CHANGES revision dae3cb64cc6681b5f6b0fd12e7f8f6296ffaa19a
ee9c9500ab13c1093fc3feaf2aa5a0d330d0bfadKay SieversChanges with Apache 2.1.0-dev
c343be283b7152554bac0c02493a4e1759c163f7Kay Sievers [Remove entries to the current 2.0 section below, when backported]
b3ae710c251d0ce5cf2cef63208e325497b5e323Zbigniew Jędrzejewski-Szmek *) mod_authnz_ldap: Added the directive "Requires ldap-filter" that
b3ae710c251d0ce5cf2cef63208e325497b5e323Zbigniew Jędrzejewski-Szmek allows the module to authorize a user based on a complex LDAP
19aadacf92ad86967ffb678e37b2ff9e83cb9480Jan Engelhardt search filter.
cff452c7e974db5053cdbd0d7bbbab2e3b4c91b9Kay Sievers [Brad Nicholes]
cff452c7e974db5053cdbd0d7bbbab2e3b4c91b9Kay Sievers *) SECURITY: CAN-2004-0942, Fix for memory consumption DoS.
f957632b960a0a42999b38ded7089fa602b41745Kay Sievers *) mod_usertrack: Run the fixups hook before other modules.
f957632b960a0a42999b38ded7089fa602b41745Kay Sievers PR 29755. [Paul Querna]
a40593a0d0d740efa387e35411e1e456a6c5aba7Lennart Poettering *) mod_authnz_ldap: Added the directive "Requires ldap-attribute" that
20ffc4c4a9226b0e45cc02ad9c0108981626c0bbKay Sievers allows the module to only authorize a user if the attribute value
04ac799283f517672a5424e7c5bf066cfa4ca020Zbigniew Jędrzejewski-Szmek specified matches the value of the user object. PR 31913
04ac799283f517672a5424e7c5bf066cfa4ca020Zbigniew Jędrzejewski-Szmek [Ryan Morgan <rmorgan pobox.com>]
04ac799283f517672a5424e7c5bf066cfa4ca020Zbigniew Jędrzejewski-Szmek *) Allow mod_authnz_ldap authorization functionality to be used
374c356979ba7222fa7e09005824fe6996b0e91eDavid Herrmann without requiring the user to also be authenticated through
374c356979ba7222fa7e09005824fe6996b0e91eDavid Herrmann mod_authnz_ldap. This allows other authentication modules to
374c356979ba7222fa7e09005824fe6996b0e91eDavid Herrmann take advantage of LDAP authorization only [PR 28253]
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering [Jari Ahonen jah progress.com, Brad Nicholes]
466784c8710e5cb0e0b86a16506d992d7ec5b619Kay Sievers *) Util_ldap: Implemented the util_ldap_cache_getuserdn() API so that
55d32caf94d8df547ca763be52b0c35bb6388606Lennart Poettering the ldap authorization only modules have access to the util_ldap
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering user cache without have to require ldap authentication as well.
bafb15bab99887d1b6b8a35136531bac6c3876a6Lennart Poettering [PR 31898] [Jari Ahonen jah progress.com, Brad Nicholes]
bafb15bab99887d1b6b8a35136531bac6c3876a6Lennart Poettering *) Log the client IP address when an error occurs disabling nagle on a
eb124a97fb72d076014253b1acde69d428f15ecfLennart Poettering connection, but log at a severity of debug since this error
154ff088d371bee5651eaa2bc9bde8a34c185656Lennart Poettering generally means that the connection was dropped before data was
3c779fa59d1825d7db2a9516669d34ded7916913Lennart Poettering sent. Log the client IP address when reporting errors in the core
e7b4d43ec3d5eb0099a3978f98a46f3c15443b23Lennart Poettering output filter. [Jeff Trawick]
3c779fa59d1825d7db2a9516669d34ded7916913Lennart Poettering *) Add ap_log_cerror() for logging messages associated with particular
3c779fa59d1825d7db2a9516669d34ded7916913Lennart Poettering client connections. [Jeff Trawick]
3de03738fc970496d2d3da668c72767a48ccc41bLennart Poettering *) core: Add a warning message if the request line read fails.
3de03738fc970496d2d3da668c72767a48ccc41bLennart Poettering *) mod_cache: Add CacheIgnoreHeaders directive. PR 30399.
8891f695c71bd4c266d827c9aaedbbbbaf79d3ebLennart Poettering *) mod_rewrite: Removed the MaxRedirects option in favor of the
2b1c3767515672dfd0f5e0a9c9d7ac3a16a6a361Lennart Poettering core LimitInternalRecursion directive. [Andr� Malo]
1df52dd282cd6014ace8ca2279dd90d9ea52d2a4Lennart Poettering *) SECURITY: CAN-2004-0885 (cve.mitre.org)
8dfb5bced205a12d5380c95de035100ad6c09454Lennart Poettering mod_ssl: Fix a bug which allowed an SSLCipherSuite setting to be
1df52dd282cd6014ace8ca2279dd90d9ea52d2a4Lennart Poettering bypassed during an SSL renegotiation. PR 31505.
37efac5ddb21fd91ed420c070ed07f375e78b3b9Lennart Poettering [Hartmut Keil <Hartmut.Keil adnovum.ch>, Joe Orton]
7348b3adb324614132cf376f478e883bd7de28f1Lennart Poettering *) mod_auth_ldap: Handle the inconsistent way in which the MS LDAP
7348b3adb324614132cf376f478e883bd7de28f1Lennart Poettering library handles special characters. PR 24437 [Jess Holle]
7348b3adb324614132cf376f478e883bd7de28f1Lennart Poettering *) Unix MPMs: Shut down the server more quickly when child processes are
f55b9bdfae46e3683c74c30f1d063642a41368a5Lennart Poettering slow to exit. [Joe Orton, Jeff Trawick]
f55b9bdfae46e3683c74c30f1d063642a41368a5Lennart Poettering *) mod_info: Added listing of the Request Hooks and added more build
f55b9bdfae46e3683c74c30f1d063642a41368a5Lennart Poettering information like 'httpd -V' contains. Changed output to XHTML.
e107ed185ef08945102834234a05ec51bb438685Lennart Poettering *) mod_info: Rewrote config tree walk using a recursive function.
e107ed185ef08945102834234a05ec51bb438685Lennart Poettering Added ?config option. Added printout of config filename and line numbers.
eaa3b74dfd6395c8abaa8416d90dac5e0dc00e15Lennart Poettering [Rici Lake <rici ricilake.net>, Paul Querna]
e30fa16e27cbd48f960113a1d72d9a15c3b2d67bLennart Poettering *) mod_proxy: Fix type error that prevents proxy-sendchunks from working.
e30fa16e27cbd48f960113a1d72d9a15c3b2d67bLennart Poettering [Justin Erenkrantz]
11fb37f16ed99c1603c9d770b60ce4953b96a58dLennart Poettering *) mod_proxy: Fix data corruption by properly setting aside buckets.
01083ad094664e5c685060f4fb35a05ea2f212edLennart Poettering [Justin Erenkrantz]
b107b705cc97d3033e37c44229deb37b5aa31df5Lennart Poettering *) mod_proxy: If a request has a blank body and has a 0 Content-Length
b107b705cc97d3033e37c44229deb37b5aa31df5Lennart Poettering headers, pass that to the proxy. [Justin Erenkrantz]
edb2935c5c5b95c42b8679086f60da5eafad74cbLennart Poettering *) Recognize QSA flag in mod_rewrite again.
769918ecd30c0f7ee6e87b9aa6226d956bd2f530Lennart Poettering [Jan Kratochvil <rcpt-dev.AT.httpd.apache.org jankratochvil.net>]
769918ecd30c0f7ee6e87b9aa6226d956bd2f530Lennart Poettering *) Restructured mod_auth_ldap to fit the new authentication model.
769918ecd30c0f7ee6e87b9aa6226d956bd2f530Lennart Poettering The module is now called authnz_ldap and has been moved out of
6a3f892a23db71544d0439355f96c44350dafa8fLennart Poettering the modules/experimental area and into modules/aaa with the other
2a781fc9bd33982c81e5ff75974a442a33d4f167Lennart Poettering auth modules. Both the authn_ldap provider and the authz_ldap
2a781fc9bd33982c81e5ff75974a442a33d4f167Lennart Poettering handler are contained within the authnz_ldap module. The
6a3f892a23db71544d0439355f96c44350dafa8fLennart Poettering authz_ldap handler introduces 3 new "requires" values for handling
6a3f892a23db71544d0439355f96c44350dafa8fLennart Poettering authorization. These handlers are ldap-user, ldap-group and
efc141b8ffbfa1e449da40ce27fccaa81428f779Lennart Poettering ldap-dn. [Brad Nicholes]
d28315e4aff91560ed4c2fc9f876ec8bfc559f2dJan Engelhardt *) Fix some compiler warnings in proxy
efc141b8ffbfa1e449da40ce27fccaa81428f779Lennart Poettering [Geoffrey Young <geoff@modperlcookbook.org>]
650264033f2f98f6319513958d94d59078654af8Lennart Poettering *) mod_ssl: Add SSL_CLIENT_V_REMAIN variable, representing the
650264033f2f98f6319513958d94d59078654af8Lennart Poettering number of days until the client cert expires. [Joe Orton]
f8901862b2b030921b3d5aba4157044ceab16451Lennart Poettering *) Add test_config hook, run only if httpd is invoked using -t.
d4fdc205a4610965cee46408dbd046c922e7620cLennart Poettering *) Improve error handling for corrupted pid files. [Jeff Trawick]
d4fdc205a4610965cee46408dbd046c922e7620cLennart Poettering *) mod_proxy.c and proxy_util.c: Enable compiling on 2.0-HEAD
af1082b04a3d45a9b1d796b4271f44e87e307026Lennart Poettering (for backwards compatibility):
af1082b04a3d45a9b1d796b4271f44e87e307026Lennart Poettering Avoids mod_ssl.h (not included in 2.0-HEAD) and
af1082b04a3d45a9b1d796b4271f44e87e307026Lennart Poettering use apr_socket_create_ex for 0.9.x
488ad3b32a7e2b5b1380abf4a15e5f65fa65f3feLennart Poettering *) Added proxy_ajp.c module for proxy support to ajp:// backends.
488ad3b32a7e2b5b1380abf4a15e5f65fa65f3feLennart Poettering [Jean Frederic Clere]
488ad3b32a7e2b5b1380abf4a15e5f65fa65f3feLennart Poettering *) Fixes the build of proxy on Windows. Since the proxy_module is declared
488ad3b32a7e2b5b1380abf4a15e5f65fa65f3feLennart Poettering as extern using AP_MODULE_DECLARE_DATA that expands to dllexport, there
47c94a96df29080f8b3a97e7362df4e9c6ba3265Lennart Poettering is a LNK2001 error when building proxy_http. [Mladen Turk]
09ecd746c9d6581664873674c2188f8c93ed7780Lennart Poettering *) Remove LDAP toolkit specific code from util_ldap and mod_auth_ldap.
09ecd746c9d6581664873674c2188f8c93ed7780Lennart Poettering [Graham Leggett]
09ecd746c9d6581664873674c2188f8c93ed7780Lennart Poettering *) Remove deprecated/removed APR_STATUS_IS_SUCCESS(). [Justin Erenkrantz]
09ecd746c9d6581664873674c2188f8c93ed7780Lennart Poettering *) perchild MPM: Fix thread safety problem in the use of longjmp().
09ecd746c9d6581664873674c2188f8c93ed7780Lennart Poettering [Tsuyoshi SASAMOTO <nazonazo super.win.ne.jp>]
ef417cfd2211ae017a38b9796c6db29130133e63Zbigniew Jędrzejewski-Szmek *) Add load balancer support to the scoreboard in preparation for
3333d748facc15f49935b6b793490ba0824976e6Zbigniew Jędrzejewski-Szmek load balancing support in mod_proxy. [Mladen Turk]
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering *) mod_nw_ssl: Added the directive NWSSLUpgradeable to mod_nw_ssl to
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering allow a non-secure connection to be upgraded to secure connections
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering [Brad Nicholes]
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering *) core: Add Options= syntax to AllowOverride to specify which options
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering may be overridden in .htaccess files. PR 29310.
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering [Tom Alsberg <alsbergt cs.huji.ac.il>, Paul Querna]
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering *) ab: Handle long URLs with an error instead of an buffer overflow.
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering PR 28204. [Erik Weide <erik.weidel mplus-technologies.de>, Paul Querna]
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering *) mod_so, core: Add new command line options to print all loaded
ebcf1f97de4f6b1580ae55eb56b1a3939fe6b602Lennart Poettering modules. '-t -D DUMP_MODULES' and '-M' will show all static
47c94a96df29080f8b3a97e7362df4e9c6ba3265Lennart Poettering and shared modules as loaded from the configuration file.
718db96199eb307751264e4163555662c9a389faLennart Poettering *) mod_autoindex: Add ShowForbidden to IndexOptions to list files
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering that are not shown because the subrequest returned 401 or 403.
718db96199eb307751264e4163555662c9a389faLennart Poettering PR 10575. [Paul Querna]
718db96199eb307751264e4163555662c9a389faLennart Poettering *) mod_headers: implement "Early" processing option in post_read_request
966204e010ed432a1d7a0481d41a326d8ec7b0c8Lennart Poettering to enable Header and RequestHeader directives to be used to set up
966204e010ed432a1d7a0481d41a326d8ec7b0c8Lennart Poettering testcases for pre-fixups request phases [Nick Kew]
6fd4d0209827e5c3e52fa8c7144852f550f8f95cLennart Poettering *) mod_proxy: multiple bugfixes, principally support cookies in
ced4d06784dbb19666688947901961f949f2aa6dLennart Poettering ProxyPassReverse, and don't canonicalise URL passed to backend.
ced4d06784dbb19666688947901961f949f2aa6dLennart Poettering Documentation correspondingly updated. [Nick Kew <nick webthing.com>]
416446221d905b6815175dc4d525d27f8ae43d1bLennart Poettering *) mod_deflate: support gzip flags in inflate_out_filter
7f79cd7109a60810140a045cc725291fc5515264Lennart Poettering [Nick Kew <nick webthing.com>]
19aadacf92ad86967ffb678e37b2ff9e83cb9480Jan Engelhardt *) Drop the ErrorHeader directive which turned out to be a misnomer.
19aadacf92ad86967ffb678e37b2ff9e83cb9480Jan Engelhardt Instead there's a new optional flag for the Header directive
df5f6971e6e15b4632884916c71daa076c8bae96Lennart Poettering ('always'), which keeps the former ErrorHeader functionality.
fcba531ed4c6e6f8f21d8ca4e3a56e3162b1c578Lennart Poettering *) mod_deflate: Don't deflate responses with zero length
8b8f259170e35b93e6c6d1757cb8b835bbdaa40cZbigniew Jędrzejewski-Szmek e.g. proxied 304's [Allan Edwards]
e10e429f2dcbb586215e65f62847f40c7d8b5956David Herrmann *) <IfModule> now recognizes the module identifier in addition to the
e1b7e7ec9b34ae6ae54a4c8084395cbf2bfe9960Lennart Poettering file name. PR 29003. [Edward Rudd <eddie omegaware.com>, Andr� Malo]
c3bb87dbab8b79bb9253407cb5b7f3e6fe8db395Lennart Poettering *) mod_ssl: Add "SSLHonorCipherOrder" directive to enable the
d28315e4aff91560ed4c2fc9f876ec8bfc559f2dJan Engelhardt OpenSSL 0.9.7 flag which uses the server's cipher order rather
18d4e7c26e7806ac363d19989df7144d5058ce41Lennart Poettering than the client's. PR 28665.
bdeeb6b543a2a2d0a494f17b85f1498859cdfc2fLennart Poettering [Jim Schneider <jschneid netilla.com>]
bdeeb6b543a2a2d0a494f17b85f1498859cdfc2fLennart Poettering *) mod_ssl: Drop support for the CompatEnvVars argument to
bdeeb6b543a2a2d0a494f17b85f1498859cdfc2fLennart Poettering SSLOptions, which was never actually implemented in 2.0.
4e09014daf8f98584b3f15e64e93bed232e70a6bLennart Poettering *) Fix bug in mod_deflate that unconditionally sent deflate'd output
6bb648a16ae4a682ad4784412af706d2e6a3e4daTom Gundersen even when Accept-Encoding is not present. [Justin Erenkrantz]
7973ca1927e1f3bac9438f3529458c9ff868905dLennart Poettering *) Pass environment variables through to piped loggers and start
7973ca1927e1f3bac9438f3529458c9ff868905dLennart Poettering them via the shell, resolving regressions since 1.3. PR 28815
7973ca1927e1f3bac9438f3529458c9ff868905dLennart Poettering [Ken Coar, Jeff Trawick]
dc17bcef197a0d5ee798cce59c40e4f5e85c24f6Lennart Poettering *) External rewrite map responses are no longer limited to 2048
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering bytes. [Andr� Malo]
dc17bcef197a0d5ee798cce59c40e4f5e85c24f6Lennart Poettering *) Proxy server was deleting cookies that Apache had already
80caea6cc72ebd311a311b1527cc6b87201c13bfLennart Poettering assigned if the origin server had set any cookies. PR 27023.
ab9716c2489f9141ed13ec22dbb216b3e6fbd6b5Lennart Poettering [Jim Jagielski]
df98a87ba389bdfc0359beedf47557411f3af434Lennart Poettering *) Removed old and unmaintained ap_add_named_module API and changed
df98a87ba389bdfc0359beedf47557411f3af434Lennart Poettering the following APIs to return an error instead of hard exiting:
df98a87ba389bdfc0359beedf47557411f3af434Lennart Poettering ap_add_module, ap_add_loaded_module, ap_setup_prelinked_modules,
bee7e928990fd8a0c5909c2022a2b9eede557c81Lennart Poettering and ap_process_resource_config. [Andr� Malo]
6a8b5fa4635ed858788fb10099ec9b62b3359a0aLennart Poettering *) mod_headers: Allow %% in header values to represent a literal %.
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering *) mod_headers: Allow env clauses also for 'echo' and 'unset' actions.
154ff088d371bee5651eaa2bc9bde8a34c185656Lennart Poettering *) mod_headers: Allow 'echo' also for ErrorHeaders. [Andr� Malo]
154ff088d371bee5651eaa2bc9bde8a34c185656Lennart Poettering *) mod_deflate: New option for DEFLATE output file (force-gzip),
154ff088d371bee5651eaa2bc9bde8a34c185656Lennart Poettering new output filter 'INFLATE' for uncompressing responses.
69af45035913e7119cffd94c542bd3039600e45dZbigniew Jędrzejewski-Szmek [Nick Kew <Nick at WebThing dot com>, Ian Holsman]
461bd8e47cafacfcd38389e7558330bfb6e902adLennart Poettering *) Added new module mod_version, which provides version dependent
461bd8e47cafacfcd38389e7558330bfb6e902adLennart Poettering configuration containers. [Andr� Malo]
ab8e074ce25b9947314c69e17afe1bd2527ee26dLennart Poettering *) mod_log_config now logs all Set-Cookie headers if the %{Set-Cookie}o
ab8e074ce25b9947314c69e17afe1bd2527ee26dLennart Poettering format is used. PR 27787. [Andr� Malo]
ab8e074ce25b9947314c69e17afe1bd2527ee26dLennart Poettering *) Allow Digest providers to return AUTH_DENIED to propagate a 401
b454b11220e87add6d0f011695c7912b009c853dLennart Poettering status and terminate the provider chain prior to checking the password.
b454b11220e87add6d0f011695c7912b009c853dLennart Poettering [Geoffrey Young]
b454b11220e87add6d0f011695c7912b009c853dLennart Poettering *) mod_cgid: Don't allow Scriptsock to be specified inside VirtualHost;
06db8540cdfc8259423ed90e7352dbc1d71eccd9Lennart Poettering Don't place script socket inside default server root instead of
06db8540cdfc8259423ed90e7352dbc1d71eccd9Lennart Poettering actual server root. PR 27886. [Jeff Trawick]
4ff49cb63075aba646b578f2516b37a8dfd5a65bLennart Poettering *) mod_proxy: Fix handling of non-200 success status codes when
fff87a35d9e26c0d4ea41273a963c0eb20e18da4Zbigniew Jędrzejewski-Szmek "ProxyErrorOverride On" is configured. PR 20183.
fff87a35d9e26c0d4ea41273a963c0eb20e18da4Zbigniew Jędrzejewski-Szmek [Marcus Janson <marcus.janson tre.se>, Joe Orton]
b8b4d3dddc7611dce3bf28004b0375d661120c62Lennart Poettering *) Threaded MPMs for Unix and Win32: Add support for ThreadStackSize
b8b4d3dddc7611dce3bf28004b0375d661120c62Lennart Poettering directive (previously NetWare-only) to override default thread
b8b4d3dddc7611dce3bf28004b0375d661120c62Lennart Poettering stack size for threads which handle client connections. Required
3df82d5a8cdc510f518fd5e234ccb3233b748719Lennart Poettering for some third-party modules on platforms with small default
3df82d5a8cdc510f518fd5e234ccb3233b748719Lennart Poettering thread stack size. [Jeff Trawick]
3df82d5a8cdc510f518fd5e234ccb3233b748719Lennart Poettering *) minor mod_auth_basic and mod_auth_digest sync. mod_auth_basic
b5c03638d48c07aa0eaf13b5f54000c7133e1883Lennart Poettering now populates r->user with the (possibly unauthenticated) user,
d28315e4aff91560ed4c2fc9f876ec8bfc559f2dJan Engelhardt and mod_auth_digest returns 500 when a provider returns
b5c03638d48c07aa0eaf13b5f54000c7133e1883Lennart Poettering AUTH_GENERAL_ERROR.
b5c03638d48c07aa0eaf13b5f54000c7133e1883Lennart Poettering [Geoffrey Young]
eece8c6fb5f4d354dcef6fd369e876c4f3a3f163Lennart Poettering *) The whole codebase was relicensed and is now available under
eece8c6fb5f4d354dcef6fd369e876c4f3a3f163Lennart Poettering the Apache License, Version 2.0 (http://www.apache.org/licenses).
eece8c6fb5f4d354dcef6fd369e876c4f3a3f163Lennart Poettering [Apache Software Foundation]
356ce9915ab1a4a1e6dc26954df34936a69e7c12Lennart Poettering *) Delete some make-generated files in the server directory during
09f727eebd87661f263d3c2c1e0de7b7771acd40Lennart Poettering "make clean" processing. PR 26552. [Jeff Trawick]
09f727eebd87661f263d3c2c1e0de7b7771acd40Lennart Poettering *) Add core version query function (ap_get_server_revision) and
c144692179098c1861f2aeafc67689a74439cf4cLennart Poettering accompanying ap_version_t structure (minor MMN bump).
c144692179098c1861f2aeafc67689a74439cf4cLennart Poettering *) mod_rewrite: EOLs sent by external rewritemaps are now consumed
795607b22308f5b92073b012e43be1892fdd97c0Lennart Poettering as whole. That way, on systems with more than one EOL character
0be8342c04bbf129b4a21e5073eacccbbce4e896Lennart Poettering rewritemap programs no longer need to switch stdout to binary
0be8342c04bbf129b4a21e5073eacccbbce4e896Lennart Poettering mode. PR 25635. [Andr� Malo]
0be8342c04bbf129b4a21e5073eacccbbce4e896Lennart Poettering *) mod_rewrite: Introduce the ability to force a content handler via
0be8342c04bbf129b4a21e5073eacccbbce4e896Lennart Poettering the [handler=...] flag. [Andr� Malo]
54c31a79f72ff57ac8eba089acacc4ab482b745dLennart Poettering *) mod_rewrite: Introduce the RewriteCond -x check, which returns
826872b61e4857dfffe63ba84e2b005623baecd6Lennart Poettering true if the pattern is a file with execution permissions.
826872b61e4857dfffe63ba84e2b005623baecd6Lennart Poettering *) mod_rewrite: Allow proxying and RewriteRules in directory context
3679d1126bae52e02f6cd60fca196f616b9e660dLennart Poettering for subrequests. PR 14648, 15114. [Andr� Malo]
3679d1126bae52e02f6cd60fca196f616b9e660dLennart Poettering *) mod_rewrite: Allow setting of any valid HTTP response code.
3679d1126bae52e02f6cd60fca196f616b9e660dLennart Poettering PR 25917. [Andr� Malo]
3679d1126bae52e02f6cd60fca196f616b9e660dLennart Poettering *) mod_rewrite: Cookie creation now works locale independent.
356ce9915ab1a4a1e6dc26954df34936a69e7c12Lennart Poettering *) mod_ssl: Add support for distributed session cache using 'distcache'.
490b7e47093d491a2bdb1084fe92b796f4e07eefLennart Poettering [Geoff Thorpe <geoff geoffthorpe.net>]
490b7e47093d491a2bdb1084fe92b796f4e07eefLennart Poettering *) mod_dav: Disallow requests with an unescaped hash character in
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering the Request-URI. PR 21779. [Amit Athavale <amit_athavale lycos.com>]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) mod_proxy with ProxyErrorOverride On in a reverse-proxy configuration
466784c8710e5cb0e0b86a16506d992d7ec5b619Kay Sievers attaches a body to the 302 response and a wrong Content-Length header.
e41814846c19a48f4490169d82e359e005c4db45Lennart Poettering PR: 22951 [Ermanno Scaglione scaglione ..at.. starnetone.de]
e9fd44b728ff1fc0d1f24fccb87a767f6865df27Lennart Poettering *) Bring ErrorHeader concept forward from 1.3, so that response
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering header fields can be set for return even on errors or external
e9fd44b728ff1fc0d1f24fccb87a767f6865df27Lennart Poettering redirects. [Ken Coar]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) Fix <Limit> and <LimitExcept> parsing to require a closing '>'
3040728b6691ea2e9df3a2060e2d49a792bbaedaLennart Poettering in the initial container. PR 25414.
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering [Geoffrey Young <geoff apache.org>]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) Clean up httpd -V output: Instead of displaying the MPM source
e6c6e7afffa80ad74efdb1ddfa815294624f1608Lennart Poettering directory, display the MPM name and some MPM properties.
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering [Geoffrey Young <geoff apache.org>]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) mod_ssl/mod_status: Re-enable support for output of SSL session
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering cache information in server-status page. [Joe Orton]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) mod_ssl: Remove the shmht session cache, shmcb should be used
e5ec62c56963d997edaffa904af5dc45dac23988Lennart Poettering instead. [Joe Orton]
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering *) mod_logio: Account for some bytes handed to the network layer prior to
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering dropped connections. [Jeff Trawick]
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering *) mod_autoindex: new directive IndexStyleSheet
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering [Tyler Riddle <triddle_1999 yahoo.com>, Paul Querna <chip force-elite.com>]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) Fix uninitialized gprof directory name in prefork MPM. PR 24450.
e673ad0415d89c322e5b1a121e411f1b1d8075c0Lennart Poettering [Chris Knight <Christopher.D.Knight nasa.gov>]
e673ad0415d89c322e5b1a121e411f1b1d8075c0Lennart Poettering *) Log an error when requests for URIs which fail to map to a valid
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering filesystem name are rejected with 403. [Jeff Trawick]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) Switch to APR 1.0 API.
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) Major overhaul of mod_include's filter parser. The new parser code
d28315e4aff91560ed4c2fc9f876ec8bfc559f2dJan Engelhardt is expected to be more robust and should catch all of the edge cases
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering that were not handled by the previous one. This includes a binary
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering incompatible change of mod_include's external API. [Andr� Malo]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) mod_rewrite: Allow forced mimetypes [T=...] to get expanded.
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering PR 14223. [Andr� Malo]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) mod_rewrite: Fix LA-U and LA-F lookups in directory context. Previously
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering the current rewrite state was just used as lookup path, which lead to
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering strange and often useless results. Related to PR 8493. [Andr� Malo]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) Change Listen directive to bind to all addresses when a hostname is
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering not specified. [Justin Erenkrantz]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) Correct failure with Listen directives on machines with IPv6 enabled.
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering [Colm MacC�rthaigh <colm stdlib.net>, Justin Erenkrantz]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) Fix a link failure in mod_ssl when the OpenSSL libraries contain
f47ec8ebb3858553dec870e1c596e39525f46360Lennart Poettering the ENGINE functions but the engine header files are missing.
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering [Cliff Woolley]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) mod_rewrite: RewriteRules in server context using the force
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering type feature [T=...] no longer disable MultiViews. [Andr� Malo]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) mod_rewrite: Allow piped rewrite logs to be relative to ServerRoot.
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering *) mod_authz_groupfile: Strip trailing spaces of group names. This
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering hopefully saves some hours of searching for typos. PR 12863.
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering *) mod_actions: Propagate the handler name to the action script via
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering the REDIRECT_HANDLER environment variable. [Andr� Malo]
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering *) mod_actions: Introduce the "virtual" modifier to the Action directive,
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering which allows the use of handlers for virtual locations. PR 8431.
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) mod_speling: Recognize AcceptPathInfo setting for the particular
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering location. Default is to reject path information. PR 21059.
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) mod_ext_filter: Add the ability to filter request bodies.
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering [Philipp Reisner <philipp.reisner linbit.com>]
eb124a97fb72d076014253b1acde69d428f15ecfLennart Poettering *) Fix some broken log messages in WinNT MPM.
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering *) prefork MPM: Use the right permissions for the directory created
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering for gprof support. [Jim Carlson <jcarlson jnous.com>]
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering *) Fix a compile failure with recent OpenSSL and picky compilers
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering (e.g., OpenSSL 0.9.7a and xlc_r on AIX). [Jeff Trawick]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) OpenSSL headers should be included as "openssl/ssl.h", and not rely on
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering the INCLUDE path to be defined properly.
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering PR 11310. [Geoff Thorpe <geoff geoffthorpe.net>]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) Modify APACHE_CHECK_SSL_TOOLKIT to detect SSL-C. [Madhusudan Mathihalli]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) Replace the APACHE_CHECK_SSL_TOOLKIT method with a cleaner one, using
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering autoconf tools (AC_CHECK_HEADER, AC_CHECK_LIB etc).
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering [Geoff Thorpe <geoff geoffthorpe.net>]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) change directive name from 'compressionlevel' to 'deflatecompressionlevel'
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering [Ian Holsman, Andr� Malo]
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering *) mod_negotiation: quality values are now parsed independent from
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering the current locale. level values are now really parsed as integers.
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering PR 17564. [Andr� Malo]
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering *) Extend mod_negotiation to evaluate the environment variables
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering no-gzip and gzip-only-text/html the same way as mod_deflate does.
8b04b925e587ff56568c62ff5ad3f2ea2b34ca7aLennart Poettering *) mod_rewrite: Fix some problems reporting errors with mapping
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering programs (RewriteMap prg:/something). [Jeff Trawick]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) Return 413 if chunk-ext-header is too long rather than reading from
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering the truncated line. PR 15857. [Justin Erenkrantz]
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering *) Allow restart of httpd to occur even with syntax errors in the config
d28315e4aff91560ed4c2fc9f876ec8bfc559f2dJan Engelhardt file. PR 16813. [Justin Erenkrantz]
d2e83c23f5f0cdd3b6ec05c5c40209708721e704Kay Sievers *) Use APR_LAYOUT instead of APACHE_LAYOUT in configure. PR 15679.
d2e83c23f5f0cdd3b6ec05c5c40209708721e704Kay Sievers [Justin Erenkrantz]
d2e83c23f5f0cdd3b6ec05c5c40209708721e704Kay Sievers *) Remove files on 'make distclean' that should be. PR 15592.
f6113d42d015ad9f3a9e702a09eb8006511a4424Kay Sievers [Justin Erenkrantz]
d2e83c23f5f0cdd3b6ec05c5c40209708721e704Kay Sievers *) Allow apachectl to perform status with links and elinks as well.
7a43e910ce00eef22fd42925ae4c85cbea1b1320Kay Sievers [Justin Erenkrantz]
c55b1b59b837dfd924b704d457ed77c55f8bfeabLennart Poettering *) mod_log_config change optional hook to return previous handler
e707c49485b8f4f2ec040d3da232d39153e650b9Lennart Poettering *) Forward port of mod_actions' ability to handle arbitrary methods
7f8732835295fce29479b1afc9e8ee801852db09Lennart Poettering with the Script directive. [Andr� Malo]
7f8732835295fce29479b1afc9e8ee801852db09Lennart Poettering *) Let suexec send a message to stderr, if it failed or its policy
e707c49485b8f4f2ec040d3da232d39153e650b9Lennart Poettering was violated. This message appears in the error log and allows
a19554ed92a7460b4e709cc40c558cde827ab85bLennart Poettering for easier debugging. PR 5381, 7638, 8255, 10773. [Andr� Malo]
1cb88f2c61f590083847d65cd5a518e834da87d3Lennart Poettering *) Modify buildconf to copy all required files into httpd's tree.
1cb88f2c61f590083847d65cd5a518e834da87d3Lennart Poettering [Thom May <thom planetarytramp.net>]
d28315e4aff91560ed4c2fc9f876ec8bfc559f2dJan Engelhardt *) Allow mod_dav to do weak entity comparison functions.
1cb88f2c61f590083847d65cd5a518e834da87d3Lennart Poettering [Justin Erenkrantz]
a7a3f28be404875eff20443a0fa8088bcc4c18dfLennart Poettering *) Move RFC 1413 ident requests from core to new module mod_ident.
08f9588885c5d65694b324846b0ed19211d2c178Lennart Poettering *) Add mod_authz_owner - a forward port of "Require file-owner"
9ee58bddeb6eb044753167e0047fe836479ca5dbKay Sievers and "Require file-group", which was already present in version
9ee58bddeb6eb044753167e0047fe836479ca5dbKay Sievers 1.3.21. [Andr� Malo]
71ef24d09573874c0f7bc323c07c3aec2a458707Lennart Poettering *) Add mod_dav_lock - a generic subset of the DAV locking implementation.
71ef24d09573874c0f7bc323c07c3aec2a458707Lennart Poettering [Justin Erenkrantz]
1b89884ba31cbe98f159ce2c7d6fac5f6a57698fLennart Poettering *) Replace some of the mutex locking in the worker MPM with
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering atomic operations for higher concurrency. [Brian Pane]
9cb74bcb23dde8488459ca233bf9caee642b8402Zbigniew Jędrzejewski-Szmek *) Allow 'make depend' to work with non-GCC compilers.
a56b63f41dc779a86573ae77814c14c1db156398Lennart Poettering [Justin Erenkrantz]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) If an httpd.conf has commented out AddModule directives,
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering apxs -i -a will add an un-commented AddModule directive for
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering the new module, which breaks the config.
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering PR: 11212 [Joe Orton]
f801968466fed39d50d410b30ac828c26722cc95Lennart Poettering *) Fix mod_proxy handling of filtered input bodies. [Justin Erenkrantz]
41f9172f427bdbb8221c64029f78364b8dd4e527Lennart Poettering *) Move the check of the Expect request header field after the hook
424a19f8a2061c6b058283228734010b2fa24db4Lennart Poettering for ap_post_read_request, since that is the only opportunity for
424a19f8a2061c6b058283228734010b2fa24db4Lennart Poettering modules to handle Expect extensions. [Justin Erenkrantz]
a1cccad1fe88ddd6943e18af97cf7f466296970fLennart Poettering *) Rewrite of aaa modules to an authn/authz model.
a1cccad1fe88ddd6943e18af97cf7f466296970fLennart Poettering [Dirk-Willem van Gulik, Justin Erenkrantz]
4a30847b9d71e0381948d68279c8f775b9de7850Lennart Poettering [Apache 2.1.0-dev includes those bug fixes and changes with the
4a30847b9d71e0381948d68279c8f775b9de7850Lennart Poettering Apache 2.0.xx tree as documented, and except as noted, below.]
5e8b28838e493b59628322b69580097ef7dd9384Lennart PoetteringChanges with Apache 2.0.53
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering *) apxs: fix handling of -Wc/-Wl and "-o mod_foo.so". PR 31448
68f160039eb78fe122cfe0d4c49695ae91f6f0d1Lennart Poettering *) mod_ldap: Fix format strings to use %APR_PID_T_FMT instead of %d.
68f160039eb78fe122cfe0d4c49695ae91f6f0d1Lennart Poettering [Jeff Trawick]
68f160039eb78fe122cfe0d4c49695ae91f6f0d1Lennart Poettering *) mod_cache: CacheDisable will only disable the URLs it was meant to
d28315e4aff91560ed4c2fc9f876ec8bfc559f2dJan Engelhardt disable, not all caching. PR 31128.
68f160039eb78fe122cfe0d4c49695ae91f6f0d1Lennart Poettering [Edward Rudd <eddie omegaware.com>, Paul Querna]
fd4d89b2c0b31da01d134301e30916931ae3c7d9Lennart Poettering *) mod_cache: Try to correctly follow RFC 2616 13.3 on validating stale
fd4d89b2c0b31da01d134301e30916931ae3c7d9Lennart Poettering cache responses. [Justin Erenkrantz]
8230e26dc954a40d8c9dbc8ddd9376117021f9d2Lennart Poettering *) mod_rewrite: Handle per-location rules when r->filename is unset.
4d9909c93e9c58789c71b34555a1908307c6849eLennart Poettering Previously this would segfault or simply not match as expected,
4d9909c93e9c58789c71b34555a1908307c6849eLennart Poettering depending on the platform. [Jeff Trawick]
47ae7201b1df43bd3da83a19e38483b0e5694c99Lennart Poettering *) mod_rewrite: Fix query string handling for proxied URLs. PR 14518.
8351ceaea9480d9c2979aa2ff0f4982cfdfef58dLennart Poettering Jan Kratochvil <rcpt-dev.AT.httpd.apache.org jankratochvil.net>]
d28315e4aff91560ed4c2fc9f876ec8bfc559f2dJan Engelhardt *) mod_rewrite: Fix 0 bytes write into random memory position.
9946996cda11a18b44d82344676e5a0e96339408Lennart Poettering PR 31036. [Andr� Malo]
3471bedc005fab03f40b99bf6599645330adcd9eLennart Poettering *) mod_disk_cache: Do not store aborted content. PR 21492.
5b40d33761376354116a8cddb9b9fbdb6c4727d6Lennart Poettering *) mod_disk_cache: Correctly store cached content type. PR 30278.
d3a3f22267a7dac426b07a7ed0baa1632f5daf04Kay Sievers *) mod_ldap: prevent the possiblity of an infinite loop in the LDAP
d3a3f22267a7dac426b07a7ed0baa1632f5daf04Kay Sievers statistics display. PR 29216 [Graham Leggett]
d3a3f22267a7dac426b07a7ed0baa1632f5daf04Kay Sievers *) mod_ldap: fix a bogus error message to tell the user which file
d3a3f22267a7dac426b07a7ed0baa1632f5daf04Kay Sievers is causing a potential problem with the LDAP shared memory cache.
d3a3f22267a7dac426b07a7ed0baa1632f5daf04Kay Sievers PR 31431 [Graham Leggett]
d3a3f22267a7dac426b07a7ed0baa1632f5daf04Kay Sievers *) mod_disk_cache: Do not store hop-by-hop headers. [Justin Erenkrantz]
465349c06d994dd2cc6b6fc4109ac0b9952d500aLennart Poettering *) Fix the re-linking issue when purging elements from the LDAP cache
e01a15b71e18bf2008aec7e75041ffa42eb80b80Kay Sievers PR 24801 [Jess Holle <jessh ptc.com>]
abd55b16547d0bb0ed1c31e72e16838f0f59f48bKay Sievers *) mod_disk_cache: Fix races in saving responses. [Justin Erenkrantz]
abd55b16547d0bb0ed1c31e72e16838f0f59f48bKay Sievers *) Fix Expires handling in mod_cache. [Justin Erenkrantz]
abd55b16547d0bb0ed1c31e72e16838f0f59f48bKay Sievers *) Alter mod_expires to run at a different filter priority to allow
e8d842a0d0b39f298e1e7f70d29759e50b2b16d4Tom Gundersen proper Expires storage by mod_cache. [Justin Erenkrantz]
169c4f65131fbc7bcb51e7d5487a715cdcd0e0ebLennart PoetteringChanges with Apache 2.0.52
fb0864e7b9c6d26269ccea6ec5c0fd921c029781Lennart Poettering *) Fix the global mutex crash when the global mutex is never allocated due
fb0864e7b9c6d26269ccea6ec5c0fd921c029781Lennart Poettering to disabled/empty caches. [Jess Holle <jessh ptc.com>]
7f110ff9b8828b477e87de7b28c708cf69a3d008Lennart Poettering *) SECURITY: CAN-2004-0811 (cve.mitre.org)
d0e5a33374cee92962af33dfc03873e470b014f6Lennart Poettering Fix merging of the Satisfy directive, which was applied to
d0e5a33374cee92962af33dfc03873e470b014f6Lennart Poettering the surrounding context and could allow access despite configured
d0e5a33374cee92962af33dfc03873e470b014f6Lennart Poettering authentication. PR 31315. [Rici Lake <rici ricilake.net>]
87a8baa35d6d65ac3b58ae8e26e338e67f8ae8edLennart Poettering *) Fix the handling of URIs containing %2F when AllowEncodedSlashes
87a8baa35d6d65ac3b58ae8e26e338e67f8ae8edLennart Poettering is enabled. Previously, such urls would still be rejected.
87a8baa35d6d65ac3b58ae8e26e338e67f8ae8edLennart Poettering [Jeff Trawick, Bill Stoddard]
70a44afee385c4afadaab9a002b3f9dd44aedf4aJan Engelhardt *) mod_mem_cache: Fixed race condition causing segfault because of memory being
65c0cf7108ae3537a357c74b4586a783baba82f9Lennart Poettering freed twice, or reused after being freed.
f957632b960a0a42999b38ded7089fa602b41745Kay Sievers [J. Clar, W. Stoddard, G. Ames]
f957632b960a0a42999b38ded7089fa602b41745Kay Sievers *) Add -l option to rotatelogs to let it use local time rather than
ad740100d108282d0244d5739d4dcc86fe4c5fdeLennart Poettering UTC. PR 24417. [Ken Coar, Uli Zappe <uli ritual.org>]
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering *) mod_log_config: Fix a bug which prevented request completion time
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering from being logged for I_INSIST_ON_EXTRA_CYCLES_FOR_CLF_COMPLIANCE
7d441ddb5ca090b5a97f58ac4b4d97b3e84fa81eLennart Poettering processing. PR 29696. [Alois Treindl <alois astro.ch>]
14e639ae7a1dbf156273ce697d30fbc6c6594209Lennart PoetteringChanges with Apache 2.0.51
ff01d048b4c1455241c894cf7982662c9d28fd34Lennart Poettering *) mod_include no longer checks for recursion, because that's done
d3c7d7dd77b2b72315164b672462825cef6c0f9aKay Sievers in the core. This allows for careful usage of recursive SSI.
1d6702e8d3877c0bebf3ac817dc45ff72f5ecfa9Lennart Poettering *) Fix memory leak in the cache handling of mod_rewrite. PR 27862.
1d6702e8d3877c0bebf3ac817dc45ff72f5ecfa9Lennart Poettering [chunyan sheng <shengperson yahoo.com>, Andr� Malo]
71092d70af35567dd154d3de2ce04ce62e157a7cLennart Poettering *) Include directives no longer refuse to process symlinks on
1258097cd3cdbc5dd3d264850119e553a29c5068Lennart Poettering directories. Instead there's now a maximum nesting level
1258097cd3cdbc5dd3d264850119e553a29c5068Lennart Poettering of included directories (128 as distributed). This is configurable
1258097cd3cdbc5dd3d264850119e553a29c5068Lennart Poettering at compile time using the -DAP_MAX_INCLUDE_DIR_DEPTH switch.
a4c279f87451186b8beb1b8cc21c7cad561ecf4bLennart Poettering PR 28492. [Andr� Malo]
7c697168102cb64c5cb65a542959684014da99c7Lennart Poettering *) Win32: apache -k start|restart|install|config can leave stranded
253ee27a0c7a410d27d490bb79ea97caed6a2b68Lennart Poettering piped logger processes (eg, rotatelogs.exe) due to improper
71092d70af35567dd154d3de2ce04ce62e157a7cLennart Poettering server shutdown on these code paths.
8d0e38a2b966799af884e78a54fd6a2dffa44788Lennart Poettering [Bill Stoddard]
f28f1daf754a9a07de90e6fc4ada581bf5de677dLennart Poettering *) SECURITY: CAN-2004-0751 (cve.mitre.org)
f28f1daf754a9a07de90e6fc4ada581bf5de677dLennart Poettering mod_ssl: Fix a segfault in the SSL input filter which could be
f28f1daf754a9a07de90e6fc4ada581bf5de677dLennart Poettering triggered if using "speculative" mode, for instance by a
88a07670cfa974a605c7c7b520b8a3135fce37f9Lennart Poettering proxy request to an SSL server. PR 30134. [Joe Orton]
88a07670cfa974a605c7c7b520b8a3135fce37f9Lennart Poettering *) mod_rewrite: Add %{SSL:...} and %{HTTPS} variable lookups.
71092d70af35567dd154d3de2ce04ce62e157a7cLennart Poettering PR 30464. [Joe Orton, Madhusudan Mathihalli]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) mod_ssl: Add new 'ssl_is_https' optional function. [Joe Orton]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) Prevent CGI script output which includes a Content-Range header
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering from being passed through the byterange filter. [Joe Orton]
b44be3ecf6326c27aa2c6c6d1fe34e22e22592a0Lennart Poettering *) Satisfy directives now can be influenced by a surrounding <Limit>
b23de6af893c11da4286bc416455cd0926d1532eLennart Poettering container. PR 14726. [Andr� Malo]
9534ce54858c67363b841cdbdc315140437bfdb4Lennart Poettering *) mod_rewrite now officially supports RewriteRules in <Proxy> sections.
68c7d001f4117f0c3d0a4582e32cbb03ae5fac57Lennart Poettering PR 27985. [Andr� Malo]
68c7d001f4117f0c3d0a4582e32cbb03ae5fac57Lennart Poettering *) mod_disk_cache: Implement binary format for on-disk header files.
68c7d001f4117f0c3d0a4582e32cbb03ae5fac57Lennart Poettering [Brian Akins <bakins web.turner.com>, Justin Erenkrantz]
253ee27a0c7a410d27d490bb79ea97caed6a2b68Lennart Poettering *) mod_disk_cache: Optimize network performance of disk cache subsystem by
5d0fcd7c8d29340ac9425c309e8ac436a9af699cLennart Poettering allowing zero-copy (sendfile) writes and other miscellaneous fixes.
5d0fcd7c8d29340ac9425c309e8ac436a9af699cLennart Poettering [Justin Erenkrantz]
f530371f1f85a070d7d0fb5112146a43533ae00bLennart Poettering *) mod_cache, mod_disk_cache, mod_mem_cache: Refactor cache modules, and
e707c49485b8f4f2ec040d3da232d39153e650b9Lennart Poettering switch to the provider API instead of hooks. [Justin Erenkrantz]
a73d88fa024b5668ed7dde681e99547d41e6a864Lennart Poettering *) mod_autoindex: Don't truncate the directory listing if a stat()
a74a8793b04de9886b4f6987b9cb86fa02c73520Lennart Poettering call fails (for instance on a >2Gb file). PR 17357.
3679d1126bae52e02f6cd60fca196f616b9e660dLennart Poettering *) Makefile fix: httpd is linked against LIBS given to the
3679d1126bae52e02f6cd60fca196f616b9e660dLennart Poettering 'make' invocation. PR 7882. [Joe Orton]
3679d1126bae52e02f6cd60fca196f616b9e660dLennart Poettering *) WinNT MPM: Fix a broken log message at termination. PR 28063.
73090dc815390f4fca4e3ed8a7e1d3806605daaaLennart Poettering [Eider Oliveira <eider bol.com.br>]
3d57c6ab801f4437f12948e29589e3d00c3ad9dbLennart Poettering *) Prevent Win32 pool corruption at startup [Allan Edwards]
3f7a8c4e9f1d3ce48919e24eb2c9d56dd6fd88d8Kay Sievers *) mod_ssl: Add "SSLUserName" directive to set r->user based on a
260abb780a135e4cae8c10715c7e85675efc345aLennart Poettering chosen SSL environment variable. PR 20957.
2791a8f8dc8764a9247cdba3562bd4c04010f144Lennart Poettering [Martin v. Loewis <martin v.loewis.de>]
a8f11321c209830a35edd0357e8def5d4437d854Lennart Poettering *) suexec: Pass the SERVER_SIGNATURE envvar through to CGIs.
21bdae12e11ae20460715475d8a0c991f15464acLennart Poettering [Zvi Har'El <rl math.technion.ac.il>]
Error!