CHANGES revision fcee7ee83b1e48f2655c79f176d1ea7627e19937
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams -*- coding: utf-8 -*-
6858c16497a49284f9fcba5fa12093b121306ca6gary.williamsChanges with Apache 2.3.0
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams[ When backported to 2.2.x, remove entry from this file ]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_authn_dbd: Disambiguate and tidy database authentication
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams error messages. PR 43210. [Chris Darroch, Phil Endecott
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams <spam_from_apache_bugzilla chezphil.org>]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_cache: Handle If-Range correctly if the cached resource was stale.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams PR 44579 [Ruediger Pluem]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_speling: remove regression from 1.3/2.0 behavior and
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams drop dependency between mod_speling and AcceptPathInfo.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams PR 43562 [Jose Kahan <jose w3.org>]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_ldap: Correctly return all requested attribute values
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams when some attributes have a null value.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams PR 44560 [Anders Kaseorg <anders kaseorg.com>]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) core: check symlink ownership if both FollowSymlinks and
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams SymlinksIfOwnerMatch are set [Nick Kew]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) core: fix origin checking in SymlinksIfOwnerMatch
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams PR 36783 [Robert L Mathews <rob-apache.org.bugs tigertech.net>]
87f13d7c78b4de35c94c8b4f84d68453e23e1994csovant *) rotatelogs: Added '-f' option to force rotatelogs to create the
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams logfile as soon as started, and not wait until it reads the
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams first entry. [Jim Jagielski]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_proxy: Do not try a direct connection if the connection via a
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams remote proxy failed before and the request has a request body.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams [Ruediger Pluem]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_substitute: The default is now flattening the buckets after
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams each substitution. This was mostly done to abide by the
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams Principle Of Least Astonishment. The newly added 'q' flag allows for
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams the quicker, more efficient bucket-splitting if the user so
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams desires. [Jim Jagielski]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) Added 'disablereuse' option for ProxyPass which, essentially,
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams disables connection pooling for the backend servers.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams [Jim Jagielski]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) Activate mod_cache, mod_file_cache and mod_disc_cache as part of the
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams 'most' set for '--enable-modules' and '--enable-shared-mods'. Include
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams mod_mem_cache in 'all' as well. [Dirk-Willem van Gulik]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) Also install mod_so.h, mod_rewrite.h and mod_cache.h; as these
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams contain public function declarations which are useful for
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams third party module authors. PR 42431 [Dirk-Willem van Gulik].
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_dir, mod_negotiation: pass the output filter information
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams to newly created sub requests; as these are later on used
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams as true requests with an internal redirect. This allows for
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams mod_cache et.al. to trap the results of the redirect.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams [Dirk-Willem van Gulik, Ruediger Pluem]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) ab: Use a 64 bit unsigned int instead of a signed long to count the
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams bytes transferred to avoid integer overflows. PR 44346 [Ruediger Pluem]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_proxy_ajp: Do not retry request in the case that we either failed to
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams sent a part of the request body or if the request is not idempotent.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams PR 44334 [Ruediger Pluem]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) ProxyPassReverse is now balancer aware. [Jim Jagielski]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) rotatelogs: Don't leak memory when reopening the logfile.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams PR 40183 [Ruediger Pluem, Takashi Sato <serai lans-tv.com>]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_ldap: Add support (taking advantage of the new APR capability)
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams for ldap rebind callback while chasing referrals. This allows direct
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams searches on LDAP servers (in particular MS Active Directory 2003+)
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams using referrals without the use of the global catalog.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams PRs 26538, 40268, and 42557 [Paul J. Reder]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) ab: Do not try to read non existing response bodies of HEAD requests.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams PR 34275 [Takashi Sato <serai lans-tv.com>]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) Support chroot on Unix-family platforms
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams PR 43596 [Dimitar Pashev <mitko banksoft-bg.com>]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_proxy_http: Return HTTP status codes instead of apr_status_t
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams values for errors encountered while forwarding the request body
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams PR 44165 [Eric Covener]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_ssl: Added server name indication support (SNI, RFC 4366).
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams PR 34607. [Kaspar Brand <asfbugz velox.ch>]. A test configuration
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams can be created with test/make_sni.sh [Dirk-Willem van Gulik].
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) ApacheMonitor.exe: Introduce --kill argument for use by the
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams installer. This will permit the installation tool to remove
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams all running instances before attempting to remove the .exe.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams [William Rowe]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_proxy: Lower memory consumption for short lived connections.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams PR 44026. [Ruediger Pluem]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_proxy: Keep connections to the backend persistent in the HTTPS case.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams [Ruediger Pluem]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) rotatelogs: Improve atomicity when using -l and cleaup code.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams PR 44004 [Rainer Jung]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_ssl: Add support for OCSP validation of client certificates.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams PR 41123. [Marc Stern <marc.stern approach.be>, Joe Orton]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_unique_id: Fix timestamp value in UNIQUE_ID.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams PR 37064 [Kobayashi <kobayashi firstserver.co.jp>]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_serf: New module for Reverse Proxying. [Paul Querna]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) core: Add the option to keep aside a request body up to a certain
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams size that would otherwise be discarded, to be consumed by filters
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams such as mod_include. When enabled for a directory, POST requests
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams to shtml files can be passed through to embedded scripts as POST
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams requests, rather being downgraded to GET requests. [Graham Leggett]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_ssl: Fix TLS upgrade (RFC 2817) support. PR 41231. [Joe Orton]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) scoreboard: Correctly declare ap_time_process_request.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) core; scoreboard: ap_get_scoreboard_worker(sbh) now takes the sbh member
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams from the connection rec, ap_get_scoreboard_worker(proc, thread) will now
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams provide the unusual legacy lookup. [William Rowe]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mpm winnt: fix null pointer dereference
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams PR 42572 [Davi Arnaut]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) core: reinstate location walk to fix config for subrequests
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams PR 41960 [Jose Kahan <jose w3.org>]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_log_config: Add format options for %p so that the actual local
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams or remote port can be logged. PR 43415. [Adam Hasselbalch Hansen
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams <ahh@one.com>, Ruediger Pluem, Jeff Trawick]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_authnz_ldap, mod_authn_dbd: Tidy up the code to expose authn
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams parameters to the environment. Improve portability to
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams EBCDIC machines by using apr_toupper(). [Martin Kraemer]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_ldap, mod_authnzldap: Add support for nested groups (i.e. the ability
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams to authorize an authenticated user via a "require ldap-group X" directive
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams where the user is not in group X, but is in a subgroup contained in X.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams PR 42891 [Paul J. Reder]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_ssl: Add support for caching SSL Sessions in memcached. [Paul Querna]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) ab: Add -r option to continue after socket receive errors.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams [Filip Hanik <devlist hanik.com>]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_ldap: Fix the search limit parameter to ldap_search_ext_s()
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams for SDKs that define LDAP_NO_LIMIT to something other than -1.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams [David Jones <oscaremma gmail.com>]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) apxs: Enhance -q flag to print all known variables and their values
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams when invoked without variable name(s).
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams [William Rowe, Sander Temme]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) apxs: Eliminate run-time check for mod_so. PR 40653.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams [David M. Lee <dmlee crossroads.com>]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) beos MPM: Create pmain pool and run modules' child_init hooks when
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams entering ap_mpm_run(), then destroy pmain when exiting ap_mpm_run().
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams [Chris Darroch]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) netware MPM: Destroy pmain pool when exiting ap_mpm_run() so that
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams cleanups registered in modules' child_init hooks are performed.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams [Chris Darroch]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_dbd: Stash DBD connections in request_config of initial request
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams only, or else sub-requests and internal redirections may cause
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams entire DBD pool to be stashed in a single HTTP request. [Chris Darroch]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) Fix issue which could cause error messages to be written to access logs
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams on Win32. PR 40476. [Tom Donovan <Tom.Donovan acm.org>]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) The LockFile directive, which specifies the location of
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams the accept() mutex lockfile, is deprecated. Instead, the
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams AcceptMutex directive now takes an optional lockfile
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams location parameter, ala SSLMutex. [Jim Jagielski]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_authn_dbd: Export any additional columns queried in the SQL select
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams into the environment with the name AUTHENTICATE_<COLUMN>. This brings
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams mod_authn_dbd behaviour in line with mod_authnz_ldap. [Graham Leggett]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_dbd: Key the storage of prepared statements on the hex string
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams value of server_rec, rather than the server name, as the server name
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams may change (eg when the server name is set) at any time, causing
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams weird behaviour in modules dependent on mod_dbd. [Graham Leggett]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_proxy_fcgi: Added win32 build. [Mladen Turk]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) sendfile_nonblocking() takes the _brigade_ as an argument, gets
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams the first bucket from the brigade, finds it not to be a FILE
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams bucket and barfs. The fix is to pass a bucket rather than a brigade.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams [Niklas Edmundsson <nikke acc.umu.se>]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_rewrite: support rewritemap by SQL query [Nick Kew]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) ap_get_server_version() has been removed. Third-party modules must
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams now use ap_get_server_banner() or ap_get_server_description().
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams [Jeff Trawick]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) All MPMs: Introduce a check_config phase between pre_config and
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams open_logs, to allow modules to review interdependent configuration
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams directive values and adjust them while messages can still be logged
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams to the console. Handle relevant MPM directives during this phase
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams and format messages for both the console and the error log, as
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams appropriate. [Chris Darroch]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_proxy: don't URLencode tilde in path component
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams [Stijn Hoop <stijn sandcat.nl>]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mpm_winnt: Fix return values from wait_for_many_objects.
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams The return value is index to the signaled thread in the
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams creted_threads array. We can not use WAIT_TIMEOUT because
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams his value is defined as 258, thus limiting the MaxThreads
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams to that value. [Mladen Turk]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) core: Do not allow internal redirects like the DirectoryIndex of mod_dir
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams to circumvent the symbolic link checks imposed by FollowSymLinks and
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams SymLinksIfOwnerMatch. [Nick Kew, Ruediger Pluem, William Rowe]
6858c16497a49284f9fcba5fa12093b121306ca6gary.williams *) mod_proxy: Support environment variable interpolation in reverse
[Darryl Miles <darryl darrylmiles.org>]
[Niklas Edmundsson <nikke acc.umu.se>]
PR 39713. [Owen Taylor <otaylor redhat.com>]
final name. [Davi Arnaut <davi haxent.com.br>]
[Markus Schiegl <ms schiegl.com>]
*) Remove incorrect comments from scoreboard.h regarding conditional
[Chris Darroch <chrisd pearsoncmg.com>]
in ap_init_scoreboard(). [Chris Darroch <chrisd pearsoncmg.com>]
[Chris Darroch <chrisd pearsoncmg.com>]
and 'Reject' to mod_authz_core. The new directives introduce 'AND/OR'
*) mod_authz_dbd: SQL authz with Login/Session support [Nick Kew]
Apache 2.2.xx tree as documented, and except as noted, below.]
Changes with Apache 2.2.x and later:
Changes with Apache 2.0.x and later:
Changes with Apache 1.3.x and later: