CHANGES revision 1104271514ab6eee6391f8a0e670d9cc98184d9b
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley -*- coding: utf-8 -*-
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob HalleyChanges with Apache 2.3.0
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley[ When backported to 2.2.x, remove entry from this file ]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) ab: Improve client performance by clearing connection pool instead
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley of destroying it. PR 40054 [Brad Roberts <braddr puremagic.com>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) ab: Don't stop sending a request if EAGAIN is returned, which
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley will only happen if both the write and subsequent wait are
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley returning EAGAIN, and count posted bytes correctly when the initial
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley write of a request is not complete. PR 10038, 38861, 39679
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Patrick McManus <mcmanus datapower.com>,
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley Davanum Srinivas, Roy T. Fielding]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) ab: Overhaul stats collection and reporting to avoid integer
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley truncation and time divisions within the test loop, retain
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley native time resolution until output, remove unused data,
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley consistently round milliseconds, and generally avoid losing
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley accuracy of calculation due to type casts. PR 44878, 44931.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Roy T. Fielding]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) core: When testing for slash-terminated configuration paths in
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley ap_location_walk(), don't look past the start of an empty string
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley such as that created by a <Location ""> directive.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Chris Darroch]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) core, mod_proxy: If a kept_body is present, it becomes safe for
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley subrequests to support message bodies. Make sure that safety
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley checks within the core and within the proxy are not triggered
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley when kept_body is present. This makes it possible to embed
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley proxied POST requests within mod_include. [Graham Leggett]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_auth_form: Make sure the input filter stack is properly set
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley up before reading the login form. Make sure the kept body filter
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley is correctly inserted to ensure the body can be read a second
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley time safely should the authn be successful. [Graham Leggett,
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley Ruediger Pluem]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_request: Insert the KEPT_BODY filter via the insert_filter
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley hook instead of during fixups. Add a safety check to ensure the
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley filters cannot be inserted more than once. [Graham Leggett,
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley Ruediger Pluem]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) core: Do not allow Options ALL if not all options are allowed to be
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley overwritten. PR 44262 [Michał Grzędzicki <lazy iq.pl>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) ap_cache_cacheable_headers_out() will (now) always
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley merge an error heaeders _before_ clearing them and _before_
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley merging in the actual entity headers and doing normal
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley hop-by-hop cleansing. [Dirk-Willem van Gulik].
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) cache: retire ap_cache_cacheable_hdrs_out() which was used
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley for both in- and out-put headers; and replace it by a single
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley ap_cache_cacheable_headers() wrapped in a in- and out-put
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley specific ap_cache_cacheable_headers_in()/out(). The latter
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley which will also merge error and ensure content-type. To keep
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley cache modules consistent with ease. This API change bumps
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley up the minor MM by one [Dirk-Willem van Gulik].
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_rewrite: Allow Cookie option to set secure and HttpOnly flags.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley PR 44799 [Christian Wenz <christian wenz.org>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Move the KeptBodySize directive, kept_body filters and the
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley ap_parse_request_body function out of the http module and into a
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley new module called mod_request, reducing the size of the core.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Graham Leggett]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_dbd: Handle integer configuration directive parameters with a
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley dedicated function.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Change the directives within the mod_session* modules to be valid
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley both inside and outside the location/directory sections, as
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley suggested by wrowe. [Graham Leggett]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_auth_form: Add a module capable of allowing end users to log
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley in using an HTML form, storing the credentials within mod_session.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Graham Leggett]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Add a function to the http filters that is able to parse an HTML
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley form request with the type of application/x-www-form-urlencoded.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Graham Leggett]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_session_crypto: Initialise SSL in the post config hook.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Ruediger Pluem, Graham Leggett]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_session_dbd: Add a session implementation capable of storing
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley session information in a SQL database via the dbd interface. Useful
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley for sites where session privacy is important. [Graham Leggett]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_session_crypto: Add a session encoding implementation capable
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley of encrypting and decrypting sessions wherever they may be stored.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley Introduces a level of privacy when sessions are stored on the
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley browser. [Graham Leggett]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_session_cookie: Add a session implementation capable of storing
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley session information within cookies on the browser. Useful for high
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley volume sites where server bound sessions are too resource intensive.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Graham Leggett]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_session: Add a generic session interface to unify the different
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley attempts at saving persistent sessions across requests.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Graham Leggett]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) core, authn/z: Avoid calling access control hooks for internal requests
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley with configurations which match those of initial request. Revert to
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley original behaviour (call access control hooks for internal requests
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley with URIs different from initial request) if any access control hooks or
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley providers are not registered as permitting this optimization.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley Introduce wrappers for access control hook and provider registration
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley which can accept additional mode and flag data. [Chris Darroch]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_dav: Return "method not allowed" if the destination URI of a WebDAV
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley copy / move operation is no DAV resource. PR 44734 [Ruediger Pluem]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Introduced ap_expr API for expression evaluation.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley This is adapted from mod_include, which is the first module
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley to use the new API.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_authz_dbd: When redirecting after successful login/logout per
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley AuthzDBDRedirectQuery, do not report authorization failure, and use
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley first row returned by database query instead of last row.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Chris Darroch]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_rewrite: Initialize hash needed by ap_register_rewrite_mapfunc early
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley enough. PR 44641 [Daniel Lescohier <daniel.lescohier cnet.com>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_cache: Handle If-Range correctly if the cached resource was stale.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley PR 44579 [Ruediger Pluem]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_ldap: Correctly return all requested attribute values
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley when some attributes have a null value.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley PR 44560 [Anders Kaseorg <anders kaseorg.com>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) core: check symlink ownership if both FollowSymlinks and
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley SymlinksIfOwnerMatch are set [Nick Kew]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) core: fix origin checking in SymlinksIfOwnerMatch
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley PR 36783 [Robert L Mathews <rob-apache.org.bugs tigertech.net>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_proxy: Do not try a direct connection if the connection via a
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley remote proxy failed before and the request has a request body.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Ruediger Pluem]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Added 'disablereuse' option for ProxyPass which, essentially,
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley disables connection pooling for the backend servers.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Jim Jagielski]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Activate mod_cache, mod_file_cache and mod_disc_cache as part of the
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley 'most' set for '--enable-modules' and '--enable-shared-mods'. Include
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley mod_mem_cache in 'all' as well. [Dirk-Willem van Gulik]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Also install mod_so.h, mod_rewrite.h and mod_cache.h; as these
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley contain public function declarations which are useful for
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley third party module authors. PR 42431 [Dirk-Willem van Gulik].
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_dir, mod_negotiation: pass the output filter information
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley to newly created sub requests; as these are later on used
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley as true requests with an internal redirect. This allows for
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley mod_cache et.al. to trap the results of the redirect.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Dirk-Willem van Gulik, Ruediger Pluem]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_proxy_ajp: Do not retry request in the case that we either failed to
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley sent a part of the request body or if the request is not idempotent.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley PR 44334 [Ruediger Pluem]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_ldap: Add support (taking advantage of the new APR capability)
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley for ldap rebind callback while chasing referrals. This allows direct
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley searches on LDAP servers (in particular MS Active Directory 2003+)
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley using referrals without the use of the global catalog.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley PRs 26538, 40268, and 42557 [Paul J. Reder]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Support chroot on Unix-family platforms
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley PR 43596 [Dimitar Pashev <mitko banksoft-bg.com>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_ssl: Added server name indication support (SNI, RFC 4366).
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley PR 34607. [Kaspar Brand <asfbugz velox.ch>]. A test configuration
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley can be created with test/make_sni.sh [Dirk-Willem van Gulik].
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) ApacheMonitor.exe: Introduce --kill argument for use by the
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley installer. This will permit the installation tool to remove
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley all running instances before attempting to remove the .exe.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [William Rowe]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_proxy: Lower memory consumption for short lived connections.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley PR 44026. [Ruediger Pluem]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_proxy: Keep connections to the backend persistent in the HTTPS case.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Ruediger Pluem]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_ssl: Add support for OCSP validation of client certificates.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley PR 41123. [Marc Stern <marc.stern approach.be>, Joe Orton]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_unique_id: Fix timestamp value in UNIQUE_ID.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley PR 37064 [Kobayashi <kobayashi firstserver.co.jp>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_serf: New module for Reverse Proxying. [Paul Querna]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) core: Add the option to keep aside a request body up to a certain
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley size that would otherwise be discarded, to be consumed by filters
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley such as mod_include. When enabled for a directory, POST requests
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley to shtml files can be passed through to embedded scripts as POST
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley requests, rather being downgraded to GET requests. [Graham Leggett]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_ssl: Fix TLS upgrade (RFC 2817) support. PR 41231. [Joe Orton]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) scoreboard: Correctly declare ap_time_process_request.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) core; scoreboard: ap_get_scoreboard_worker(sbh) now takes the sbh member
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley from the connection rec, ap_get_scoreboard_worker(proc, thread) will now
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley provide the unusual legacy lookup. [William Rowe]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mpm winnt: fix null pointer dereference
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley PR 42572 [Davi Arnaut]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_authnz_ldap, mod_authn_dbd: Tidy up the code to expose authn
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley parameters to the environment. Improve portability to
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley EBCDIC machines by using apr_toupper(). [Martin Kraemer]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_ldap, mod_authnzldap: Add support for nested groups (i.e. the ability
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley to authorize an authenticated user via a "require ldap-group X" directive
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley where the user is not in group X, but is in a subgroup contained in X.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley PR 42891 [Paul J. Reder]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_ssl: Add support for caching SSL Sessions in memcached. [Paul Querna]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) ab: Add -r option to continue after socket receive errors.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Filip Hanik <devlist hanik.com>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_ldap: Fix the search limit parameter to ldap_search_ext_s()
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley for SDKs that define LDAP_NO_LIMIT to something other than -1.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [David Jones <oscaremma gmail.com>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) apxs: Enhance -q flag to print all known variables and their values
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley when invoked without variable name(s).
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [William Rowe, Sander Temme]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) apxs: Eliminate run-time check for mod_so. PR 40653.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [David M. Lee <dmlee crossroads.com>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) beos MPM: Create pmain pool and run modules' child_init hooks when
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley entering ap_mpm_run(), then destroy pmain when exiting ap_mpm_run().
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Chris Darroch]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) netware MPM: Destroy pmain pool when exiting ap_mpm_run() so that
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley cleanups registered in modules' child_init hooks are performed.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Chris Darroch]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_dbd: Stash DBD connections in request_config of initial request
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley only, or else sub-requests and internal redirections may cause
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley entire DBD pool to be stashed in a single HTTP request. [Chris Darroch]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Fix issue which could cause error messages to be written to access logs
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley on Win32. PR 40476. [Tom Donovan <Tom.Donovan acm.org>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) The LockFile directive, which specifies the location of
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley the accept() mutex lockfile, is deprecated. Instead, the
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley AcceptMutex directive now takes an optional lockfile
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley location parameter, ala SSLMutex. [Jim Jagielski]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_authn_dbd: Export any additional columns queried in the SQL select
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley into the environment with the name AUTHENTICATE_<COLUMN>. This brings
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley mod_authn_dbd behaviour in line with mod_authnz_ldap. [Graham Leggett]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_dbd: Key the storage of prepared statements on the hex string
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley value of server_rec, rather than the server name, as the server name
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley may change (eg when the server name is set) at any time, causing
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley weird behaviour in modules dependent on mod_dbd. [Graham Leggett]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_proxy_fcgi: Added win32 build. [Mladen Turk]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) sendfile_nonblocking() takes the _brigade_ as an argument, gets
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley the first bucket from the brigade, finds it not to be a FILE
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley bucket and barfs. The fix is to pass a bucket rather than a brigade.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Niklas Edmundsson <nikke acc.umu.se>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_rewrite: support rewritemap by SQL query [Nick Kew]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) ap_get_server_version() has been removed. Third-party modules must
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley now use ap_get_server_banner() or ap_get_server_description().
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Jeff Trawick]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) All MPMs: Introduce a check_config phase between pre_config and
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley open_logs, to allow modules to review interdependent configuration
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley directive values and adjust them while messages can still be logged
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley to the console. Handle relevant MPM directives during this phase
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley and format messages for both the console and the error log, as
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley appropriate. [Chris Darroch]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_proxy: don't URLencode tilde in path component
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Stijn Hoop <stijn sandcat.nl>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mpm_winnt: Fix return values from wait_for_many_objects.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley The return value is index to the signaled thread in the
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley creted_threads array. We can not use WAIT_TIMEOUT because
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley his value is defined as 258, thus limiting the MaxThreads
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley to that value. [Mladen Turk]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) core: Do not allow internal redirects like the DirectoryIndex of mod_dir
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley to circumvent the symbolic link checks imposed by FollowSymLinks and
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley SymLinksIfOwnerMatch. [Nick Kew, Ruediger Pluem, William Rowe]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_proxy: Support environment variable interpolation in reverse
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley proxying directives. [Nick Kew]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) core: Add the filename of the configuration file to the warning message
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley about the useless use of AllowOverride. PR 39992.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Darryl Miles <darryl darrylmiles.org>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) New SSLLogLevelDebugDump [ None (default) | IO (not bytes) | Bytes ]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley configures the I/O Dump of SSL traffic, when LogLevel is set to Debug.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley The default is none as this is far greater debugging resolution than
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley the typical administrator is prepared to untangle. [William Rowe]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_disk_cache: If possible, check if the size of an object to cache is
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley within the configured boundaries before actually saving data.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Niklas Edmundsson <nikke acc.umu.se>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_cache: Convert all values to seconds before comparing them when
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley checking whether to send a Warning header for a stale response.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley PR 39713. [Owen Taylor <otaylor redhat.com>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_disk_cache: Delete temporary files if they cannot be renamed to their
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley final name. [Davi Arnaut <davi haxent.com.br>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Worker and event MPMs: Remove improper scoreboard updates which were
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley performed in the event of a fork() failure. [Chris Darroch]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Add support for fcgi:// proxies to mod_rewrite.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Markus Schiegl <ms schiegl.com>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Remove incorrect comments from scoreboard.h regarding conditional
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley loading of worker_score structure with mod_status, and remove unused
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley definitions relating to old life_status field.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Chris Darroch <chrisd pearsoncmg.com>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Remove allocation of memory for unused array of lb_score pointers
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley in ap_init_scoreboard(). [Chris Darroch <chrisd pearsoncmg.com>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Add mod_proxy_fcgi, a FastCGI back end for mod_proxy.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Garrett Rooney, Jim Jagielski, Paul Querna]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Event MPM: Fill in the scoreboard's tid field. PR 38736.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Chris Darroch <chrisd pearsoncmg.com>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_charset_lite: Remove Content-Length when output filter can
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley invalidate it. Warn when input filter can invalidate it.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Jeff Trawick]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Authz: Add the new module mod_authn_core that will provide common
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley authn directives such as 'AuthType', 'AuthName'. Move the directives
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley 'AuthType' and 'AuthName' out of the core module and merge mod_authz_alias
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley into mod_authn_core. [Brad Nicholes]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Authz: Move the directives 'Order', 'Allow', 'Deny' and 'Satisfy'
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley into the new module mod_access_compat which can be loaded to provide
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley support for these directives.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Brad Nicholes]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Authz: Move the 'Require' directive from the core module as well as
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley add the directives '<SatisfyAll>', '<SatisfyOne>', '<RequireAlias>'
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley and 'Reject' to mod_authz_core. The new directives introduce 'AND/OR'
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley logic into the authorization processing. [Brad Nicholes]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Authz: Add the new module mod_authz_core which acts as the
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley authorization provider vector and contains common authz
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley directives. [Brad Nicholes]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Authz: Renamed mod_authz_dbm authz providers from 'group' and
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley 'file-group' to 'dbm-group' and 'dbm-file-group'. [Brad Nicholes]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Authz: Added the new authz providers 'env', 'ip', 'host', 'all' to handle
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley host-based access control provided by mod_authz_host and invoked
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley through the 'Require' directive. [Brad Nicholes]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Authz: Convert all of the authz modules from hook based to
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley provider based. [Brad Nicholes]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_cache: Add CacheMinExpire directive to set the minimum time in
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley seconds to cache a document.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Brian Akins <brian.akins turner.com>, Ruediger Pluem]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_authz_dbd: SQL authz with Login/Session support [Nick Kew]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Fix typo in ProxyStatus syntax error message.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Christophe Jaillet <christophe.jaillet wanadoo.fr>]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Asynchronous write completion for the Event MPM. [Brian Pane]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Added an End-Of-Request bucket type. The logging of a request and
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley the freeing of its pool are now done when the EOR bucket is destroyed.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley This has the effect of delaying the logging until right after the last
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley of the response is sent; ap_core_output_filter() calls the access logger
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley indirectly when it destroys the EOR bucket. [Brian Pane]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Rewrite of logresolve support utility: IPv6 addresses are now supported
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley and the format of statistical output has changed. [Colm MacCarthaigh]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Rewrite of ap_coreoutput_filter to do nonblocking writes [Brian Pane]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Added new connection states for handler and write completion
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Brian Pane]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) mod_cgid: Refuse to work on Solaris 10 due to OS bugs. PR 34264.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Justin Erenkrantz]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) Teach mod_ssl to use arbitrary OIDs in an SSLRequire directive,
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley allowing string-valued client certificate attributes to be used for
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley access control, as in: SSLRequire "value" in OID("1.3.6.1.4.1.18060.1")
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Martin Kraemer, David Reid]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley [Apache 2.1.0-dev includes those bug fixes and changes with the
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley Apache 2.2.xx tree as documented, and except as noted, below.]
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob HalleyChanges with Apache 2.2.x and later:
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob HalleyChanges with Apache 2.0.x and later:
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob HalleyChanges with Apache 1.3.x and later: