CHANGES revision 2165214331e4afafca4048f66f303d0253d7b001
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein -*- coding: utf-8 -*-
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark AndrewsChanges with Apache 2.5.0
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy_fcgi: Enable UDS backends configured with SetHandler/RewriteRule
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to opt-in to connection reuse and other Proxy options via explicitly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein declared "proxy workers" (<Proxy unix:... enablereuse=on max=...)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy: Add "enablereuse" option as the inverse of "disablereuse".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy_fcgi: Enable opt-in to TCP connection reuse by explicitly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein setting proxy option disablereuse=off. [Eric Covener] PR 57378.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy_fcgi: Remove proxy:balancer:// prefix from SCRIPT_FILENAME
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein passed to fastcgi backends. [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_http: Fix incorrect If-Match handling. PR 57358.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Kunihiko Sakamoto <ksakamoto google.com>]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy_ajp: Fix handling of the default port (8009) in the
cedb0bd0c1e3c461b7e479a16d3adfd5b150f1f4Mark Andrews ProxyPass and <Proxy> configurations. PR 57259. [Yann Ylavic].
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_ssl: Fix renegotiation failures redirected to an ErrorDocument.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein PR 57334. [Yann Ylavic].
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: Fix -D[efined] or <Define>[d] variables lifetime accross restarts.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein PR 57328. [Armin Abfalterer <a.abfalterer gmail.com>, Yann Ylavic].
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy_ajp: Fix client connection errors handling and logged status
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when it occurs. PR 56823. [Yann Ylavic]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) ap_expr: Add filemod function for checking file modification dates
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Daniel Gruno]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: Add CGIPassAuth directive to control whether HTTP authorization
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein headers are passed to scripts as CGI variables. PR 56855. [Jeff
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_rewrite: Improve relative substitutions in per-directory/htaccess
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein context for directories found by mod_userdir and mod_alias. These no
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein longer require RewriteBase to be specified. [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_authnz_ldap: Resolve crashes with LDAP authz and non-LDAP authn since
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein r1608202. [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: Support custom ErrorDocuments for HTTP 501 and 414 status codes.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein PR 57167 [Edward Lu <Chaosed0 gmail.com>]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy_connect: Don't issue AH02447 on sockets hangups, let the read
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews determine whether it is a normal close or a real error. PR 57168. [Yann
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_buffer: Forward flushed input data immediatly and avoid (unlikely)
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews access to freed memory. [Yann Ylavic, Christophe Jaillet]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy: Use the correct server name for SNI in case the backend
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews SSL connection itself is established via a proxy server.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein PR 57139 [Szabolcs Gyurko <szabolcs gyurko.org>]
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews *) mod_ssl: Do not crash when looking up SSL related variables during
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews expression evaluation on non SSL connections. PR 57070 [Ruediger Pluem]
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews *) core: Ensure that httpd exits with an error status when the MPM fails
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews to run. [Yann Ylavic]
7329012471d165cd3dc4180ad2a0a43de91e7f01Mark Andrews *) apreq: Content-Length header should be always interpreted as a decimal.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Leading 0 could be erroneously considered as an octal value. PR 56598.
7329012471d165cd3dc4180ad2a0a43de91e7f01Mark Andrews [Chris Card <ctcard hotmail com>]
7329012471d165cd3dc4180ad2a0a43de91e7f01Mark Andrews *) mod_proxy: Now allow for 191 character worker names, with non-fatal
7329012471d165cd3dc4180ad2a0a43de91e7f01Mark Andrews errors if name is truncated. PR53218. [Jim Jagielski]
7329012471d165cd3dc4180ad2a0a43de91e7f01Mark Andrews *) mod_ssl: Add optional function "ssl_get_tls_cb" to allow support
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for channel bindings. [Simo Sorce <simo redhat.com>]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy_wstunnel: Concurrent websockets messages could be
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein lost or delayed with ProxyWebsocketAsync enabled.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Edward Lu <Chaosed0 gmail.com>]
dca44b90c96352111e0f1cdfdeccde1a13732161Mark Andrews *) core, mod_info: Add compiled and loaded PCRE versions to version
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein number display. [Rainer Jung]
dca44b90c96352111e0f1cdfdeccde1a13732161Mark Andrews *) mpm_winnt: Accept utf-8 (Unicode) service names and descriptions for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein internationalization. [William Rowe]
dca44b90c96352111e0f1cdfdeccde1a13732161Mark Andrews *) mpm_winnt: Normalize the error and status messages emitted by service.c,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the service control interface for Windows. [William Rowe]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_authnz_ldap: Return LDAP connections to the pool before the handler
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is run, instead of waiting until the end of the request. [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_ldap: Be more conservative with the last-used time for
dca44b90c96352111e0f1cdfdeccde1a13732161Mark Andrews LDAPConnectionPoolTTL. PR54587 [Eric Covener]
dca44b90c96352111e0f1cdfdeccde1a13732161Mark Andrews *) mod_deflate: Don't fail when flushing inflated data to the user-agent
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews and that coincides with the end of stream ("Zlib error flushing inflate
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein buffer"). PR 56196. [Christoph Fausak <christoph fausak glueckkanja.com>]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy: Don't limit the size of the connectable Unix Domain Socket
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein paths. [Christophe Jaillet, Yann Ylavic]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_ssl: dump SSL IO/state for the write side of the connection(s),
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein like reads (level TRACE4). [Yann Ylavic]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy: Shutdown (eg. close notify) the backend connection before
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein closing. [Yann Ylavic]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mpm_event[opt]: Send the SSL close notify alert when the KeepAliveTimeout
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein expires. PR54998. [Yann Ylavic]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_ssl: Ensure that the SSL close notify alert is flushed to the client.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein PR54998. [Tim Kosse <tim.kosse filezilla-project.org>, Yann Ylavic]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_log_config: Add GlobalLog to allow a globally defined log to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein be inherited by virtual hosts that define a CustomLog.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Edward Lu <Chaosed0 gmail.com>]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) MPMs: Support SO_REUSEPORT to create multiple duplicated listener
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein records for scalability. [Yingqi Lu <yingqi.lu@intel.com>,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Jeff Trawick, Jim Jagielski]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy_html: support automatic detection of doctype and processing
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of FPIs. PR56285 [Micha Lenk <micha lenk info>, Nick Kew]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy_html: skip documents shorter than 4 bytes
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein PR 56286 [Micha Lenk <micha lenk info>]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy_fdpass: Fix computation of the size of 'struct sockaddr_un'
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when passed to 'connect()'.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Graham Dumpleton <grahamd apache org>]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: Add ap_mpm_resume_suspended() API to allow a suspended connection
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to resume. PR56333
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Artem <artemciy gmail.com>, Edward Lu <Chaosed0 gmail.com>]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: Add ap_mpm_register_socket_callback_timeout() API. [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy_wstunnel: Honor ProxyWebsocketIdleTimeout in asynchronous
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein processing mode. [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_authnz_ldap: Fail explicitly when the filter is too long. Remove
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein unnecessary apr_pstrdup() and strlen(). [Graham Leggett]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) Add the ldap-search option to mod_authnz_ldap, allowing authorization
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to be based on arbitrary expressions that do not include the username.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Graham Leggett]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) Add the ldap function to the expression API, allowing LDAP filters and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein distinguished names based on expressions to be escaped correctly to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein guard against LDAP injection. [Graham Leggett]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) Add module mod_ssl_ct, which provides an implementation of Certificate
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Transparency (RFC 6962) for httpd. [Jeff Trawick]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy: Preserve original request headers even if they differ
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein from the ones to be forwarded to the backend. PR 45387.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Yann Ylavic]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews *) mod_remoteip: Prevent an external proxy from presenting an internal
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews proxy. PR 55962. [Mike Rumph]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews *) mod_ssl: Add hooks to allow other modules to perform processing at
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews several stages of initialization and connection handling. See
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews *) mod_proxy_wstunnel: Avoid sending error responses down an upgraded
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews websockets connection as it is being close down. [Eric Covener]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews *) mod_proxy_wstunnel: Allow the administrator to cap the amount
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews of time a synchronous websockets connection stays idle with
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews ProxyWebsocketIdleTimeout. [Eric Covener]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews *) mod_proxy_wstunnel: Change to opt-in for asynchronous support, adding
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews directives ProxyWebsocketAsync and ProxyWebsocketAsyncDelay.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy_wstunnel: Stop leaking websockets backend connections under
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein event MPM (trunk-only). [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy_http: Add detach_backend hook (potentially usable
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in other proxy scheme handlers). [Jeff Trawick]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_deflate: Add DeflateAlterETag to control how the ETag
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is modified. The 'NoChange' parameter mimics 2.2.x behavior.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein PR 45023, PR 39727. [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_rewrite: Add 'BNF' (backreferences-no-plus) flag to RewriteRule to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allow spaces in backreferences to be encoded as %20 instead of '+'.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_rewrite: Support an optional list of characters to escape in the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein argument for the 'B' (escape backreferences) flag. [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_dir: Default to 2.2-like behavior and skip execution when method is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein neither GET nor POST, such as for DAV requests. PR 54914. [Chris Darroch]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_rewrite: Rename the handler that does per-directory internal
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein redirects to "rewrite-redirect-handler" from "redirect-handler" so
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein it is less ambiguous and less likely to be reused. [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_rewrite: Protect against looping with the [N] flag by enforcing a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein default limit of 10000 iterations, and allowing each rule to change its
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein limit. [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_ssl: Fix config merging of SSLOCSPEnable and SSLOCSPOverrideResponder.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Jeff Trawick]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) Add HttpContentLengthHeadZero and HttpExpectStrict directives.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Yehuda Sadeh <yehuda inktank com>, Justin Erenkrantz]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_ssl: Add -t -DDUMP_CA_CERTS option which dumps the filenames of all
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein configured SSL CA certificates to stdout the same way as DUMP_CERTS does.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Jan Kaluza]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_ssl: Don't flush when an EOS is received. Prepares mod_ssl
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to support write completion. [Graham Leggett]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: Add parse_errorlog_arg callback to ap_errorlog_provider
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to allow providers to check the ErrorLog argument. [Jan Kaluza]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_cgid: Use the servers Timeout for each read from a CGI script,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allow override with new CGIDRequestTimeout directive. PR43494
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Eric Covener, Toshikuni Fukaya <toshikuni-fukaya cybozu co jp>]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: ensure any abnormal exit is reported to stderr if it's a tty.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein PR 55670 [Nick Kew]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_lua: Let the Inter-VM get/set functions work with a global
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein shared memory pool instead of a per-process pool. [Daniel Gruno]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) ldap: Support ldaps when using the Microsoft LDAP SDK.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein PR 54626. [Jean-Frederic Clere]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy: Add ap_connection_reusable() for checking if a connection
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is reusable as of this point in processing. [Jeff Trawick]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_authnz_ldap: Change default value of AuthLDAPMaxSubGroupDepth to 0
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to avoid performance problems when subgroups aren't in use. [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_syslog: New module implementing syslog ap_error_log provider.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Previously, this code was part of core, now it's in separate module.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Jan Kaluza]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: Add ap_errorlog_provider to make ErrorLog logging modular. Move
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein syslog support from core to new mod_syslog. [Jan Kaluza]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_status, mod_echo: Fix the display of client addresses.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein They were truncated to 31 characters which is not enough for IPv6 addresses.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein PR 54848 [Bernhard Schmidt <berni birkenwald de>]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: Add ap_log_data(), ap_log_rdata(), etc. for logging buffers.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Jeff Trawick]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_unique_id: Use output of the PRNG rather than IP address and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein pid, avoiding sleep() call and possible DNS issues at startup,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein plus improving randomness for IPv6-only hosts.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Jan Kaluza <jkaluza redhat.com>]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_authnz_ldap: Support primitive LDAP servers that do not accept
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein filters, such as "SDBM-backed LDAP" on z/OS, by allowing a special
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein filter "none" to be specified in AuthLDAPURL. [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_file_cache: mod_file_cache should be able to serve files that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein haven't had a Content-Type set via e.g. mod_mime. [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: merge AllowEncodedSlashes from the base configuration into
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein virtual hosts. [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) AIX: Install DSO's with "cp" instead of "install" in instdso.sh
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_ldap: Don't keep retrying if a new LDAP connection times out.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_deflate: permit compilation of mod_deflate against a zlib that has
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein been configured with -D Z_PREFIX, which redefines the token "deflate".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Eric Covener]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_auth_digest: Use the secret when generating nonces in all cases and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein not only when AuthName is used in .htaccess files (this change may cause
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein problems if used with round robin load balancers). Don't regenerate the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein secret on graceful restarts. PR 54637 [Stefan Fritsch]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: Remove apr_brigade_flatten(), buffering and duplicated code
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein from the HTTP_IN filter, parse chunks in a single pass with zero copy.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Reduce memory usage by 48 bytes per request. [Graham Leggett]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: Stop the HTTP_IN filter from attempting to write error buckets
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to the output filters, which is bogus in the proxy case. Create a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein clean mapping from APR codes to HTTP status codes, and use it where
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein needed. [Graham Leggett]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy: Ensure network errors detected by the proxy are returned as
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 504 Gateway Timout as opposed to 502 Bad Gateway, in order to be
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein compliant with RFC2616 14.9.4 Cache Revalidation and Reload Controls.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_ldap: LDAP connections used for authentication were not respecting
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein LDAPConnectionPoolTimeout. PR 54587
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: ap_rgetline_core now pulls from r->proto_input_filters.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy_html: process parsed comments immediately.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Fixes bug where parsed comments may be lost. [Nick Kew]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: Add option to add valgrind support. Use it to reduce false positive
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein warnings in mod_ssl. [Stefan Fritsch]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_authn_file, mod_authn_dbd, mod_authn_dbm, mod_authn_socache:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Cache the result of the most recent password hash verification for every
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein keep-alive connection. This saves some expensive calculations.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Stefan Fritsch]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) http: Remove support for Request-Range header sent by Navigator 2-3 and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein MSIE 3. [Stefan Fritsch]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core, http: Extend HttpProtocol with an option to enforce stricter HTTP
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein conformance or to only log the found problems. [Stefan Fritsch]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: Correctly parse an IPv6 literal host specification in an absolute
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein URL in the request line. [Stefan Fritsch]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) EventOpt MPM
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: Add LogLevelOverride directive that allows to override the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein loglevel for clients from certain IPs. This also works for things
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein like the SSL handshake where <If> LogLevel ... </If> is evaluated
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein too late. [Stefan Fritsch]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: Add new directive Warning to issue warnings from a configuration
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein file. Both Warning and Error now generate a timestamped log message.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Fabien Coelho]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) ap_expr: Add SERVER_PROTOCOL_VERSION, ..._MAJOR, and ..._MINOR
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein variables. [Stefan Fritsch]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: New directive RegisterHttpMethod for registering non-standard
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein HTTP methods. [Stefan Fritsch]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: New directive HttpProtocol which allows to disable HTTP/0.9
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein support. [Stefan Fritsch]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_allowhandlers: New module to forbid specific handlers for specific
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein directories. [Stefan Fritsch]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_systemd: New module, for integration with systemd on Linux.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Jan Kaluza <jkaluza redhat.com>]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) WinNT MPM: Store pid and generation for each thread in scoreboard
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to allow tracking of threads from exiting children via mod_status
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein or other such mechanisms. [Jeff Trawick]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - APIs: ap_log_pid(), ap_remove_pid, ap_read_pid()
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - core: the scoreboard (ScoreBoardFile), pid file (PidFile), and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein mutexes (Mutex)
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - mod_cache: thundering herd lock directory
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - mod_lbmethod_heartbeat, mod_heartmonitor: heartbeat storage file
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - mod_ldap: shared memory cache
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - mod_socache_shmcb, mod_socache_dbm: shared memory or dbm for cache
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Jeff Trawick]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) suexec: Add --enable-suexec-capabilites support on Linux, to use
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews setuid/setgid capability bits rather than a setuid root binary.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews *) suexec: Add support for logging to syslog as an alternative to logging
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews to a file; configure --without-suexec-logfile --with-suexec-syslog.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Matthew Steele <mdsteele google.com>]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein be compiled by the build compiler instead of the host compiler.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein PR 51257. [Guenter Knauf]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) core: In maintainer mode, replace apr_palloc with a version that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein initializes the allocated memory with non-zero values, except if
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_policy: Add a new testing module to help server administrators
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein enforce a configurable level of protocol compliance on their
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein servers and application servers behind theirs. [Graham Leggett]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_firehose: Add a new debugging module able to record traffic
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein passing through the server in such a way that connections and/or
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein requests be reconstructed and replayed. [Graham Leggett]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) mod_noloris
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) Simple MPM
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [Apache 2.5.0-dev includes those bug fixes and changes with the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Apache 2.4.xx tree as documented below, except as noted.]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinChanges with Apache 2.4.x and later:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinChanges with Apache 2.2.x and later:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinChanges with Apache 2.0.x and later: