1986561Mark Andrews MSIE 3. [Stefan Fritsch]
b81977ae70138c9befd8fa4bb66b6145e1986561Mark Andrews
43769594c0e42e9822ef71daee8bbf35252d9300Evan Hunt *) core, http: Extend HttpProtocol with an option to enforce stricter HTTP
43769594c0e42e9822ef71daee8bbf35252d9300Evan Hunt conformance or to only log the found problems. [Stefan Fritsch]
9ecedaea58defeadaf54dfc1211270653e0657ceMark Andrews
9ecedaea58defeadaf54dfc1211270653e0657ceMark Andrews *) core: Correctly parse an IPv6 literal host specification in an absolute
fc8c8966c906b305cb8b416a8f23f21abf103b7fEvan Hunt URL in the request line. [Stefan Fritsch]
fc8c8966c906b305cb8b416a8f23f21abf103b7fEvan Hunt
fc8c8966c906b305cb8b416a8f23f21abf103b7fEvan Hunt *) mod_ssl: add support for subjectAltName-based host name checking
fc8c8966c906b305cb8b416a8f23f21abf103b7fEvan Hunt in proxy mode. PR 54030. [Kaspar Brand]
07b7a3eadeda94eddd50977c9582dae2f955b638Evan Hunt
07b7a3eadeda94eddd50977c9582dae2f955b638Evan Hunt *) mpm_event: Check that AsyncRequestWorkerFactor is not negative. PR 54254.
07b7a3eadeda94eddd50977c9582dae2f955b638Evan Hunt [Jackie Zhang <jackie qq zhang gmail com>]
07b7a3eadeda94eddd50977c9582dae2f955b638Evan Hunt
85a26f938eac3e147a48f671f6a6b5ee9cd1767dEvan Hunt *) mod_ssl: Add support for OpenSSL configuration commands [Stephen Henson]
85a26f938eac3e147a48f671f6a6b5ee9cd1767dEvan Hunt
85a26f938eac3e147a48f671f6a6b5ee9cd1767dEvan Hunt *) EventOpt MPM
4901f2c10b4393fd4407c8feb022c3415ab323c7Mark Andrews
4901f2c10b4393fd4407c8feb022c3415ab323c7Mark Andrews *) core: Add LogLevelOverride directive that allows to override the
4901f2c10b4393fd4407c8feb022c3415ab323c7Mark Andrews loglevel for clients from certain IPs. This also works for things
8e9dbb62224ce4d7342b0e7db96cf31e415aaaf0Evan Hunt like the SSL handshake where <If> LogLevel ... </If> is evaluated
8e9dbb62224ce4d7342b0e7db96cf31e415aaaf0Evan Hunt too late. [Stefan Fritsch]
8e9dbb62224ce4d7342b0e7db96cf31e415aaaf0Evan Hunt
8e9dbb62224ce4d7342b0e7db96cf31e415aaaf0Evan Hunt *) core: Add new directive Warning to issue warnings from a configuration
b5ad0916242ca4ce3f053efe78c1725dce996717Mark Andrews file. Both Warning and Error now generate a timestamped log message.
b5ad0916242ca4ce3f053efe78c1725dce996717Mark Andrews [Fabien Coelho]
e2ec0753ce8ed53c870141541b34ebb44598cef7Tinderbox User
da23e32e410eb9b106ae926858140303bfd1d96fMark Andrews *) ap_expr: Add SERVER_PROTOCOL_VERSION, ..._MAJOR, and ..._MINOR
da23e32e410eb9b106ae926858140303bfd1d96fMark Andrews variables. [Stefan Fritsch]
da23e32e410eb9b106ae926858140303bfd1d96fMark Andrews
18ab9a0a34ea025a6bbb09b711b00cfa11eec1b5Evan Hunt *) core: New directive RegisterHttpMethod for registering non-standard
18ab9a0a34ea025a6bbb09b711b00cfa11eec1b5Evan Hunt HTTP methods. [Stefan Fritsch]
832f5803f69f4548ba3777f8b5741768bbbf5f75Mark Andrews
c742ef745e1f3400b79c9df3d188896ccbb50f15Evan Hunt *) core: New directive HttpProtocol which allows to disable HTTP/0.9
832f5803f69f4548ba3777f8b5741768bbbf5f75Mark Andrews support. [Stefan Fritsch]
5688a47c152def63dd2f5fb9a93911a0df46162eTinderbox User
832f5803f69f4548ba3777f8b5741768bbbf5f75Mark Andrews *) mod_allowhandlers: New module to forbid specific handlers for specific
832f5803f69f4548ba3777f8b5741768bbbf5f75Mark Andrews directories. [Stefan Fritsch]
4441328a1d38bbb2ec20a0a219b84d472312da26Mark Andrews
8ce73e5c8cd5e985310ad42b76e8cacee406cb34Mark Andrews *) configure: Fix processing of --disable-FEATURE for various features.
4441328a1d38bbb2ec20a0a219b84d472312da26Mark Andrews [Jeff Trawick]
f2e8131f508ca9c92bf7601c80db3c9e1d3bc4ebMark Andrews
22e3ffcf2c52114092b2dbdf2bc1872371c96192Mark Andrews *) mod_systemd: New module, for integration with systemd on Linux.
22e3ffcf2c52114092b2dbdf2bc1872371c96192Mark Andrews [Jan Kaluza <jkaluza redhat.com>]
7bcba68b9510908c07d6c2568faca06629511660Mark Andrews
7bcba68b9510908c07d6c2568faca06629511660Mark Andrews *) mod_cache_socache: New cache implementation backed by mod_socache
7bcba68b9510908c07d6c2568faca06629511660Mark Andrews that replaces mod_mem_cache removed from httpd v2.2. [Graham
2cee8eadec6545fb0ce10fb8c1d7b60870ec2fb4Mark Andrews Leggett]
2cee8eadec6545fb0ce10fb8c1d7b60870ec2fb4Mark Andrews
2cee8eadec6545fb0ce10fb8c1d7b60870ec2fb4Mark Andrews *) core: Add dirwalk_stat and pre_htaccess hooks, allowing mpm-itk
2cee8eadec6545fb0ce10fb8c1d7b60870ec2fb4Mark Andrews to be used without patches to httpd core. [Jeff Trawick]
81df1363fbd13f3a80987704c23e14413e6f1d2aMark Andrews
81df1363fbd13f3a80987704c23e14413e6f1d2aMark Andrews *) mod_lua: Add LuaInputFilter/LuaOutputFilter for creating content
81df1363fbd13f3a80987704c23e14413e6f1d2aMark Andrews filters in Lua [Daniel Gruno]
08397f5b6ca783a8c55f48b827201b75c3fca4bfMark Andrews
08397f5b6ca783a8c55f48b827201b75c3fca4bfMark Andrews *) WinNT MPM: Store pid and generation for each thread in scoreboard
08397f5b6ca783a8c55f48b827201b75c3fca4bfMark Andrews to allow tracking of threads from exiting children via mod_status
e63d63dc8510c669e1575b2762265842e8783822Evan Hunt or other such mechanisms. [Jeff Trawick]
e63d63dc8510c669e1575b2762265842e8783822Evan Hunt
e63d63dc8510c669e1575b2762265842e8783822Evan Hunt *) mod_ssl: Catch missing or mismatched client cert/key pairs with
f5c17a057fc5974bb51d7bc8c5827a7fd6dc9aeeEvan Hunt SSLProxyMachineCertificateFile/Path directives. PR 52212.
f5c17a057fc5974bb51d7bc8c5827a7fd6dc9aeeEvan Hunt [Keith Burdis <keith burdis.org>, Joe Orton]
f5c17a057fc5974bb51d7bc8c5827a7fd6dc9aeeEvan Hunt
d6080de9be23024f5f7a1e40d0cb06df94cdcb72Mark Andrews *) mod_lua: Allow scripts handled by the lua-script handler to return
d6080de9be23024f5f7a1e40d0cb06df94cdcb72Mark Andrews a status code to the client (such as a 302 or a 500) [Daniel Gruno]
2a2618356ecdf5962230fe11606d2b106a638295Tinderbox User
6649db1ca4f3dc2d14f41f77e03867ac013215f9Evan Hunt *) mod_lua: Decline handling 'lua-script' if the file doesn't exist,
b1866070ef4fb9e17bff16ad458f629bbc5a4accwpk rather than throwing an internal server error. [Daniel Gruno]
b1866070ef4fb9e17bff16ad458f629bbc5a4accwpk
6649db1ca4f3dc2d14f41f77e03867ac013215f9Evan Hunt *) mod_lua: Add functions r:flush and r:sendfile as well as additional
b1866070ef4fb9e17bff16ad458f629bbc5a4accwpk request information to the request_rec structure. [Daniel Gruno]
b1866070ef4fb9e17bff16ad458f629bbc5a4accwpk
6b45fd062bbcf2986078bf25b2b617b844a9fde4Mark Andrews *) mod_lua: Add a server scope for Lua states, which creates a pool of
6b45fd062bbcf2986078bf25b2b617b844a9fde4Mark Andrews states with managable minimum and maximum size. [Daniel Gruno]
6b45fd062bbcf2986078bf25b2b617b844a9fde4Mark Andrews
6b45fd062bbcf2986078bf25b2b617b844a9fde4Mark Andrews *) core: Add post_perdir_config hook.
72cae054ad81a985f1e0023f9ff92b6ff1872183Mark Andrews [Steinar Gunderson <sgunderson bigfoot.com>]
72cae054ad81a985f1e0023f9ff92b6ff1872183Mark Andrews
72cae054ad81a985f1e0023f9ff92b6ff1872183Mark Andrews *) mod_lua: Add new directive, LuaMapHandler, for dynamically mapping
f1e3dd087b7ce34382df8354efddaae79caa11b7Mark Andrews URIs to Lua scripts and functions using regular expressions.
f1e3dd087b7ce34382df8354efddaae79caa11b7Mark Andrews [Daniel Gruno]
f1e3dd087b7ce34382df8354efddaae79caa11b7Mark Andrews
544e2b48ece5724f2c4a0d6636048a72335cfd54Evan Hunt *) mod_lua: Add new directive LuaCodeCache for controlling in-memory
23ac7e663494ffdfd78b52d1a0a62d93f0d30d93Mark Andrews caching of lua scripts. [Daniel Gruno]
23ac7e663494ffdfd78b52d1a0a62d93f0d30d93Mark Andrews
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews - APIs: ap_log_pid(), ap_remove_pid, ap_read_pid()
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews - core: the scoreboard (ScoreBoardFile), pid file (PidFile), and
b1ab6766f7cf3d2c189b415c50cc574d9b21a9a2Mark Andrews mutexes (Mutex)
d84a356d4b122d9a50dbca6776c820f5e59ec44dMark Andrews - mod_cache: thundering herd lock directory
bc2510a6a5e406bdef580452e6ae3e1298a7d1d6Mark Andrews - mod_lbmethod_heartbeat, mod_heartmonitor: heartbeat storage file
bc2510a6a5e406bdef580452e6ae3e1298a7d1d6Mark Andrews - mod_ldap: shared memory cache
bc2510a6a5e406bdef580452e6ae3e1298a7d1d6Mark Andrews - mod_socache_shmcb, mod_socache_dbm: shared memory or dbm for cache
1160ea4c2847b276946cf6bd00504929ec4f6e44Mark Andrews [Jeff Trawick]
1160ea4c2847b276946cf6bd00504929ec4f6e44Mark Andrews
1160ea4c2847b276946cf6bd00504929ec4f6e44Mark Andrews *) suexec: Add --enable-suexec-capabilites support on Linux, to use
348d80fb8490f4547aaa569e5f7ea2a032543bacMark Andrews setuid/setgid capability bits rather than a setuid root binary.
348d80fb8490f4547aaa569e5f7ea2a032543bacMark Andrews [Joe Orton]
47071b7310bd6d4d12169c336faac72c8c3d9ecfMark Andrews
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews *) suexec: Add support for logging to syslog as an alternative to logging
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews to a file; configure --without-suexec-logfile --with-suexec-syslog.
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews [Joe Orton]
f6f3264d8c81cda5d489e29d2141f1a92fbe4c84Mark Andrews
f6f3264d8c81cda5d489e29d2141f1a92fbe4c84Mark Andrews *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.
f6f3264d8c81cda5d489e29d2141f1a92fbe4c84Mark Andrews [Matthew Steele <mdsteele google.com>]
960989925556246cc86f1905a5d62e6b0b69dc02Mark Andrews
960989925556246cc86f1905a5d62e6b0b69dc02Mark Andrews *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
960989925556246cc86f1905a5d62e6b0b69dc02Mark Andrews be compiled by the build compiler instead of the host compiler.
960989925556246cc86f1905a5d62e6b0b69dc02Mark Andrews Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
d77cab69bf9676f828c48c217828a25e8ba41c63Mark Andrews PR 51257. [Guenter Knauf]
d77cab69bf9676f828c48c217828a25e8ba41c63Mark Andrews
d77cab69bf9676f828c48c217828a25e8ba41c63Mark Andrews *) core: In maintainer mode, replace apr_palloc with a version that
d77cab69bf9676f828c48c217828a25e8ba41c63Mark Andrews initializes the allocated memory with non-zero values, except if
f1b29d8428362842c429157b4925e529463eab4cEvan Hunt AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]
f1b29d8428362842c429157b4925e529463eab4cEvan Hunt
f1b29d8428362842c429157b4925e529463eab4cEvan Hunt *) mod_policy: Add a new testing module to help server administrators
d0c5ff7f65a08e2ccc9bc06e0ef9f61e36875b50Mark Andrews enforce a configurable level of protocol compliance on their
d0c5ff7f65a08e2ccc9bc06e0ef9f61e36875b50Mark Andrews servers and application servers behind theirs. [Graham Leggett]
d0c5ff7f65a08e2ccc9bc06e0ef9f61e36875b50Mark Andrews
83a28ca274521e15086fc39febde507bcc4e145eMark Andrews *) mod_firehose: Add a new debugging module able to record traffic
83a28ca274521e15086fc39febde507bcc4e145eMark Andrews passing through the server in such a way that connections and/or
1585a9f239969a65b974ff741ff2a7a79b148891Evan Hunt requests be reconstructed and replayed. [Graham Leggett]
47071b7310bd6d4d12169c336faac72c8c3d9ecfMark Andrews
1585a9f239969a65b974ff741ff2a7a79b148891Evan Hunt *) mod_noloris
2fb4184d9d55a6b8709356144730e323e265d58fEvan Hunt
2fb4184d9d55a6b8709356144730e323e265d58fEvan Hunt *) APREQ
2fb4184d9d55a6b8709356144730e323e265d58fEvan Hunt
5be93f5dff21fa067f52065e3521b7d82f32c779Mark Andrews *) Simple MPM
5be93f5dff21fa067f52065e3521b7d82f32c779Mark Andrews
5be93f5dff21fa067f52065e3521b7d82f32c779Mark Andrews *) mod_serf
6ae22c411920be5f5fd1780ac0cd44cbb21b144aMukund Sivaraman
6ae22c411920be5f5fd1780ac0cd44cbb21b144aMukund Sivaraman [Apache 2.5.0-dev includes those bug fixes and changes with the
6ae22c411920be5f5fd1780ac0cd44cbb21b144aMukund Sivaraman Apache 2.4.xx tree as documented below, except as noted.]
74d98566ed6a2280ea84d146e7c81275f1c5649dMark Andrews
74d98566ed6a2280ea84d146e7c81275f1c5649dMark AndrewsChanges with Apache 2.4.x and later:
74d98566ed6a2280ea84d146e7c81275f1c5649dMark Andrews
1c89e89eaf761c378fd48bfd1c4abf1b5ad026e9Evan Hunt *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup
1c89e89eaf761c378fd48bfd1c4abf1b5ad026e9Evan Hunt
1c89e89eaf761c378fd48bfd1c4abf1b5ad026e9Evan HuntChanges with Apache 2.2.x and later:
b1ab6766f7cf3d2c189b415c50cc574d9b21a9a2Mark Andrews
0c2d891abeb2b35e290ca9da29e1227110b5be23Mark Andrews *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
0c2d891abeb2b35e290ca9da29e1227110b5be23Mark Andrews
fd017eea638d690b6a90c4d2a3f2ebe51c472173Mark AndrewsChanges with Apache 2.0.x and later:
fd017eea638d690b6a90c4d2a3f2ebe51c472173Mark Andrews
2595d1da358cc7391e001894d45471509976e7d5Mark Andrews *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup
2595d1da358cc7391e001894d45471509976e7d5Mark Andrews
2595d1da358cc7391e001894d45471509976e7d5Mark Andrews