CHANGES revision 82e6711dc508d2822d9397f07136ba4ddd8764e1
8723ec450f2e7a024230467c0c28a3f154905483cmaeder -*- coding: utf-8 -*-
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian MaederChanges with Apache 2.3.5
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder *) Core HTTP: disable keepalive when the Client has sent
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder Expect: 100-continue
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder but we respond directly with a non-100 response.
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder Keepalive here led to data from clients continuing being treated as
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder a new request.
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder PR 47087 [Nick Kew]
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian MaederChanges with Apache 2.3.4
18548c6cc2dff13bf9f5f08b3f6cde6ca914df1dChristian Maeder *) Replace AcceptMutex, LockFile, RewriteLock, SSLMutex, SSLStaplingMutex,
92ae4d5885ea837ffe3dae9b2de742f871229b94Christian Maeder and WatchdogMutexPath with a single Mutex directive. Add APIs to
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder simplify setup and user customization of APR proc and global mutexes.
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder (See util_mutex.h.) Build-time setting DEFAULT_LOCKFILE is no longer
ef1c24c8229ade3ac872febebd18c181e32fb9c4Christian Maeder respected; set DEFAULT_REL_RUNTIMEDIR instead. [Jeff Trawick]
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder *) http_core: KeepAlive no longer accepts other than On|Off.
99b26e2ab8ba89bc9a050c1524137eb6269e2753Christian Maeder [Takashi Sato]
eae0d62755147d991cc3e903f74f98ac31a7cd42Christian Maeder *) mod_dav: Remove errno from dav_error interface. Calls to dav_new_error()
8723ec450f2e7a024230467c0c28a3f154905483cmaeder and dav_new_error_tag() must be adjusted to add an apr_status_t parameter.
8723ec450f2e7a024230467c0c28a3f154905483cmaeder [Jeff Trawick]
eae0d62755147d991cc3e903f74f98ac31a7cd42Christian Maeder *) mod_authnz_ldap: Add AuthLDAPBindAuthoritative to allow Authentication to
d4263171d0ce2cbc390a7b44bff98e8b3c0f8ce7Christian Maeder try other providers in the case of an LDAP bind failure.
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder PR 46608 [Justin Erenkrantz, Joe Schaefer, Tony Stevenson]
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder *) Build: fix --with-module to work as documented
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder PR 43881 [Gez Saunders <gez.saunders virgin.net>]
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian MaederChanges with Apache 2.3.3
ef1c24c8229ade3ac872febebd18c181e32fb9c4Christian Maeder *) SECURITY: CVE-2009-3095 (cve.mitre.org)
945e82ed7877917f3ab1657f555e71991372546aChristian Maeder mod_proxy_ftp: sanity check authn credentials.
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder [Stefan Fritsch <sf fritsch.de>, Joe Orton]
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder *) SECURITY: CVE-2009-3094 (cve.mitre.org)
ef1c24c8229ade3ac872febebd18c181e32fb9c4Christian Maeder mod_proxy_ftp: NULL pointer dereference on error paths.
ef1c24c8229ade3ac872febebd18c181e32fb9c4Christian Maeder [Stefan Fritsch <sf fritsch.de>, Joe Orton]
7c99a6c982aaf61547de8054296c8055c8d1a13aSimon Ulbricht *) mod_ssl: enable support for ECC keys and ECDH ciphers. Tested against
ef1c24c8229ade3ac872febebd18c181e32fb9c4Christian Maeder OpenSSL 1.0.0b3. [Vipul Gupta <vipul.gupta sun.com>, Sander Temme]
d97700a22b2585ece83b05f3fff945fdfd0c44b4Christian Maeder *) mod_dav: Include uri when logging a PUT error due to connection abort.
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder PR 38149. [Stefan Fritsch]
de8eee2014437ec4020be15cd363257f87e79943Christian Maeder *) mod_dav: Return 409 instead of 500 for a LOCK request if the parent
ea5ccb1c6e89486a54e1f4bd95840147e96093edChristian Maeder resource does not exist or is not a collection. PR 43465. [Stefan Fritsch]
fd94a6f66ccb5cef99aa42069b61e4b8734dbd3fChristian Maeder *) mod_dav_fs: Return 409 instead of 500 for Litmus test case copy_nodestcoll
fd94a6f66ccb5cef99aa42069b61e4b8734dbd3fChristian Maeder (a COPY request where the parent of the destination resource does not
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder exist). PR 39299. [Stefan Fritsch]
473f5af6e4803fbeecc814065952396f2501039bChristian Maeder *) mod_dav_fs: Don't delete the whole file if a PUT with content-range failed.
473f5af6e4803fbeecc814065952396f2501039bChristian Maeder PR 42896. [Stefan Fritsch]
473f5af6e4803fbeecc814065952396f2501039bChristian Maeder *) mod_dav_fs: Make PUT create files atomically and no longer destroy the
473f5af6e4803fbeecc814065952396f2501039bChristian Maeder old file if the transfer aborted. PR 39815. [Paul Querna, Stefan Fritsch]
6a88f8edd881afaf4b865b01bfbb4faaf0e7a3c9Simon Ulbricht *) mod_dav_fs: Remove inode keyed locking as this conflicts with atomically
473f5af6e4803fbeecc814065952396f2501039bChristian Maeder creating files. On systems with inode numbers, this is a format change of
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder the DavLockDB. The old DavLockDB must be deleted on upgrade.
844c7d2ec3917393e139e53503757098d568713eSimon Ulbricht [Stefan Fritsch]
734a5ebd38032798f0ab908e2d52862c71b2c127Simon Ulbricht *) mod_log_config: Make ${cookie}C correctly match whole cookie names
ea5ccb1c6e89486a54e1f4bd95840147e96093edChristian Maeder instead of substrings. PR 28037. [Dan Franklin <dan dan-franklin.com>,
c8afa08a8bda589ef6670068dff0108464be4da7Christian Maeder Stefan Fritsch]
024703c9d1326c23e307c0b0d453ed3358e87fe4cmaeder *) vhost: A purely-numeric Host: header should not be treated as a port.
b99c9606f2faafeabb3fa8c596992143a561c787Simon Ulbricht PR 44979 [Nick Kew]
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder *) mod_ldap: Avoid 500 errors with "Unable to set LDAP_OPT_REFHOPLIMIT option to 5"
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder when built against openldap by using SDK LDAP_OPT_REFHOPLIMIT defaults unless
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder LDAPReferralHopLimit is explicitly configured.
526e7f36639cb58e3c99a54bea082499a6b04a25Christian Maeder [Eric Covener]
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder *) mod_charset_lite: Honor 'CharsetOptions NoImplicitAdd'.
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder [Eric Covener]
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder *) mod_ssl: Add support for OCSP Stapling. PR 43822.
18548c6cc2dff13bf9f5f08b3f6cde6ca914df1dChristian Maeder [Dr Stephen Henson <shenson oss-institute.org>]
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder *) mod_socache_shmcb: Allow parens in file name if cache size is given.
18548c6cc2dff13bf9f5f08b3f6cde6ca914df1dChristian Maeder Fixes SSLSessionCache directive mis-parsing parens in pathname.
6a6689ad6d4c70af2ce3389f39a50982f20fd939Christian Maeder PR 47945. [Stefan Fritsch]
7710f7c3425e45af11af124ff37bec27229d24f7Christian Maeder *) htpasswd: Improve out of disk space handling. PR 30877. [Stefan Fritsch]
df67ddf64192bfcae6ece65255ad796a17cbe532Christian Maeder *) htpasswd: Use MD5 hash by default on all platforms. [Stefan Fritsch]
6a6689ad6d4c70af2ce3389f39a50982f20fd939Christian Maeder *) mod_sed: Reduce memory consumption when processing very long lines.
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder PR 48024 [Basant Kumar Kukreja <basant.kukreja sun.com>]
526e7f36639cb58e3c99a54bea082499a6b04a25Christian Maeder *) ab: Fix segfault in case the argument for -n is a very large number.
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder PR 47178. [Philipp Hagemeister <oss phihag.de>]
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder *) Allow ProxyPreserveHost to work in <Proxy> sections. PR 34901.
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder [Stefan Fritsch]
6a6689ad6d4c70af2ce3389f39a50982f20fd939Christian Maeder *) configure: Fix THREADED_MPMS so that mod_cgid is enabled again
6a6689ad6d4c70af2ce3389f39a50982f20fd939Christian Maeder for worker MPM. [Takashi Sato]
e98c3d3efab62d97ebdeed52f4109d961f6432aaChristian Maeder *) mod_dav: Provide a mechanism to obtain the request_rec and pathname
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder from the dav_resource. [Jari Urpalainen <jari.urpalainen nokia.com>,
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder Brian France <brian brianfrance.com>]
6a6689ad6d4c70af2ce3389f39a50982f20fd939Christian Maeder *) Build: Use install instead of cp if available on installing
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder modules to avoid segmentation fault. PR 47951. [hirose31 gmail.com]
26acf851cacd7a31bdc9b25a42af9949942fa7c6Christian Maeder *) mod_cache: correctly consider s-maxage in cacheability
5896f38ba2934056542cb7cb3e6359e88a622547Christian Maeder decisions. [Dan Poirier]
5896f38ba2934056542cb7cb3e6359e88a622547Christian Maeder *) mod_logio/core: Report more accurate byte counts in mod_status if
5fb6343a5a2b4bbc67bc83479c84a92d23d30edfChristian Maeder mod_logio is loaded. PR 25656. [Stefan Fritsch]
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder *) mod_ldap: If LDAPSharedCacheSize is too small, try harder to purge
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder some cache entries and log a warning. Also increase the default
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder LDAPSharedCacheSize to 500000. This is a more realistic size suitable
18548c6cc2dff13bf9f5f08b3f6cde6ca914df1dChristian Maeder for the default values of 1024 for LdapCacheEntries/LdapOpCacheEntries.
11c3a215d5cf043181e83929f1ce214df65cb587Christian Maeder PR 46749. [Stefan Fritsch]
5fb6343a5a2b4bbc67bc83479c84a92d23d30edfChristian Maeder *) mod_rewrite: Make sure that a hostname:port isn't fully qualified if
6a6689ad6d4c70af2ce3389f39a50982f20fd939Christian Maeder the request is a CONNECT request. [Bill Zajac <billz consultla.com>]
12882fa70d12d9b56cbd850ccb4b724feb3c62d5Christian Maeder *) mod_cache: Teach CacheEnable and CacheDisable to work from within a
12882fa70d12d9b56cbd850ccb4b724feb3c62d5Christian Maeder Location section, in line with how ProxyPass works. [Graham Leggett]
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder *) mod_reqtimeout: New module to set timeouts and minimum data rates for
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder receiving requests from the client. [Stefan Fritsch]
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder *) core: Fix potential memory leaks by making sure to not destroy
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder bucket brigades that have been created by earlier filters.
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder [Stefan Fritsch]
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder *) core, mod_deflate, mod_sed: Reduce memory usage by reusing bucket
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder brigades in several places. [Stefan Fritsch]
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder *) mod_cache: Fix uri_meets_conditions() so that CacheEnable will
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder match by scheme, or by a wildcarded hostname. PR 40169
8723ec450f2e7a024230467c0c28a3f154905483cmaeder [Peter Grandi <pg_asf asf.for.sabi.co.uk>, Graham Leggett]
8723ec450f2e7a024230467c0c28a3f154905483cmaeder *) suxec: Allow to log an error if exec fails by setting FD_CLOEXEC
8723ec450f2e7a024230467c0c28a3f154905483cmaeder on the log file instead of closing it. PR 10744. [Nicolas Rachinsky]
8723ec450f2e7a024230467c0c28a3f154905483cmaeder *) mod_mime: Make RemoveType override the info from TypesConfig.
8723ec450f2e7a024230467c0c28a3f154905483cmaeder PR 38330. [Stefan Fritsch]
8723ec450f2e7a024230467c0c28a3f154905483cmaeder *) mod_cache: Introduce the option to run the cache from within the
8723ec450f2e7a024230467c0c28a3f154905483cmaeder normal request handler, and to allow fine grained control over
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder where in the filter chain content is cached. [Graham Leggett]
31a81edf1285dc338211bfe86ba50a1f4128d9d2Christian Maeder *) core: Treat timeout reading request as 408 error, not 400.
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder Log 408 errors in access log as was done in Apache 1.3.x.
9d50556254571c0811e94b4d948463754812a5aaChristian Maeder PR 39785 [Nobutaka Mantani <nobutaka nobutaka.org>,
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder Stefan Fritsch <sf fritsch.de>, Dan Poirier]
1f0483f71bad0707f10293d0b4db4649aa93fb35Christian Maeder *) mod_ssl: Reintroduce SSL_CLIENT_S_DN, SSL_CLIENT_I_DN, SSL_SERVER_S_DN,
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder SSL_SERVER_I_DN back to the environment variables to be set by mod_ssl.
c5b8b64377e24bcbf5cc108ca433cfbbd6235ba1Christian Maeder [Peter Sylvester <peter.sylvester edelweb.fr>]
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder *) mod_disk_cache: don't cache incomplete responses, per RFC 2616, 13.8.
9d50556254571c0811e94b4d948463754812a5aaChristian Maeder PR15866. [Dan Poirier]
c5b8b64377e24bcbf5cc108ca433cfbbd6235ba1Christian Maeder *) ab: ab segfaults in verbose mode on https sites
c5b8b64377e24bcbf5cc108ca433cfbbd6235ba1Christian Maeder PR46393. [Ryan Niebur]
26acf851cacd7a31bdc9b25a42af9949942fa7c6Christian Maeder *) mod_dav: Allow other modules to become providers and add resource types
8723ec450f2e7a024230467c0c28a3f154905483cmaeder to the DAV response. [Jari Urpalainen <jari.urpalainen nokia.com>,
8723ec450f2e7a024230467c0c28a3f154905483cmaeder Brian France <brian brianfrance.com>]
1f0483f71bad0707f10293d0b4db4649aa93fb35Christian Maeder *) mod_dav: Allow other modules to add things to the DAV or Allow headers
8723ec450f2e7a024230467c0c28a3f154905483cmaeder of an OPTIONS request. [Jari Urpalainen <jari.urpalainen nokia.com>,
8723ec450f2e7a024230467c0c28a3f154905483cmaeder Brian France <brian brianfrance.com>]
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder *) core: Lower memory usage of core output filter.
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder [Stefan Fritsch <sf sfritsch.de>]
5d93620c37abd9c665d3fe532d4852d62dff4233Christian Maeder *) mod_mime: Detect invalid use of MultiviewsMatch inside Location and
5d93620c37abd9c665d3fe532d4852d62dff4233Christian Maeder LocationMatch sections. PR47754. [Dan Poirier]
12882fa70d12d9b56cbd850ccb4b724feb3c62d5Christian Maeder *) mod_request: Make sure the KeptBodySize directive rejects values
4bd27a2cb9efd5d8ff00b5cf823487403add724ecmaeder that aren't valid numbers. [Graham Leggett]
99b26e2ab8ba89bc9a050c1524137eb6269e2753Christian Maeder *) mod_session_crypto: Sanity check should the potentially encrypted
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder session cookie be too short. [Graham Leggett]
c5b8b64377e24bcbf5cc108ca433cfbbd6235ba1Christian Maeder *) mod_session.c: Prevent a segfault when session is added but not
c5b8b64377e24bcbf5cc108ca433cfbbd6235ba1Christian Maeder configured. [Graham Leggett]
99b26e2ab8ba89bc9a050c1524137eb6269e2753Christian Maeder *) htcacheclean: 19 ways to fail, 1 error message. Fixed. [Graham Leggett]
4bd27a2cb9efd5d8ff00b5cf823487403add724ecmaeder *) mod_auth_digest: Fail server start when nonce count checking
c5b8b64377e24bcbf5cc108ca433cfbbd6235ba1Christian Maeder is configured without shared memory, or md5-sess algorithm is
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder configured. [Dan Poirier]
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder *) mod_proxy_connect: The connect method doesn't work if the client is
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder connecting to the apache proxy through an ssl socket. Fixed.
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder PR29744. [Brad Boyer, Mark Cave-Ayland, Julian Gilbey, Fabrice Durand,
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder David Gence, Tim Dodge, Per Gunnar Hans, Emmanuel Elango,
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder Kevin Croft, Rudolf Cardinal]
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder *) mod_ssl: The error message when SSLCertificateFile is missing should
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder at least give the name or position of the problematic virtual host
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder definition. [Stefan Fritsch sf sfritsch.de]
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder *) mod_auth_digest: Fix null pointer when qop=none. [Dan Poirier]
feb9227bb5c49d5bea1a112500c3b3eba31abdfbcmaeder *) Add support for HTTP PUT to ab. [Jeff Barnes <jbarnesweb yahoo.com>]
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder *) mod_headers: generalise the envclause to support expression
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder evaluation with ap_expr parser [Nick Kew]
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder *) mod_cache: Introduce the thundering herd lock, a mechanism to keep
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder the flood of requests at bay that strike a backend webserver as
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder a cached entity goes stale. [Graham Leggett]
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder *) mod_auth_digest: Fix usage of shared memory and re-enable it.
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder PR 16057 [Dan Poirier]
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder *) Preserve Port information over internal redirects
8723ec450f2e7a024230467c0c28a3f154905483cmaeder *) Proxy: unable to connect to a backend is SERVICE_UNAVAILABLE,
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder rather than BAD_GATEWAY or (especially) NOT_FOUND.
8723ec450f2e7a024230467c0c28a3f154905483cmaeder PR 46971 [evanc nortel.com]
0b144823976d79a34bff62f7f9ec032e80b8ce85Simon Ulbricht *) Various modules: Do better checking of pollset operations in order to
12882fa70d12d9b56cbd850ccb4b724feb3c62d5Christian Maeder avoid segmentation faults if they fail. PR 46467
0b144823976d79a34bff62f7f9ec032e80b8ce85Simon Ulbricht [Stefan Fritsch <sf sfritsch.de>]
8723ec450f2e7a024230467c0c28a3f154905483cmaeder *) mod_autoindex: Correctly create an empty cell if the description
8723ec450f2e7a024230467c0c28a3f154905483cmaeder for a file is missing. PR 47682 [Peter Poeml <poeml suse.de>]
0b144823976d79a34bff62f7f9ec032e80b8ce85Simon Ulbricht *) ab: Fix broken error messages after resolver or connect() failures.
8723ec450f2e7a024230467c0c28a3f154905483cmaeder [Jeff Trawick]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) SECURITY: CVE-2009-1890 (cve.mitre.org)
0b144823976d79a34bff62f7f9ec032e80b8ce85Simon Ulbricht Fix a potential Denial-of-Service attack against mod_proxy in a
8723ec450f2e7a024230467c0c28a3f154905483cmaeder reverse proxy configuration, where a remote attacker can force a
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht proxy process to consume CPU time indefinitely. [Nick Kew, Joe Orton]
8723ec450f2e7a024230467c0c28a3f154905483cmaeder *) SECURITY: CVE-2009-1191 (cve.mitre.org)
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht mod_proxy_ajp: Avoid delivering content from a previous request which
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht failed to send a request body. PR 46949 [Ruediger Pluem]
8723ec450f2e7a024230467c0c28a3f154905483cmaeder *) htdbm: Fix possible buffer overflow if dbm database has very
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht long values. PR 30586 [Dan Poirier]
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht *) core: Return APR_EOF if request body is shorter than the length announced
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht by the client. PR 33098 [ Stefan Fritsch <sf sfritsch.de>]
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder *) mod_suexec: correctly set suexec_enabled when httpd is run by a
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht non-root user and may have insufficient permissions.
8723ec450f2e7a024230467c0c28a3f154905483cmaeder PR 42175 [Jim Radford <radford blackbean.org>]
0b144823976d79a34bff62f7f9ec032e80b8ce85Simon Ulbricht *) mod_ssl: Fix SSL_*_DN_UID variables to use the 'userID' attribute
8723ec450f2e7a024230467c0c28a3f154905483cmaeder type. PR 45107. [Michael Ströder <michael stroeder.com>,
12882fa70d12d9b56cbd850ccb4b724feb3c62d5Christian Maeder *) mod_proxy_http: fix case sensitivity checking transfer encoding
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht PR 47383 [Ryuzo Yamamoto <ryuzo.yamamoto gmail.com>]
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder *) mod_alias: ensure Redirect issues a valid URL.
8723ec450f2e7a024230467c0c28a3f154905483cmaeder PR 44020 [Håkon Stordahl <hakon stordahl.org>]
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht *) mod_dir: add FallbackResource directive, to enable admin to specify
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht an action to happen when a URL maps to no file, without resorting
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht to ErrorDocument or mod_rewrite. PR 47184 [Nick Kew]
de8983abdf4b35af1ed1fdee2de4dff13c2368bacmaeder *) mod_cgid: Do not leak the listening Unix socket file descriptor to the
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht CGI process. PR 47335 [Kornél Pál <kornelpal gmail.com>]
12882fa70d12d9b56cbd850ccb4b724feb3c62d5Christian Maeder *) mod_rewrite: Remove locking for writing to the rewritelog.
0b144823976d79a34bff62f7f9ec032e80b8ce85Simon Ulbricht PR 46942 [Dan Poirier <poirier pobox.com>]
0b144823976d79a34bff62f7f9ec032e80b8ce85Simon Ulbricht *) mod_alias: check sanity in Redirect arguments.
0b144823976d79a34bff62f7f9ec032e80b8ce85Simon Ulbricht PR 44729 [Sönke Tesch <st kino-fahrplan.de>, Jim Jagielski]
0a46a4d711eca869ad75b4df84dabd72783ebdd2Simon Ulbricht *) mod_proxy_http: fix Host: header for literal IPv6 addresses.
0a46a4d711eca869ad75b4df84dabd72783ebdd2Simon Ulbricht PR 47177 [Carlos Garcia Braschi <cgbraschi gmail.com>]
465c6b72e8e480969b5f08658e394992bcc08bfcSimon Ulbricht *) mod_cache: Add CacheIgnoreURLSessionIdentifiers directive to ignore
0b144823976d79a34bff62f7f9ec032e80b8ce85Simon Ulbricht defined session identifiers encoded in the URL when caching.
0b144823976d79a34bff62f7f9ec032e80b8ce85Simon Ulbricht [Ruediger Pluem]
fdae29fce51a3b43f17e1cad0deb0f5381b9d3f6Christian Maeder *) mod_rewrite: Fix the error string returned by RewriteRule.
0b144823976d79a34bff62f7f9ec032e80b8ce85Simon Ulbricht RewriteRule returned "RewriteCond: bad flag delimiters" when the 3rd
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht argument of RewriteRule was not started with "[" or not ended with "]".
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht PR 45082 [Vitaly Polonetsky <m_vitaly topixoft.com>]
4f820114168836fb05b720c429866baa5665690eChristian Maeder *) Windows: Fix usage message.
4bd27a2cb9efd5d8ff00b5cf823487403add724ecmaeder [Rainer Jung]
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht *) apachectl: When passing through arguments to httpd in
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht non-SysV mode, use the "$@" syntax to preserve arguments.
6fb590a3747600c145abfd7c3483039fb03af032Christian Maeder [Eric Covener]
6fb590a3747600c145abfd7c3483039fb03af032Christian Maeder *) mod_dbd: add DBDInitSQL directive to enable SQL statements to
6fb590a3747600c145abfd7c3483039fb03af032Christian Maeder be run when a connection is opened. PR 46827
6fb590a3747600c145abfd7c3483039fb03af032Christian Maeder [Marko Kevac <mkevac gmail.com>]
6fb590a3747600c145abfd7c3483039fb03af032Christian Maeder *) mod_cgid: Improve handling of long AF_UNIX socket names (ScriptSock).
6fb590a3747600c145abfd7c3483039fb03af032Christian Maeder PR 47037. [Jeff Trawick]
6fb590a3747600c145abfd7c3483039fb03af032Christian Maeder *) mod_proxy_ajp: Check more strictly that the backend follows the AJP
6fb590a3747600c145abfd7c3483039fb03af032Christian Maeder protocol. [Mladen Turk]
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder *) mod_proxy_ajp: Forward remote port information by default.
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder [Rainer Jung]
fcd8dd6d9029180ae5e777e94a973c5e355a55cfcmaeder *) Allow MPMs to be loaded dynamically, as with most other modules. Use
fcd8dd6d9029180ae5e777e94a973c5e355a55cfcmaeder --enable-mpms-shared={list|"all"} to enable. This required changes to
fcd8dd6d9029180ae5e777e94a973c5e355a55cfcmaeder the MPM interfaces. Removed: mpm.h, mpm_default.h (as an installed
fcd8dd6d9029180ae5e777e94a973c5e355a55cfcmaeder header), APACHE_MPM_DIR, MPM_NAME, ap_threads_per_child,
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht ap_max_daemons_limit, ap_my_generation, etc. ap_mpm_query() can't be
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder called until after the register-hooks phase. [Jeff Trawick]
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder *) mod_ssl: Add SSLProxyCheckPeerExpire and SSLProxyCheckPeerCN directives
9a5e6e537c43a631facd9d87ce1a6c76f4b0af6dSimon Ulbricht to enable stricter checking of remote server certificates.
9a5e6e537c43a631facd9d87ce1a6c76f4b0af6dSimon Ulbricht [Ruediger Pluem]
9a5e6e537c43a631facd9d87ce1a6c76f4b0af6dSimon Ulbricht *) ab: Fix a 100% CPU loop on platforms where a failed non-blocking connect
bf51e183eda8e66f16795b35ce9a62468974b8e3Christian Maeder returns EINPROGRESS and a subsequent poll() returns only POLLERR.
9a5e6e537c43a631facd9d87ce1a6c76f4b0af6dSimon Ulbricht Observed on HP-UX. [Eric Covener]
f382d86a384743a770cd5490a641e38ed1069c5cChristian Maeder *) Remove broken support for BeOS, OS/2, TPF, and even older platforms such
f382d86a384743a770cd5490a641e38ed1069c5cChristian Maeder as A/UX, Next, and Tandem. [Jeff Trawick]
e24da6268aa5791c7efd44571cafc0e36bf568dbChristian Maeder *) mod_proxy_ftp: Add ProxyFtpListOnWildcard directive to allow files with
f382d86a384743a770cd5490a641e38ed1069c5cChristian Maeder globbing characters to be retrieved instead of converted into a
e24da6268aa5791c7efd44571cafc0e36bf568dbChristian Maeder directory listing. PR 46789 [Dan Poirier <poirier pobox.com>]
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder *) Provide ap_retained_data_create()/ap_retained_data_get() for preservation
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder of module state across unload/load. [Jeff Trawick]
9a5e6e537c43a631facd9d87ce1a6c76f4b0af6dSimon Ulbricht *) mod_substitute: Fix a memory leak. PR 44948
f382d86a384743a770cd5490a641e38ed1069c5cChristian Maeder [Dan Poirier <poirier pobox.com>]
bf51e183eda8e66f16795b35ce9a62468974b8e3Christian MaederChanges with Apache 2.3.2
562e30787355109feb0133ffea2ad86b6c143c26Simon Ulbricht *) mod_mime_magic: Fix detection of compressed content. [Rainer Jung]
8723ec450f2e7a024230467c0c28a3f154905483cmaeder *) mod_negotiation: Escape pathes of filenames in 406 responses to avoid
8723ec450f2e7a024230467c0c28a3f154905483cmaeder HTML injections and HTTP response splitting. PR 46837.
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder [Geoff Keating <geoffk apple.com>]
d1c667fd9445963d9d31e2cf5d0ead15e77082a4cmaeder *) mod_ssl: add support for type-safe STACK constructs in OpenSSL
9a5e6e537c43a631facd9d87ce1a6c76f4b0af6dSimon Ulbricht development HEAD. PR 45521. [Kaspar Brand, Sander Temme]
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder *) ab: Fix maintenance of the pollset to resolve EALREADY errors
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder with kqueue (BSD/OS X) and excessive CPU with event ports (Solaris).
4bd27a2cb9efd5d8ff00b5cf823487403add724ecmaeder PR 44584. Use APR_POLLSET_NOCOPY for better performance with some
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder pollset implementations. [Jeff Trawick]
2e76bbbed1c936bb0aee1753837e1c50416847a2Simon Ulbricht *) mod_disk_cache: The module now turns off sendfile support if
8723ec450f2e7a024230467c0c28a3f154905483cmaeder 'EnableSendfile off' is defined globally. [Lars Eilebrecht]
8723ec450f2e7a024230467c0c28a3f154905483cmaeder *) mod_deflate: Adjust content metadata before bailing out on 304
8723ec450f2e7a024230467c0c28a3f154905483cmaeder responses so that the metadata does not differ from 200 response.
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder [Roy T. Fielding]
8723ec450f2e7a024230467c0c28a3f154905483cmaeder *) mod_deflate: Fix creation of invalid Etag headers. We now make sure
7463a1bf64cfa90917e2afb6a5017ec411d2b3dbSimon Ulbricht that the Etag value is properly quoted when adding the gzip marker.
7f150d7930b47c297e184638ecd811b3656b0dadChristian Maeder PR 39727, 45023. [Lars Eilebrecht, Roy T. Fielding]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) Added 20x22 icons for ODF, SVG, and XML documents. PR 37185.
bf51e183eda8e66f16795b35ce9a62468974b8e3Christian Maeder [Peter Harlow]
f6a562e28240e4f9107c199ba7a8e500ccfbfa55Simon Ulbricht *) Disabled DefaultType directive and removed ap_default_type()
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder from core. We now exclude Content-Type from responses for which
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder a media type has not been configured via mime.types, AddType,
f382d86a384743a770cd5490a641e38ed1069c5cChristian Maeder ForceType, or some other mechanism. PR 13986. [Roy T. Fielding]
9a5e6e537c43a631facd9d87ce1a6c76f4b0af6dSimon Ulbricht *) mod_rewrite: Add IPV6 variable to RewriteCond
22bb4a9063684a0f37dd7d0e6b21086adcc1e789Christian Maeder [Ryan Phillips <ryan-apache trolocsis.com>]
9a5e6e537c43a631facd9d87ce1a6c76f4b0af6dSimon Ulbricht *) core: Enhance KeepAliveTimeout to support a value in milliseconds.
9a5e6e537c43a631facd9d87ce1a6c76f4b0af6dSimon Ulbricht PR 46275. [Takashi Sato]
f6a562e28240e4f9107c199ba7a8e500ccfbfa55Simon Ulbricht *) rotatelogs: Allow size units B, K, M, G and combination of
22bb4a9063684a0f37dd7d0e6b21086adcc1e789Christian Maeder time and size based rotation. [Rainer Jung]
9a5e6e537c43a631facd9d87ce1a6c76f4b0af6dSimon Ulbricht *) rotatelogs: Add flag for verbose (debug) output. [Rainer Jung]
2e76bbbed1c936bb0aee1753837e1c50416847a2Simon Ulbricht *) mod_ssl: Fix merging of SSLRenegBufferSize directive. PR 46508
7f150d7930b47c297e184638ecd811b3656b0dadChristian Maeder *) core: Translate the the status line to ASCII on EBCDIC platforms in
2e76bbbed1c936bb0aee1753837e1c50416847a2Simon Ulbricht ap_send_interim_response() and for locally generated "100 Continue"
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder responses. [Eric Covener]
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder *) prefork: Fix child process hang during graceful restart/stop in
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder configurations with multiple listening sockets. PR 42829. [Joe Orton,
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder Jeff Trawick]
2e76bbbed1c936bb0aee1753837e1c50416847a2Simon Ulbricht *) mod_session_crypto: Ensure that SessionCryptoDriver can only be
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder set in the global scope. [Graham Leggett]
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder *) mod_ext_filter: We need to detect failure to startup the filter
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder program (a mangled response is not acceptable). Fix to detect
d1c667fd9445963d9d31e2cf5d0ead15e77082a4cmaeder failure, and offer configuration option either to abort or
d1c667fd9445963d9d31e2cf5d0ead15e77082a4cmaeder to remove the filter and continue.
d1c667fd9445963d9d31e2cf5d0ead15e77082a4cmaeder PR 41120 [Nick Kew]
d1c667fd9445963d9d31e2cf5d0ead15e77082a4cmaeder *) mod_session_crypto: Rewrite the session_crypto module against the
d1c667fd9445963d9d31e2cf5d0ead15e77082a4cmaeder apr_crypto API. [Graham Leggett]
6a91a0598e5df5546421d01fc84ff20084202d47cmaeder *) mod_auth_form: Fix a pool lifetime issue, don't remove the subrequest
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder until the main request is cleaned up. [Graham Leggett]
f382d86a384743a770cd5490a641e38ed1069c5cChristian MaederChanges with Apache 2.3.1
f382d86a384743a770cd5490a641e38ed1069c5cChristian Maeder *) ap_slotmem: Add in new slot-based memory access API impl., including
22bb4a9063684a0f37dd7d0e6b21086adcc1e789Christian Maeder 2 providers (mod_sharedmem and mod_plainmem) [Jim Jagielski,
22bb4a9063684a0f37dd7d0e6b21086adcc1e789Christian Maeder Jean-Frederic Clere, Brian Akins <brian.akins turner.com>]
22bb4a9063684a0f37dd7d0e6b21086adcc1e789Christian Maeder *) mod_include: support generating non-ASCII characters as entities in SSI
22bb4a9063684a0f37dd7d0e6b21086adcc1e789Christian Maeder PR 25202 [Nick Kew]
e24da6268aa5791c7efd44571cafc0e36bf568dbChristian Maeder *) core/utils: Enhance ap_escape_html API to support escaping non-ASCII chars
e24da6268aa5791c7efd44571cafc0e36bf568dbChristian Maeder PR 25202 [Nick Kew]
e57d34b9f5eda12bce8e12229cf6f1c7fd9159a1Christian Maeder *) mod_rewrite: fix "B" flag breakage by reverting r5589343
f1b9177fa86eee281ffe30e99b0e8abd89535f7eChristian Maeder PR 45529 [Bob Ionescu <bobsiegen googlemail.com>]
fdae29fce51a3b43f17e1cad0deb0f5381b9d3f6Christian Maeder *) CGI: return 504 (Gateway timeout) rather than 500 when a script
fdae29fce51a3b43f17e1cad0deb0f5381b9d3f6Christian Maeder times out before returning status line/headers.
f382d86a384743a770cd5490a641e38ed1069c5cChristian Maeder PR 42190 [Nick Kew]
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht *) mod_cgid: fix segfault problem on solaris.
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht PR 39332 [Masaoki Kobayashi <masaoki techfirm.co.jp>]
2e2559f894aaa661b199e4fa00609f522bc5482aSimon Ulbricht *) mod_proxy_scgi: Added. [André Malo]
05c714be15ce094d83f1b989cdf5236be78419bfSimon Ulbricht *) mod_cache: Introduce 'no-cache' per-request environment variable
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder to prevent the saving of an otherwise cacheable response.
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder [Eric Covener]
bf51e183eda8e66f16795b35ce9a62468974b8e3Christian Maeder *) mod_rewrite: Introduce DiscardPathInfo|DPI flag to stop the troublesome
9a5e6e537c43a631facd9d87ce1a6c76f4b0af6dSimon Ulbricht way that per-directory rewrites append the previous notion of PATH_INFO
05c714be15ce094d83f1b989cdf5236be78419bfSimon Ulbricht to each substitution before evaluating subsequent rules.
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder PR 38642 [Eric Covener]
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder *) mod_cgid: Do not add an empty argument when calling the CGI script.
f6a562e28240e4f9107c199ba7a8e500ccfbfa55Simon Ulbricht PR 46380 [Ruediger Pluem]
fdae29fce51a3b43f17e1cad0deb0f5381b9d3f6Christian Maeder *) scoreboard: Remove unused sb_type from process_score.
f382d86a384743a770cd5490a641e38ed1069c5cChristian Maeder [Torsten Foertsch <torsten.foertsch gmx.net>, Chris Darroch]
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder *) mod_ssl: Add SSLRenegBufferSize directive to allow changing the
fdae29fce51a3b43f17e1cad0deb0f5381b9d3f6Christian Maeder size of the buffer used for the request-body where necessary
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder during a per-dir renegotiation. PR 39243. [Joe Orton]
fdae29fce51a3b43f17e1cad0deb0f5381b9d3f6Christian Maeder *) mod_proxy_fdpass: New module to pass a client connection over to a separate
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder process that is reading from a unix daemon socket.
f382d86a384743a770cd5490a641e38ed1069c5cChristian Maeder *) mod_ssl: Improve environment variable extraction to be more
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder efficient and to correctly handle DNs with duplicate tags.
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder PR 45975. [Joe Orton]
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder *) Remove the obsolete serial attribute from the RPM spec file. Compile
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder against the external pcre. Add missing binaries fcgistarter, and
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder mod_socache* and mod_session*. [Graham Leggett]
9a5e6e537c43a631facd9d87ce1a6c76f4b0af6dSimon UlbrichtChanges with Apache 2.3.0
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder *) mod_ratelimit: New module to do bandwidth rate limiting. [Paul Querna]
b532acc045cf5e26beb0691acc136d11188cce87Christian Maeder *) Remove X-Pad header which was added as a work around to a bug in
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder Netscape 2.x to 4.0b2. [Takashi Sato <takashi lans-tv.com>]
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder *) Add DTrace Statically Defined Tracing (SDT) probes.
30ccae9374798a92124e1b294404f7b55ffbb412Christian Maeder [Theo Schlossnagle <jesus omniti.com>, Paul Querna]
05c714be15ce094d83f1b989cdf5236be78419bfSimon Ulbricht *) mod_proxy_balancer: Move all load balancing implementations
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht as individual, self-contained mod_proxy submodules under
de8983abdf4b35af1ed1fdee2de4dff13c2368bacmaeder *) Rename APIs to include ap_ prefix:
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht find_child_by_pid -> ap_find_child_by_pid
8723ec450f2e7a024230467c0c28a3f154905483cmaeder suck_in_APR -> ap_suck_in_APR
8723ec450f2e7a024230467c0c28a3f154905483cmaeder sys_privileges_handlers -> ap_sys_privileges_handlers
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder unixd_accept -> ap_unixd_accept
0bbc28585c7d42913167ff78a862ef25ea59e85eChristian Maeder unixd_config -> ap_unixd_config
0bbc28585c7d42913167ff78a862ef25ea59e85eChristian Maeder unixd_killpg -> ap_unixd_killpg
0bbc28585c7d42913167ff78a862ef25ea59e85eChristian Maeder unixd_set_global_mutex_perms -> ap_unixd_set_global_mutex_perms
e4a035578fa9d1911eee097e2ed9a998c90c7805Christian Maeder unixd_set_proc_mutex_perms -> ap_unixd_set_proc_mutex_perms
0bbc28585c7d42913167ff78a862ef25ea59e85eChristian Maeder unixd_set_rlimit -> ap_unixd_set_rlimit
0bbc28585c7d42913167ff78a862ef25ea59e85eChristian Maeder [Paul Querna]
0bbc28585c7d42913167ff78a862ef25ea59e85eChristian Maeder *) core: When the ap_http_header_filter processes an error bucket, cleanup
0bbc28585c7d42913167ff78a862ef25ea59e85eChristian Maeder the passed brigade before returning AP_FILTER_ERROR down the filter
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder chain. This unambiguously ensures the same error bucket isn't revisited
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder [Ruediger Pluem]
8723ec450f2e7a024230467c0c28a3f154905483cmaeder *) mod_lbmethod_heartbeat: New module to load balance mod_proxy workers
8723ec450f2e7a024230467c0c28a3f154905483cmaeder based on heartbeats. [Paul Querna]
8723ec450f2e7a024230467c0c28a3f154905483cmaeder *) mod_heartmonitor: New module to collect heartbeats, and write out a file
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder so that other modules can load balance traffic as needed. [Paul Querna]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) mod_heartbeat: New module to generate multicast heartbeats to know if a
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder server is online. [Paul Querna]
0bbc28585c7d42913167ff78a862ef25ea59e85eChristian Maeder *) core: Error responses set by filters were being coerced into 500 errors,
0bbc28585c7d42913167ff78a862ef25ea59e85eChristian Maeder sometimes appended to the original error response. Log entry of:
0bbc28585c7d42913167ff78a862ef25ea59e85eChristian Maeder 'Handler for (null) returned invalid result code -3'
0bbc28585c7d42913167ff78a862ef25ea59e85eChristian Maeder [Eric Covener]
0bbc28585c7d42913167ff78a862ef25ea59e85eChristian Maeder *) mod_buffer: Honour the flush bucket and flush the buffer in the
69ad4a5f0c84ae5d0cdd7518c3698c36342a47d9cmaeder input filter. Make sure that metadata buckets are written to
69ad4a5f0c84ae5d0cdd7518c3698c36342a47d9cmaeder the buffer, not to the final brigade. [Graham Leggett]
69ad4a5f0c84ae5d0cdd7518c3698c36342a47d9cmaeder *) mod_buffer: Optimise the buffering of heap buckets when the heap
69ad4a5f0c84ae5d0cdd7518c3698c36342a47d9cmaeder buckets stay exactly APR_BUCKET_BUFF_SIZE long. [Graham Leggett,
4ed68712ee368cbebfeaa327968583cb022e3c72Christian Maeder Ruediger Pluem]
4ed68712ee368cbebfeaa327968583cb022e3c72Christian Maeder *) mod_buffer: Optional support for buffering of the input and output
8d2321e17a34951fbd52f68e9f9f148f0890e471Christian Maeder filter stacks. Can collapse many small buckets into fewer larger
8d2321e17a34951fbd52f68e9f9f148f0890e471Christian Maeder buckets, and prevents excessively small chunks being sent over
9a859380d595b8aaef7256fbf4e18012d3b57742Christian Maeder the wire. [Graham Leggett]
8d2321e17a34951fbd52f68e9f9f148f0890e471Christian Maeder *) mod_privileges: new module to make httpd on Solaris privileges-aware
8d2321e17a34951fbd52f68e9f9f148f0890e471Christian Maeder and to enable different virtualhosts to run with different
8d2321e17a34951fbd52f68e9f9f148f0890e471Christian Maeder privileges and Unix user/group IDs [Nick Kew]
4ed68712ee368cbebfeaa327968583cb022e3c72Christian Maeder *) mod_mem_cache: this module has been removed. [William Rowe]
69ad4a5f0c84ae5d0cdd7518c3698c36342a47d9cmaeder *) authn/z: Remove mod_authn_default and mod_authz_default.
69ad4a5f0c84ae5d0cdd7518c3698c36342a47d9cmaeder [Chris Darroch]
69ad4a5f0c84ae5d0cdd7518c3698c36342a47d9cmaeder *) authz: Fix handling of authz configurations, make default authz
4ed68712ee368cbebfeaa327968583cb022e3c72Christian Maeder logic replicate 2.2.x authz logic, and replace <Satisfy*>, Reject,
69ad4a5f0c84ae5d0cdd7518c3698c36342a47d9cmaeder and AuthzMergeRules directives with Match, <Match*>, and AuthzMerge
f3fb0e085030be5bc309d946a6a9c20736dd3e0fSimon Ulbricht directives. [Chris Darroch]
69ad4a5f0c84ae5d0cdd7518c3698c36342a47d9cmaeder *) mod_authn_core: Prevent crash when provider alias created to
69ad4a5f0c84ae5d0cdd7518c3698c36342a47d9cmaeder provider which is not yet registered. [Chris Darroch]
116efc752fbf094a464c4f4940d9a450ab41c6c9Simon Ulbricht *) mod_authn_core: Add AuthType of None to support disabling
8723ec450f2e7a024230467c0c28a3f154905483cmaeder authentication. [Chris Darroch]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) core: Allow <Limit> and <LimitExcept> directives to nest, and
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder constrain their use to conform with that of other access control
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder and authorization directives. [Chris Darroch]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) unixd: turn existing code into a module, and turn the set user/group
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder and chroot into a child_init function. [Nick Kew]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) core: Add ap_timeout_parameter_parse to public API. [Ruediger Pluem]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) mod_dir: Support "DirectoryIndex disabled"
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder Suggested By André Warnier <aw ice-sa.com> [Eric Covener]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) mod_ssl: Send Content-Type application/ocsp-request for POST requests to
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder OSCP responders. PR 46014 [Dr Stephen Henson <steve openssl.org>]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) Export and install the mod_rewrite.h header to ensure the optional
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder rewrite_mapfunc_t and ap_register_rewrite_mapfunc functions are
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder available to third party modules. [Graham Leggett]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) mod_authnz_ldap: don't return NULL-valued environment variables to
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder other modules. PR 39045 [Francois Pesce <francois.pesce gmail.com>]
31a81edf1285dc338211bfe86ba50a1f4128d9d2Christian Maeder *) Don't adjust case in pathname components that are not of interest
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder to mod_mime. Fixes mod_negotiation's use of such components.
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder PR 43250 [Basant Kumar Kukreja <basant.kukreja sun.com>]
526e7f36639cb58e3c99a54bea082499a6b04a25Christian Maeder *) Be tolerant in what you accept - accept slightly broken
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder status lines from a backend provide they include a valid status code.
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder *) New module mod_sed: filter Request/Response bodies through sed
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder *) mod_auth_form: Make sure that basic authentication is correctly
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder faked directly after login. [Graham Leggett]
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder *) mod_session_cookie, mod_session_dbd: Make sure cookies are set both
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder within the output headers and error output headers, so that the
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder session is maintained across redirects. [Graham Leggett]
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder *) mod_auth_form: Make sure the logged in user is populated correctly
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder after a form login. Fixes a missing REMOTE_USER variable directly
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder following a login. [Graham Leggett]
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder *) mod_session_cookie: Make sure that cookie attributes are correctly
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder included in the blank cookie when cookies are removed. This fixes an
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder inability to log out when using mod_auth_form. [Graham Leggett]
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder *) mod_autoindex: add configuration option to insert string
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder in HTML HEAD. [Nick Kew]
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder *) mod_session: Prevent a segfault when a CGI script sets a cookie with a
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder null value. [David Shane Holden <dpejesh apache.org>]
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder *) mod_headers: Prevent Header edit from processing only the first header
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder of possibly multiple headers with the same name and deleting the
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder remaining ones. PR 45333. [Ruediger Pluem]
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder *) mod_rewrite: Preserve the query string with [proxy,noescape]. PR 45247
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder [Tom Donovan]
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder *) core, authn/z: Determine registered authn/z providers directly in
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder ap_setup_auth_internal(), which allows optional functions that just
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder wrapped ap_list_provider_names() to be removed from authn/z modules.
5896f38ba2934056542cb7cb3e6359e88a622547Christian Maeder [Chris Darroch]
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder *) authn/z: Convert common provider version strings to macros.
5896f38ba2934056542cb7cb3e6359e88a622547Christian Maeder [Chris Darroch]
dbce18afddbe9b055be0e37f51e00d00d519b1cdChristian Maeder *) ab: Make ab.c compile on VC6. PR 45024 [Ruediger Pluem]
26acf851cacd7a31bdc9b25a42af9949942fa7c6Christian Maeder *) configure: Don't reject libtool 2.x
5896f38ba2934056542cb7cb3e6359e88a622547Christian Maeder PR 44817 [Arfrever Frehtes Taifersar Arahesis <Arfrever.FTA gmail.com>]
26acf851cacd7a31bdc9b25a42af9949942fa7c6Christian Maeder *) core: When testing for slash-terminated configuration paths in
fd94a6f66ccb5cef99aa42069b61e4b8734dbd3fChristian Maeder ap_location_walk(), don't look past the start of an empty string
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder such as that created by a <Location ""> directive.
bd90cf050d470eb42f6e0b79327cc53bd0f80dc9Christian Maeder [Chris Darroch]
bd90cf050d470eb42f6e0b79327cc53bd0f80dc9Christian Maeder *) core, mod_proxy: If a kept_body is present, it becomes safe for
de8eee2014437ec4020be15cd363257f87e79943Christian Maeder subrequests to support message bodies. Make sure that safety
de8eee2014437ec4020be15cd363257f87e79943Christian Maeder checks within the core and within the proxy are not triggered
de8eee2014437ec4020be15cd363257f87e79943Christian Maeder when kept_body is present. This makes it possible to embed
bd90cf050d470eb42f6e0b79327cc53bd0f80dc9Christian Maeder proxied POST requests within mod_include. [Graham Leggett]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) mod_auth_form: Make sure the input filter stack is properly set
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder up before reading the login form. Make sure the kept body filter
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder is correctly inserted to ensure the body can be read a second
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder time safely should the authn be successful. [Graham Leggett,
bd90cf050d470eb42f6e0b79327cc53bd0f80dc9Christian Maeder Ruediger Pluem]
5a448e9be8c4482a978b174b744237757335140fChristian Maeder *) mod_request: Insert the KEPT_BODY filter via the insert_filter
5a448e9be8c4482a978b174b744237757335140fChristian Maeder hook instead of during fixups. Add a safety check to ensure the
bd90cf050d470eb42f6e0b79327cc53bd0f80dc9Christian Maeder filters cannot be inserted more than once. [Graham Leggett,
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder Ruediger Pluem]
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder *) core: Do not allow Options ALL if not all options are allowed to be
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder overwritten. PR 44262 [Michał Grzędzicki <lazy iq.pl>]
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder *) ap_cache_cacheable_headers_out() will (now) always
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder merge an error headers _before_ clearing them and _before_
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder merging in the actual entity headers and doing normal
142fd5dd7fcfa170f08b2a0ab232859428f6e3c2Christian Maeder hop-by-hop cleansing. [Dirk-Willem van Gulik].
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder *) cache: retire ap_cache_cacheable_hdrs_out() which was used
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder for both in- and out-put headers; and replace it by a single
3f08b178a44369b618a5e0b5f1fc2207fe043aabChristian Maeder ap_cache_cacheable_headers() wrapped in a in- and out-put
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder specific ap_cache_cacheable_headers_in()/out(). The latter
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder which will also merge error and ensure content-type. To keep
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder cache modules consistent with ease. This API change bumps
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder up the minor MM by one [Dirk-Willem van Gulik].
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) mod_rewrite: Allow Cookie option to set secure and HttpOnly flags.
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder PR 44799 [Christian Wenz <christian wenz.org>]
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder *) Move the KeptBodySize directive, kept_body filters and the
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder ap_parse_request_body function out of the http module and into a
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder new module called mod_request, reducing the size of the core.
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder [Graham Leggett]
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder *) mod_dbd: Handle integer configuration directive parameters with a
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder dedicated function.
4ed68712ee368cbebfeaa327968583cb022e3c72Christian Maeder *) Change the directives within the mod_session* modules to be valid
016b8f06b709deef8c24b3d6c59f085857a166d4Christian Maeder both inside and outside the location/directory sections, as
2ccdb81b4018e0a76f6dad3a940ba1241e98f6d9cmaeder suggested by wrowe. [Graham Leggett]
2ccdb81b4018e0a76f6dad3a940ba1241e98f6d9cmaeder *) mod_auth_form: Add a module capable of allowing end users to log
2ccdb81b4018e0a76f6dad3a940ba1241e98f6d9cmaeder in using an HTML form, storing the credentials within mod_session.
016b8f06b709deef8c24b3d6c59f085857a166d4Christian Maeder [Graham Leggett]
2ccdb81b4018e0a76f6dad3a940ba1241e98f6d9cmaeder *) Add a function to the http filters that is able to parse an HTML
2ccdb81b4018e0a76f6dad3a940ba1241e98f6d9cmaeder form request with the type of application/x-www-form-urlencoded.
2ccdb81b4018e0a76f6dad3a940ba1241e98f6d9cmaeder [Graham Leggett]
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder *) mod_session_crypto: Initialise SSL in the post config hook.
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder [Ruediger Pluem, Graham Leggett]
2ccdb81b4018e0a76f6dad3a940ba1241e98f6d9cmaeder *) mod_session_dbd: Add a session implementation capable of storing
2ccdb81b4018e0a76f6dad3a940ba1241e98f6d9cmaeder session information in a SQL database via the dbd interface. Useful
2ccdb81b4018e0a76f6dad3a940ba1241e98f6d9cmaeder for sites where session privacy is important. [Graham Leggett]
2ccdb81b4018e0a76f6dad3a940ba1241e98f6d9cmaeder *) mod_session_crypto: Add a session encoding implementation capable
2ccdb81b4018e0a76f6dad3a940ba1241e98f6d9cmaeder of encrypting and decrypting sessions wherever they may be stored.
2ccdb81b4018e0a76f6dad3a940ba1241e98f6d9cmaeder Introduces a level of privacy when sessions are stored on the
016b8f06b709deef8c24b3d6c59f085857a166d4Christian Maeder browser. [Graham Leggett]
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder *) mod_session_cookie: Add a session implementation capable of storing
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder session information within cookies on the browser. Useful for high
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder volume sites where server bound sessions are too resource intensive.
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder [Graham Leggett]
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder *) mod_session: Add a generic session interface to unify the different
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder attempts at saving persistent sessions across requests.
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder [Graham Leggett]
2ccdb81b4018e0a76f6dad3a940ba1241e98f6d9cmaeder *) core, authn/z: Avoid calling access control hooks for internal requests
2ccdb81b4018e0a76f6dad3a940ba1241e98f6d9cmaeder with configurations which match those of initial request. Revert to
bf51e183eda8e66f16795b35ce9a62468974b8e3Christian Maeder original behaviour (call access control hooks for internal requests
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder with URIs different from initial request) if any access control hooks or
df67ddf64192bfcae6ece65255ad796a17cbe532Christian Maeder providers are not registered as permitting this optimization.
4d54e7814b18ce142359c92a5868e6dcff9219b5Christian Maeder Introduce wrappers for access control hook and provider registration
4d54e7814b18ce142359c92a5868e6dcff9219b5Christian Maeder which can accept additional mode and flag data. [Chris Darroch]
4d54e7814b18ce142359c92a5868e6dcff9219b5Christian Maeder *) Introduced ap_expr API for expression evaluation.
7be1485dfcaa5decb3586d194ff4b2443668e349Simon Ulbricht This is adapted from mod_include, which is the first module
7be1485dfcaa5decb3586d194ff4b2443668e349Simon Ulbricht to use the new API.
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder *) mod_authz_dbd: When redirecting after successful login/logout per
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder AuthzDBDRedirectQuery, do not report authorization failure, and use
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder first row returned by database query instead of last row.
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder [Chris Darroch]
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder *) mod_ldap: Correctly return all requested attribute values
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder when some attributes have a null value.
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder PR 44560 [Anders Kaseorg <anders kaseorg.com>]
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder *) core: check symlink ownership if both FollowSymlinks and
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder SymlinksIfOwnerMatch are set [Nick Kew]
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder *) core: fix origin checking in SymlinksIfOwnerMatch
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder PR 36783 [Robert L Mathews <rob-apache.org.bugs tigertech.net>]
7a3e20d1b7fe1b0e47c0b9138716b0bbc8ecf1f6Christian Maeder *) Activate mod_cache, mod_file_cache and mod_disk_cache as part of the
7a3e20d1b7fe1b0e47c0b9138716b0bbc8ecf1f6Christian Maeder 'most' set for '--enable-modules' and '--enable-shared-mods'. Include
7a3e20d1b7fe1b0e47c0b9138716b0bbc8ecf1f6Christian Maeder mod_mem_cache in 'all' as well. [Dirk-Willem van Gulik]
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder *) Also install mod_so.h, mod_rewrite.h and mod_cache.h; as these
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder contain public function declarations which are useful for
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder third party module authors. PR 42431 [Dirk-Willem van Gulik].
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder *) mod_dir, mod_negotiation: pass the output filter information
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder to newly created sub requests; as these are later on used
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder as true requests with an internal redirect. This allows for
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder mod_cache et.al. to trap the results of the redirect.
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder [Dirk-Willem van Gulik, Ruediger Pluem]
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder *) mod_ldap: Add support (taking advantage of the new APR capability)
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder for ldap rebind callback while chasing referrals. This allows direct
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder searches on LDAP servers (in particular MS Active Directory 2003+)
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder using referrals without the use of the global catalog.
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder PRs 26538, 40268, and 42557 [Paul J. Reder]
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder *) mod_ssl: Added server name indication support (SNI, RFC 4366).
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder PR 34607. [Kaspar Brand <asfbugz velox.ch>]. A test configuration
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder can be created with test/make_sni.sh [Dirk-Willem van Gulik].
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder *) ApacheMonitor.exe: Introduce --kill argument for use by the
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder installer. This will permit the installation tool to remove
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder all running instances before attempting to remove the .exe.
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder [William Rowe]
f675b8f0a612e37472640da57b48d795bef4427eChristian Maeder *) mod_ssl: Add support for OCSP validation of client certificates.
526e7f36639cb58e3c99a54bea082499a6b04a25Christian Maeder PR 41123. [Marc Stern <marc.stern approach.be>, Joe Orton]
df67ddf64192bfcae6ece65255ad796a17cbe532Christian Maeder *) mod_serf: New module for Reverse Proxying. [Paul Querna]
df67ddf64192bfcae6ece65255ad796a17cbe532Christian Maeder *) core: Add the option to keep aside a request body up to a certain
df67ddf64192bfcae6ece65255ad796a17cbe532Christian Maeder size that would otherwise be discarded, to be consumed by filters
233754e153e665aa748bf8b45bd8b1938b6c21a7Christian Maeder such as mod_include. When enabled for a directory, POST requests
8723ec450f2e7a024230467c0c28a3f154905483cmaeder to shtml files can be passed through to embedded scripts as POST
8723ec450f2e7a024230467c0c28a3f154905483cmaeder requests, rather being downgraded to GET requests. [Graham Leggett]
e4a035578fa9d1911eee097e2ed9a998c90c7805Christian Maeder *) mod_ssl: Fix TLS upgrade (RFC 2817) support. PR 41231. [Joe Orton]
cc9f19b1fe81424205736fe0ae73620395b1bb74Simon Ulbricht *) scoreboard: Correctly declare ap_time_process_request.
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) core; scoreboard: ap_get_scoreboard_worker(sbh) now takes the sbh member
5bedf8c26d27eac08962c78379bcb2e5cb529036Christian Maeder from the connection rec, ap_get_scoreboard_worker(proc, thread) will now
233754e153e665aa748bf8b45bd8b1938b6c21a7Christian Maeder provide the unusual legacy lookup. [William Rowe]
cc9f19b1fe81424205736fe0ae73620395b1bb74Simon Ulbricht *) mpm winnt: fix null pointer dereference
18548c6cc2dff13bf9f5f08b3f6cde6ca914df1dChristian Maeder PR 42572 [Davi Arnaut]
2e76bbbed1c936bb0aee1753837e1c50416847a2Simon Ulbricht *) mod_authnz_ldap, mod_authn_dbd: Tidy up the code to expose authn
2e76bbbed1c936bb0aee1753837e1c50416847a2Simon Ulbricht parameters to the environment. Improve portability to
11c3a215d5cf043181e83929f1ce214df65cb587Christian Maeder EBCDIC machines by using apr_toupper(). [Martin Kraemer]
2e76bbbed1c936bb0aee1753837e1c50416847a2Simon Ulbricht *) mod_ldap, mod_authnzldap: Add support for nested groups (i.e. the ability
18548c6cc2dff13bf9f5f08b3f6cde6ca914df1dChristian Maeder to authorize an authenticated user via a "require ldap-group X" directive
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder where the user is not in group X, but is in a subgroup contained in X.
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder PR 42891 [Paul J. Reder]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) mod_ssl: Add support for caching SSL Sessions in memcached. [Paul Querna]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) mod_ldap: Fix the search limit parameter to ldap_search_ext_s()
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder for SDKs that define LDAP_NO_LIMIT to something other than -1.
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder [David Jones <oscaremma gmail.com>]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) apxs: Enhance -q flag to print all known variables and their values
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder when invoked without variable name(s).
ea5ccb1c6e89486a54e1f4bd95840147e96093edChristian Maeder [William Rowe, Sander Temme]
029d127079d24fa541e0bbba0133bc273268dd4eSimon Ulbricht *) apxs: Eliminate run-time check for mod_so. PR 40653.
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder [David M. Lee <dmlee crossroads.com>]
465c6b72e8e480969b5f08658e394992bcc08bfcSimon Ulbricht *) beos MPM: Create pmain pool and run modules' child_init hooks when
29d783ee57c3d959b74fea330bb21ff7e5b8e185Christian Maeder entering ap_mpm_run(), then destroy pmain when exiting ap_mpm_run().
6a88f8edd881afaf4b865b01bfbb4faaf0e7a3c9Simon Ulbricht [Chris Darroch]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) netware MPM: Destroy pmain pool when exiting ap_mpm_run() so that
dbce18afddbe9b055be0e37f51e00d00d519b1cdChristian Maeder cleanups registered in modules' child_init hooks are performed.
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder [Chris Darroch]
b0bf54186358372d2be6a95e36ed3ef5fd64b7a3Christian Maeder *) mod_dbd: Stash DBD connections in request_config of initial request
e4a035578fa9d1911eee097e2ed9a998c90c7805Christian Maeder only, or else sub-requests and internal redirections may cause
7c661ba558707feaa5d8a299365c2191e1afabb2Christian Maeder entire DBD pool to be stashed in a single HTTP request. [Chris Darroch]
7c661ba558707feaa5d8a299365c2191e1afabb2Christian Maeder *) Fix issue which could cause error messages to be written to access logs
3abf8a8f697c113233027f0c865ed57deb274542Christian Maeder on Win32. PR 40476. [Tom Donovan <Tom.Donovan acm.org>]
dbce18afddbe9b055be0e37f51e00d00d519b1cdChristian Maeder *) The LockFile directive, which specifies the location of
029d127079d24fa541e0bbba0133bc273268dd4eSimon Ulbricht the accept() mutex lockfile, is deprecated. Instead, the
029d127079d24fa541e0bbba0133bc273268dd4eSimon Ulbricht AcceptMutex directive now takes an optional lockfile
7c661ba558707feaa5d8a299365c2191e1afabb2Christian Maeder location parameter, ala SSLMutex. [Jim Jagielski]
5bedf8c26d27eac08962c78379bcb2e5cb529036Christian Maeder *) mod_authn_dbd: Export any additional columns queried in the SQL select
dbce18afddbe9b055be0e37f51e00d00d519b1cdChristian Maeder into the environment with the name AUTHENTICATE_<COLUMN>. This brings
23ee432f8fe96e07f2523ca7c4bda9bcce1ea6f0Simon Ulbricht mod_authn_dbd behaviour in line with mod_authnz_ldap. [Graham Leggett]
23ee432f8fe96e07f2523ca7c4bda9bcce1ea6f0Simon Ulbricht *) mod_dbd: Key the storage of prepared statements on the hex string
5727dbcb926ede2e7b05f43685476ce656ce01e4Christian Maeder value of server_rec, rather than the server name, as the server name
5727dbcb926ede2e7b05f43685476ce656ce01e4Christian Maeder may change (eg when the server name is set) at any time, causing
5727dbcb926ede2e7b05f43685476ce656ce01e4Christian Maeder weird behaviour in modules dependent on mod_dbd. [Graham Leggett]
5727dbcb926ede2e7b05f43685476ce656ce01e4Christian Maeder *) mod_proxy_fcgi: Added win32 build. [Mladen Turk]
5727dbcb926ede2e7b05f43685476ce656ce01e4Christian Maeder *) sendfile_nonblocking() takes the _brigade_ as an argument, gets
5727dbcb926ede2e7b05f43685476ce656ce01e4Christian Maeder the first bucket from the brigade, finds it not to be a FILE
5727dbcb926ede2e7b05f43685476ce656ce01e4Christian Maeder bucket and barfs. The fix is to pass a bucket rather than a brigade.
43d8d7472d3a0a78d9a2c85122815a81deb8689aChristian Maeder [Niklas Edmundsson <nikke acc.umu.se>]
bb9642ff292545658dc11251b83a7b7af3c1fccbChristian Maeder *) mod_rewrite: support rewritemap by SQL query [Nick Kew]
5727dbcb926ede2e7b05f43685476ce656ce01e4Christian Maeder *) ap_get_server_version() has been removed. Third-party modules must
92ae4d5885ea837ffe3dae9b2de742f871229b94Christian Maeder now use ap_get_server_banner() or ap_get_server_description().
92ae4d5885ea837ffe3dae9b2de742f871229b94Christian Maeder [Jeff Trawick]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) All MPMs: Introduce a check_config phase between pre_config and
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder open_logs, to allow modules to review interdependent configuration
5727dbcb926ede2e7b05f43685476ce656ce01e4Christian Maeder directive values and adjust them while messages can still be logged
5727dbcb926ede2e7b05f43685476ce656ce01e4Christian Maeder to the console. Handle relevant MPM directives during this phase
5727dbcb926ede2e7b05f43685476ce656ce01e4Christian Maeder and format messages for both the console and the error log, as
5727dbcb926ede2e7b05f43685476ce656ce01e4Christian Maeder appropriate. [Chris Darroch]
5a89ec196dfd3e342f6d4ef3a318bc9992190bbaChristian Maeder *) mod_proxy: don't URLencode tilde in path component
5a89ec196dfd3e342f6d4ef3a318bc9992190bbaChristian Maeder [Stijn Hoop <stijn sandcat.nl>]
5a89ec196dfd3e342f6d4ef3a318bc9992190bbaChristian Maeder *) mpm_winnt: Fix return values from wait_for_many_objects.
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder The return value is index to the signaled thread in the
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder creted_threads array. We can not use WAIT_TIMEOUT because
5a89ec196dfd3e342f6d4ef3a318bc9992190bbaChristian Maeder his value is defined as 258, thus limiting the MaxThreads
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder to that value. [Mladen Turk]
29d783ee57c3d959b74fea330bb21ff7e5b8e185Christian Maeder *) core: Do not allow internal redirects like the DirectoryIndex of mod_dir
29d783ee57c3d959b74fea330bb21ff7e5b8e185Christian Maeder to circumvent the symbolic link checks imposed by FollowSymLinks and
29d783ee57c3d959b74fea330bb21ff7e5b8e185Christian Maeder SymLinksIfOwnerMatch. [Nick Kew, Ruediger Pluem, William Rowe]
5a89ec196dfd3e342f6d4ef3a318bc9992190bbaChristian Maeder *) New SSLLogLevelDebugDump [ None (default) | IO (not bytes) | Bytes ]
29d783ee57c3d959b74fea330bb21ff7e5b8e185Christian Maeder configures the I/O Dump of SSL traffic, when LogLevel is set to Debug.
5a89ec196dfd3e342f6d4ef3a318bc9992190bbaChristian Maeder The default is none as this is far greater debugging resolution than
dbce18afddbe9b055be0e37f51e00d00d519b1cdChristian Maeder the typical administrator is prepared to untangle. [William Rowe]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) mod_disk_cache: If possible, check if the size of an object to cache is
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder within the configured boundaries before actually saving data.
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder [Niklas Edmundsson <nikke acc.umu.se>]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) mod_disk_cache: Delete temporary files if they cannot be renamed to their
22bb4a9063684a0f37dd7d0e6b21086adcc1e789Christian Maeder final name. [Davi Arnaut <davi haxent.com.br>]
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder *) Worker and event MPMs: Remove improper scoreboard updates which were
5727dbcb926ede2e7b05f43685476ce656ce01e4Christian Maeder performed in the event of a fork() failure. [Chris Darroch]
b532acc045cf5e26beb0691acc136d11188cce87Christian Maeder *) Add support for fcgi:// proxies to mod_rewrite.
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder [Markus Schiegl <ms schiegl.com>]
b532acc045cf5e26beb0691acc136d11188cce87Christian Maeder *) Remove incorrect comments from scoreboard.h regarding conditional
b532acc045cf5e26beb0691acc136d11188cce87Christian Maeder loading of worker_score structure with mod_status, and remove unused
df67ddf64192bfcae6ece65255ad796a17cbe532Christian Maeder definitions relating to old life_status field.
29d783ee57c3d959b74fea330bb21ff7e5b8e185Christian Maeder [Chris Darroch <chrisd pearsoncmg.com>]
29d783ee57c3d959b74fea330bb21ff7e5b8e185Christian Maeder *) Remove allocation of memory for unused array of lb_score pointers
29d783ee57c3d959b74fea330bb21ff7e5b8e185Christian Maeder in ap_init_scoreboard(). [Chris Darroch <chrisd pearsoncmg.com>]
29d783ee57c3d959b74fea330bb21ff7e5b8e185Christian Maeder *) Add mod_proxy_fcgi, a FastCGI back end for mod_proxy.
6a88f8edd881afaf4b865b01bfbb4faaf0e7a3c9Simon Ulbricht [Garrett Rooney, Jim Jagielski, Paul Querna]
6a88f8edd881afaf4b865b01bfbb4faaf0e7a3c9Simon Ulbricht *) Event MPM: Fill in the scoreboard's tid field. PR 38736.
319f8219a74a41859b9d1991817644549ab43d61Simon Ulbricht [Chris Darroch <chrisd pearsoncmg.com>]
319f8219a74a41859b9d1991817644549ab43d61Simon Ulbricht *) mod_charset_lite: Remove Content-Length when output filter can
319f8219a74a41859b9d1991817644549ab43d61Simon Ulbricht invalidate it. Warn when input filter can invalidate it.
319f8219a74a41859b9d1991817644549ab43d61Simon Ulbricht [Jeff Trawick]
319f8219a74a41859b9d1991817644549ab43d61Simon Ulbricht *) Authz: Add the new module mod_authn_core that will provide common
1cc76b3190979d475bc8f2c1ffe627d9abf2410bChristian Maeder authn directives such as 'AuthType', 'AuthName'. Move the directives
1cc76b3190979d475bc8f2c1ffe627d9abf2410bChristian Maeder 'AuthType' and 'AuthName' out of the core module and merge mod_authz_alias
1cc76b3190979d475bc8f2c1ffe627d9abf2410bChristian Maeder into mod_authn_core. [Brad Nicholes]
2e76bbbed1c936bb0aee1753837e1c50416847a2Simon Ulbricht *) Authz: Move the directives 'Order', 'Allow', 'Deny' and 'Satisfy'
37c793236d73cd400bb268672e0d0f7f97a89a70Simon Ulbricht into the new module mod_access_compat which can be loaded to provide
319f8219a74a41859b9d1991817644549ab43d61Simon Ulbricht support for these directives.
2e2559f894aaa661b199e4fa00609f522bc5482aSimon Ulbricht [Brad Nicholes]
7cb31cb2104c666b2762976f7ed86da10575a980Simon Ulbricht *) Authz: Move the 'Require' directive from the core module as well as
7cb31cb2104c666b2762976f7ed86da10575a980Simon Ulbricht add the directives '<SatisfyAll>', '<SatisfyOne>', '<RequireAlias>'
7cb31cb2104c666b2762976f7ed86da10575a980Simon Ulbricht and 'Reject' to mod_authz_core. The new directives introduce 'AND/OR'
7cb31cb2104c666b2762976f7ed86da10575a980Simon Ulbricht logic into the authorization processing. [Brad Nicholes]
7cb31cb2104c666b2762976f7ed86da10575a980Simon Ulbricht *) Authz: Add the new module mod_authz_core which acts as the
7cb31cb2104c666b2762976f7ed86da10575a980Simon Ulbricht authorization provider vector and contains common authz
f59ad2f2dc308e549d70f0de4c0054df3b2bbfcaChristian Maeder directives. [Brad Nicholes]
f59ad2f2dc308e549d70f0de4c0054df3b2bbfcaChristian Maeder *) Authz: Renamed mod_authz_dbm authz providers from 'group' and
2b1abe6d680bc23b703f7ffbf6d214be15aa9f1fSimon Ulbricht 'file-group' to 'dbm-group' and 'dbm-file-group'. [Brad Nicholes]
92b34c379207fb8752258be174cb8ef4162dc865Simon Ulbricht *) Authz: Added the new authz providers 'env', 'ip', 'host', 'all' to handle
92b34c379207fb8752258be174cb8ef4162dc865Simon Ulbricht host-based access control provided by mod_authz_host and invoked
c1d06b3018b34ede2b3fb6c7fe2ad28cd5ce5b68Christian Maeder through the 'Require' directive. [Brad Nicholes]
d5a6311a0badccb57c915d3f7d0657615338e12cSimon Ulbricht *) Authz: Convert all of the authz modules from hook based to
37c793236d73cd400bb268672e0d0f7f97a89a70Simon Ulbricht provider based. [Brad Nicholes]
37c793236d73cd400bb268672e0d0f7f97a89a70Simon Ulbricht *) mod_cache: Add CacheMinExpire directive to set the minimum time in
2b1abe6d680bc23b703f7ffbf6d214be15aa9f1fSimon Ulbricht seconds to cache a document.
2b1abe6d680bc23b703f7ffbf6d214be15aa9f1fSimon Ulbricht [Brian Akins <brian.akins turner.com>, Ruediger Pluem]
2b1abe6d680bc23b703f7ffbf6d214be15aa9f1fSimon Ulbricht *) mod_authz_dbd: SQL authz with Login/Session support [Nick Kew]
029d127079d24fa541e0bbba0133bc273268dd4eSimon Ulbricht *) Fix typo in ProxyStatus syntax error message.
37c793236d73cd400bb268672e0d0f7f97a89a70Simon Ulbricht [Christophe Jaillet <christophe.jaillet wanadoo.fr>]
2b1abe6d680bc23b703f7ffbf6d214be15aa9f1fSimon Ulbricht *) Asynchronous write completion for the Event MPM. [Brian Pane]
7f81535ccbe97ecc332b8c03d6c137b92e4ac4aaSimon Ulbricht *) Added an End-Of-Request bucket type. The logging of a request and
f59ad2f2dc308e549d70f0de4c0054df3b2bbfcaChristian Maeder the freeing of its pool are now done when the EOR bucket is destroyed.
f59ad2f2dc308e549d70f0de4c0054df3b2bbfcaChristian Maeder This has the effect of delaying the logging until right after the last
f8b5384f117f1eb77f87b9bc982513109b3c2d56Christian Maeder of the response is sent; ap_core_output_filter() calls the access logger
f59ad2f2dc308e549d70f0de4c0054df3b2bbfcaChristian Maeder indirectly when it destroys the EOR bucket. [Brian Pane]
f59ad2f2dc308e549d70f0de4c0054df3b2bbfcaChristian Maeder *) Rewrite of logresolve support utility: IPv6 addresses are now supported
2b1abe6d680bc23b703f7ffbf6d214be15aa9f1fSimon Ulbricht and the format of statistical output has changed. [Colm MacCarthaigh]
66e5f6ab072171b6fd02ccc20846386773354391Christian Maeder *) Rewrite of ap_coreoutput_filter to do nonblocking writes [Brian Pane]
0a46a4d711eca869ad75b4df84dabd72783ebdd2Simon Ulbricht *) Added new connection states for handler and write completion
0a46a4d711eca869ad75b4df84dabd72783ebdd2Simon Ulbricht *) mod_cgid: Refuse to work on Solaris 10 due to OS bugs. PR 34264.
0a46a4d711eca869ad75b4df84dabd72783ebdd2Simon Ulbricht [Justin Erenkrantz]
e4a035578fa9d1911eee097e2ed9a998c90c7805Christian Maeder *) Teach mod_ssl to use arbitrary OIDs in an SSLRequire directive,
e4a035578fa9d1911eee097e2ed9a998c90c7805Christian Maeder allowing string-valued client certificate attributes to be used for
e4a035578fa9d1911eee097e2ed9a998c90c7805Christian Maeder access control, as in: SSLRequire "value" in OID("1.3.6.1.4.1.18060.1")
e4a035578fa9d1911eee097e2ed9a998c90c7805Christian Maeder [Martin Kraemer, David Reid]
0a46a4d711eca869ad75b4df84dabd72783ebdd2Simon Ulbricht [Apache 2.1.0-dev includes those bug fixes and changes with the
e4a035578fa9d1911eee097e2ed9a998c90c7805Christian Maeder Apache 2.2.xx tree as documented, and except as noted, below.]
e4a035578fa9d1911eee097e2ed9a998c90c7805Christian MaederChanges with Apache 2.2.x and later:
0a46a4d711eca869ad75b4df84dabd72783ebdd2Simon Ulbricht *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
986888e7f4d8ed681272a79c63f329ce8037063dcmaederChanges with Apache 2.0.x and later:
439fdeeb1323b17084fad1b7fe619e49c270999fSimon Ulbricht *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup
f59ad2f2dc308e549d70f0de4c0054df3b2bbfcaChristian MaederChanges with Apache 1.3.x and later: