8ddfe3a457c91c8e7d48134398fb178b091366d7rbb -*- coding: utf-8 -*-

d943f5870debf69f3186f2666221abefc22a2d6drbbChanges with Apache 2.5.0

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb *) core: Be less strict when checking whether Content-Type is set to

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb "application/x-www-form-urlencoded" when parsing POST data,

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb or we risk losing data with an appended charset. PR 53698

d943f5870debf69f3186f2666221abefc22a2d6drbb [Petter Berntsen <petterb gmail.com>]

d943f5870debf69f3186f2666221abefc22a2d6drbb

d943f5870debf69f3186f2666221abefc22a2d6drbb *) mod_lua: Decline handling 'lua-script' if the file doesn't exist,

d943f5870debf69f3186f2666221abefc22a2d6drbb rather than throwing an internal server error. [Daniel Gruno]

d943f5870debf69f3186f2666221abefc22a2d6drbb

d943f5870debf69f3186f2666221abefc22a2d6drbb *) mod_lua: Add functions r:flush and r:sendfile as well as additional

d943f5870debf69f3186f2666221abefc22a2d6drbb request information to the request_rec structure. [Daniel Gruno]

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb *) mod_lua: Add a server scope for Lua states, which creates a pool of

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb states with managable minimum and maximum size. [Daniel Gruno]

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb *) core: Add post_perdir_config hook.

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb [Steinar Gunderson <sgunderson bigfoot.com>]

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb *) mod_lua: Add new directive, LuaMapHandler, for dynamically mapping

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb URIs to Lua scripts and functions using regular expressions.

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb [Daniel Gruno]

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb

d943f5870debf69f3186f2666221abefc22a2d6drbb *) mod_lua: Add new directive LuaCodeCache for controlling in-memory

d943f5870debf69f3186f2666221abefc22a2d6drbb caching of lua scripts. [Daniel Gruno]

d943f5870debf69f3186f2666221abefc22a2d6drbb

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb - APIs: ap_log_pid(), ap_remove_pid, ap_read_pid()

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb - core: the scoreboard (ScoreBoardFile), pid file (PidFile), and

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb mutexes (Mutex)

d943f5870debf69f3186f2666221abefc22a2d6drbb - mod_lbmethod_heartbeat, mod_heartmonitor: heartbeat storage file

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb - mod_ldap: shared memory cache

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb - mod_socache_shmcb, mod_socache_dbm: shared memory or dbm for cache

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb [Jeff Trawick]

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb *) mod_ssl: Add RFC 5878 support. [Ben Laurie]

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb *) mod_lua: Add new directive LuaAuthzProvider to allow implementing an

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb authorization provider in lua. [Stefan Fritsch]

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb *) mod_ssl: Add support for TLS-SRP (Secure Remote Password key exchange

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb for TLS, RFC 5054). PR 51075. [Quinn Slack <sqs cs stanford edu>,

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb Christophe Renou, Peter Sylvester]

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb *) core: Make ap_regcomp() return AP_REG_ESPACE if out of memory. Make

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb ap_pregcomp() abort if out of memory. This raises the minimum PCRE

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb requirement to version 6.0. PR 53284. [Stefan Fritsch]

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb *) suexec: Add --enable-suexec-capabilites support on Linux, to use

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb setuid/setgid capability bits rather than a setuid root binary.

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb [Joe Orton]

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb

60ed053fe71b1e3cfab8c4ed37afde30a6db4841rbb *) suexec: Add support for logging to syslog as an alternative to logging

60ed053fe71b1e3cfab8c4ed37afde30a6db4841rbb to a file; configure --without-suexec-logfile --with-suexec-syslog.

60ed053fe71b1e3cfab8c4ed37afde30a6db4841rbb [Joe Orton]

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb [Matthew Steele <mdsteele google.com>]

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb *) various modules, rotatelogs: Replace use of apr_file_write() with

8ddfe3a457c91c8e7d48134398fb178b091366d7rbb apr_file_write_full() to prevent incomplete writes. PR 53131.

[Nicolas Viennot <apache viennot biz>, Stefan Fritsch]

*) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will

be compiled by the build compiler instead of the host compiler.

Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.

PR 51257. [Guenter Knauf]

*) core: In maintainer mode, replace apr_palloc with a version that

initializes the allocated memory with non-zero values, except if

AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]

*) mod_authnz_ldap: Don't try a potentially expensive nested groups

search before exhausting all AuthLDAPGroupAttribute checks on the

current group. PR52464 [Eric Covener]

*) mod_policy: Add a new testing module to help server administrators

enforce a configurable level of protocol compliance on their

servers and application servers behind theirs. [Graham Leggett]

*) mod_firehose: Add a new debugging module able to record traffic

passing through the server in such a way that connections and/or

requests be reconstructed and replayed. [Graham Leggett]

*) mod_noloris

*) APREQ

*) Simple MPM

*) mod_serf

[Apache 2.5.0-dev includes those bug fixes and changes with the

Apache 2.4.xx tree as documented below, except as noted.]

Changes with Apache 2.4.x and later:

*) http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup

Changes with Apache 2.2.x and later:

*) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup

Changes with Apache 2.0.x and later:

*) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup