CHANGES revision fce4949fb0b309a5744afcd503c6ed2d35621ee2
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder -*- coding: utf-8 -*-
25cc5fbba63f84b47e389af749f55abbbde71c8cChristian MaederChanges with Apache 2.5.0
25cc5fbba63f84b47e389af749f55abbbde71c8cChristian Maeder *) mod_rewrite: Protect against looping with the [N] flag by enforcing a
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder default limit of 10000 iterations, and allowing each rule to change its
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder limit. [Eric Covener]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_ssl: Fix config merging of SSLOCSPEnable and SSLOCSPOverrideResponder.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder [Jeff Trawick]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) Add HttpContentLengthHeadZero and HttpExpectStrict directives.
f2f9df2e17e70674f0bf426ed1763c973ee4cde0Christian Maeder [Yehuda Sadeh <yehuda inktank com>, Justin Erenkrantz]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) core: Support named groups and backreferences within the LocationMatch,
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder DirectoryMatch, FilesMatch and ProxyMatch directives. [Graham Leggett]
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) mod_ssl: Remove the hardcoded algorithm-type dependency for the
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder SSLCertificateFile and SSLCertificateKeyFile directives, to enable
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder future algorithm agility, and deprecate the SSLCertificateChainFile
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder directive (obsoleted by SSLCertificateFile). [Kaspar Brand]
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) FreeBSD: Disable IPv4-mapped listening sockets by default for versions
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder 5+ instead of just for FreeBSD 5. PR 53824. [Jeff Trawick]
ce8b15da31cd181b7e90593cbbca98f47eda29d6Till Mossakowski *) mod_auth_form: Add a debug message when the fields on a form are not
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder recognised. [Graham Leggett]
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) mod_ssl: Add -t -DDUMP_CA_CERTS option which dumps the filenames of all
8f51f7ee933762df1a1e52caee78f5564fcf0730Christian Maeder configured SSL CA certificates to stdout the same way as DUMP_CERTS does.
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder *) mod_headers: Allow the "value" parameter of Header and RequestHeader to
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder contain an ap_expr expression if prefixed with "expr=". [Eric Covener]
8410667510a76409aca9bb24ff0eda0420088274Christian Maeder *) Add suspend_connection and resume_connection hooks to notify modules
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder when the thread/connection relationship changes. (Currently implemented
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder only for the Event MPM; should be implemented for all async MPMs.)
8410667510a76409aca9bb24ff0eda0420088274Christian Maeder [Jeff Trawick]
eee4b2ee739f163e09d6af6e45c025681e6c01a0Christian Maeder *) mod_ssl: Don't flush when an EOS is received. Prepares mod_ssl
eee4b2ee739f163e09d6af6e45c025681e6c01a0Christian Maeder to support write completion. [Graham Leggett]
eee4b2ee739f163e09d6af6e45c025681e6c01a0Christian Maeder *) prefork: Fix long delays when doing a graceful restart.
eee4b2ee739f163e09d6af6e45c025681e6c01a0Christian Maeder PR 54852 [Jim Jagielski, Arkadiusz Miskiewicz <arekm maven pl>]
eee4b2ee739f163e09d6af6e45c025681e6c01a0Christian Maeder *) core: Add parse_errorlog_arg callback to ap_errorlog_provider
eee4b2ee739f163e09d6af6e45c025681e6c01a0Christian Maeder to allow providers to check the ErrorLog argument. [Jan Kaluza]
eee4b2ee739f163e09d6af6e45c025681e6c01a0Christian Maeder *) core: Detect incomplete body in HTTP input filter and return
eee4b2ee739f163e09d6af6e45c025681e6c01a0Christian Maeder APR_INCOMPLETE. PR 55475 [Yann Ylavic <ylavic dev gmail com>]
eee4b2ee739f163e09d6af6e45c025681e6c01a0Christian Maeder *) mod_cgid: Use the servers Timeout for each read from a CGI script,
eee4b2ee739f163e09d6af6e45c025681e6c01a0Christian Maeder allow override with new CGIDRequestTimeout directive. PR43494
404166b9366552e9ec5abb87a37c76ec8a815fb7Klaus Luettich [Eric Covener, Toshikuni Fukaya <toshikuni-fukaya cybozu co jp>]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) core: Add missing Reason-Phrase in HTTP response headers.
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder PR 54946. [Rainer Jung]
e593b89bfd4952698dc37feced21cefe869d87a2Christian Maeder *) core: ensure any abnormal exit is reported to stderr if it's a tty.
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder PR 55670 [Nick Kew]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_proxy: Added support for unix domain sockets as the
e94af996596c87e8d835094ea6a186e69bf9c489Christian Maeder backend server endpoint [Jim Jagielski, Blaise Tarr
e94af996596c87e8d835094ea6a186e69bf9c489Christian Maeder <blaise tarr gmail com>]
a2d6702f18737cc5fff8e8631c08f221f8375c4bChristian Maeder *) mod_auth_form: Make sure the optional functions are loaded even when
c6fcd42c6d6d9dae8c7835c24fcb7ce8531a9050Christian Maeder the AuthFormProvider isn't specified. [Graham Leggett]
c55a0f77be7e88d3620b419ec8961f4379a586e3Klaus Luettich *) mod_lua: Let the Inter-VM get/set functions work with a global
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder shared memory pool instead of a per-process pool. [Daniel Gruno]
8cacad2a09782249243b80985f28e9387019fe40Christian Maeder *) ldap: Support ldaps when using the Microsoft LDAP SDK.
8cacad2a09782249243b80985f28e9387019fe40Christian Maeder PR 54626. [Jean-Frederic Clere]
d3ae0072823e2ef0d41d4431fcc768e66489c20eChristian Maeder *) mod_proxy: Add ap_connection_reusable() for checking if a connection
9e748851c150e1022fb952bab3315e869aaf0214Christian Maeder is reusable as of this point in processing. [Jeff Trawick]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_authnz_ldap: Change default value of AuthLDAPMaxSubGroupDepth to 0
9e748851c150e1022fb952bab3315e869aaf0214Christian Maeder to avoid performance problems when subgroups aren't in use. [Eric Covener]
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) mod_syslog: New module implementing syslog ap_error_log provider.
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder Previously, this code was part of core, now it's in separate module.
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) core: Add ap_errorlog_provider to make ErrorLog logging modular. Move
9e748851c150e1022fb952bab3315e869aaf0214Christian Maeder syslog support from core to new mod_syslog. [Jan Kaluza]
9e748851c150e1022fb952bab3315e869aaf0214Christian Maeder *) core: draft-ietf-httpbis-p1-messaging-23 corrections regarding
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder TE/CL conflicts. [Yann Ylavic <ylavic.dev gmail com>, Jim Jagielski]
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder *) mod_proxy_fcgi: Use apr_socket_timeout_get instead of hard-coded
fd09d0eee026d0db12542af37fd0fbd0790f0eeaChristian Maeder 30 seconds timeout. [Jan Kaluza]
fd09d0eee026d0db12542af37fd0fbd0790f0eeaChristian Maeder *) WinNT MPM: If ap_run_pre_connection() fails or sets c->aborted, don't
9e748851c150e1022fb952bab3315e869aaf0214Christian Maeder save the socket for reuse by the next worker as if it were an
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder APR_SO_DISCONNECTED socket. Restores 2.2 behavior. [Eric Covener]
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) mod_lua: Add a logging hook for modifying/skipping logs. [Daniel Gruno]
549b97cfbe3a6687db74440a550b68b2fc19a272Christian Maeder *) mod_status, mod_echo: Fix the display of client addresses.
549b97cfbe3a6687db74440a550b68b2fc19a272Christian Maeder They were truncated to 31 characters which is not enough for IPv6 addresses.
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder PR 54848 [Bernhard Schmidt <berni birkenwald de>]
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) mod_lua: If the first yield() of a LuaOutputFilter returns a string, it should
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder be prefixed to the response as documented. [Eric Covener]
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) mod_lua: Remove ETAG, Content-Length, and Content-MD5 when a LuaOutputFilter
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder is configured without mod_filter. [Eric Covener]
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) mod_lua: Register LuaOutputFilter scripts as changing the content and
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder content-length by default, when run my mod_filter. Previously,
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder growing or shrinking a response that started with Content-Length set
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder would require mod_filter and FilterProtocol change=yes. [Eric Covener]
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) mod_lua: Return a 500 error if a LuaHook* script doesn't return a
a3c6d8e0670bf2aa71bc8e2a3b1f45d56dd65e4cChristian Maeder numeric return code. [Eric Covener]
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder *) mod_authnz_fcgi: New module to enable FastCGI authorizer
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder applications to authenticate and/or authorize clients.
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder [Jeff Trawick]
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder *) core: Add ap_log_data(), ap_log_rdata(), etc. for logging buffers.
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder [Jeff Trawick]
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder *) mod_unique_id: Use output of the PRNG rather than IP address and
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder pid, avoiding sleep() call and possible DNS issues at startup,
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder plus improving randomness for IPv6-only hosts.
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder [Jan Kaluza <jkaluza redhat.com>]
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder *) mod_authnz_ldap: Support primitive LDAP servers that do not accept
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder filters, such as "SDBM-backed LDAP" on z/OS, by allowing a special
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder filter "none" to be specified in AuthLDAPURL. [Eric Covener]
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder *) mod_file_cache: mod_file_cache should be able to serve files that
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder haven't had a Content-Type set via e.g. mod_mime. [Eric Covener]
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder *) core: merge AllowEncodedSlashes from the base configuration into
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder virtual hosts. [Eric Covener]
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder *) AIX: Install DSO's with "cp" instead of "install" in instdso.sh
f2f9df2e17e70674f0bf426ed1763c973ee4cde0Christian Maeder [Eric Covener]
f2f9df2e17e70674f0bf426ed1763c973ee4cde0Christian Maeder *) mod_ldap: Don't keep retrying if a new LDAP connection times out.
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder [Eric Covener]
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder *) mod_deflate: permit compilation of mod_deflate against a zlib that has
f4505a64a089693012a3f5c3b1f12a82cd7a2a5aKlaus Luettich been configured with -D Z_PREFIX, which redefines the token "deflate".
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder [Eric Covener]
f4505a64a089693012a3f5c3b1f12a82cd7a2a5aKlaus Luettich *) mod_socache_shmcb.c: Remove arbitrary restriction on shared memory size
f4505a64a089693012a3f5c3b1f12a82cd7a2a5aKlaus Luettich previously limited to 64MB. [Jens Låås <jelaas gmail.com>]
5d4038657f6a63e131f5804af2f7957b69e15a43Klaus Luettich *) mod_auth_digest: Use the secret when generating nonces in all cases and
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder not only when AuthName is used in .htaccess files (this change may cause
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder problems if used with round robin load balancers). Don't regenerate the
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder secret on graceful restarts. PR 54637 [Stefan Fritsch]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) core: Remove apr_brigade_flatten(), buffering and duplicated code
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder from the HTTP_IN filter, parse chunks in a single pass with zero copy.
afa6ceaf4359ae437aaa6830949583143ace2752Christian Maeder Reduce memory usage by 48 bytes per request. [Graham Leggett]
97812b7ce9860bf514a8822a63503451795dbc65Klaus Luettich *) core: Stop the HTTP_IN filter from attempting to write error buckets
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder to the output filters, which is bogus in the proxy case. Create a
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder clean mapping from APR codes to HTTP status codes, and use it where
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder needed. [Graham Leggett]
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder *) mod_proxy: Ensure network errors detected by the proxy are returned as
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder 504 Gateway Timout as opposed to 502 Bad Gateway, in order to be
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder compliant with RFC2616 14.9.4 Cache Revalidation and Reload Controls.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) core, mod_ssl: Enable the ability for a module to reverse the sense of
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder a poll event from a read to a write or vice versa. This is a step on
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder the way to allow mod_ssl taking full advantage of the event MPM.
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder [Graham Leggett]
9df11f85fd7f8c4745d64464876e84ec4e263692Christian Maeder *) mod_ldap: LDAP connections used for authentication were not respecting
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers LDAPConnectionPoolTimeout. PR 54587
5b818f10e11fc79def1fdd5c8a080d64a6438d87Christian Maeder *) core: ap_rgetline_core now pulls from r->proto_input_filters.
5d4038657f6a63e131f5804af2f7957b69e15a43Klaus Luettich *) mod_proxy_html: process parsed comments immediately.
5d4038657f6a63e131f5804af2f7957b69e15a43Klaus Luettich Fixes bug where parsed comments may be lost. [Nick Kew]
c432483b64662e8db604a58758cd18ea7fa65659Christian Maeder *) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
857992065be4ed40a72c6296b6c0aec62ab4c5b9Christian Maeder *) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
eeb419aa20c97b4af973e97ee6ae77a8eed29e15Till Mossakowski *) core: Add option to add valgrind support. Use it to reduce false positive
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers warnings in mod_ssl. [Stefan Fritsch]
9e748851c150e1022fb952bab3315e869aaf0214Christian Maeder *) mod_authn_file, mod_authn_dbd, mod_authn_dbm, mod_authn_socache:
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder Cache the result of the most recent password hash verification for every
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder keep-alive connection. This saves some expensive calculations.
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder [Stefan Fritsch]
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder *) http: Remove support for Request-Range header sent by Navigator 2-3 and
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder MSIE 3. [Stefan Fritsch]
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder *) core, http: Extend HttpProtocol with an option to enforce stricter HTTP
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder conformance or to only log the found problems. [Stefan Fritsch]
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder *) core: Correctly parse an IPv6 literal host specification in an absolute
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder URL in the request line. [Stefan Fritsch]
afa6ceaf4359ae437aaa6830949583143ace2752Christian Maeder *) EventOpt MPM
8cacad2a09782249243b80985f28e9387019fe40Christian Maeder *) core: Add LogLevelOverride directive that allows to override the
afa6ceaf4359ae437aaa6830949583143ace2752Christian Maeder loglevel for clients from certain IPs. This also works for things
8cacad2a09782249243b80985f28e9387019fe40Christian Maeder like the SSL handshake where <If> LogLevel ... </If> is evaluated
afa6ceaf4359ae437aaa6830949583143ace2752Christian Maeder too late. [Stefan Fritsch]
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder *) core: Add new directive Warning to issue warnings from a configuration
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder file. Both Warning and Error now generate a timestamped log message.
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers [Fabien Coelho]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) ap_expr: Add SERVER_PROTOCOL_VERSION, ..._MAJOR, and ..._MINOR
9e748851c150e1022fb952bab3315e869aaf0214Christian Maeder variables. [Stefan Fritsch]
9e748851c150e1022fb952bab3315e869aaf0214Christian Maeder *) core: New directive RegisterHttpMethod for registering non-standard
fdb2d618144159395f7bf8ce3327b3c112a17dd3Till Mossakowski HTTP methods. [Stefan Fritsch]
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder *) core: New directive HttpProtocol which allows to disable HTTP/0.9
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder support. [Stefan Fritsch]
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder *) mod_allowhandlers: New module to forbid specific handlers for specific
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder directories. [Stefan Fritsch]
e2d849b4152a234bc0afaa2ab3a7c17d28de7565Christian Maeder *) mod_systemd: New module, for integration with systemd on Linux.
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder [Jan Kaluza <jkaluza redhat.com>]
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) WinNT MPM: Store pid and generation for each thread in scoreboard
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder to allow tracking of threads from exiting children via mod_status
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder or other such mechanisms. [Jeff Trawick]
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder - APIs: ap_log_pid(), ap_remove_pid, ap_read_pid()
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder - core: the scoreboard (ScoreBoardFile), pid file (PidFile), and
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder mutexes (Mutex)
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder - mod_cache: thundering herd lock directory
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder - mod_lbmethod_heartbeat, mod_heartmonitor: heartbeat storage file
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder - mod_ldap: shared memory cache
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder - mod_socache_shmcb, mod_socache_dbm: shared memory or dbm for cache
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder [Jeff Trawick]
53818ced114da21321063fff307aa41c1ab31dd3Achim Mahnke *) suexec: Add --enable-suexec-capabilites support on Linux, to use
53818ced114da21321063fff307aa41c1ab31dd3Achim Mahnke setuid/setgid capability bits rather than a setuid root binary.
53818ced114da21321063fff307aa41c1ab31dd3Achim Mahnke *) suexec: Add support for logging to syslog as an alternative to logging
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder to a file; configure --without-suexec-logfile --with-suexec-syslog.
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.
23ab8855c58adfbd03a0730584b917b24c603901Christian Maeder [Matthew Steele <mdsteele google.com>]
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
857992065be4ed40a72c6296b6c0aec62ab4c5b9Christian Maeder be compiled by the build compiler instead of the host compiler.
fdb2d618144159395f7bf8ce3327b3c112a17dd3Till Mossakowski Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder PR 51257. [Guenter Knauf]
7c99e334446bb97120e30e967baeeddfdd1278deKlaus Luettich *) core: In maintainer mode, replace apr_palloc with a version that
7c99e334446bb97120e30e967baeeddfdd1278deKlaus Luettich initializes the allocated memory with non-zero values, except if
7c99e334446bb97120e30e967baeeddfdd1278deKlaus Luettich AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]
7c99e334446bb97120e30e967baeeddfdd1278deKlaus Luettich *) mod_policy: Add a new testing module to help server administrators
7c99e334446bb97120e30e967baeeddfdd1278deKlaus Luettich enforce a configurable level of protocol compliance on their
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder servers and application servers behind theirs. [Graham Leggett]
b49276c9f50038e0bd499ad49f7bd6444566a834Christian Maeder *) mod_firehose: Add a new debugging module able to record traffic
9e748851c150e1022fb952bab3315e869aaf0214Christian Maeder passing through the server in such a way that connections and/or
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder requests be reconstructed and replayed. [Graham Leggett]
b10267ae0a6523b73113fc2dee9ea628266fce60Christian Maeder *) mod_noloris
7c99e334446bb97120e30e967baeeddfdd1278deKlaus Luettich *) Simple MPM
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder [Apache 2.5.0-dev includes those bug fixes and changes with the
b49276c9f50038e0bd499ad49f7bd6444566a834Christian Maeder Apache 2.4.xx tree as documented below, except as noted.]
b905126bab9454b89041f92b3c50bb9efc85e427Klaus LuettichChanges with Apache 2.4.x and later:
9e748851c150e1022fb952bab3315e869aaf0214Christian Maeder *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup
5c69cef4668bbd959d721668313a779126014d1eKlaus LuettichChanges with Apache 2.2.x and later:
08e5741dd8b6bf9b7419e89298e384e18bc57f64Christian Maeder *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
53818ced114da21321063fff307aa41c1ab31dd3Achim MahnkeChanges with Apache 2.0.x and later: