CHANGES revision decb536ebd4b7b94c7450c2e1daa491943135abd
d5b7ba26785d7494166d48876362ba30ff30b98awrowe -*- coding: utf-8 -*-
c30ef289fe64ac7fedc44cfcc6b439f0f8458b4cgregamesChanges with Apache 2.5.0
14763a0db22322626dd8cd59dfbc3a4fcc655d99trawick *) core: Add the ability to do explicit matching on weak and strong ETags
b95a84193578c904426cef6dda84f7118a400a16jim as per RFC2616 Section 13.3.3. [Graham Leggett, Co-Advisor
b95a84193578c904426cef6dda84f7118a400a16jim *) mod_cache: Ensure that updated responses to HEAD requests don't get
cdd8290ae4505c17de6aff3acd1b9bd48d2c84e0ake mistakenly paired with a previously cached body. Ensure that any existing
cdd8290ae4505c17de6aff3acd1b9bd48d2c84e0ake body is removed when a HEAD request is cached. [Graham Leggett,
03a3ed87983471816561562f957390ed935d7b3bnd Co-Advisor <coad measurement-factory.com>]
03a3ed87983471816561562f957390ed935d7b3bnd *) mod_cache: Honour Cache-Control: no-store in a request. [Graham Leggett]
c533ecac2227dc228070e686fb14dc6860f497f8nd *) mod_cache: RFC2616 14.9.3 The s-maxage directive also implies the
da5472c259c9dad08fd805c3e97a629f9428e7fend semantics of the proxy-revalidate directive. [Graham Leggett]
da5472c259c9dad08fd805c3e97a629f9428e7fend *) mod_cache: Make sure that contradictory entity headers present in a 304
33c6c050363f8b571cec0477008390a95b41523and Not Modified response are caught and cause the entity to be removed.
33c6c050363f8b571cec0477008390a95b41523and [Graham Leggett]
68ed4d659ab8f6deb93fe6d520b5d3ee65645493nd *) mod_cache: Make sure Vary processing handles multivalued Vary headers and
68ed4d659ab8f6deb93fe6d520b5d3ee65645493nd multivalued headers referred to via Vary. [Graham Leggett]
68ed4d659ab8f6deb93fe6d520b5d3ee65645493nd *) mod_cache: When serving from cache, only the last header of a multivalued
2bfe4d90e1d374e14fd5db16a799e6f5e0944748nd header was taken into account. Fixed. [Graham Leggett]
2bfe4d90e1d374e14fd5db16a799e6f5e0944748nd *) mod_cache: Ignore response headers specified by no-cache=header and
2bfe4d90e1d374e14fd5db16a799e6f5e0944748nd private=header as specified by RFC2616 14.9.1 What is Cacheable. Ensure
2bfe4d90e1d374e14fd5db16a799e6f5e0944748nd that these headers are still processed when multiple Cache-Control
2bfe4d90e1d374e14fd5db16a799e6f5e0944748nd headers are present in the response. PR 54706 [Graham Leggett,
97789c9dcc4cc724c9b80fb9b428d128c58e3e0and *) mod_cache: Invalidate cached entities in response to RFC2616 Section
97789c9dcc4cc724c9b80fb9b428d128c58e3e0and 13.10 Invalidation After Updates or Deletions. PR 15868 [Graham
56cefde0af6b8db6fda0f1d95d8cdca54f397cd0nd *) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
56cefde0af6b8db6fda0f1d95d8cdca54f397cd0nd [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez
41369ed0bc7f2db6272278c27025f6aabf97fe63nd *) mod_dav: Do not segfault on PROPFIND with a zero length DBM.
496f8f3966319d43455675630a849bae019d2a32nd PR 52559 [Diego Santa Cruz <diego.santaCruz spinetix.com>]
13ed2a88decd6dbe13b11467e7f648f2996b7a70jorton *) mod_dav: Do not fail PROPPATCH when prop namespace is not known.
13ed2a88decd6dbe13b11467e7f648f2996b7a70jorton PR 52559 [Diego Santa Cruz <diego.santaCruz spinetix.com>]
13ed2a88decd6dbe13b11467e7f648f2996b7a70jorton *) mod_dav: When a PROPPATCH attempts to remove a non-existent dead
9e8c2603790f490398a0fabf97866b6815748a54ianh property on a resource for which there is no dead property in the same
9e8c2603790f490398a0fabf97866b6815748a54ianh namespace httpd segfaults. PR 52559 [Diego Santa Cruz
a21b3b9d8ebb12fd51fa1d17e44d5644a35a9a5fnd *) mod_dav: PROPPATCH delete (svn propdel) silently discards errors.
a21b3b9d8ebb12fd51fa1d17e44d5644a35a9a5fnd PR 53525 [Arwin Arni <arwin collab.net>]
5fcef4390e6414ad7754c2f004974982bc33cac2nd *) mod_dav: Ensure URI is correctly uriencoded on return. PR 54611
5fcef4390e6414ad7754c2f004974982bc33cac2nd [Timothy Wood <tjw omnigroup.com>]
5fcef4390e6414ad7754c2f004974982bc33cac2nd *) mod_dav: Sending a If or If-Match header with an invalid ETag doesn't
46820eca7dc57ae17c235389a0cd39140a5db8b5nd result in a 412 Precondition Failed. PR 54610 [Timothy Wood
46820eca7dc57ae17c235389a0cd39140a5db8b5nd *) mod_dav: Make sure that when we prepare an If URL for Etag comparison,
1fbcf7a8e7b18be1b0e77b7bc38b7b71f8dfb052nd we compare unencoded paths. PR 53910 [Timothy Wood <tjw omnigroup.com>]
1fbcf7a8e7b18be1b0e77b7bc38b7b71f8dfb052nd *) core, mod_ssl: Lift the restriction that prevents mod_ssl taking
e6c244ee56578707b20a86e0e938498299a93b6cnd full advantage of the event MPM. Enable the ability for a module
e6c244ee56578707b20a86e0e938498299a93b6cnd to reverse the sense of a poll event from a read to a write or vice
e6c244ee56578707b20a86e0e938498299a93b6cnd versa. [Graham Leggett]
56d70402724e1872992bcac08b802681cf762d9and *) htpasswd: Add -v option to verify a password. [Stefan Fritsch]
56d70402724e1872992bcac08b802681cf762d9and *) htpasswd, htdbm: Fix password generation. PR 54735. [Stefan Fritsch]
bfbca4e24db7fef55c0ab787aca9f89594530b45geoff *) mod_dav: Improve error handling in dav_method_put(), add new
bfbca4e24db7fef55c0ab787aca9f89594530b45geoff dav_join_error() function. PR 54145. [Ben Reser <ben reser.org>]
f769c33501f474aed3e0f7c769477c8c4f478783geoff *) mod_auth_digest: Fix crashes if shm initialization failed. [Stefan
f769c33501f474aed3e0f7c769477c8c4f478783geoff *) mod_ldap: LDAP connections used for authentication were not respecting
89ea31761658f422cf21cd3b0224dc5fe95cccd3nd LDAPConnectionPoolTimeout. PR 54587
89ea31761658f422cf21cd3b0224dc5fe95cccd3nd *) core: ap_rgetline_core now pulls from r->proto_input_filters.
67a4d05bab3fc19c1b87fb9042977975bf27cdbdnd *) mod_proxy_html: process parsed comments immediately.
67a4d05bab3fc19c1b87fb9042977975bf27cdbdnd Fixes bug where parsed comments may be lost. [Nick Kew]
210817da3118a900388980e4481e4aec6a58f101nd *) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
46c99ed700a996f84dee6b1fe42d22ce9f27b5a0nd *) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
d7c7669331357296719d67d1963d40d713ed455atrawick *) core: Add option to add valgrind support. Use it to reduce false positive
d7c7669331357296719d67d1963d40d713ed455atrawick warnings in mod_ssl. [Stefan Fritsch]
d7c7669331357296719d67d1963d40d713ed455atrawick *) mod_lua: Add bindings for apr_dbd/mod_dbd database access
781888a651637edc0b043a6787cb0c2acf30a187geoff [Daniel Gruno]
781888a651637edc0b043a6787cb0c2acf30a187geoff *) mod_authn_file, mod_authn_dbd, mod_authn_dbm, mod_authn_socache:
781888a651637edc0b043a6787cb0c2acf30a187geoff Cache the result of the most recent password hash verification for every
5d3e5520c34648220ed0cd9dc01c2c203257c86fnd keep-alive connection. This saves some expensive calculations.
5d3e5520c34648220ed0cd9dc01c2c203257c86fnd [Stefan Fritsch]
92d95be777d4365eb79444a7a558355a7a92081ajorton *) http: Remove support for Request-Range header sent by Navigator 2-3 and
92d95be777d4365eb79444a7a558355a7a92081ajorton MSIE 3. [Stefan Fritsch]
92d95be777d4365eb79444a7a558355a7a92081ajorton *) core, http: Extend HttpProtocol with an option to enforce stricter HTTP
af8dee354a287249dd9f3f77bbe850108e5afe43trawick conformance or to only log the found problems. [Stefan Fritsch]
af8dee354a287249dd9f3f77bbe850108e5afe43trawick *) core: Correctly parse an IPv6 literal host specification in an absolute
af8dee354a287249dd9f3f77bbe850108e5afe43trawick URL in the request line. [Stefan Fritsch]
14763a0db22322626dd8cd59dfbc3a4fcc655d99trawick *) mod_ssl: add support for subjectAltName-based host name checking
fb82af0f0cd7b58eef19c54b086131b7e1e1e749madhum in proxy mode. PR 54030. [Kaspar Brand]
fb82af0f0cd7b58eef19c54b086131b7e1e1e749madhum *) mpm_event: Check that AsyncRequestWorkerFactor is not negative. PR 54254.
bcccfc984c481af611fa4ffc3e2732400b041cfend [Jackie Zhang <jackie qq zhang gmail com>]
bcccfc984c481af611fa4ffc3e2732400b041cfend *) mod_ssl: Add support for OpenSSL configuration commands [Stephen Henson]
f78505c7d260473bf11002f5028186f27d0ed8a0geoff *) EventOpt MPM
f78505c7d260473bf11002f5028186f27d0ed8a0geoff *) core: Add LogLevelOverride directive that allows to override the
f78505c7d260473bf11002f5028186f27d0ed8a0geoff loglevel for clients from certain IPs. This also works for things
f78505c7d260473bf11002f5028186f27d0ed8a0geoff like the SSL handshake where <If> LogLevel ... </If> is evaluated
a8a509c9b67eea07a4a239e7f36c9f3de6022585trawick too late. [Stefan Fritsch]
a8a509c9b67eea07a4a239e7f36c9f3de6022585trawick *) core: Add new directive Warning to issue warnings from a configuration
ea981941b1e5ecfb1a27b9e9aff32b9c98640ed9nd file. Both Warning and Error now generate a timestamped log message.
ea981941b1e5ecfb1a27b9e9aff32b9c98640ed9nd [Fabien Coelho]
ea981941b1e5ecfb1a27b9e9aff32b9c98640ed9nd *) ap_expr: Add SERVER_PROTOCOL_VERSION, ..._MAJOR, and ..._MINOR
ced699ca391a4fb7d70cfeb995c58d4bf62f00a8trawick variables. [Stefan Fritsch]
ced699ca391a4fb7d70cfeb995c58d4bf62f00a8trawick *) core: New directive RegisterHttpMethod for registering non-standard
d57b793ddd42a997c2cb3bd389bbcf1161226fd8trawick HTTP methods. [Stefan Fritsch]
d57b793ddd42a997c2cb3bd389bbcf1161226fd8trawick *) core: New directive HttpProtocol which allows to disable HTTP/0.9
f881e72fe4f91fd1445c5d81c95f66d6a4a3ee5btrawick support. [Stefan Fritsch]
f881e72fe4f91fd1445c5d81c95f66d6a4a3ee5btrawick *) mod_allowhandlers: New module to forbid specific handlers for specific
d11bf78168abbb07d8ed9f54d7ea0953d46aad83nd directories. [Stefan Fritsch]
d11bf78168abbb07d8ed9f54d7ea0953d46aad83nd *) configure: Fix processing of --disable-FEATURE for various features.
d11bf78168abbb07d8ed9f54d7ea0953d46aad83nd [Jeff Trawick]
bf28a00d8218aa76a56eddabca308e8d0e691626nd *) mod_systemd: New module, for integration with systemd on Linux.
bf28a00d8218aa76a56eddabca308e8d0e691626nd [Jan Kaluza <jkaluza redhat.com>]
bf28a00d8218aa76a56eddabca308e8d0e691626nd *) mod_cache_socache: New cache implementation backed by mod_socache
70f665a8945f3bdfe8bbeaa063de2aa722fc9b29nd that replaces mod_mem_cache removed from httpd v2.2. [Graham
c08f5a0cf2b8903255186ba998a4481dfac9c796nd *) core: Add dirwalk_stat and pre_htaccess hooks, allowing mpm-itk
c08f5a0cf2b8903255186ba998a4481dfac9c796nd to be used without patches to httpd core. [Jeff Trawick]
c08f5a0cf2b8903255186ba998a4481dfac9c796nd *) mod_lua: Add LuaInputFilter/LuaOutputFilter for creating content
eea521297270de3f9ae70d8822f8665c513de574nd filters in Lua [Daniel Gruno]
eea521297270de3f9ae70d8822f8665c513de574nd *) WinNT MPM: Store pid and generation for each thread in scoreboard
5bcdf2cd27ab0c91a3c7eaffbff4cb8505389dc1nd to allow tracking of threads from exiting children via mod_status
5bcdf2cd27ab0c91a3c7eaffbff4cb8505389dc1nd or other such mechanisms. [Jeff Trawick]
02b0660d7f44ff8106bd5095653e9c19e39ec37dnd *) mod_ssl: Catch missing or mismatched client cert/key pairs with
02b0660d7f44ff8106bd5095653e9c19e39ec37dnd SSLProxyMachineCertificateFile/Path directives. PR 52212.
02b0660d7f44ff8106bd5095653e9c19e39ec37dnd [Keith Burdis <keith burdis.org>, Joe Orton]
5b8e35ad88268c0210d93288dad57c2f1d3e8811nd *) mod_lua: Allow scripts handled by the lua-script handler to return
5b8e35ad88268c0210d93288dad57c2f1d3e8811nd a status code to the client (such as a 302 or a 500) [Daniel Gruno]
a9ee8e9bd3dffd23ca49be8d0bdf0e33cd0bcce2jorton *) mod_lua: Decline handling 'lua-script' if the file doesn't exist,
a9ee8e9bd3dffd23ca49be8d0bdf0e33cd0bcce2jorton rather than throwing an internal server error. [Daniel Gruno]
8d9494af6ddb7a9c998b1b622e0bcd8d17cac50ejorton *) mod_lua: Add functions r:flush and r:sendfile as well as additional
3b86be5b30d5cbacc1f942b05dff8a9365449d30jorton request information to the request_rec structure. [Daniel Gruno]
8aad5258d3ecde3751559bc685a3185e63cbde9aianh *) mod_lua: Add a server scope for Lua states, which creates a pool of
8aad5258d3ecde3751559bc685a3185e63cbde9aianh states with managable minimum and maximum size. [Daniel Gruno]
71f3601de4983bc2a6aaffcf37dc1d35c8674a34coar *) core: Add post_perdir_config hook.
71f3601de4983bc2a6aaffcf37dc1d35c8674a34coar [Steinar Gunderson <sgunderson bigfoot.com>]
71f3601de4983bc2a6aaffcf37dc1d35c8674a34coar *) mod_lua: Add new directive, LuaMapHandler, for dynamically mapping
49a82db11388cff9b29ff861b4241bbce69c76fdtrawick URIs to Lua scripts and functions using regular expressions.
49a82db11388cff9b29ff861b4241bbce69c76fdtrawick [Daniel Gruno]
49a82db11388cff9b29ff861b4241bbce69c76fdtrawick *) mod_lua: Add new directive LuaCodeCache for controlling in-memory
f23c50b3628a8571da2ff3277ae58ef1d675554ftrawick caching of lua scripts. [Daniel Gruno]
f23c50b3628a8571da2ff3277ae58ef1d675554ftrawick *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
f23c50b3628a8571da2ff3277ae58ef1d675554ftrawick - APIs: ap_log_pid(), ap_remove_pid, ap_read_pid()
8dc154408549195c828b823e9dc7396f107f2512jorton - core: the scoreboard (ScoreBoardFile), pid file (PidFile), and
8dc154408549195c828b823e9dc7396f107f2512jorton mutexes (Mutex)
8dc154408549195c828b823e9dc7396f107f2512jorton - mod_cache: thundering herd lock directory
ca2504b59d48a926af23f6b18af550c1e892d8a6jorton - mod_lbmethod_heartbeat, mod_heartmonitor: heartbeat storage file
ca2504b59d48a926af23f6b18af550c1e892d8a6jorton - mod_ldap: shared memory cache
ca2504b59d48a926af23f6b18af550c1e892d8a6jorton - mod_socache_shmcb, mod_socache_dbm: shared memory or dbm for cache
6126fad8adeca94e9813812c691747afeca164dftrawick [Jeff Trawick]
6126fad8adeca94e9813812c691747afeca164dftrawick *) suexec: Add --enable-suexec-capabilites support on Linux, to use
7ed5992392d5babab20be4ce4029ad17ae062b5aianh setuid/setgid capability bits rather than a setuid root binary.
7ed5992392d5babab20be4ce4029ad17ae062b5aianh [Joe Orton]
b7973a1e572a3ff7cdedb48ed1f9481ece700bf9trawick *) suexec: Add support for logging to syslog as an alternative to logging
36f2369ee230c310fed3b600e9e99cf5770804a3wrowe to a file; configure --without-suexec-logfile --with-suexec-syslog.
b7973a1e572a3ff7cdedb48ed1f9481ece700bf9trawick [Joe Orton]
5c4e29c5f77fbc967d78886ab378b9500267b0fbtrawick *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.
5c4e29c5f77fbc967d78886ab378b9500267b0fbtrawick [Matthew Steele <mdsteele google.com>]
1fbf6ba0f5207e6637b49f9a9dfcc779bbe952a9trawick *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
6c4c113ce85934b11c9e78399e1bb8ec7a568af9nd be compiled by the build compiler instead of the host compiler.
6c4c113ce85934b11c9e78399e1bb8ec7a568af9nd Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
679cafe33462d8c6bd0a74cc4359e561d19a0aafnd PR 51257. [Guenter Knauf]
6c4c113ce85934b11c9e78399e1bb8ec7a568af9nd *) core: In maintainer mode, replace apr_palloc with a version that
81ef3d132c8f335006465f297c42319f8734825dnd initializes the allocated memory with non-zero values, except if
81ef3d132c8f335006465f297c42319f8734825dnd AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]
73291de2e17c97d3549f2f8aa085ca43d27e108and *) mod_policy: Add a new testing module to help server administrators
73291de2e17c97d3549f2f8aa085ca43d27e108and enforce a configurable level of protocol compliance on their
73291de2e17c97d3549f2f8aa085ca43d27e108and servers and application servers behind theirs. [Graham Leggett]
3caed8f01e7d67f3ad5d47cb28bb4e43131652fdjerenkrantz *) mod_firehose: Add a new debugging module able to record traffic
3caed8f01e7d67f3ad5d47cb28bb4e43131652fdjerenkrantz passing through the server in such a way that connections and/or
3caed8f01e7d67f3ad5d47cb28bb4e43131652fdjerenkrantz requests be reconstructed and replayed. [Graham Leggett]
36f2369ee230c310fed3b600e9e99cf5770804a3wrowe *) mod_noloris
e127d82e8afc2f885fe2183b68d4a110580d21dfjwoolley *) Simple MPM
fd99717a52886f7d9f9f73be2080d3fdc2ec4bd6nd *) mod_serf
fd99717a52886f7d9f9f73be2080d3fdc2ec4bd6nd [Apache 2.5.0-dev includes those bug fixes and changes with the
5fb2e8564729922524cd011b11e2d4f5d76f5a8dnd Apache 2.4.xx tree as documented below, except as noted.]
5fb2e8564729922524cd011b11e2d4f5d76f5a8dndChanges with Apache 2.4.x and later:
987c2c2ff2f19f306357f79d3280b347d96c470fnd *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup
987c2c2ff2f19f306357f79d3280b347d96c470fndChanges with Apache 2.2.x and later:
a4dd3688dd6645faf0c1c1bfb22017c8f03d5b24nd *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
f2fe083bb9fabd2af7eb39d4f154f27a451bb5a4ndChanges with Apache 2.0.x and later: