CHANGES revision 10abdcbd7b30d957d15c61ea8100ba97a627ac95
43b4c41fbb07705c9df321221ab9cb9832460407Christian Maeder -*- coding: utf-8 -*-
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian MaederChanges with Apache 2.3.3
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) Add support for HTTP PUT to ab. [Jeff Barnes <jbarnesweb yahoo.com>]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) ServerTokens now accepts 'Off' which disables sending of
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder Server: header and sets SERVER_SOFTWARE to empty. It also accepts
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder 'Set' which allows the user to specify any string as the Server:
43b4c41fbb07705c9df321221ab9cb9832460407Christian Maeder name. [Jim Jagielski]
f4a2a20e49f41b2afa657e5e64d9e349c7faa091Christian Maeder *) mod_headers: generalise the envclause to support expression
f2f9df2e17e70674f0bf426ed1763c973ee4cde0Christian Maeder evaluation with ap_expr parser [Nick Kew]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_cache: Introduce the thundering herd lock, a mechanism to keep
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder the flood of requests at bay that strike a backend webserver as
68d10d143f29fcff3c637ba24f90e983995ceae6Christian Maeder a cached entity goes stale. [Graham Leggett]
a53841f6d6e86ac751c12a33dc8aadf53f59d977Klaus Luettich *) mod_auth_digest: Fix usage of shared memory and re-enable it.
a53841f6d6e86ac751c12a33dc8aadf53f59d977Klaus Luettich PR 16057 [Dan Poirier]
a737caf82de97c1907027c03e4b4509eb492b4b8Christian Maeder *) Preserve Port information over internal redirects
68d10d143f29fcff3c637ba24f90e983995ceae6Christian Maeder PR 35999 [Jonas Ringh <jonas.ringh cixit.se>]
01e383014b555bbcf639c0ca60c5810b3eff83c0Christian Maeder *) Proxy: unable to connect to a backend is SERVICE_UNAVAILABLE,
3b06e23643a9f65390cb8c1caabe83fa7e87a708Till Mossakowski rather than BAD_GATEWAY or (especially) NOT_FOUND.
9dac90ec2be2a72e03893095461960d483fe2fc2Christian Maeder PR 46971 [evanc nortel.com]
7bdc9c0783f9c8c830346e6baeac9306eee1a622Christian Maeder *) Various modules: Do better checking of pollset operations in order to
ce8b15da31cd181b7e90593cbbca98f47eda29d6Till Mossakowski avoid segmentation faults if they fail. PR 46467
e7757995211bd395dc79d26fe017d99375f7d2a6Christian Maeder [Stefan Fritsch <sf sfritsch.de>]
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder *) mod_autoindex: Correctly create an empty cell if the description
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder for a file is missing. PR 47682 [Peter Poeml <poeml suse.de>]
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder *) ab: Fix broken error messages after resolver or connect() failures.
8410667510a76409aca9bb24ff0eda0420088274Christian Maeder [Jeff Trawick]
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder *) SECURITY: CVE-2009-1890 (cve.mitre.org)
8410667510a76409aca9bb24ff0eda0420088274Christian Maeder Fix a potential Denial-of-Service attack against mod_proxy in a
404166b9366552e9ec5abb87a37c76ec8a815fb7Klaus Luettich reverse proxy configuration, where a remote attacker can force a
b1f59a4ea7c96f4c03a4d7cfcb9c5e66871cfbbbChristian Maeder proxy process to consume CPU time indefinitely. [Nick Kew, Joe Orton]
4d56f2fa72e4aec20eb827c11ed49c8cbb7014bdChristian Maeder *) SECURITY: CVE-2009-1191 (cve.mitre.org)
4cb215739e9ab13447fa21162482ebe485b47455Christian Maeder mod_proxy_ajp: Avoid delivering content from a previous request which
8ef75f1cc0437656bf622cec5ac9e8ea221da8f2Christian Maeder failed to send a request body. PR 46949 [Ruediger Pluem]
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder *) htdbm: Fix possible buffer overflow if dbm database has very
356fa49fe3e6a8398f92d13e9f920d0f093697ecChristian Maeder long values. PR 30586 [Dan Poirier]
55adfe57a4de1f36adc3e3bfc16f342e44a7d444Christian Maeder *) core: Return APR_EOF if request body is shorter than the length announced
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder by the client. PR 33098 [ Stefan Fritsch <sf sfritsch.de>]
f4a2a20e49f41b2afa657e5e64d9e349c7faa091Christian Maeder *) mod_suexec: correctly set suexec_enabled when httpd is run by a
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder non-root user and may have insufficient permissions.
e593b89bfd4952698dc37feced21cefe869d87a2Christian Maeder PR 42175 [Jim Radford <radford blackbean.org>]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_ssl: Fix SSL_*_DN_UID variables to use the 'userID' attribute
7cc09dd93962a2155c34d209d1d4cd7d7b838264Christian Maeder type. PR 45107. [Michael Ströder <michael stroeder.com>,
1aee4aaddde105264c1faf394d88e302c05094ffChristian Maeder Peter Sylvester <peter.sylvester edelweb.fr>]
51d769d55d88dfa88bdf54bee78d8fa85a2deba8Christian Maeder *) mod_proxy_http: fix case sensitivity checking transfer encoding
f041c9a6bda23de33a38490e35b831ae18d96b45Christian Maeder PR 47383 [Ryuzo Yamamoto <ryuzo.yamamoto gmail.com>]
51d769d55d88dfa88bdf54bee78d8fa85a2deba8Christian Maeder *) mod_alias: ensure Redirect issues a valid URL.
1aee4aaddde105264c1faf394d88e302c05094ffChristian Maeder PR 44020 [Håkon Stordahl <hakon stordahl.org>]
c3053d57f642ca507cdf79512e604437c4546cb9Christian Maeder *) mod_dir: add DefaultHandler directive, to enable admin to specify
dcbd32289a7bdf1e6edd06c6ab0698c6a9dbf37aChristian Maeder an action to happen when a URL maps to no file, without resorting
f4a2a20e49f41b2afa657e5e64d9e349c7faa091Christian Maeder to ErrorDocument or mod_rewrite. PR 47184 [Nick Kew]
dcbd32289a7bdf1e6edd06c6ab0698c6a9dbf37aChristian Maeder *) mod_cgid: Do not leak the listening Unix socket file descriptor to the
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder CGI process. PR 47335 [Kornél Pál <kornelpal gmail.com>]
1aee4aaddde105264c1faf394d88e302c05094ffChristian Maeder *) mod_rewrite: Remove locking for writing to the rewritelog.
356fa49fe3e6a8398f92d13e9f920d0f093697ecChristian Maeder PR 46942 [Dan Poirier <poirier pobox.com>]
4ed0007ac9caea5b468f202521352d153481423cChristian Maeder *) mod_alias: check sanity in Redirect arguments.
356fa49fe3e6a8398f92d13e9f920d0f093697ecChristian Maeder PR 44729 [Sönke Tesch <st kino-fahrplan.de>, Jim Jagielski]
0206ab93ef846e4e0885996d052b9b73b9dc66b0Christian Maeder *) mod_proxy_http: fix Host: header for literal IPv6 addresses.
f13d1e86e58da53680e78043e8df182eed867efbChristian Maeder PR 47177 [Carlos Garcia Braschi <cgbraschi gmail.com>]
79e80c4b3f0ebb337d84415a50f29ccfc793e68bChristian Maeder *) mod_cache: Add CacheIgnoreURLSessionIdentifiers directive to ignore
79e80c4b3f0ebb337d84415a50f29ccfc793e68bChristian Maeder defined session identifiers encoded in the URL when caching.
79e80c4b3f0ebb337d84415a50f29ccfc793e68bChristian Maeder [Ruediger Pluem]
36f63902db2b3463faa9f59912ad106e2d5aaa24Klaus Luettich *) mod_rewrite: Fix the error string returned by RewriteRule.
f04e8f3ff56405901be968fd4c6e9769239f1a9bKlaus Luettich RewriteRule returned "RewriteCond: bad flag delimiters" when the 3rd
f8e1a1eca871a26a535a4ee7d51902ba94b1db1eChristian Maeder argument of RewriteRule was not started with "[" or not ended with "]".
8cacad2a09782249243b80985f28e9387019fe40Christian Maeder PR 45082 [Vitaly Polonetsky <m_vitaly topixoft.com>]
a7c27282e71cf4505026645f96d4f5cb8a284e32Christian Maeder *) Windows: Fix usage message.
363939beade943a02b31004cea09dec34fa8a6d9Christian Maeder [Rainer Jung]
f04e8f3ff56405901be968fd4c6e9769239f1a9bKlaus Luettich *) apachectl: When passing through arguments to httpd in
797ccd67cb8ae127be097cd43448801b673e3b69Christian Maeder non-SysV mode, use the "$@" syntax to preserve arguments.
797ccd67cb8ae127be097cd43448801b673e3b69Christian Maeder [Eric Covener]
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder *) mod_dbd: add DBDInitSQL directive to enable SQL statements to
d3ae0072823e2ef0d41d4431fcc768e66489c20eChristian Maeder be run when a connection is opened. PR 46827
9e748851c150e1022fb952bab3315e869aaf0214Christian Maeder [Marko Kevac <mkevac gmail.com>]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_cgid: Improve handling of long AF_UNIX socket names (ScriptSock).
9e748851c150e1022fb952bab3315e869aaf0214Christian Maeder PR 47037. [Jeff Trawick]
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) mod_proxy_ajp: Check more strictly that the backend follows the AJP
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder protocol. [Mladen Turk]
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) mod_proxy_ajp: Forward remote port information by default.
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder [Rainer Jung]
64d532f676706149814b58c97cd064ca5993cccfChristian Maeder *) Allow MPMs to be loaded dynamically, as with most other modules. This
9e748851c150e1022fb952bab3315e869aaf0214Christian Maeder required changes to the MPM interfaces. Removed: mpm.h, mpm_default.h
9e748851c150e1022fb952bab3315e869aaf0214Christian Maeder (as an installed header), APACHE_MPM_DIR, MPM_NAME, ap_threads_per_child,
f1541d4a151dbd08002dbd14e7eb1d5dde253689Christian Maeder ap_max_daemons_limit, ap_my_generation, etc. ap_mpm_query() can't be
498aa48bdb931ab50990d3b74318a5db2312186cChristian Maeder called until after the register-hooks phase. [Jeff Trawick]
6dc9bc98d0854fe2e3dd3bfc4275096a0c28ee1cChristian Maeder *) mod_ssl: Add SSLProxyCheckPeerExpire and SSLProxyCheckPeerCN directives
6dc9bc98d0854fe2e3dd3bfc4275096a0c28ee1cChristian Maeder to enable stricter checking of remote server certificates.
6dc9bc98d0854fe2e3dd3bfc4275096a0c28ee1cChristian Maeder [Ruediger Pluem]
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder *) ab: Fix a 100% CPU loop on platforms where a failed non-blocking connect
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder returns EINPROGRESS and a subsequent poll() returns only POLLERR.
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder Observed on HP-UX. [Eric Covener]
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder *) Remove broken support for BeOS, OS/2, TPF, and even older platforms such
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder as A/UX, Next, and Tandem. [Jeff Trawick]
9e748851c150e1022fb952bab3315e869aaf0214Christian Maeder *) mod_proxy_ftp: Add ProxyFtpListOnWildcard directive to allow files with
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder globbing characters to be retrieved instead of converted into a
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder directory listing. PR 46789 [Dan Poirier <poirier pobox.com>]
03a6d8f77f588dc5d3dd6653797fa2362efa1751Christian Maeder *) Provide ap_retained_data_create()/ap_retained_data_get() for preservation
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder of module state across unload/load. [Jeff Trawick]
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder *) mod_substitute: Fix a memory leak. PR 44948
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder [Dan Poirier <poirier pobox.com>]
bc8cbf12aa172bf5673b92a9e7a0151d4aa4c315Christian MaederChanges with Apache 2.3.2
2d130d212db7208777ca896a7ecad619a8944971Christian Maeder *) mod_mime_magic: Fix detection of compressed content. [Rainer Jung]
a5e5b8c3e5c11177e5034ef2423813a5d28979edChristian Maeder *) mod_negotiation: Escape pathes of filenames in 406 responses to avoid
2d130d212db7208777ca896a7ecad619a8944971Christian Maeder HTML injections and HTTP response splitting. PR 46837.
bc8cbf12aa172bf5673b92a9e7a0151d4aa4c315Christian Maeder [Geoff Keating <geoffk apple.com>]
f4a2a20e49f41b2afa657e5e64d9e349c7faa091Christian Maeder *) mod_ssl: add support for type-safe STACK constructs in OpenSSL
2d130d212db7208777ca896a7ecad619a8944971Christian Maeder development HEAD. PR 45521. [Kaspar Brand, Sander Temme]
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) ab: Fix maintenance of the pollset to resolve EALREADY errors
6ff7a91875597d6e4dfaa68c79187d01473e8341Christian Maeder with kqueue (BSD/OS X) and excessive CPU with event ports (Solaris).
6ff7a91875597d6e4dfaa68c79187d01473e8341Christian Maeder PR 44584. Use APR_POLLSET_NOCOPY for better performance with some
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder pollset implementations. [Jeff Trawick]
4017ebc0f692820736d796af3110c3b3018c108aChristian Maeder *) mod_disk_cache: The module now turns off sendfile support if
a9b59eb2ce961014974276cdae0e9df4419bd212Christian Maeder 'EnableSendfile off' is defined globally. [Lars Eilebrecht]
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) mod_deflate: Adjust content metadata before bailing out on 304
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder responses so that the metadata does not differ from 200 response.
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder [Roy T. Fielding]
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) mod_deflate: Fix creation of invalid Etag headers. We now make sure
a3c6d8e0670bf2aa71bc8e2a3b1f45d56dd65e4cChristian Maeder that the Etag value is properly quoted when adding the gzip marker.
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder PR 39727, 45023. [Lars Eilebrecht, Roy T. Fielding]
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder *) Added 20x22 icons for ODF, SVG, and XML documents. PR 37185.
363939beade943a02b31004cea09dec34fa8a6d9Christian Maeder [Peter Harlow]
363939beade943a02b31004cea09dec34fa8a6d9Christian Maeder *) Disabled DefaultType directive and removed ap_default_type()
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder from core. We now exclude Content-Type from responses for which
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder a media type has not been configured via mime.types, AddType,
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder ForceType, or some other mechanism. PR 13986. [Roy T. Fielding]
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder *) mod_rewrite: Add IPV6 variable to RewriteCond
4017ebc0f692820736d796af3110c3b3018c108aChristian Maeder [Ryan Phillips <ryan-apache trolocsis.com>]
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder *) core: Enhance KeepAliveTimeout to support a value in milliseconds.
0be0db405c49906bd7057255069bf6df53395ac9Klaus Luettich PR 46275. [Takashi Sato]
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder *) rotatelogs: Allow size units B, K, M, G and combination of
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder time and size based rotation. [Rainer Jung]
f2f9df2e17e70674f0bf426ed1763c973ee4cde0Christian Maeder *) rotatelogs: Add flag for verbose (debug) output. [Rainer Jung]
d946c1bfdd7d58aa7c023efe864d5999eb44a61bChristian Maeder *) mod_ssl: Fix merging of SSLRenegBufferSize directive. PR 46508
d946c1bfdd7d58aa7c023efe864d5999eb44a61bChristian Maeder *) core: Translate the the status line to ASCII on EBCDIC platforms in
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder ap_send_interim_response() and for locally generated "100 Continue"
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder responses. [Eric Covener]
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder *) prefork: Fix child process hang during graceful restart/stop in
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder configurations with multiple listening sockets. PR 42829. [Joe Orton,
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder Jeff Trawick]
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder *) mod_session_crypto: Ensure that SessionCryptoDriver can only be
ca074a78b8dcccbb8c419586787882f98d0c6163Christian Maeder set in the global scope. [Graham Leggett]
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder *) mod_ext_filter: We need to detect failure to startup the filter
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder program (a mangled response is not acceptable). Fix to detect
f1541d4a151dbd08002dbd14e7eb1d5dde253689Christian Maeder failure, and offer configuration option either to abort or
6dc9bc98d0854fe2e3dd3bfc4275096a0c28ee1cChristian Maeder to remove the filter and continue.
d946c1bfdd7d58aa7c023efe864d5999eb44a61bChristian Maeder PR 41120 [Nick Kew]
363939beade943a02b31004cea09dec34fa8a6d9Christian Maeder *) mod_session_crypto: Rewrite the session_crypto module against the
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder apr_crypto API. [Graham Leggett]
363939beade943a02b31004cea09dec34fa8a6d9Christian Maeder *) mod_auth_form: Fix a pool lifetime issue, don't remove the subrequest
363939beade943a02b31004cea09dec34fa8a6d9Christian Maeder until the main request is cleaned up. [Graham Leggett]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian MaederChanges with Apache 2.3.1
f4505a64a089693012a3f5c3b1f12a82cd7a2a5aKlaus Luettich *) ap_slotmem: Add in new slot-based memory access API impl., including
e7757995211bd395dc79d26fe017d99375f7d2a6Christian Maeder 2 providers (mod_sharedmem and mod_plainmem) [Jim Jagielski,
13731dfbb4b6a31b35dd210e832e920065b6ac45Christian Maeder Jean-Frederic Clere, Brian Akins <brian.akins turner.com>]
b9b331bded61b8860edacac91df16ee19e465b42Christian Maeder *) mod_include: support generating non-ASCII characters as entities in SSI
d0188a95f8da2e660fbede7dac291e2c2e9e9da8Christian Maeder PR 25202 [Nick Kew]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) core/utils: Enhance ap_escape_html API to support escaping non-ASCII chars
e7757995211bd395dc79d26fe017d99375f7d2a6Christian Maeder PR 25202 [Nick Kew]
42b12fba6830ada5057949f825fc27edf5574e5fChristian Maeder *) mod_rewrite: fix "B" flag breakage by reverting r5589343
42b12fba6830ada5057949f825fc27edf5574e5fChristian Maeder PR 45529 [Bob Ionescu <bobsiegen googlemail.com>]
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder *) CGI: return 504 (Gateway timeout) rather than 500 when a script
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder times out before returning status line/headers.
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder PR 42190 [Nick Kew]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_cgid: fix segfault problem on solaris.
93f5b72fdb9ee734caa750b43dd79bbb590dcd73Christian Maeder PR 39332 [Masaoki Kobayashi <masaoki techfirm.co.jp>]
93f5b72fdb9ee734caa750b43dd79bbb590dcd73Christian Maeder *) mod_proxy_scgi: Added. [André Malo]
328a85c807f2a95c3f147d10b05927eaf862ebebChristian Maeder *) mod_cache: Introduce 'no-cache' per-request environment variable
a6db617ca58eb6a0587b6366e913107dfecb71b5Heng Jiang to prevent the saving of an otherwise cacheable response.
06dd4e7c29f33f6122a910719e3bd9062256e397Andy Gimblett [Eric Covener]
5b818f10e11fc79def1fdd5c8a080d64a6438d87Christian Maeder *) mod_rewrite: Introduce DiscardPathInfo|DPI flag to stop the troublesome
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers way that per-directory rewrites append the previous notion of PATH_INFO
819e29dba060687cf391e444e0f6ff88c1908cc3Christian Maeder to each substitution before evaluating subsequent rules.
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder PR 38642 [Eric Covener]
f9e0b18852b238ddb649d341194e05d7200d1bbeChristian Maeder *) mod_cgid: Do not add an empty argument when calling the CGI script.
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers PR 46380 [Ruediger Pluem]
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder *) scoreboard: Remove unused sb_type from process_score.
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder [Torsten Foertsch <torsten.foertsch gmx.net>, Chris Darroch]
383aa66e5142365fe9b1f88b18c1da5b27cc8c04Christian Maeder *) mod_ssl: Add SSLRenegBufferSize directive to allow changing the
383aa66e5142365fe9b1f88b18c1da5b27cc8c04Christian Maeder size of the buffer used for the request-body where necessary
383aa66e5142365fe9b1f88b18c1da5b27cc8c04Christian Maeder during a per-dir renegotiation. PR 39243. [Joe Orton]
383aa66e5142365fe9b1f88b18c1da5b27cc8c04Christian Maeder *) mod_proxy_fdpass: New module to pass a client connection over to a separate
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder process that is reading from a unix daemon socket.
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder *) mod_ssl: Improve environment variable extraction to be more
f9e0b18852b238ddb649d341194e05d7200d1bbeChristian Maeder efficient and to correctly handle DNs with duplicate tags.
f9e0b18852b238ddb649d341194e05d7200d1bbeChristian Maeder PR 45975. [Joe Orton]
819e29dba060687cf391e444e0f6ff88c1908cc3Christian Maeder *) Remove the obsolete serial attribute from the RPM spec file. Compile
819e29dba060687cf391e444e0f6ff88c1908cc3Christian Maeder against the external pcre. Add missing binaries fcgistarter, and
819e29dba060687cf391e444e0f6ff88c1908cc3Christian Maeder mod_socache* and mod_session*. [Graham Leggett]
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian MaederChanges with Apache 2.3.0
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder *) mod_ratelimit: New module to do bandwidth rate limiting. [Paul Querna]
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder *) Remove X-Pad header which was added as a work around to a bug in
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder Netscape 2.x to 4.0b2. [Takashi Sato <takashi lans-tv.com>]
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder *) Add DTrace Statically Defined Tracing (SDT) probes.
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder [Theo Schlossnagle <jesus omniti.com>, Paul Querna]
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder *) mod_proxy_balancer: Move all load balancing implementations
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder as individual, self-contained mod_proxy submodules under
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder *) Rename APIs to include ap_ prefix:
1842453990fed8a1bd7a5ac792d7982c1d2bfcd5Christian Maeder find_child_by_pid -> ap_find_child_by_pid
1842453990fed8a1bd7a5ac792d7982c1d2bfcd5Christian Maeder suck_in_APR -> ap_suck_in_APR
1842453990fed8a1bd7a5ac792d7982c1d2bfcd5Christian Maeder sys_privileges_handlers -> ap_sys_privileges_handlers
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder unixd_accept -> ap_unixd_accept
986d3f255182539098a97ac86da9eeee5b7a72e3Christian Maeder unixd_config -> ap_unixd_config
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder unixd_killpg -> ap_unixd_killpg
4561227a776bdf0ab679b19fb92f1eaaed8786f7Christian Maeder unixd_set_global_mutex_perms -> ap_unixd_set_global_mutex_perms
01e278bdd7dce13b9303ed3d79683d83c89d09f9Liam O'Reilly unixd_set_proc_mutex_perms -> ap_unixd_set_proc_mutex_perms
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder unixd_set_rlimit -> ap_unixd_set_rlimit
5ad5dffe06818a13e1632b1119fbca7881085fc1Dominik Luecke [Paul Querna]
8c812cd83569e973f10cf69a342424ceabc07af9Christian Maeder *) core: When the ap_http_header_filter processes an error bucket, cleanup
8c812cd83569e973f10cf69a342424ceabc07af9Christian Maeder the passed brigade before returning AP_FILTER_ERROR down the filter
3a611630351f30bdd5b0ec4d812269b37545e5d3Dominik Luecke chain. This unambiguously ensures the same error bucket isn't revisited
00ccf62b4570513e965eb156ab5916ec816c5d2bDominik Luecke [Ruediger Pluem]
05a206508bc898f87fe6ab6e069814df3c29d303Dominik Luecke *) mod_lbmethod_heartbeat: New module to load balance mod_proxy workers
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder based on heartbeats. [Paul Querna]
b1f59a4ea7c96f4c03a4d7cfcb9c5e66871cfbbbChristian Maeder *) mod_heartmonitor: New module to collect heartbeats, and write out a file
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder so that other modules can load balance traffic as needed. [Paul Querna]
0b349288edfa50fdf38fda1a14e1562d03f92574Christian Maeder *) mod_heartbeat: New module to generate multicast heartbeats to know if a
8c812cd83569e973f10cf69a342424ceabc07af9Christian Maeder server is online. [Paul Querna]
1b3a2f98d1cd01fc9e0591f69507e20526727559Dominik Luecke *) core: Error responses set by filters were being coerced into 500 errors,
f04e8f3ff56405901be968fd4c6e9769239f1a9bKlaus Luettich sometimes appended to the original error response. Log entry of:
a6db617ca58eb6a0587b6366e913107dfecb71b5Heng Jiang 'Handler for (null) returned invalid result code -3'
e39a1626bee36d6ad13a2c0014a80ef179a65bcbChristian Maeder [Eric Covener]
abf2487c3aece95c371ea89ac64319370dcb6483Klaus Luettich *) mod_buffer: Honour the flush bucket and flush the buffer in the
c70ef4c3b3a62764f715510c9fd67dde3acfe454Christian Maeder input filter. Make sure that metadata buckets are written to
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder the buffer, not to the final brigade. [Graham Leggett]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) mod_buffer: Optimise the buffering of heap buckets when the heap
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder buckets stay exactly APR_BUCKET_BUFF_SIZE long. [Graham Leggett,
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder Ruediger Pluem]
18a4d5cb6828f080db9c5f9551785c5151027271Christian Maeder *) mod_buffer: Optional support for buffering of the input and output
846d851fc0c2c49e949763cd3407634ba0f726c0Christian Maeder filter stacks. Can collapse many small buckets into fewer larger
9e748851c150e1022fb952bab3315e869aaf0214Christian Maeder buckets, and prevents excessively small chunks being sent over
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder the wire. [Graham Leggett]
43b4c41fbb07705c9df321221ab9cb9832460407Christian Maeder *) mod_privileges: new module to make httpd on Solaris privileges-aware
8c812cd83569e973f10cf69a342424ceabc07af9Christian Maeder and to enable different virtualhosts to run with different
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder privileges and Unix user/group IDs [Nick Kew]
f4a2a20e49f41b2afa657e5e64d9e349c7faa091Christian Maeder *) mod_mem_cache: this module has been removed. [William Rowe]
edd1b7f4720bc2eea51fa0685417e1e4f3be4915Klaus Luettich *) authn/z: Remove mod_authn_default and mod_authz_default.
7809fb14d290d257ed6d46a2dd563227e227fcf3Christian Maeder [Chris Darroch]
bd54a9917cd87169b8e40bcc5616c537fed85815Christian Maeder *) authz: Fix handling of authz configurations, make default authz
5ee9c3b2afb91936242d34ebb8bd370b8080bcd9Thiemo Wiedemeyer logic replicate 2.2.x authz logic, and replace <Satisfy*>, Reject,
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder and AuthzMergeRules directives with Match, <Match*>, and AuthzMerge
e7757995211bd395dc79d26fe017d99375f7d2a6Christian Maeder directives. [Chris Darroch]
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder *) mod_authn_core: Prevent crash when provider alias created to
6a79849bed67264c396dddb3e9c184bdfc1a1bc9Christian Maeder provider which is not yet registered. [Chris Darroch]
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder *) mod_authn_core: Add AuthType of None to support disabling
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder authentication. [Chris Darroch]
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder *) core: Allow <Limit> and <LimitExcept> directives to nest, and
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder constrain their use to conform with that of other access control
6bf24e5eb644064ad650eb3fd9774483fccbf601Christian Maeder and authorization directives. [Chris Darroch]
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder *) unixd: turn existing code into a module, and turn the set user/group
f04e8f3ff56405901be968fd4c6e9769239f1a9bKlaus Luettich and chroot into a child_init function. [Nick Kew]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) core: Add ap_timeout_parameter_parse to public API. [Ruediger Pluem]
1f8a7f8343f7df719768d2b1d7e3077ee291a1caChristian Maeder *) mod_dir: Support "DirectoryIndex disabled"
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder Suggested By André Warnier <aw ice-sa.com> [Eric Covener]
dbe752ee940baae7f9f231f29c62284bb0f90a25Christian Maeder *) mod_ssl: Send Content-Type application/ocsp-request for POST requests to
53818ced114da21321063fff307aa41c1ab31dd3Achim Mahnke OSCP responders. PR 46014 [Dr Stephen Henson <steve openssl.org>]
53818ced114da21321063fff307aa41c1ab31dd3Achim Mahnke *) Export and install the mod_rewrite.h header to ensure the optional
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder rewrite_mapfunc_t and ap_register_rewrite_mapfunc functions are
53818ced114da21321063fff307aa41c1ab31dd3Achim Mahnke available to third party modules. [Graham Leggett]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_authnz_ldap: don't return NULL-valued environment variables to
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder other modules. PR 39045 [Francois Pesce <francois.pesce gmail.com>]
1aee4aaddde105264c1faf394d88e302c05094ffChristian Maeder *) Don't adjust case in pathname components that are not of interest
368c26b8ad68a4b2c42963626087667000c2eebfChristian Maeder to mod_mime. Fixes mod_negotiation's use of such components.
368c26b8ad68a4b2c42963626087667000c2eebfChristian Maeder PR 43250 [Basant Kumar Kukreja <basant.kukreja sun.com>]
f443a57f2a8e0ca3daa7431b0c89a18ba52c337aChristian Maeder *) Be tolerant in what you accept - accept slightly broken
363939beade943a02b31004cea09dec34fa8a6d9Christian Maeder status lines from a backend provide they include a valid status code.
a5e5b8c3e5c11177e5034ef2423813a5d28979edChristian Maeder PR 44995 [Rainer Jung <rainer.jung kippdata.de>]
fdb2d618144159395f7bf8ce3327b3c112a17dd3Till Mossakowski *) New module mod_sed: filter Request/Response bodies through sed
7c99e334446bb97120e30e967baeeddfdd1278deKlaus Luettich [Basant Kumar Kukreja <basant.kukreja sun.com>]
dcbd32289a7bdf1e6edd06c6ab0698c6a9dbf37aChristian Maeder *) mod_auth_form: Make sure that basic authentication is correctly
dcbd32289a7bdf1e6edd06c6ab0698c6a9dbf37aChristian Maeder faked directly after login. [Graham Leggett]
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder *) mod_session_cookie, mod_session_dbd: Make sure cookies are set both
f041c9a6bda23de33a38490e35b831ae18d96b45Christian Maeder within the output headers and error output headers, so that the
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder session is maintained across redirects. [Graham Leggett]
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder *) mod_auth_form: Make sure the logged in user is populated correctly
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder after a form login. Fixes a missing REMOTE_USER variable directly
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder following a login. [Graham Leggett]
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder *) mod_session_cookie: Make sure that cookie attributes are correctly
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder included in the blank cookie when cookies are removed. This fixes an
1aee4aaddde105264c1faf394d88e302c05094ffChristian Maeder inability to log out when using mod_auth_form. [Graham Leggett]
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder *) mod_autoindex: add configuration option to insert string
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder in HTML HEAD. [Nick Kew]
1aee4aaddde105264c1faf394d88e302c05094ffChristian Maeder *) mod_session: Prevent a segfault when a CGI script sets a cookie with a
dcbd32289a7bdf1e6edd06c6ab0698c6a9dbf37aChristian Maeder null value. [David Shane Holden <dpejesh apache.org>]
1aee4aaddde105264c1faf394d88e302c05094ffChristian Maeder *) mod_headers: Prevent Header edit from processing only the first header
1aee4aaddde105264c1faf394d88e302c05094ffChristian Maeder of possibly multiple headers with the same name and deleting the
1aee4aaddde105264c1faf394d88e302c05094ffChristian Maeder remaining ones. PR 45333. [Ruediger Pluem]
1aee4aaddde105264c1faf394d88e302c05094ffChristian Maeder *) mod_rewrite: Preserve the query string with [proxy,noescape]. PR 45247
2a731d542987c87ba5ee1d8767d5cd61de8fdfc9Christian Maeder [Tom Donovan]
215d42ce4d6397a453d5887292bc786e8fa9c1a2Christian Maeder *) core, authn/z: Determine registered authn/z providers directly in
215d42ce4d6397a453d5887292bc786e8fa9c1a2Christian Maeder ap_setup_auth_internal(), which allows optional functions that just
1aee4aaddde105264c1faf394d88e302c05094ffChristian Maeder wrapped ap_list_provider_names() to be removed from authn/z modules.
dc5779c9b7625d5d2fa8891c043cefc4cdfb0588Christian Maeder [Chris Darroch]
dc5779c9b7625d5d2fa8891c043cefc4cdfb0588Christian Maeder *) authn/z: Convert common provider version strings to macros.
dc5779c9b7625d5d2fa8891c043cefc4cdfb0588Christian Maeder [Chris Darroch]
dc5779c9b7625d5d2fa8891c043cefc4cdfb0588Christian Maeder *) ab: Make ab.c compile on VC6. PR 45024 [Ruediger Pluem]
dc5779c9b7625d5d2fa8891c043cefc4cdfb0588Christian Maeder *) configure: Don't reject libtool 2.x
f4a2a20e49f41b2afa657e5e64d9e349c7faa091Christian Maeder PR 44817 [Arfrever Frehtes Taifersar Arahesis <Arfrever.FTA gmail.com>]
2a731d542987c87ba5ee1d8767d5cd61de8fdfc9Christian Maeder *) core: When testing for slash-terminated configuration paths in
13731dfbb4b6a31b35dd210e832e920065b6ac45Christian Maeder ap_location_walk(), don't look past the start of an empty string
215d42ce4d6397a453d5887292bc786e8fa9c1a2Christian Maeder such as that created by a <Location ""> directive.
215d42ce4d6397a453d5887292bc786e8fa9c1a2Christian Maeder [Chris Darroch]
1aee4aaddde105264c1faf394d88e302c05094ffChristian Maeder *) core, mod_proxy: If a kept_body is present, it becomes safe for
ba3a7a915740c57c9cb3d2bec46b919fcba12692Christian Maeder subrequests to support message bodies. Make sure that safety
ba3a7a915740c57c9cb3d2bec46b919fcba12692Christian Maeder checks within the core and within the proxy are not triggered
2a731d542987c87ba5ee1d8767d5cd61de8fdfc9Christian Maeder when kept_body is present. This makes it possible to embed
ba3a7a915740c57c9cb3d2bec46b919fcba12692Christian Maeder proxied POST requests within mod_include. [Graham Leggett]
ba3a7a915740c57c9cb3d2bec46b919fcba12692Christian Maeder *) mod_auth_form: Make sure the input filter stack is properly set
ba3a7a915740c57c9cb3d2bec46b919fcba12692Christian Maeder up before reading the login form. Make sure the kept body filter
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder is correctly inserted to ensure the body can be read a second
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder time safely should the authn be successful. [Graham Leggett,
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder Ruediger Pluem]
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder *) mod_request: Insert the KEPT_BODY filter via the insert_filter
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder hook instead of during fixups. Add a safety check to ensure the
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder filters cannot be inserted more than once. [Graham Leggett,
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder Ruediger Pluem]
1aee4aaddde105264c1faf394d88e302c05094ffChristian Maeder *) core: Do not allow Options ALL if not all options are allowed to be
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder overwritten. PR 44262 [Michał Grzędzicki <lazy iq.pl>]
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder *) ap_cache_cacheable_headers_out() will (now) always
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder merge an error headers _before_ clearing them and _before_
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder merging in the actual entity headers and doing normal
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder hop-by-hop cleansing. [Dirk-Willem van Gulik].
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder *) cache: retire ap_cache_cacheable_hdrs_out() which was used
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder for both in- and out-put headers; and replace it by a single
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder ap_cache_cacheable_headers() wrapped in a in- and out-put
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder specific ap_cache_cacheable_headers_in()/out(). The latter
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder which will also merge error and ensure content-type. To keep
27785f379d6810811b4e6d23feab18845fde9a98Christian Maeder cache modules consistent with ease. This API change bumps
27785f379d6810811b4e6d23feab18845fde9a98Christian Maeder up the minor MM by one [Dirk-Willem van Gulik].
27785f379d6810811b4e6d23feab18845fde9a98Christian Maeder *) mod_rewrite: Allow Cookie option to set secure and HttpOnly flags.
2d130d212db7208777ca896a7ecad619a8944971Christian Maeder PR 44799 [Christian Wenz <christian wenz.org>]
e7757995211bd395dc79d26fe017d99375f7d2a6Christian Maeder *) Move the KeptBodySize directive, kept_body filters and the
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder ap_parse_request_body function out of the http module and into a
33d042fe6a9eb27a4c48f840b80838f3e7d98e34Christian Maeder new module called mod_request, reducing the size of the core.
83394c6b6e6de128e71b67c9251ed7a84485d082Christian Maeder [Graham Leggett]
fa21fba9ceb1ddf7b3efd54731a12ed8750191d8Christian Maeder *) mod_dbd: Handle integer configuration directive parameters with a
e7757995211bd395dc79d26fe017d99375f7d2a6Christian Maeder dedicated function.
e7757995211bd395dc79d26fe017d99375f7d2a6Christian Maeder *) Change the directives within the mod_session* modules to be valid
fa21fba9ceb1ddf7b3efd54731a12ed8750191d8Christian Maeder both inside and outside the location/directory sections, as
b49276c9f50038e0bd499ad49f7bd6444566a834Christian Maeder suggested by wrowe. [Graham Leggett]
b49276c9f50038e0bd499ad49f7bd6444566a834Christian Maeder *) mod_auth_form: Add a module capable of allowing end users to log
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder in using an HTML form, storing the credentials within mod_session.
e7757995211bd395dc79d26fe017d99375f7d2a6Christian Maeder [Graham Leggett]
c7ec85d1103173e089aa5048fd7afb2f9b505124Klaus Luettich *) Add a function to the http filters that is able to parse an HTML
c7ec85d1103173e089aa5048fd7afb2f9b505124Klaus Luettich form request with the type of application/x-www-form-urlencoded.
c7ec85d1103173e089aa5048fd7afb2f9b505124Klaus Luettich [Graham Leggett]
b905126bab9454b89041f92b3c50bb9efc85e427Klaus Luettich *) mod_session_crypto: Initialise SSL in the post config hook.
a883cd4d01fe39d23219cf5333425f195be24d8bChristian Maeder [Ruediger Pluem, Graham Leggett]
b905126bab9454b89041f92b3c50bb9efc85e427Klaus Luettich *) mod_session_dbd: Add a session implementation capable of storing
c4ef79587a902327f36277c45a8d91d1e67bd6d5Klaus Luettich session information in a SQL database via the dbd interface. Useful
c4ef79587a902327f36277c45a8d91d1e67bd6d5Klaus Luettich for sites where session privacy is important. [Graham Leggett]
5818d884784339c1b8aa6c6d972bad4eafd36ccbKlaus Luettich *) mod_session_crypto: Add a session encoding implementation capable
5818d884784339c1b8aa6c6d972bad4eafd36ccbKlaus Luettich of encrypting and decrypting sessions wherever they may be stored.
c4ef79587a902327f36277c45a8d91d1e67bd6d5Klaus Luettich Introduces a level of privacy when sessions are stored on the
c4ef79587a902327f36277c45a8d91d1e67bd6d5Klaus Luettich browser. [Graham Leggett]
b905126bab9454b89041f92b3c50bb9efc85e427Klaus Luettich *) mod_session_cookie: Add a session implementation capable of storing
b905126bab9454b89041f92b3c50bb9efc85e427Klaus Luettich session information within cookies on the browser. Useful for high
b905126bab9454b89041f92b3c50bb9efc85e427Klaus Luettich volume sites where server bound sessions are too resource intensive.
b905126bab9454b89041f92b3c50bb9efc85e427Klaus Luettich [Graham Leggett]
33d042fe6a9eb27a4c48f840b80838f3e7d98e34Christian Maeder *) mod_session: Add a generic session interface to unify the different
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder attempts at saving persistent sessions across requests.
dbe752ee940baae7f9f231f29c62284bb0f90a25Christian Maeder [Graham Leggett]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) core, authn/z: Avoid calling access control hooks for internal requests
1f8a7f8343f7df719768d2b1d7e3077ee291a1caChristian Maeder with configurations which match those of initial request. Revert to
1f8a7f8343f7df719768d2b1d7e3077ee291a1caChristian Maeder original behaviour (call access control hooks for internal requests
c1bf9cc3bc3729b0bf925be3be123cbb59bea2a6Christian Maeder with URIs different from initial request) if any access control hooks or
c1bf9cc3bc3729b0bf925be3be123cbb59bea2a6Christian Maeder providers are not registered as permitting this optimization.
1f8a7f8343f7df719768d2b1d7e3077ee291a1caChristian Maeder Introduce wrappers for access control hook and provider registration
96646aed2ae087b942ae23f15bbe729a8f7c43d3Christian Maeder which can accept additional mode and flag data. [Chris Darroch]
1f8a7f8343f7df719768d2b1d7e3077ee291a1caChristian Maeder *) Introduced ap_expr API for expression evaluation.
3a7788e09dd23b364a46c9488cbd1522369113dbChristian Maeder This is adapted from mod_include, which is the first module
e7757995211bd395dc79d26fe017d99375f7d2a6Christian Maeder to use the new API.
ef67402074be14deb95e4ff564737d5593144130Klaus Luettich *) mod_authz_dbd: When redirecting after successful login/logout per
462d9dc583444aab82732e14a75610684d2dc7e9Christian Maeder AuthzDBDRedirectQuery, do not report authorization failure, and use
c9e197862d9d8ef2585270dd08f5194b3aed4a9dKlaus Luettich first row returned by database query instead of last row.
e7e1ab2ac3f1fded8611bb92ae00e8f3b8c693fbKlaus Luettich [Chris Darroch]
1323eba62fc519b068f5aaec4f9d2be05ffabea9Klaus Luettich *) mod_ldap: Correctly return all requested attribute values
a80c28bb8b7a23ccdf7e08d0fe216fc19cc97273Klaus Luettich when some attributes have a null value.
d784803f9c752667b4fcf7393d698002bedf3f89Klaus Luettich PR 44560 [Anders Kaseorg <anders kaseorg.com>]
1323eba62fc519b068f5aaec4f9d2be05ffabea9Klaus Luettich *) core: check symlink ownership if both FollowSymlinks and
1f8a7f8343f7df719768d2b1d7e3077ee291a1caChristian Maeder SymlinksIfOwnerMatch are set [Nick Kew]
462d9dc583444aab82732e14a75610684d2dc7e9Christian Maeder *) core: fix origin checking in SymlinksIfOwnerMatch
5d39c60274aaa76506292d2d9e885fccd27e1eabChristian Maeder PR 36783 [Robert L Mathews <rob-apache.org.bugs tigertech.net>]
e7757995211bd395dc79d26fe017d99375f7d2a6Christian Maeder *) Activate mod_cache, mod_file_cache and mod_disk_cache as part of the
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder 'most' set for '--enable-modules' and '--enable-shared-mods'. Include
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder mod_mem_cache in 'all' as well. [Dirk-Willem van Gulik]
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder *) Also install mod_so.h, mod_rewrite.h and mod_cache.h; as these
1f8a7f8343f7df719768d2b1d7e3077ee291a1caChristian Maeder contain public function declarations which are useful for
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder third party module authors. PR 42431 [Dirk-Willem van Gulik].
404166b9366552e9ec5abb87a37c76ec8a815fb7Klaus Luettich *) mod_dir, mod_negotiation: pass the output filter information
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder to newly created sub requests; as these are later on used
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder as true requests with an internal redirect. This allows for
aebb0b18fe5e6ba7dd7e4c66a16a905611ef7ba9Christian Maeder mod_cache et.al. to trap the results of the redirect.
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder [Dirk-Willem van Gulik, Ruediger Pluem]
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder *) mod_ldap: Add support (taking advantage of the new APR capability)
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder for ldap rebind callback while chasing referrals. This allows direct
f2d9352f2999f82c36b4b65535d14a6a40ae5a82Christian Maeder searches on LDAP servers (in particular MS Active Directory 2003+)
340706b6c0c6e3dbacdd7003e20e9cab7f9aa765Christian Maeder using referrals without the use of the global catalog.
43bb71dfe7ec405f563864d57c1cacdaa8ce9a80Christian Maeder PRs 26538, 40268, and 42557 [Paul J. Reder]
340706b6c0c6e3dbacdd7003e20e9cab7f9aa765Christian Maeder *) mod_ssl: Added server name indication support (SNI, RFC 4366).
fdb2d618144159395f7bf8ce3327b3c112a17dd3Till Mossakowski PR 34607. [Kaspar Brand <asfbugz velox.ch>]. A test configuration
fa0f3519d71f719d88577b716b1579776b4a2535Christian Maeder can be created with test/make_sni.sh [Dirk-Willem van Gulik].
99afa6000472f3d291fdf9193ea19d334a58658dChristian Maeder *) ApacheMonitor.exe: Introduce --kill argument for use by the
fa0f3519d71f719d88577b716b1579776b4a2535Christian Maeder installer. This will permit the installation tool to remove
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder all running instances before attempting to remove the .exe.
c22d75ec3ea1306219d1c09a5b3e8ff04f753ad6Christian Maeder [William Rowe]
c22d75ec3ea1306219d1c09a5b3e8ff04f753ad6Christian Maeder *) mod_ssl: Add support for OCSP validation of client certificates.
63f0e65a37b95621334db9ee4ba0cd9d826f5c0fChristian Maeder PR 41123. [Marc Stern <marc.stern approach.be>, Joe Orton]
99afa6000472f3d291fdf9193ea19d334a58658dChristian Maeder *) mod_serf: New module for Reverse Proxying. [Paul Querna]
5bb7eeaca10ea76595229375f907a5a388b7c882Christian Maeder *) core: Add the option to keep aside a request body up to a certain
5bb7eeaca10ea76595229375f907a5a388b7c882Christian Maeder size that would otherwise be discarded, to be consumed by filters
c59d1c38ef94b4fb1c8d9fda9573bc1e1d2801e7Christian Maeder such as mod_include. When enabled for a directory, POST requests
cd36bffee51c77cdadcb9f916b34fa512e311946Christian Maeder to shtml files can be passed through to embedded scripts as POST
99afa6000472f3d291fdf9193ea19d334a58658dChristian Maeder requests, rather being downgraded to GET requests. [Graham Leggett]
8410667510a76409aca9bb24ff0eda0420088274Christian Maeder *) mod_ssl: Fix TLS upgrade (RFC 2817) support. PR 41231. [Joe Orton]
ddc9315cc0b1f5dd3d8f99a77f1c75064db33b48Christian Maeder *) scoreboard: Correctly declare ap_time_process_request.
5d522dff4d0fabf57dd476d4c3de15d354a89f62Christian Maeder PR 43789 [Tom Donovan <Tom.Donovan acm.org>]
5d522dff4d0fabf57dd476d4c3de15d354a89f62Christian Maeder *) core; scoreboard: ap_get_scoreboard_worker(sbh) now takes the sbh member
8410667510a76409aca9bb24ff0eda0420088274Christian Maeder from the connection rec, ap_get_scoreboard_worker(proc, thread) will now
8410667510a76409aca9bb24ff0eda0420088274Christian Maeder provide the unusual legacy lookup. [William Rowe]
b1f59a4ea7c96f4c03a4d7cfcb9c5e66871cfbbbChristian Maeder *) mpm winnt: fix null pointer dereference
e62d49c0dc2893da75faad896bd135e2e9a7087bKlaus Luettich PR 42572 [Davi Arnaut]
e62d49c0dc2893da75faad896bd135e2e9a7087bKlaus Luettich *) mod_authnz_ldap, mod_authn_dbd: Tidy up the code to expose authn
e62d49c0dc2893da75faad896bd135e2e9a7087bKlaus Luettich parameters to the environment. Improve portability to
3e61f574717499939bd8e0ff538ea9e7b72d4e2dKlaus Luettich EBCDIC machines by using apr_toupper(). [Martin Kraemer]
3e61f574717499939bd8e0ff538ea9e7b72d4e2dKlaus Luettich *) mod_ldap, mod_authnzldap: Add support for nested groups (i.e. the ability
3e61f574717499939bd8e0ff538ea9e7b72d4e2dKlaus Luettich to authorize an authenticated user via a "require ldap-group X" directive
3e61f574717499939bd8e0ff538ea9e7b72d4e2dKlaus Luettich where the user is not in group X, but is in a subgroup contained in X.
3e61f574717499939bd8e0ff538ea9e7b72d4e2dKlaus Luettich PR 42891 [Paul J. Reder]
3e61f574717499939bd8e0ff538ea9e7b72d4e2dKlaus Luettich *) mod_ssl: Add support for caching SSL Sessions in memcached. [Paul Querna]
3e61f574717499939bd8e0ff538ea9e7b72d4e2dKlaus Luettich *) mod_ldap: Fix the search limit parameter to ldap_search_ext_s()
36f63902db2b3463faa9f59912ad106e2d5aaa24Klaus Luettich for SDKs that define LDAP_NO_LIMIT to something other than -1.
3e61f574717499939bd8e0ff538ea9e7b72d4e2dKlaus Luettich [David Jones <oscaremma gmail.com>]
3e61f574717499939bd8e0ff538ea9e7b72d4e2dKlaus Luettich *) apxs: Enhance -q flag to print all known variables and their values
3e61f574717499939bd8e0ff538ea9e7b72d4e2dKlaus Luettich when invoked without variable name(s).
3e61f574717499939bd8e0ff538ea9e7b72d4e2dKlaus Luettich [William Rowe, Sander Temme]
ac43fa22d2d3f91a17674ac164cba3cf39a17795Klaus Luettich *) apxs: Eliminate run-time check for mod_so. PR 40653.
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers [David M. Lee <dmlee crossroads.com>]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) beos MPM: Create pmain pool and run modules' child_init hooks when
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder entering ap_mpm_run(), then destroy pmain when exiting ap_mpm_run().
18c1d987ce5818ecf0bfc8af3f43aed2ce86e1eaChristian Maeder [Chris Darroch]
00ccf62b4570513e965eb156ab5916ec816c5d2bDominik Luecke *) netware MPM: Destroy pmain pool when exiting ap_mpm_run() so that
00ccf62b4570513e965eb156ab5916ec816c5d2bDominik Luecke cleanups registered in modules' child_init hooks are performed.
00ccf62b4570513e965eb156ab5916ec816c5d2bDominik Luecke [Chris Darroch]
05a206508bc898f87fe6ab6e069814df3c29d303Dominik Luecke *) mod_dbd: Stash DBD connections in request_config of initial request
05a206508bc898f87fe6ab6e069814df3c29d303Dominik Luecke only, or else sub-requests and internal redirections may cause
b891e9ad7dd358a7df24b59bf00d51515078497cChristian Maeder entire DBD pool to be stashed in a single HTTP request. [Chris Darroch]
5ad5dffe06818a13e1632b1119fbca7881085fc1Dominik Luecke *) Fix issue which could cause error messages to be written to access logs
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder on Win32. PR 40476. [Tom Donovan <Tom.Donovan acm.org>]
6fe9628743562678acf97d6730ebcfee5e9e50c2Christian Maeder *) The LockFile directive, which specifies the location of
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder the accept() mutex lockfile, is deprecated. Instead, the
b891e9ad7dd358a7df24b59bf00d51515078497cChristian Maeder AcceptMutex directive now takes an optional lockfile
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder location parameter, ala SSLMutex. [Jim Jagielski]
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder *) mod_authn_dbd: Export any additional columns queried in the SQL select
fb328c4f646dd3dd78a9391c5cb58450a3dd0aa9Klaus Luettich into the environment with the name AUTHENTICATE_<COLUMN>. This brings
3b06e23643a9f65390cb8c1caabe83fa7e87a708Till Mossakowski mod_authn_dbd behaviour in line with mod_authnz_ldap. [Graham Leggett]
3b06e23643a9f65390cb8c1caabe83fa7e87a708Till Mossakowski *) mod_dbd: Key the storage of prepared statements on the hex string
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder value of server_rec, rather than the server name, as the server name
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder may change (eg when the server name is set) at any time, causing
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder weird behaviour in modules dependent on mod_dbd. [Graham Leggett]
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder *) mod_proxy_fcgi: Added win32 build. [Mladen Turk]
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder *) sendfile_nonblocking() takes the _brigade_ as an argument, gets
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder the first bucket from the brigade, finds it not to be a FILE
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers bucket and barfs. The fix is to pass a bucket rather than a brigade.
d23b0cc79c0d204e6ec758dff8d0ba71c9f693f7Christian Maeder [Niklas Edmundsson <nikke acc.umu.se>]
e96a0bf4040fd789339958c01f145c5057d26db6René Wagner *) mod_rewrite: support rewritemap by SQL query [Nick Kew]
f04e8f3ff56405901be968fd4c6e9769239f1a9bKlaus Luettich *) ap_get_server_version() has been removed. Third-party modules must
abf2487c3aece95c371ea89ac64319370dcb6483Klaus Luettich now use ap_get_server_banner() or ap_get_server_description().
81c15526a787941b48b02ae8786782f9fb578801Christian Maeder [Jeff Trawick]
b891e9ad7dd358a7df24b59bf00d51515078497cChristian Maeder *) All MPMs: Introduce a check_config phase between pre_config and
e39a1626bee36d6ad13a2c0014a80ef179a65bcbChristian Maeder open_logs, to allow modules to review interdependent configuration
7868299829c1318b888152243ec2cea4f598b568Christian Maeder directive values and adjust them while messages can still be logged
e39a1626bee36d6ad13a2c0014a80ef179a65bcbChristian Maeder to the console. Handle relevant MPM directives during this phase
f8e1a1eca871a26a535a4ee7d51902ba94b1db1eChristian Maeder and format messages for both the console and the error log, as
f8e1a1eca871a26a535a4ee7d51902ba94b1db1eChristian Maeder appropriate. [Chris Darroch]
e7757995211bd395dc79d26fe017d99375f7d2a6Christian Maeder *) mod_proxy: don't URLencode tilde in path component
83394c6b6e6de128e71b67c9251ed7a84485d082Christian Maeder [Stijn Hoop <stijn sandcat.nl>]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) mpm_winnt: Fix return values from wait_for_many_objects.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder The return value is index to the signaled thread in the
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder creted_threads array. We can not use WAIT_TIMEOUT because
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder his value is defined as 258, thus limiting the MaxThreads
3e61f574717499939bd8e0ff538ea9e7b72d4e2dKlaus Luettich to that value. [Mladen Turk]
82e29b77f0ef4cccd7ed734692c5e1e93dbbc645Christian Maeder *) core: Do not allow internal redirects like the DirectoryIndex of mod_dir
a80c28bb8b7a23ccdf7e08d0fe216fc19cc97273Klaus Luettich to circumvent the symbolic link checks imposed by FollowSymLinks and
13731dfbb4b6a31b35dd210e832e920065b6ac45Christian Maeder SymLinksIfOwnerMatch. [Nick Kew, Ruediger Pluem, William Rowe]
b9625461755578f3eed04676d42a63fd2caebd0cChristian Maeder *) New SSLLogLevelDebugDump [ None (default) | IO (not bytes) | Bytes ]
e7757995211bd395dc79d26fe017d99375f7d2a6Christian Maeder configures the I/O Dump of SSL traffic, when LogLevel is set to Debug.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder The default is none as this is far greater debugging resolution than
d0652648f9879c67a194f8b03baafe2700c68eb4Christian Maeder the typical administrator is prepared to untangle. [William Rowe]
363939beade943a02b31004cea09dec34fa8a6d9Christian Maeder *) mod_disk_cache: If possible, check if the size of an object to cache is
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder within the configured boundaries before actually saving data.
b1f59a4ea7c96f4c03a4d7cfcb9c5e66871cfbbbChristian Maeder [Niklas Edmundsson <nikke acc.umu.se>]
3e61f574717499939bd8e0ff538ea9e7b72d4e2dKlaus Luettich *) mod_disk_cache: Delete temporary files if they cannot be renamed to their
3e61f574717499939bd8e0ff538ea9e7b72d4e2dKlaus Luettich final name. [Davi Arnaut <davi haxent.com.br>]
36f63902db2b3463faa9f59912ad106e2d5aaa24Klaus Luettich *) Worker and event MPMs: Remove improper scoreboard updates which were
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder performed in the event of a fork() failure. [Chris Darroch]
1aee4aaddde105264c1faf394d88e302c05094ffChristian Maeder *) Add support for fcgi:// proxies to mod_rewrite.
27785f379d6810811b4e6d23feab18845fde9a98Christian Maeder [Markus Schiegl <ms schiegl.com>]
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder *) Remove incorrect comments from scoreboard.h regarding conditional
1aee4aaddde105264c1faf394d88e302c05094ffChristian Maeder loading of worker_score structure with mod_status, and remove unused
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder definitions relating to old life_status field.
ba3a7a915740c57c9cb3d2bec46b919fcba12692Christian Maeder [Chris Darroch <chrisd pearsoncmg.com>]
1aee4aaddde105264c1faf394d88e302c05094ffChristian Maeder *) Remove allocation of memory for unused array of lb_score pointers
1aee4aaddde105264c1faf394d88e302c05094ffChristian Maeder in ap_init_scoreboard(). [Chris Darroch <chrisd pearsoncmg.com>]
d0279930f87bf39843e0bd2992a4789322662144Christian Maeder *) Add mod_proxy_fcgi, a FastCGI back end for mod_proxy.
1aee4aaddde105264c1faf394d88e302c05094ffChristian Maeder [Garrett Rooney, Jim Jagielski, Paul Querna]
68d10d143f29fcff3c637ba24f90e983995ceae6Christian Maeder *) Event MPM: Fill in the scoreboard's tid field. PR 38736.
e7757995211bd395dc79d26fe017d99375f7d2a6Christian Maeder [Chris Darroch <chrisd pearsoncmg.com>]
340706b6c0c6e3dbacdd7003e20e9cab7f9aa765Christian Maeder *) mod_charset_lite: Remove Content-Length when output filter can
3e61f574717499939bd8e0ff538ea9e7b72d4e2dKlaus Luettich invalidate it. Warn when input filter can invalidate it.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder [Jeff Trawick]
e1559d046eb2c6dde0e6e272b37b6756eac0e8adChristian Maeder *) Authz: Add the new module mod_authn_core that will provide common
68d10d143f29fcff3c637ba24f90e983995ceae6Christian Maeder authn directives such as 'AuthType', 'AuthName'. Move the directives
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder 'AuthType' and 'AuthName' out of the core module and merge mod_authz_alias
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder into mod_authn_core. [Brad Nicholes]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) Authz: Move the directives 'Order', 'Allow', 'Deny' and 'Satisfy'
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder into the new module mod_access_compat which can be loaded to provide
2c619a4dfdc1df27573eba98e81ed1ace906941dChristian Maeder support for these directives.
2c619a4dfdc1df27573eba98e81ed1ace906941dChristian Maeder [Brad Nicholes]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) Authz: Move the 'Require' directive from the core module as well as
50515239e7e190f4a34ca581dd685d002148fbddChristian Maeder add the directives '<SatisfyAll>', '<SatisfyOne>', '<RequireAlias>'
50515239e7e190f4a34ca581dd685d002148fbddChristian Maeder and 'Reject' to mod_authz_core. The new directives introduce 'AND/OR'
50515239e7e190f4a34ca581dd685d002148fbddChristian Maeder logic into the authorization processing. [Brad Nicholes]
0b349288edfa50fdf38fda1a14e1562d03f92574Christian Maeder *) Authz: Add the new module mod_authz_core which acts as the
0b349288edfa50fdf38fda1a14e1562d03f92574Christian Maeder authorization provider vector and contains common authz
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder directives. [Brad Nicholes]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) Authz: Renamed mod_authz_dbm authz providers from 'group' and
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder 'file-group' to 'dbm-group' and 'dbm-file-group'. [Brad Nicholes]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) Authz: Added the new authz providers 'env', 'ip', 'host', 'all' to handle
8b4c68db8b465107cabef8b9cd5b6bc216e1b156Till Mossakowski host-based access control provided by mod_authz_host and invoked
8b4c68db8b465107cabef8b9cd5b6bc216e1b156Till Mossakowski through the 'Require' directive. [Brad Nicholes]
bcaf979d9babe6346aa343687aa7d596e2894cccPaolo Torrini *) Authz: Convert all of the authz modules from hook based to
df29370ae8d8b41587957f6bcdcb43a3f1927e47Christian Maeder provider based. [Brad Nicholes]
5ce19352a9cc47d982819cc889a71cd0a61ac171Christian Maeder *) mod_cache: Add CacheMinExpire directive to set the minimum time in
5ce19352a9cc47d982819cc889a71cd0a61ac171Christian Maeder seconds to cache a document.
5ce19352a9cc47d982819cc889a71cd0a61ac171Christian Maeder [Brian Akins <brian.akins turner.com>, Ruediger Pluem]
23ab8855c58adfbd03a0730584b917b24c603901Christian Maeder *) mod_authz_dbd: SQL authz with Login/Session support [Nick Kew]
23ab8855c58adfbd03a0730584b917b24c603901Christian Maeder *) Fix typo in ProxyStatus syntax error message.
e50e41135ece589f7202bd4ef8d6b97531c2a56eKlaus Luettich [Christophe Jaillet <christophe.jaillet wanadoo.fr>]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) Asynchronous write completion for the Event MPM. [Brian Pane]
431d34c7007a787331c4e5ec997badb0f8190fc7Christian Maeder *) Added an End-Of-Request bucket type. The logging of a request and
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder the freeing of its pool are now done when the EOR bucket is destroyed.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder This has the effect of delaying the logging until right after the last
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder of the response is sent; ap_core_output_filter() calls the access logger
99afa6000472f3d291fdf9193ea19d334a58658dChristian Maeder indirectly when it destroys the EOR bucket. [Brian Pane]
88318aafc287e92931dceffbb943d58a9310001dChristian Maeder *) Rewrite of logresolve support utility: IPv6 addresses are now supported
d5d349836d8b1fa93ea49a59d977b106c6e9233bKlaus Luettich and the format of statistical output has changed. [Colm MacCarthaigh]
88318aafc287e92931dceffbb943d58a9310001dChristian Maeder *) Rewrite of ap_coreoutput_filter to do nonblocking writes [Brian Pane]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) Added new connection states for handler and write completion
e62d49c0dc2893da75faad896bd135e2e9a7087bKlaus Luettich *) mod_cgid: Refuse to work on Solaris 10 due to OS bugs. PR 34264.
9096f6c6aaded6cd8288656ceccd4c7b3bd0747eChristian Maeder [Justin Erenkrantz]
e62d49c0dc2893da75faad896bd135e2e9a7087bKlaus Luettich *) Teach mod_ssl to use arbitrary OIDs in an SSLRequire directive,
e62d49c0dc2893da75faad896bd135e2e9a7087bKlaus Luettich allowing string-valued client certificate attributes to be used for
e62d49c0dc2893da75faad896bd135e2e9a7087bKlaus Luettich access control, as in: SSLRequire "value" in OID("1.3.6.1.4.1.18060.1")
e62d49c0dc2893da75faad896bd135e2e9a7087bKlaus Luettich [Martin Kraemer, David Reid]
e62d49c0dc2893da75faad896bd135e2e9a7087bKlaus Luettich [Apache 2.1.0-dev includes those bug fixes and changes with the
e62d49c0dc2893da75faad896bd135e2e9a7087bKlaus Luettich Apache 2.2.xx tree as documented, and except as noted, below.]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian MaederChanges with Apache 2.2.x and later:
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
363939beade943a02b31004cea09dec34fa8a6d9Christian MaederChanges with Apache 2.0.x and later:
fdef3358918491badb0e29e42b5d3b5a01950716Christian Maeder *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup
6ff7a91875597d6e4dfaa68c79187d01473e8341Christian MaederChanges with Apache 1.3.x and later: