CHANGES revision cb9999606fbbda475b7b40e164699731521e9eb1
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould -*- coding: utf-8 -*-
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed GouldChanges with Apache 2.3.0
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould[ When backported to 2.2.x, remove entry from this file ]
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould *) Support chroot on Unix-family platforms
c3a8ad9235ff81909bd472707550aef5b91daf7bjohanengelen PR 43596 [Dimitar Pashev <mitko banksoft-bg.com>]
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould *) Don't add bogus duplicate Content-Language entries
c3a8ad9235ff81909bd472707550aef5b91daf7bjohanengelen PR 11035 [Davi Arnaut]
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould *) mod_proxy_ftp: Fix base for directory listings.
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould PR 27834 [Nick Kew]
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould *) mod_proxy_http: Return HTTP status codes instead of apr_status_t
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould values for errors encountered while forwarding the request body
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould PR 44165 [Eric Covener]
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould *) mod_logio: Provide optional function to allow modules to adjust the
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould bytes_in count [Eric Covener]
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould *) mod_ssl: Added server name indication support (RFC 4366).
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould PR 34607. [Kaspar Brand <asfbugz velox.ch>]
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould *) ApacheMonitor.exe: Introduce --kill argument for use by the
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould installer. This will permit the installation tool to remove
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould all running instances before attempting to remove the .exe.
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould [William Rowe]
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould *) mod_proxy: Lower memory consumption for short lived connections.
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould PR 44026. [Ruediger Pluem]
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould *) mod_proxy: Keep connections to the backend persistent in the HTTPS case.
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould [Ruediger Pluem]
01d27eab5fca2dcb8e883011f8be77ae6b78a11cTed Gould *) rotatelogs: Improve atomicity when using -l and cleaup code.
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen PR 44004 [Rainer Jung]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) mod_ssl: Add support for OCSP validation of client certificates.
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen PR 41123. [Marc Stern <marc.stern approach.be>, Joe Orton]
8001ba81cb851b38d86650a2fef5817facffb763johanengelen *) mod_unique_id: Fix timestamp value in UNIQUE_ID.
c3a8ad9235ff81909bd472707550aef5b91daf7bjohanengelen PR 37064 [Kobayashi <kobayashi firstserver.co.jp>]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) mod_serf: New module for Reverse Proxying. [Paul Querna]
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen *) core: Add the option to keep aside a request body up to a certain
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen size that would otherwise be discarded, to be consumed by filters
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen such as mod_include. When enabled for a directory, POST requests
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen to shtml files can be passed through to embedded scripts as POST
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen requests, rather being downgraded to GET requests. [Graham Leggett]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) mod_ssl: Fix TLS upgrade (RFC 2817) support. PR 41231. [Joe Orton]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) scoreboard: Correctly declare ap_time_process_request.
ed0798e33e14e86b60f8cd254d7131f9d83ba8c0johanengelen *) core; scoreboard: ap_get_scoreboard_worker(sbh) now takes the sbh member
ed0798e33e14e86b60f8cd254d7131f9d83ba8c0johanengelen from the connection rec, ap_get_scoreboard_worker(proc, thread) will now
ed0798e33e14e86b60f8cd254d7131f9d83ba8c0johanengelen provide the unusual legacy lookup. [William Rowe]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) mpm winnt: fix null pointer dereference
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen PR 42572 [Davi Arnaut]
c3a8ad9235ff81909bd472707550aef5b91daf7bjohanengelen *) core: reinstate location walk to fix config for subrequests
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen PR 41960 [Jose Kahan <jose w3.org>]
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen *) mod_log_config: Add format options for %p so that the actual local
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen or remote port can be logged. PR 43415. [Adam Hasselbalch Hansen
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen <ahh@one.com>, Ruediger Pluem, Jeff Trawick]
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen *) mod_authnz_ldap, mod_authn_dbd: Tidy up the code to expose authn
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen parameters to the environment. Improve portability to
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen EBCDIC machines by using apr_toupper(). [Martin Kraemer]
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen *) mod_ldap, mod_authnzldap: Add support for nested groups (i.e. the ability
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen to authorize an authenticated user via a "require ldap-group X" directive
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen where the user is not in group X, but is in a subgroup contained in X.
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen PR 42891 [Paul J. Reder]
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen *) mod_ssl: Add support for caching SSL Sessions in memcached. [Paul Querna]
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen *) ab: Add -r option to continue after socket receive errors.
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen [Filip Hanik <devlist hanik.com>]
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen *) mod_ldap: Fix the search limit parameter to ldap_search_ext_s()
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen for SDKs that define LDAP_NO_LIMIT to something other than -1.
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen [David Jones <oscaremma gmail.com>]
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen *) apxs: Enhance -q flag to print all known variables and their values
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen when invoked without variable name(s).
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen [William Rowe, Sander Temme]
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen *) apxs: Eliminate run-time check for mod_so. PR 40653.
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen [David M. Lee <dmlee crossroads.com>]
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen *) beos MPM: Create pmain pool and run modules' child_init hooks when
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen entering ap_mpm_run(), then destroy pmain when exiting ap_mpm_run().
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen [Chris Darroch]
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen *) netware MPM: Destroy pmain pool when exiting ap_mpm_run() so that
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen cleanups registered in modules' child_init hooks are performed.
6bc0b25077dcb0cce5dea357de5bab735babe891johanengelen [Chris Darroch]
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen *) mod_dbd: Stash DBD connections in request_config of initial request
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen only, or else sub-requests and internal redirections may cause
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen entire DBD pool to be stashed in a single HTTP request. [Chris Darroch]
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen *) Fix issue which could cause error messages to be written to access logs
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen on Win32. PR 40476. [Tom Donovan <Tom.Donovan acm.org>]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) The LockFile directive, which specifies the location of
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen the accept() mutex lockfile, is deprecated. Instead, the
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen AcceptMutex directive now takes an optional lockfile
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen location parameter, ala SSLMutex. [Jim Jagielski]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) mod_authn_dbd: Export any additional columns queried in the SQL select
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen into the environment with the name AUTHENTICATE_<COLUMN>. This brings
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen mod_authn_dbd behaviour in line with mod_authnz_ldap. [Graham Leggett]
6bc0b25077dcb0cce5dea357de5bab735babe891johanengelen *) mod_dbd: Key the storage of prepared statements on the hex string
e6bdf746e2d9e775704a475a29cc1bb167ec271cjohanengelen value of server_rec, rather than the server name, as the server name
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen may change (eg when the server name is set) at any time, causing
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen weird behaviour in modules dependent on mod_dbd. [Graham Leggett]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) mod_proxy_fcgi: Added win32 build. [Mladen Turk]
6c3e745a94ef6b25a4ef9f018d350a7535aa45afTed Gould *) sendfile_nonblocking() takes the _brigade_ as an argument, gets
6c3e745a94ef6b25a4ef9f018d350a7535aa45afTed Gould the first bucket from the brigade, finds it not to be a FILE
6c3e745a94ef6b25a4ef9f018d350a7535aa45afTed Gould bucket and barfs. The fix is to pass a bucket rather than a brigade.
6c3e745a94ef6b25a4ef9f018d350a7535aa45afTed Gould [Niklas Edmundsson <nikke acc.umu.se>]
6c3e745a94ef6b25a4ef9f018d350a7535aa45afTed Gould *) mod_rewrite: support rewritemap by SQL query [Nick Kew]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) ap_get_server_version() has been removed. Third-party modules must
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen now use ap_get_server_banner() or ap_get_server_description().
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen [Jeff Trawick]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) All MPMs: Introduce a check_config phase between pre_config and
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen open_logs, to allow modules to review interdependent configuration
ed0798e33e14e86b60f8cd254d7131f9d83ba8c0johanengelen directive values and adjust them while messages can still be logged
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen to the console. Handle relevant MPM directives during this phase
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen and format messages for both the console and the error log, as
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen appropriate. [Chris Darroch]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) mod_proxy: don't URLencode tilde in path component
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen [Stijn Hoop <stijn sandcat.nl>]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) mpm_winnt: Fix return values from wait_for_many_objects.
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen The return value is index to the signaled thread in the
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen creted_threads array. We can not use WAIT_TIMEOUT because
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen his value is defined as 258, thus limiting the MaxThreads
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen to that value. [Mladen Turk]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) core: Do not allow internal redirects like the DirectoryIndex of mod_dir
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen to circumvent the symbolic link checks imposed by FollowSymLinks and
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen SymLinksIfOwnerMatch. [Nick Kew, Ruediger Pluem, William Rowe]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) mod_proxy: Support environment variable interpolation in reverse
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen proxying directives. [Nick Kew]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) core: Add the filename of the configuration file to the warning message
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen about the useless use of AllowOverride. PR 39992.
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen [Darryl Miles <darryl darrylmiles.org>]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) New SSLLogLevelDebugDump [ None (default) | IO (not bytes) | Bytes ]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen configures the I/O Dump of SSL traffic, when LogLevel is set to Debug.
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen The default is none as this is far greater debugging resolution than
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen the typical administrator is prepared to untangle. [William Rowe]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) mod_disk_cache: If possible, check if the size of an object to cache is
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen within the configured boundaries before actually saving data.
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen [Niklas Edmundsson <nikke acc.umu.se>]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) mod_cache: Convert all values to seconds before comparing them when
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen checking whether to send a Warning header for a stale response.
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen PR 39713. [Owen Taylor <otaylor redhat.com>]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) mod_disk_cache: Delete temporary files if they cannot be renamed to their
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen final name. [Davi Arnaut <davi haxent.com.br>]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) Worker and event MPMs: Remove improper scoreboard updates which were
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen performed in the event of a fork() failure. [Chris Darroch]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) Add support for fcgi:// proxies to mod_rewrite.
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen [Markus Schiegl <ms schiegl.com>]
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen *) Remove incorrect comments from scoreboard.h regarding conditional
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen loading of worker_score structure with mod_status, and remove unused
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen definitions relating to old life_status field.
29684a16b6c92bee28a94fdc2607bcc143950fa8johanengelen [Chris Darroch <chrisd pearsoncmg.com>]
in ap_init_scoreboard(). [Chris Darroch <chrisd pearsoncmg.com>]
[Chris Darroch <chrisd pearsoncmg.com>]
and 'Reject' to mod_authz_core. The new directives introduce 'AND/OR'
*) mod_authz_dbd: SQL authz with Login/Session support [Nick Kew]
Apache 2.2.xx tree as documented, and except as noted, below.]
Changes with Apache 2.2.x and later:
Changes with Apache 2.0.x and later:
Changes with Apache 1.3.x and later: