CHANGES revision 506bfe33206b2fece40ef25f695af39dd4130fac
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun -*- coding: utf-8 -*-
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgunChanges with Apache 2.5.0
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) SECURITY: CVE-2015-0253 (cve.mitre.org)
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun core: Fix a crash introduced in with ErrorDocument 400 pointing
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun to a local URL-path with the INCLUDES filter active, introduced
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun in 2.4.11. PR 57531. [Yann Ylavic]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_rewrite: Add support for starting External Rewriting Programs
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun as non-root user on UNIX systems by specifying username and group name
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun as third argument of RewriteMap directive. [Jan Kaluza]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) core: If explicitly configured, use the KeepaliveTimeout value of the
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun virtual host which handled the latest request on the connection, or by
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun default the one of the first virtual host bound to the same IP:port.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun PR56226. [Yann Ylavic]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_authn_core: Add expression support to AuthName and AuthType.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Graham Leggett]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_deflate: A misplaced check prevents limiting small bodies with the
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun new inflate limits. PR56872. [Edward Lu, Eric Covener, Yann Ylavic]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) ab: Add missing longest request (100%) to CSV export.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Marcin Fabrykowski <bugzilla fabrykowski.pl>]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) core: Add expression support to ErrorDocument. Switch from a fixed
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun sized 664 byte array per merge to a hash table. [Graham Leggett]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_ssl: Add the SSL_CLIENT_CERT_RFC4523_CEA variable, which provides
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun a combination of certificate serialNumber and issuer as defined by
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun CertificateExactMatch in RFC4523. [Graham Leggett]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) suexec: Filter out the HTTP_PROXY environment variable because it is
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun treated as alias for http_proxy by some programs. [Stefan Fritsch]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy_http: Use the "Connection: close" header for requests to
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun backends not recycling connections (disablereuse), including the default
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun reverse and forward proxies. [Yann Ylavic]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy_http: Don't expect the backend to ack the "Connection: close" to
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun finally close those not meant to be kept alive by SetEnv proxy-nokeepalive
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun or force-proxy-request-1.0, and respond with 502 instead of 400 if its
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun Connection header is invalid. [Yann Ylavic]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy(es): Avoid error response/document handling by the core if some
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun input filter already did it while reading client's payload. [Yann Ylavic]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) http: Make ap_die() robust against any HTTP error code and not modify
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun response status (finally logged) when nothing is to be done. [Yann Ylavic]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy_connect/wstunnel: If both client and backend sides get readable
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun at the same time, don't lose errors occuring while forwarding on the first
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun side when none occurs next on the other side, and abort. [Yann Ylavic]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_macro: Clear macros before initialization to avoid use-after-free
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun on startup or restart when the module is linked statically. PR 57525
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy_http: Don't establish or reuse a backend connection before pre-
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun fetching the request body, so to minimize the delay between it is supposed
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun to be alive and the first bytes sent: this is a best effort to prevent the
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun backend from closing because of idle or keepalive timeout in the meantime.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun Also, handle a new "proxy-flushall" environment variable which allows to
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun flush any forwarded body data immediately. PR 56541+37920. [Yann Ylavic]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) core: Define and UnDefine are no longer permitted in
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun directory context. Previously they would always be evaulated
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun as the configuration was read without regard for the directory
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun context. [Eric Covener]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) config: For directives that do not expect any arguments, enforce
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun that none are specified in the configuration file.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Joachim Zobel <jzobel heute-morgen.de>, Eric Covener]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_ssl: 'SSLProtocol ALL' was being ignored in virtual host context.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun PR 57100. [Michael Kaufmann <apache-bugzilla michael-kaufmann.ch>,
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun Yann Ylavic]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_alias: Introduce expression parser support for Alias, ScriptAlias
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun and Redirect. [Graham Leggett]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_rewrite: Improve 'bad flag delimeters' startup error by showing
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun how the input was tokenized. PR 56528. [Edward Lu <Chaosed0 gmail.com>]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_ssl: Add support for extracting subjectAltName entries of type
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun rfc822Name and dNSName into SSL_{CLIENT,SERVER}_SAN_{Email,DNS}_n
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun environment variables. Also addresses PR 57207. [Kaspar Brand]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy: Don't put non balancer-member workers in error state by
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun default for connection or 500/503 errors, and honor status=+I for
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun any error. PR 48388. [Yann Ylavic]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_socache_memcache: Pass expiration time through to memcached. PR 55445.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Faidon Liambotis <paravoid debian.org>, Joe Orton]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_http: Fix incorrect If-Match handling. PR 57358.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Kunihiko Sakamoto <ksakamoto google.com>]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy_ajp: Fix client connection errors handling and logged status
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun when it occurs. PR 56823. [Yann Ylavic]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) ap_expr: Add filemod function for checking file modification dates
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Daniel Gruno]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) core: Add CGIPassAuth directive to control whether HTTP authorization
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun headers are passed to scripts as CGI variables. PR 56855. [Jeff
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_rewrite: Improve relative substitutions in per-directory/htaccess
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun context for directories found by mod_userdir and mod_alias. These no
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun longer require RewriteBase to be specified. [Eric Covener]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_authnz_ldap: Resolve crashes with LDAP authz and non-LDAP authn since
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun r1608202. [Eric Covener]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_buffer: Forward flushed input data immediatly and avoid (unlikely)
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun access to freed memory. [Yann Ylavic, Christophe Jaillet]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy: Use the correct server name for SNI in case the backend
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun SSL connection itself is established via a proxy server.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun PR 57139 [Szabolcs Gyurko <szabolcs gyurko.org>]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) core: Ensure that httpd exits with an error status when the MPM fails
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun to run. [Yann Ylavic]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) apreq: Content-Length header should be always interpreted as a decimal.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun Leading 0 could be erroneously considered as an octal value. PR 56598.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Chris Card <ctcard hotmail com>]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy: Now allow for 191 character worker names, with non-fatal
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun errors if name is truncated. PR53218. [Jim Jagielski]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_ssl: Add optional function "ssl_get_tls_cb" to allow support
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun for channel bindings. [Simo Sorce <simo redhat.com>]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy_wstunnel: Concurrent websockets messages could be
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun lost or delayed with ProxyWebsocketAsync enabled.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Edward Lu <Chaosed0 gmail.com>]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) core, mod_info: Add compiled and loaded PCRE versions to version
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun number display. [Rainer Jung]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mpm_winnt: Accept utf-8 (Unicode) service names and descriptions for
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun internationalization. [William Rowe]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mpm_winnt: Normalize the error and status messages emitted by service.c,
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun the service control interface for Windows. [William Rowe]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_authnz_ldap: Return LDAP connections to the pool before the handler
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun is run, instead of waiting until the end of the request. [Eric Covener]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_ssl: dump SSL IO/state for the write side of the connection(s),
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun like reads (level TRACE4). [Yann Ylavic]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy: Shutdown (eg. close notify) the backend connection before
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun closing. [Yann Ylavic]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mpm_event[opt]: Send the SSL close notify alert when the KeepAliveTimeout
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun expires. PR54998. [Yann Ylavic]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_ssl: Ensure that the SSL close notify alert is flushed to the client.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun PR54998. [Tim Kosse <tim.kosse filezilla-project.org>, Yann Ylavic]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_log_config: Add GlobalLog to allow a globally defined log to
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun be inherited by virtual hosts that define a CustomLog.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Edward Lu <Chaosed0 gmail.com>]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) MPMs: Support SO_REUSEPORT to create multiple duplicated listener
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun records for scalability. [Yingqi Lu <yingqi.lu@intel.com>,
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun Jeff Trawick, Jim Jagielski]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy_html: support automatic detection of doctype and processing
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun of FPIs. PR56285 [Micha Lenk <micha lenk info>, Nick Kew]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy_html: skip documents shorter than 4 bytes
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun PR 56286 [Micha Lenk <micha lenk info>]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy_fdpass: Fix computation of the size of 'struct sockaddr_un'
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun when passed to 'connect()'.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Graham Dumpleton <grahamd apache org>]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) core: Add ap_mpm_resume_suspended() API to allow a suspended connection
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun to resume. PR56333
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Artem <artemciy gmail.com>, Edward Lu <Chaosed0 gmail.com>]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) core: Add ap_mpm_register_socket_callback_timeout() API. [Eric Covener]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy_wstunnel: Honor ProxyWebsocketIdleTimeout in asynchronous
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun processing mode. [Eric Covener]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_authnz_ldap: Fail explicitly when the filter is too long. Remove
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun unnecessary apr_pstrdup() and strlen(). [Graham Leggett]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) Add the ldap-search option to mod_authnz_ldap, allowing authorization
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun to be based on arbitrary expressions that do not include the username.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Graham Leggett]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) Add the ldap function to the expression API, allowing LDAP filters and
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun distinguished names based on expressions to be escaped correctly to
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun guard against LDAP injection. [Graham Leggett]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) Add module mod_ssl_ct, which provides an implementation of Certificate
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun Transparency (RFC 6962) for httpd. [Jeff Trawick]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy: Preserve original request headers even if they differ
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun from the ones to be forwarded to the backend. PR 45387.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Yann Ylavic]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_remoteip: Prevent an external proxy from presenting an internal
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun proxy. PR 55962. [Mike Rumph]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_ssl: Add hooks to allow other modules to perform processing at
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun several stages of initialization and connection handling. See
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun mod_ssl_openssl.h. [Jeff Trawick]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy_wstunnel: Avoid sending error responses down an upgraded
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun websockets connection as it is being close down. [Eric Covener]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy_wstunnel: Allow the administrator to cap the amount
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun of time a synchronous websockets connection stays idle with
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun ProxyWebsocketIdleTimeout. [Eric Covener]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy_wstunnel: Change to opt-in for asynchronous support, adding
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun directives ProxyWebsocketAsync and ProxyWebsocketAsyncDelay.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Eric Covener]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy_wstunnel: Stop leaking websockets backend connections under
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun event MPM (trunk-only). [Eric Covener]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_proxy_http: Add detach_backend hook (potentially usable
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun in other proxy scheme handlers). [Jeff Trawick]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_deflate: Add DeflateAlterETag to control how the ETag
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun is modified. The 'NoChange' parameter mimics 2.2.x behavior.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun PR 45023, PR 39727. [Eric Covener]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_rewrite: Add 'BNF' (backreferences-no-plus) flag to RewriteRule to
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun allow spaces in backreferences to be encoded as %20 instead of '+'.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Eric Covener]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_rewrite: Support an optional list of characters to escape in the
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun argument for the 'B' (escape backreferences) flag. [Eric Covener]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_dir: Default to 2.2-like behavior and skip execution when method is
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun neither GET nor POST, such as for DAV requests. PR 54914. [Chris Darroch]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_rewrite: Rename the handler that does per-directory internal
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun redirects to "rewrite-redirect-handler" from "redirect-handler" so
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun it is less ambiguous and less likely to be reused. [Eric Covener]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_rewrite: Protect against looping with the [N] flag by enforcing a
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun default limit of 10000 iterations, and allowing each rule to change its
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun limit. [Eric Covener]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_ssl: Fix config merging of SSLOCSPEnable and SSLOCSPOverrideResponder.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Jeff Trawick]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) Add HttpContentLengthHeadZero and HttpExpectStrict directives.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Yehuda Sadeh <yehuda inktank com>, Justin Erenkrantz]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_ssl: Add -t -DDUMP_CA_CERTS option which dumps the filenames of all
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun configured SSL CA certificates to stdout the same way as DUMP_CERTS does.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Jan Kaluza]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_ssl: Don't flush when an EOS is received. Prepares mod_ssl
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun to support write completion. [Graham Leggett]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) core: Add parse_errorlog_arg callback to ap_errorlog_provider
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun to allow providers to check the ErrorLog argument. [Jan Kaluza]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_cgid: Use the servers Timeout for each read from a CGI script,
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun allow override with new CGIDRequestTimeout directive. PR43494
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun [Eric Covener, Toshikuni Fukaya <toshikuni-fukaya cybozu co jp>]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) core: ensure any abnormal exit is reported to stderr if it's a tty.
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun PR 55670 [Nick Kew]
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun *) mod_lua: Let the Inter-VM get/set functions work with a global
34be775b7fb103ca189f3a38979f46ce8a74ef68nilgun shared memory pool instead of a per-process pool. [Daniel Gruno]
[Jan Kaluza <jkaluza redhat.com>]
filters, such as "SDBM-backed LDAP" on z/OS, by allowing a special
haven't had a Content-Type set via e.g. mod_mime. [Eric Covener]
*) AIX: Install DSO's with "cp" instead of "install" in instdso.sh
HTML/XHTML [Nick Kew]
[Jan Kaluza <jkaluza redhat.com>]
*) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
setuid/setgid capability bits rather than a setuid root binary.
[Matthew Steele <mdsteele google.com>]
passing through the server in such a way that connections and/or
Apache 2.4.xx tree as documented below, except as noted.]
Changes with Apache 2.4.x and later:
Changes with Apache 2.2.x and later:
Changes with Apache 2.0.x and later: