CHANGES revision 80b84e5e8000730a98b2f7a6a6eb3c6ab21c2d22
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt -*- coding: utf-8 -*-
553ead32ff5b00284e574dcabc39115d4d74ec66Evan HuntChanges with Apache 2.3.0
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt[ When backported to 2.2.x, remove entry from this file ]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
a6ca100924894cdd8e2b791d75a8cef32b1fba1fTinderbox User *) Fix garbled TRACE response on EBCDIC platforms.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [David Jones <oscaremma gmail.com>]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) core, authn/z: Determine registered authn/z providers directly in
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt ap_setup_auth_internal(), which allows optional functions that just
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt wrapped ap_list_provider_names() to be removed from authn/z modules.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [Chris Darroch]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) authn/z: Convert common provider version strings to macros.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [Chris Darroch]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) http_filters: Don't return 100-continue on redirects. PR 43711
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [Ruediger Pluem]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) ab: Make ab.c compile on VC6. PR 45024 [Ruediger Pluem]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) configure: Don't reject libtool 2.x
1753d3c4d74241a847794f7e7cfd94cc79be6600Evan Hunt PR 44817 [Arfrever Frehtes Taifersar Arahesis <Arfrever.FTA gmail.com>]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) suexec: When group is given as a numeric gid, validate it by looking up
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt the actual group name such that the name can be used in log entries.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt PR 7862 [<y-koga apache.or.jp>, Leif W <warp-9.9 usa.net>]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) ab: Improve client performance by clearing connection pool instead
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt of destroying it. PR 40054 [Brad Roberts <braddr puremagic.com>]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) ab: Don't stop sending a request if EAGAIN is returned, which
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt will only happen if both the write and subsequent wait are
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt returning EAGAIN, and count posted bytes correctly when the initial
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt write of a request is not complete. PR 10038, 38861, 39679
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [Patrick McManus <mcmanus datapower.com>,
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt Stefan Fleiter <stefan.fleiter web.de>,
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt Davanum Srinivas, Roy T. Fielding]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
f1c89cb4f5c72c54bb67dc48cd6f2b332eab9e92Automatic Updater *) ab: Overhaul stats collection and reporting to avoid integer
207cee019eb5cbbe7c905f7c52f7b5d11f8c0305Automatic Updater truncation and time divisions within the test loop, retain
6ea2385360e9e2167e65f9286447da9eea189457Tinderbox User native time resolution until output, remove unused data,
a6ca100924894cdd8e2b791d75a8cef32b1fba1fTinderbox User consistently round milliseconds, and generally avoid losing
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt accuracy of calculation due to type casts. PR 44878, 44931.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [Roy T. Fielding]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) core: When testing for slash-terminated configuration paths in
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt ap_location_walk(), don't look past the start of an empty string
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt such as that created by a <Location ""> directive.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [Chris Darroch]
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) core, mod_proxy: If a kept_body is present, it becomes safe for
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt subrequests to support message bodies. Make sure that safety
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt checks within the core and within the proxy are not triggered
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt when kept_body is present. This makes it possible to embed
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt proxied POST requests within mod_include. [Graham Leggett]
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_auth_form: Make sure the input filter stack is properly set
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt up before reading the login form. Make sure the kept body filter
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman is correctly inserted to ensure the body can be read a second
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt time safely should the authn be successful. [Graham Leggett,
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont Ruediger Pluem]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_request: Insert the KEPT_BODY filter via the insert_filter
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt hook instead of during fixups. Add a safety check to ensure the
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt filters cannot be inserted more than once. [Graham Leggett,
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt Ruediger Pluem]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) core: Do not allow Options ALL if not all options are allowed to be
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt overwritten. PR 44262 [Michał Grzędzicki <lazy iq.pl>]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt *) ap_cache_cacheable_headers_out() will (now) always
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt merge an error heaeders _before_ clearing them and _before_
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt merging in the actual entity headers and doing normal
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt hop-by-hop cleansing. [Dirk-Willem van Gulik].
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) cache: retire ap_cache_cacheable_hdrs_out() which was used
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt for both in- and out-put headers; and replace it by a single
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt ap_cache_cacheable_headers() wrapped in a in- and out-put
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt specific ap_cache_cacheable_headers_in()/out(). The latter
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt which will also merge error and ensure content-type. To keep
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt cache modules consistent with ease. This API change bumps
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt up the minor MM by one [Dirk-Willem van Gulik].
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_rewrite: Allow Cookie option to set secure and HttpOnly flags.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt PR 44799 [Christian Wenz <christian wenz.org>]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) Move the KeptBodySize directive, kept_body filters and the
d7be2b79ed0934483d550e17e2bd09de4eaff8f5Evan Hunt ap_parse_request_body function out of the http module and into a
d7be2b79ed0934483d550e17e2bd09de4eaff8f5Evan Hunt new module called mod_request, reducing the size of the core.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [Graham Leggett]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_dbd: Handle integer configuration directive parameters with a
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt dedicated function.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) Change the directives within the mod_session* modules to be valid
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt both inside and outside the location/directory sections, as
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt suggested by wrowe. [Graham Leggett]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_auth_form: Add a module capable of allowing end users to log
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt in using an HTML form, storing the credentials within mod_session.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [Graham Leggett]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) Add a function to the http filters that is able to parse an HTML
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt form request with the type of application/x-www-form-urlencoded.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [Graham Leggett]
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt *) mod_session_crypto: Initialise SSL in the post config hook.
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt [Ruediger Pluem, Graham Leggett]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_session_dbd: Add a session implementation capable of storing
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt session information in a SQL database via the dbd interface. Useful
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt for sites where session privacy is important. [Graham Leggett]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_session_crypto: Add a session encoding implementation capable
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt of encrypting and decrypting sessions wherever they may be stored.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt Introduces a level of privacy when sessions are stored on the
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt browser. [Graham Leggett]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_session_cookie: Add a session implementation capable of storing
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt session information within cookies on the browser. Useful for high
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt volume sites where server bound sessions are too resource intensive.
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt [Graham Leggett]
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt *) mod_session: Add a generic session interface to unify the different
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt attempts at saving persistent sessions across requests.
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt [Graham Leggett]
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt *) core, authn/z: Avoid calling access control hooks for internal requests
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt with configurations which match those of initial request. Revert to
03f979494f5c80e05a72f876914d9d44085fbd6aEvan Hunt original behaviour (call access control hooks for internal requests
03f979494f5c80e05a72f876914d9d44085fbd6aEvan Hunt with URIs different from initial request) if any access control hooks or
03f979494f5c80e05a72f876914d9d44085fbd6aEvan Hunt providers are not registered as permitting this optimization.
03f979494f5c80e05a72f876914d9d44085fbd6aEvan Hunt Introduce wrappers for access control hook and provider registration
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt which can accept additional mode and flag data. [Chris Darroch]
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt *) mod_dav: Return "method not allowed" if the destination URI of a WebDAV
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt copy / move operation is no DAV resource. PR 44734 [Ruediger Pluem]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) Introduced ap_expr API for expression evaluation.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt This is adapted from mod_include, which is the first module
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt to use the new API.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [Nick Kew]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_authz_dbd: When redirecting after successful login/logout per
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt AuthzDBDRedirectQuery, do not report authorization failure, and use
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt first row returned by database query instead of last row.
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman [Chris Darroch]
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman *) mod_rewrite: Initialize hash needed by ap_register_rewrite_mapfunc early
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman enough. PR 44641 [Daniel Lescohier <daniel.lescohier cnet.com>]
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman *) mod_cache: Handle If-Range correctly if the cached resource was stale.
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman PR 44579 [Ruediger Pluem]
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman *) mod_ldap: Correctly return all requested attribute values
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt when some attributes have a null value.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt PR 44560 [Anders Kaseorg <anders kaseorg.com>]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) core: check symlink ownership if both FollowSymlinks and
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt SymlinksIfOwnerMatch are set [Nick Kew]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) core: fix origin checking in SymlinksIfOwnerMatch
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt PR 36783 [Robert L Mathews <rob-apache.org.bugs tigertech.net>]
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont *) mod_proxy: Do not try a direct connection if the connection via a
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont remote proxy failed before and the request has a request body.
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont [Ruediger Pluem]
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt *) Activate mod_cache, mod_file_cache and mod_disc_cache as part of the
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt 'most' set for '--enable-modules' and '--enable-shared-mods'. Include
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt mod_mem_cache in 'all' as well. [Dirk-Willem van Gulik]
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt *) Also install mod_so.h, mod_rewrite.h and mod_cache.h; as these
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt contain public function declarations which are useful for
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt third party module authors. PR 42431 [Dirk-Willem van Gulik].
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt *) mod_dir, mod_negotiation: pass the output filter information
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont to newly created sub requests; as these are later on used
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont as true requests with an internal redirect. This allows for
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont mod_cache et.al. to trap the results of the redirect.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [Dirk-Willem van Gulik, Ruediger Pluem]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_proxy_ajp: Do not retry request in the case that we either failed to
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt sent a part of the request body or if the request is not idempotent.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt PR 44334 [Ruediger Pluem]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_ldap: Add support (taking advantage of the new APR capability)
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt for ldap rebind callback while chasing referrals. This allows direct
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt searches on LDAP servers (in particular MS Active Directory 2003+)
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt using referrals without the use of the global catalog.
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt PRs 26538, 40268, and 42557 [Paul J. Reder]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt *) Support chroot on Unix-family platforms
a165a17a81ff3285f4f4d79785fafb465e626183Evan Hunt PR 43596 [Dimitar Pashev <mitko banksoft-bg.com>]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_ssl: Added server name indication support (SNI, RFC 4366).
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt PR 34607. [Kaspar Brand <asfbugz velox.ch>]. A test configuration
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt can be created with test/make_sni.sh [Dirk-Willem van Gulik].
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) ApacheMonitor.exe: Introduce --kill argument for use by the
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt installer. This will permit the installation tool to remove
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt all running instances before attempting to remove the .exe.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [William Rowe]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_ssl: Add support for OCSP validation of client certificates.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt PR 41123. [Marc Stern <marc.stern approach.be>, Joe Orton]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_unique_id: Fix timestamp value in UNIQUE_ID.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt PR 37064 [Kobayashi <kobayashi firstserver.co.jp>]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_serf: New module for Reverse Proxying. [Paul Querna]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) core: Add the option to keep aside a request body up to a certain
eec29cfd40361662b25bad50e1b94f7738a8fea0Jeremy Reed size that would otherwise be discarded, to be consumed by filters
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt such as mod_include. When enabled for a directory, POST requests
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt to shtml files can be passed through to embedded scripts as POST
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt requests, rather being downgraded to GET requests. [Graham Leggett]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_ssl: Fix TLS upgrade (RFC 2817) support. PR 41231. [Joe Orton]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) scoreboard: Correctly declare ap_time_process_request.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt PR 43789 [Tom Donovan <Tom.Donovan acm.org>]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) core; scoreboard: ap_get_scoreboard_worker(sbh) now takes the sbh member
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt from the connection rec, ap_get_scoreboard_worker(proc, thread) will now
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt provide the unusual legacy lookup. [William Rowe]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mpm winnt: fix null pointer dereference
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt PR 42572 [Davi Arnaut]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_authnz_ldap, mod_authn_dbd: Tidy up the code to expose authn
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt parameters to the environment. Improve portability to
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt EBCDIC machines by using apr_toupper(). [Martin Kraemer]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt *) mod_ldap, mod_authnzldap: Add support for nested groups (i.e. the ability
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt to authorize an authenticated user via a "require ldap-group X" directive
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt where the user is not in group X, but is in a subgroup contained in X.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt PR 42891 [Paul J. Reder]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_ssl: Add support for caching SSL Sessions in memcached. [Paul Querna]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) ab: Add -r option to continue after socket receive errors.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [Filip Hanik <devlist hanik.com>]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_ldap: Fix the search limit parameter to ldap_search_ext_s()
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt for SDKs that define LDAP_NO_LIMIT to something other than -1.
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt [David Jones <oscaremma gmail.com>]
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) apxs: Enhance -q flag to print all known variables and their values
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt when invoked without variable name(s).
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [William Rowe, Sander Temme]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews *) apxs: Eliminate run-time check for mod_so. PR 40653.
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews [David M. Lee <dmlee crossroads.com>]
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews *) beos MPM: Create pmain pool and run modules' child_init hooks when
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews entering ap_mpm_run(), then destroy pmain when exiting ap_mpm_run().
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews [Chris Darroch]
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews *) netware MPM: Destroy pmain pool when exiting ap_mpm_run() so that
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews cleanups registered in modules' child_init hooks are performed.
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews [Chris Darroch]
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews *) mod_dbd: Stash DBD connections in request_config of initial request
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews only, or else sub-requests and internal redirections may cause
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews entire DBD pool to be stashed in a single HTTP request. [Chris Darroch]
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews *) Fix issue which could cause error messages to be written to access logs
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews on Win32. PR 40476. [Tom Donovan <Tom.Donovan acm.org>]
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews *) The LockFile directive, which specifies the location of
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews the accept() mutex lockfile, is deprecated. Instead, the
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews AcceptMutex directive now takes an optional lockfile
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews location parameter, ala SSLMutex. [Jim Jagielski]
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews *) mod_authn_dbd: Export any additional columns queried in the SQL select
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews into the environment with the name AUTHENTICATE_<COLUMN>. This brings
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews mod_authn_dbd behaviour in line with mod_authnz_ldap. [Graham Leggett]
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews *) mod_dbd: Key the storage of prepared statements on the hex string
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews value of server_rec, rather than the server name, as the server name
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews may change (eg when the server name is set) at any time, causing
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews weird behaviour in modules dependent on mod_dbd. [Graham Leggett]
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews *) mod_proxy_fcgi: Added win32 build. [Mladen Turk]
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews *) sendfile_nonblocking() takes the _brigade_ as an argument, gets
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews the first bucket from the brigade, finds it not to be a FILE
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews bucket and barfs. The fix is to pass a bucket rather than a brigade.
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews [Niklas Edmundsson <nikke acc.umu.se>]
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews *) mod_rewrite: support rewritemap by SQL query [Nick Kew]
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) ap_get_server_version() has been removed. Third-party modules must
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt now use ap_get_server_banner() or ap_get_server_description().
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [Jeff Trawick]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt *) All MPMs: Introduce a check_config phase between pre_config and
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt open_logs, to allow modules to review interdependent configuration
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt directive values and adjust them while messages can still be logged
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt to the console. Handle relevant MPM directives during this phase
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt and format messages for both the console and the error log, as
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt appropriate. [Chris Darroch]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt *) mod_proxy: don't URLencode tilde in path component
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt [Stijn Hoop <stijn sandcat.nl>]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt *) mpm_winnt: Fix return values from wait_for_many_objects.
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt The return value is index to the signaled thread in the
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt creted_threads array. We can not use WAIT_TIMEOUT because
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt his value is defined as 258, thus limiting the MaxThreads
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt to that value. [Mladen Turk]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt *) core: Do not allow internal redirects like the DirectoryIndex of mod_dir
c5259c013bba297cb0d38b85bd1c83fc26ef268cMark Andrews to circumvent the symbolic link checks imposed by FollowSymLinks and
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt SymLinksIfOwnerMatch. [Nick Kew, Ruediger Pluem, William Rowe]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt *) mod_proxy: Support environment variable interpolation in reverse
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt proxying directives. [Nick Kew]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt *) core: Add the filename of the configuration file to the warning message
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt about the useless use of AllowOverride. PR 39992.
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt [Darryl Miles <darryl darrylmiles.org>]
dcfca6f18d5069155ae50025aaeead0cc8c04730Evan Hunt
c5259c013bba297cb0d38b85bd1c83fc26ef268cMark Andrews *) New SSLLogLevelDebugDump [ None (default) | IO (not bytes) | Bytes ]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt configures the I/O Dump of SSL traffic, when LogLevel is set to Debug.
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt The default is none as this is far greater debugging resolution than
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt the typical administrator is prepared to untangle. [William Rowe]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt *) mod_disk_cache: If possible, check if the size of an object to cache is
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt within the configured boundaries before actually saving data.
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt [Niklas Edmundsson <nikke acc.umu.se>]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt *) mod_cache: Convert all values to seconds before comparing them when
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt checking whether to send a Warning header for a stale response.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt PR 39713. [Owen Taylor <otaylor redhat.com>]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) mod_disk_cache: Delete temporary files if they cannot be renamed to their
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt final name. [Davi Arnaut <davi haxent.com.br>]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) Worker and event MPMs: Remove improper scoreboard updates which were
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt performed in the event of a fork() failure. [Chris Darroch]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) Add support for fcgi:// proxies to mod_rewrite.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [Markus Schiegl <ms schiegl.com>]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) Remove incorrect comments from scoreboard.h regarding conditional
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt loading of worker_score structure with mod_status, and remove unused
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt definitions relating to old life_status field.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [Chris Darroch <chrisd pearsoncmg.com>]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) Remove allocation of memory for unused array of lb_score pointers
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt in ap_init_scoreboard(). [Chris Darroch <chrisd pearsoncmg.com>]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) Add mod_proxy_fcgi, a FastCGI back end for mod_proxy.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt [Garrett Rooney, Jim Jagielski, Paul Querna]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt *) Event MPM: Fill in the scoreboard's tid field. PR 38736.
[Chris Darroch <chrisd pearsoncmg.com>]
*) mod_charset_lite: Remove Content-Length when output filter can
invalidate it. Warn when input filter can invalidate it.
[Jeff Trawick]
*) Authz: Add the new module mod_authn_core that will provide common
authn directives such as 'AuthType', 'AuthName'. Move the directives
'AuthType' and 'AuthName' out of the core module and merge mod_authz_alias
into mod_authn_core. [Brad Nicholes]
*) Authz: Move the directives 'Order', 'Allow', 'Deny' and 'Satisfy'
into the new module mod_access_compat which can be loaded to provide
support for these directives.
[Brad Nicholes]
*) Authz: Move the 'Require' directive from the core module as well as
add the directives '<SatisfyAll>', '<SatisfyOne>', '<RequireAlias>'
and 'Reject' to mod_authz_core. The new directives introduce 'AND/OR'
logic into the authorization processing. [Brad Nicholes]
*) Authz: Add the new module mod_authz_core which acts as the
authorization provider vector and contains common authz
directives. [Brad Nicholes]
*) Authz: Renamed mod_authz_dbm authz providers from 'group' and
'file-group' to 'dbm-group' and 'dbm-file-group'. [Brad Nicholes]
*) Authz: Added the new authz providers 'env', 'ip', 'host', 'all' to handle
host-based access control provided by mod_authz_host and invoked
through the 'Require' directive. [Brad Nicholes]
*) Authz: Convert all of the authz modules from hook based to
provider based. [Brad Nicholes]
*) mod_cache: Add CacheMinExpire directive to set the minimum time in
seconds to cache a document.
[Brian Akins <brian.akins turner.com>, Ruediger Pluem]
*) mod_authz_dbd: SQL authz with Login/Session support [Nick Kew]
*) Fix typo in ProxyStatus syntax error message.
[Christophe Jaillet <christophe.jaillet wanadoo.fr>]
*) Asynchronous write completion for the Event MPM. [Brian Pane]
*) Added an End-Of-Request bucket type. The logging of a request and
the freeing of its pool are now done when the EOR bucket is destroyed.
This has the effect of delaying the logging until right after the last
of the response is sent; ap_core_output_filter() calls the access logger
indirectly when it destroys the EOR bucket. [Brian Pane]
*) Rewrite of logresolve support utility: IPv6 addresses are now supported
and the format of statistical output has changed. [Colm MacCarthaigh]
*) Rewrite of ap_coreoutput_filter to do nonblocking writes [Brian Pane]
*) Added new connection states for handler and write completion
[Brian Pane]
*) mod_cgid: Refuse to work on Solaris 10 due to OS bugs. PR 34264.
[Justin Erenkrantz]
*) Teach mod_ssl to use arbitrary OIDs in an SSLRequire directive,
allowing string-valued client certificate attributes to be used for
access control, as in: SSLRequire "value" in OID("1.3.6.1.4.1.18060.1")
[Martin Kraemer, David Reid]
[Apache 2.1.0-dev includes those bug fixes and changes with the
Apache 2.2.xx tree as documented, and except as noted, below.]
Changes with Apache 2.2.x and later:
*) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
Changes with Apache 2.0.x and later:
*) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup
Changes with Apache 1.3.x and later:
*) http://svn.apache.org/viewvc/httpd/httpd/branches/1.3.x/src/CHANGES?view=markup