CHANGES revision 433dcb1fbaae82d36634f5120bff71a04296904d
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce -*- coding: utf-8 -*-
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceChanges with Apache 2.3.0
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce[ When backported to 2.2.x, remove entry from this file ]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_dir, mod_negotiation: pass the output filter information
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to newly created sub requests; as these are later on used
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson as true requests with an internal redirect. This allows for
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson mod_cache et.al. to trap the results of the redirect.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Dirk-Willem van Gulik, Ruediger Pluem]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) ab: Use a 64 bit unsigned int instead of a signed long to count the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce bytes transferred to avoid integer overflows. PR 44346 [Ruediger Pluem]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_proxy_ajp: Do not retry request in the case that we either failed to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce sent a part of the request body or if the request is not idempotent.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce PR 44334 [Ruediger Pluem]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_proxy_http: Fix processing of chunked responses if
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson Connection: Transfer-Encoding is set in the response of the proxied
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce system. PR 44311 [Ruediger Pluem]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) ProxyPassReverse is now balancer aware. [Jim Jagielski]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) rotatelogs: Don't leak memory when reopening the logfile.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce PR 40183 [Ruediger Pluem, Takashi Sato <serai lans-tv.com>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_ldap: Add support (taking advantage of the new APR capability)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce for ldap rebind callback while chasing referrals. This allows direct
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce searches on LDAP servers (in particular MS Active Directory 2003+)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce using referrals without the use of the global catalog.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce PRs 26538, 40268, and 42557 [Paul J. Reder]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) ab: Do not try to read non existing response bodies of HEAD requests.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce PR 34275 [Takashi Sato <serai lans-tv.com>]
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson *) Support chroot on Unix-family platforms
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce PR 43596 [Dimitar Pashev <mitko banksoft-bg.com>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Don't add bogus duplicate Content-Language entries
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce PR 11035 [Davi Arnaut]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_proxy_ftp: Fix base for directory listings.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce PR 27834 [Nick Kew]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_proxy_http: Return HTTP status codes instead of apr_status_t
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce values for errors encountered while forwarding the request body
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce PR 44165 [Eric Covener]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_logio: Provide optional function to allow modules to adjust the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce bytes_in count [Eric Covener]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_ssl: Added server name indication support (RFC 4366).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce PR 34607. [Kaspar Brand <asfbugz velox.ch>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) ApacheMonitor.exe: Introduce --kill argument for use by the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce installer. This will permit the installation tool to remove
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce all running instances before attempting to remove the .exe.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [William Rowe]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_proxy: Lower memory consumption for short lived connections.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce PR 44026. [Ruediger Pluem]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_proxy: Keep connections to the backend persistent in the HTTPS case.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Ruediger Pluem]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) rotatelogs: Improve atomicity when using -l and cleaup code.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce PR 44004 [Rainer Jung]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_ssl: Add support for OCSP validation of client certificates.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce PR 41123. [Marc Stern <marc.stern approach.be>, Joe Orton]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_unique_id: Fix timestamp value in UNIQUE_ID.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce PR 37064 [Kobayashi <kobayashi firstserver.co.jp>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_serf: New module for Reverse Proxying. [Paul Querna]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) core: Add the option to keep aside a request body up to a certain
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce size that would otherwise be discarded, to be consumed by filters
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce such as mod_include. When enabled for a directory, POST requests
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to shtml files can be passed through to embedded scripts as POST
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce requests, rather being downgraded to GET requests. [Graham Leggett]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_ssl: Fix TLS upgrade (RFC 2817) support. PR 41231. [Joe Orton]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) scoreboard: Correctly declare ap_time_process_request.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) core; scoreboard: ap_get_scoreboard_worker(sbh) now takes the sbh member
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce from the connection rec, ap_get_scoreboard_worker(proc, thread) will now
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce provide the unusual legacy lookup. [William Rowe]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mpm winnt: fix null pointer dereference
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce PR 42572 [Davi Arnaut]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) core: reinstate location walk to fix config for subrequests
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce PR 41960 [Jose Kahan <jose w3.org>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_log_config: Add format options for %p so that the actual local
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce or remote port can be logged. PR 43415. [Adam Hasselbalch Hansen
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <ahh@one.com>, Ruediger Pluem, Jeff Trawick]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_authnz_ldap, mod_authn_dbd: Tidy up the code to expose authn
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce parameters to the environment. Improve portability to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce EBCDIC machines by using apr_toupper(). [Martin Kraemer]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_ldap, mod_authnzldap: Add support for nested groups (i.e. the ability
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to authorize an authenticated user via a "require ldap-group X" directive
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce where the user is not in group X, but is in a subgroup contained in X.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce PR 42891 [Paul J. Reder]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_ssl: Add support for caching SSL Sessions in memcached. [Paul Querna]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) ab: Add -r option to continue after socket receive errors.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Filip Hanik <devlist hanik.com>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_ldap: Fix the search limit parameter to ldap_search_ext_s()
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce for SDKs that define LDAP_NO_LIMIT to something other than -1.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [David Jones <oscaremma gmail.com>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) apxs: Enhance -q flag to print all known variables and their values
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce when invoked without variable name(s).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [William Rowe, Sander Temme]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) apxs: Eliminate run-time check for mod_so. PR 40653.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [David M. Lee <dmlee crossroads.com>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) beos MPM: Create pmain pool and run modules' child_init hooks when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce entering ap_mpm_run(), then destroy pmain when exiting ap_mpm_run().
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Chris Darroch]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) netware MPM: Destroy pmain pool when exiting ap_mpm_run() so that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce cleanups registered in modules' child_init hooks are performed.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Chris Darroch]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_dbd: Stash DBD connections in request_config of initial request
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce only, or else sub-requests and internal redirections may cause
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce entire DBD pool to be stashed in a single HTTP request. [Chris Darroch]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Fix issue which could cause error messages to be written to access logs
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce on Win32. PR 40476. [Tom Donovan <Tom.Donovan acm.org>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) The LockFile directive, which specifies the location of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the accept() mutex lockfile, is deprecated. Instead, the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce AcceptMutex directive now takes an optional lockfile
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce location parameter, ala SSLMutex. [Jim Jagielski]
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson *) mod_authn_dbd: Export any additional columns queried in the SQL select
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson into the environment with the name AUTHENTICATE_<COLUMN>. This brings
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson mod_authn_dbd behaviour in line with mod_authnz_ldap. [Graham Leggett]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_dbd: Key the storage of prepared statements on the hex string
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce value of server_rec, rather than the server name, as the server name
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson may change (eg when the server name is set) at any time, causing
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce weird behaviour in modules dependent on mod_dbd. [Graham Leggett]
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson *) mod_proxy_fcgi: Added win32 build. [Mladen Turk]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) sendfile_nonblocking() takes the _brigade_ as an argument, gets
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the first bucket from the brigade, finds it not to be a FILE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce bucket and barfs. The fix is to pass a bucket rather than a brigade.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Niklas Edmundsson <nikke acc.umu.se>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_rewrite: support rewritemap by SQL query [Nick Kew]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) ap_get_server_version() has been removed. Third-party modules must
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce now use ap_get_server_banner() or ap_get_server_description().
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Jeff Trawick]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) All MPMs: Introduce a check_config phase between pre_config and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce open_logs, to allow modules to review interdependent configuration
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce directive values and adjust them while messages can still be logged
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to the console. Handle relevant MPM directives during this phase
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce and format messages for both the console and the error log, as
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce appropriate. [Chris Darroch]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_proxy: don't URLencode tilde in path component
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Stijn Hoop <stijn sandcat.nl>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mpm_winnt: Fix return values from wait_for_many_objects.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The return value is index to the signaled thread in the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce creted_threads array. We can not use WAIT_TIMEOUT because
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce his value is defined as 258, thus limiting the MaxThreads
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to that value. [Mladen Turk]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) core: Do not allow internal redirects like the DirectoryIndex of mod_dir
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to circumvent the symbolic link checks imposed by FollowSymLinks and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce SymLinksIfOwnerMatch. [Nick Kew, Ruediger Pluem, William Rowe]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_proxy: Support environment variable interpolation in reverse
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce proxying directives. [Nick Kew]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) core: Add the filename of the configuration file to the warning message
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce about the useless use of AllowOverride. PR 39992.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Darryl Miles <darryl darrylmiles.org>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) New SSLLogLevelDebugDump [ None (default) | IO (not bytes) | Bytes ]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce configures the I/O Dump of SSL traffic, when LogLevel is set to Debug.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The default is none as this is far greater debugging resolution than
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the typical administrator is prepared to untangle. [William Rowe]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_disk_cache: If possible, check if the size of an object to cache is
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson within the configured boundaries before actually saving data.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Niklas Edmundsson <nikke acc.umu.se>]
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson *) mod_cache: Convert all values to seconds before comparing them when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce checking whether to send a Warning header for a stale response.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce PR 39713. [Owen Taylor <otaylor redhat.com>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_disk_cache: Delete temporary files if they cannot be renamed to their
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce final name. [Davi Arnaut <davi haxent.com.br>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Worker and event MPMs: Remove improper scoreboard updates which were
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce performed in the event of a fork() failure. [Chris Darroch]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Add support for fcgi:// proxies to mod_rewrite.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Markus Schiegl <ms schiegl.com>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Remove incorrect comments from scoreboard.h regarding conditional
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce loading of worker_score structure with mod_status, and remove unused
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce definitions relating to old life_status field.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Chris Darroch <chrisd pearsoncmg.com>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Remove allocation of memory for unused array of lb_score pointers
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce in ap_init_scoreboard(). [Chris Darroch <chrisd pearsoncmg.com>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Add mod_proxy_fcgi, a FastCGI back end for mod_proxy.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Garrett Rooney, Jim Jagielski, Paul Querna]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Event MPM: Fill in the scoreboard's tid field. PR 38736.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Chris Darroch <chrisd pearsoncmg.com>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_charset_lite: Remove Content-Length when output filter can
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce invalidate it. Warn when input filter can invalidate it.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Jeff Trawick]
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson *) Authz: Add the new module mod_authn_core that will provide common
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson authn directives such as 'AuthType', 'AuthName'. Move the directives
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce 'AuthType' and 'AuthName' out of the core module and merge mod_authz_alias
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce into mod_authn_core. [Brad Nicholes]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Authz: Move the directives 'Order', 'Allow', 'Deny' and 'Satisfy'
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce into the new module mod_access_compat which can be loaded to provide
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce support for these directives.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Brad Nicholes]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Authz: Move the 'Require' directive from the core module as well as
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce add the directives '<SatisfyAll>', '<SatisfyOne>', '<RequireAlias>'
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce and 'Reject' to mod_authz_core. The new directives introduce 'AND/OR'
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce logic into the authorization processing. [Brad Nicholes]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Authz: Add the new module mod_authz_core which acts as the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce authorization provider vector and contains common authz
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce directives. [Brad Nicholes]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Authz: Renamed mod_authz_dbm authz providers from 'group' and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce 'file-group' to 'dbm-group' and 'dbm-file-group'. [Brad Nicholes]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Authz: Added the new authz providers 'env', 'ip', 'host', 'all' to handle
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce host-based access control provided by mod_authz_host and invoked
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce through the 'Require' directive. [Brad Nicholes]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Authz: Convert all of the authz modules from hook based to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce provider based. [Brad Nicholes]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_cache: Add CacheMinExpire directive to set the minimum time in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce seconds to cache a document.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Brian Akins <brian.akins turner.com>, Ruediger Pluem]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_authz_dbd: SQL authz with Login/Session support [Nick Kew]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Fix typo in ProxyStatus syntax error message.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Christophe Jaillet <christophe.jaillet wanadoo.fr>]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Asynchronous write completion for the Event MPM. [Brian Pane]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Added an End-Of-Request bucket type. The logging of a request and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the freeing of its pool are now done when the EOR bucket is destroyed.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce This has the effect of delaying the logging until right after the last
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of the response is sent; ap_core_output_filter() calls the access logger
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce indirectly when it destroys the EOR bucket. [Brian Pane]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Rewrite of logresolve support utility: IPv6 addresses are now supported
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce and the format of statistical output has changed. [Colm MacCarthaigh]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Rewrite of ap_coreoutput_filter to do nonblocking writes [Brian Pane]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Added new connection states for handler and write completion
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Brian Pane]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) mod_cgid: Refuse to work on Solaris 10 due to OS bugs. PR 34264.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Justin Erenkrantz]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) Teach mod_ssl to use arbitrary OIDs in an SSLRequire directive,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allowing string-valued client certificate attributes to be used for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce access control, as in: SSLRequire "value" in OID("1.3.6.1.4.1.18060.1")
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Martin Kraemer, David Reid]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [Apache 2.1.0-dev includes those bug fixes and changes with the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Apache 2.2.xx tree as documented, and except as noted, below.]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceChanges with Apache 2.2.x and later:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceChanges with Apache 2.0.x and later:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceChanges with Apache 1.3.x and later: