CHANGES revision 876167dba234e2c7065895c87b77a8c57bdcf754
af84459fbf938e508fd10b01cb8d699c79083813takashi -*- coding: utf-8 -*-
af84459fbf938e508fd10b01cb8d699c79083813takashiChanges with Apache 2.3.13
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Add ap_regexec_len() function that works with non-null-terminated
af84459fbf938e508fd10b01cb8d699c79083813takashi strings. PR 51231. [Yehezkel Horowitz <horowity checkpoint com>]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_authnz_ldap: If the LDAP server returns constraint violation,
af84459fbf938e508fd10b01cb8d699c79083813takashi don't treat this as an error but as "auth denied". [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_proxy_fcgi|scgi: Add support for "best guess" of PATH_INFO
af84459fbf938e508fd10b01cb8d699c79083813takashi for SCGI/FCGI. PR 50880, 50851. [Mark Montague <mark catseye.org>,
af84459fbf938e508fd10b01cb8d699c79083813takashi Jim Jagielski]
3f08db06526d6901aa08c110b5bc7dde6bc39905nd *) mod_cache: When content is served stale, and there is no means to
af84459fbf938e508fd10b01cb8d699c79083813takashi revalidate the content using ETag or Last-Modified, and we have
af84459fbf938e508fd10b01cb8d699c79083813takashi mandated no stale-on-error behaviour, stand down and don't cache.
af84459fbf938e508fd10b01cb8d699c79083813takashi Saves a cache write that will never be read.
3f08db06526d6901aa08c110b5bc7dde6bc39905nd [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_reqtimeout: Fix a timed out connection going into the keep-alive
af84459fbf938e508fd10b01cb8d699c79083813takashi state after a timeout when discarding a request body. PR 51103.
f086b4b402fa9a2fefc7dda85de2a3cc1cd0a654rjung [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Add various file existance test operators to ap_expr.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_proxy_express: New mass reverse-proxy switch extension for
3c13a815670b54d1c17bf02954f7d2b066cde95cnd mod_proxy. [Jim Jagielski]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) configure: Fix script error when configuring module set "reallyall".
af84459fbf938e508fd10b01cb8d699c79083813takashi [Rainer Jung]
af84459fbf938e508fd10b01cb8d699c79083813takashiChanges with Apache 2.3.12
af84459fbf938e508fd10b01cb8d699c79083813takashi *) configure, core: Provide easier support for APR's hook probe
af84459fbf938e508fd10b01cb8d699c79083813takashi capability. [Jim Jagielski, Jeff Trawick]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) Silence autoconf 2.68 warnings. [Rainer Jung]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_authnz_ldap: Resolve crash when LDAP is used for authorization only
af84459fbf938e508fd10b01cb8d699c79083813takashi [Scott Hill <shill genscape.com>]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) support: Make sure check_forensic works with mod_unique_id loaded
af84459fbf938e508fd10b01cb8d699c79083813takashi [Joe Schaefer]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) Add child_status hook for tracking creation/termination of MPM child
af84459fbf938e508fd10b01cb8d699c79083813takashi processes. Add end_generation hook for notification when the last
af84459fbf938e508fd10b01cb8d699c79083813takashi MPM child of a generation exits. [Jeff Trawick]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_ldap: Make LDAPSharedCacheSize 0 create a non-shared-memory cache per
af84459fbf938e508fd10b01cb8d699c79083813takashi process as opposed to disabling caching completely. This allows to use
af84459fbf938e508fd10b01cb8d699c79083813takashi the non-shared-memory cache as a workaround for the shared memory cache
cd6c8de3bedcc401ee230159b0439fa20f44488etakashi not being available during graceful restarts. PR 48958. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) Add new ap_reserve_module_slots/ap_reserve_module_slots_directive API,
af84459fbf938e508fd10b01cb8d699c79083813takashi necessary if a module (like mod_perl) registers additional modules late
af84459fbf938e508fd10b01cb8d699c79083813takashi in the startup phase. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Prevent segfault if DYNAMIC_MODULE_LIMIT is reached. PR 51072.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Torsten Förtsch <torsten foertsch gmx net>]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) WinNT MPM: Improve robustness under heavy load. [Jeff Trawick]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) MinGW build improvements. PR 49535. [John Vandenberg
af84459fbf938e508fd10b01cb8d699c79083813takashi <jayvdb gmail.com>, Jeff Trawick]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Support module names with colons in loglevel configuration.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Torsten Förtsch <torsten foertsch gmx net>]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_ssl, ab: Support OpenSSL compiled without SSLv2 support.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Stefan Fritsch]
3c13a815670b54d1c17bf02954f7d2b066cde95cnd *) core: Abort if the MPM is changed across restart. [Jeff Trawick]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_proxy_ajp: Add support for 'ProxyErrorOverride on'. PR 50945.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Peter Pramberger <peter pramberger.at>, Jim Jagielski]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_proxy_fcgi: Add support for 'ProxyErrorOverride on'. PR 50913.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Mark Montague <mark catseye.org>, Jim Jagielski]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Change the APIs of ap_cfg_getline() and ap_cfg_getc() to return an
af84459fbf938e508fd10b01cb8d699c79083813takashi error code. Abort with a nice error message if a config line is too long.
af84459fbf938e508fd10b01cb8d699c79083813takashi Partial fix for PR 50824. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_info: Dump config to stdout during startup if -DDUMP_CONFIG is
af84459fbf938e508fd10b01cb8d699c79083813takashi specified. PR 31956. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) Restore visibility of DEFAULT_PIDLOG to core and modules. MPM
af84459fbf938e508fd10b01cb8d699c79083813takashi helper function ap_remove_pid() added. [Jeff Trawick]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) Enable DEFAULT_REL_RUNTIMEDIR on Windows and NetWare. [various]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) Correct C++ incompatibility with http_log.h. [Stefan Fritsch, Jeff
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_log_config: Prevent segfault. PR 50861. [Torsten Förtsch
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: AllowEncodedSlashes new option NoDecode to allow encoded slashes
af84459fbf938e508fd10b01cb8d699c79083813takashi in request URL path info but not decode them. Change behavior of option
af84459fbf938e508fd10b01cb8d699c79083813takashi "On" to decode the encoded slashes as 2.0 and 2.2 do. PR 35256,
af84459fbf938e508fd10b01cb8d699c79083813takashi PR 46830. [Dan Poirier]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_ssl: Check SNI hostname against Host header case-insensitively.
af84459fbf938e508fd10b01cb8d699c79083813takashi PR 49491. [Mayank Agrawal <magrawal.08 gmail.com>]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_ldap: Add LDAPConnectionPoolTTL to give control over lifetime
af84459fbf938e508fd10b01cb8d699c79083813takashi of bound backend LDAP connections. PR47634 [Eric Covener]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_cache: Make CacheEnable and CacheDisable configurable per
af84459fbf938e508fd10b01cb8d699c79083813takashi directory in addition to per server, making them work from within
af84459fbf938e508fd10b01cb8d699c79083813takashi a LocationMatch. [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) worker, event, prefork: Correct several issues when built as
af84459fbf938e508fd10b01cb8d699c79083813takashi DSOs; most notably, the scoreboard was reinitialized during graceful
3c13a815670b54d1c17bf02954f7d2b066cde95cnd restart, such that processes of the previous generation were not
af84459fbf938e508fd10b01cb8d699c79083813takashi observable. [Jeff Trawick]
af84459fbf938e508fd10b01cb8d699c79083813takashiChanges with Apache 2.3.11
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_win32: Added shebang check for '! so that .vbs scripts work as CGI.
af84459fbf938e508fd10b01cb8d699c79083813takashi Win32's cscript interpreter can only use a single quote as comment char.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Guenter Knauf]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_proxy: balancer-manager now uses POST instead of GET.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Jim Jagielski]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: new util function: ap_parse_form_data(). Previously,
af84459fbf938e508fd10b01cb8d699c79083813takashi this capability was tucked away in mod_request. [Jim Jagielski]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: new hook: ap_run_pre_read_request. [Jim Jagielski]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_cache: When a request other than GET or HEAD arrives, we must
af84459fbf938e508fd10b01cb8d699c79083813takashi invalidate existing cache entities as per RFC2616 13.10. PR 15868.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) modules: Fix many modules that were not correctly initializing if they
af84459fbf938e508fd10b01cb8d699c79083813takashi were not active during server startup but got enabled later during a
af84459fbf938e508fd10b01cb8d699c79083813takashi graceful restart. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Create new ap_state_query function that allows modules to determine
af84459fbf938e508fd10b01cb8d699c79083813takashi if the current configuration run is the initial one at server startup,
af84459fbf938e508fd10b01cb8d699c79083813takashi and if the server is started for testing/config dumping only.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_proxy: Runtime configuration of many parameters for existing
af84459fbf938e508fd10b01cb8d699c79083813takashi balancers via the balancer-manager. [Jim Jagielski]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_proxy: Runtime addition of new workers (BalancerMember) for existing
af84459fbf938e508fd10b01cb8d699c79083813takashi balancers via the balancer-manager. [Jim Jagielski]
8e9c6d6438af1ccb46adaa60d34caa3ac98f3851igalic *) mod_cache: When a bad Expires date is present, we need to behave as if
8e9c6d6438af1ccb46adaa60d34caa3ac98f3851igalic the Expires is in the past, not as if the Expires is missing. PR 16521.
8e9c6d6438af1ccb46adaa60d34caa3ac98f3851igalic [Co-Advisor <coad@measurement-factory.com>]
8e9c6d6438af1ccb46adaa60d34caa3ac98f3851igalic *) mod_cache: We must ignore quoted-string values that appear in a
8e9c6d6438af1ccb46adaa60d34caa3ac98f3851igalic Cache-Control header. PR 50199. [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_dav: Revert change to send 501 error if unknown Content-* header is
af84459fbf938e508fd10b01cb8d699c79083813takashi received for a PUT request. PR 42978. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_cache: Respect s-maxage as described by RFC2616 14.9.3, which must
af84459fbf938e508fd10b01cb8d699c79083813takashi take precedence if present. PR 35247. [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_ssl: Fix a possible startup failure if multiple SSL vhosts
af84459fbf938e508fd10b01cb8d699c79083813takashi are configured with the same ServerName and private key file.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Masahiro Matsuya <mmatsuya redhat.com>, Joe Orton]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_socache_dc: Make module compile by fixing some typos.
af84459fbf938e508fd10b01cb8d699c79083813takashi PR 50735 [Mark Montague <mark catseye.org>]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) prefork: Update MPM state in children during a graceful stop or
af84459fbf938e508fd10b01cb8d699c79083813takashi restart. PR 41743. [Andrew Punch <andrew.punch 247realmedia.com>]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_mime: Ignore leading dots when looking for mime extensions.
af84459fbf938e508fd10b01cb8d699c79083813takashi PR 50434 [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Add support to set variables with the 'Define' directive. The
af84459fbf938e508fd10b01cb8d699c79083813takashi variables that can then be used in the config using the ${VAR} syntax
af84459fbf938e508fd10b01cb8d699c79083813takashi known from envvar interpolation. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_proxy_http: make adding of X-Forwarded-* headers configurable.
af84459fbf938e508fd10b01cb8d699c79083813takashi ProxyAddHeaders defaults to On. [Vincent Deffontaines]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_slotmem_shm: Increase memory alignment for slotmem data.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Rainer Jung]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_ssl: Add config options for OCSP: SSLOCSPResponderTimeout,
af84459fbf938e508fd10b01cb8d699c79083813takashi SSLOCSPResponseMaxAge, SSLOCSPResponseTimeSkew.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Kaspar Brand <httpd-dev.2011 velox.ch>]
3c13a815670b54d1c17bf02954f7d2b066cde95cnd *) mod_ssl: Revamp output buffering to reduce network overhead for
af84459fbf938e508fd10b01cb8d699c79083813takashi output fragmented into many buckets, such as chunked HTTP responses.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Joe Orton]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Apply <If> sections to all requests, not only to file base requests.
af84459fbf938e508fd10b01cb8d699c79083813takashi Allow to use <If> inside <Directory>, <Location>, and <Files> sections.
af84459fbf938e508fd10b01cb8d699c79083813takashi The merging of <If> sections now happens after the merging of <Location>
af84459fbf938e508fd10b01cb8d699c79083813takashi sections, even if an <If> section is embedded inside a <Directory> or
af84459fbf938e508fd10b01cb8d699c79083813takashi <Files> section. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_proxy: Refactor usage of shared data by dropping the scoreboard
af84459fbf938e508fd10b01cb8d699c79083813takashi and using slotmem. Create foundation for dynamic growth/changes of
af84459fbf938e508fd10b01cb8d699c79083813takashi members within a balancer. Remove BalancerNonce in favor of a
af84459fbf938e508fd10b01cb8d699c79083813takashi per-balancer 'nonce' parameter. [Jim Jagielski]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_status: Don't show slots which are disabled by MaxClients as open.
af84459fbf938e508fd10b01cb8d699c79083813takashi PR: 47022 [Jordi Prats <jordi prats gmail com>, Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mpm_prefork: Fix ap_mpm_query results for AP_MPMQ_MAX_DAEMONS and
af84459fbf938e508fd10b01cb8d699c79083813takashi AP_MPMQ_MAX_THREADS.
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_authz_core: Fix bug in merging logic if user-based and non-user-based
af84459fbf938e508fd10b01cb8d699c79083813takashi authorization directives were mixed. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_authn_socache: change directive name from AuthnCacheProvider
af84459fbf938e508fd10b01cb8d699c79083813takashi to AuthnCacheProvideFor. The term "provider" is overloaded in
af84459fbf938e508fd10b01cb8d699c79083813takashi this module, and we should avoid confusion between the provider
af84459fbf938e508fd10b01cb8d699c79083813takashi of a backend (AuthnCacheSOCache) and the authn provider(s) for
af84459fbf938e508fd10b01cb8d699c79083813takashi which this module provides cacheing (AuthnCacheProvideFor).
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_proxy_http: Allocate the fake backend request from a child pool
3c13a815670b54d1c17bf02954f7d2b066cde95cnd of the backend connection, instead of misusing the pool of the frontend
af84459fbf938e508fd10b01cb8d699c79083813takashi request. Fixes a thread safety issue where buckets set aside in the
af84459fbf938e508fd10b01cb8d699c79083813takashi backend connection leak into other threads, and then disappear when
af84459fbf938e508fd10b01cb8d699c79083813takashi the frontend request is cleaned up, in turn causing corrupted buckets
af84459fbf938e508fd10b01cb8d699c79083813takashi to make other threads spin. [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_ssl: Change the format of the SSL_{CLIENT,SERVER}_{I,S}_DN variables
af84459fbf938e508fd10b01cb8d699c79083813takashi to be RFC 2253 compatible, convert non-ASCII characters to UTF8, and
af84459fbf938e508fd10b01cb8d699c79083813takashi escape other special characters with backslashes. The old format can
af84459fbf938e508fd10b01cb8d699c79083813takashi still be used with the LegacyDNStringFormat argument to SSLOptions.
3c13a815670b54d1c17bf02954f7d2b066cde95cnd *) core, mod_rewrite: Make the REQUEST_SCHEME variable available to
3c13a815670b54d1c17bf02954f7d2b066cde95cnd scripts and mod_rewrite. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_rewrite: Allow to use arbitrary boolean expressions (ap_expr) in
3c13a815670b54d1c17bf02954f7d2b066cde95cnd RewriteCond. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_rewrite: Allow to unset environment variables using E=!VAR.
af84459fbf938e508fd10b01cb8d699c79083813takashi PR 49512. [Mark Drayton <mark markdrayton info>, Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_headers: Restore the 2.3.8 and earlier default for the first
af84459fbf938e508fd10b01cb8d699c79083813takashi argument of the Header directive ("onsuccess"). [Eric Covener]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Disallow the mixing of relative and absolute Options PR 33708.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Sönke Tesch <st kino-fahrplan.de>]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: When exporting request headers to HTTP_* environment variables,
af84459fbf938e508fd10b01cb8d699c79083813takashi drop variables whose names contain invalid characters. Describe in the
af84459fbf938e508fd10b01cb8d699c79083813takashi docs how to restore the old behaviour. [Malte S. Stretz <mss apache org>]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: When selecting an IP-based virtual host, favor an exact match for
af84459fbf938e508fd10b01cb8d699c79083813takashi the port over a wildcard (or omitted) port instead of favoring the one
af84459fbf938e508fd10b01cb8d699c79083813takashi that came first in the configuration file. [Eric Covener]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Overlapping virtual host address/port combinations now implicitly
af84459fbf938e508fd10b01cb8d699c79083813takashi enable name-based virtual hosting for that address. The NameVirtualHost
af84459fbf938e508fd10b01cb8d699c79083813takashi directive has no effect, and _default_ is interpreted the same as "*".
af84459fbf938e508fd10b01cb8d699c79083813takashi [Eric Covener]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: In the absence of any Options directives, the default is now
af84459fbf938e508fd10b01cb8d699c79083813takashi "FollowSymlinks" instead of "All". [Igor Galić]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) rotatelogs: Add -e option to write logs through to stdout for optional
11495c9f0bd33e51a25b4d532beadfbcf9b944a3nilgun further processing. [Graham Leggett]
11495c9f0bd33e51a25b4d532beadfbcf9b944a3nilgun *) mod_ssl: Correctly read full lines in input filter when the line is
11495c9f0bd33e51a25b4d532beadfbcf9b944a3nilgun incomplete during first read. PR 50481. [Ruediger Pluem]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_authz_core: Add AuthzSendForbiddenOnFailure directive to allow
af84459fbf938e508fd10b01cb8d699c79083813takashi sending '403 FORBIDDEN' instead of '401 UNAUTHORIZED' if authorization
af84459fbf938e508fd10b01cb8d699c79083813takashi fails for an authenticated user. PR 40721. [Stefan Fritsch]
11495c9f0bd33e51a25b4d532beadfbcf9b944a3nilgunChanges with Apache 2.3.10
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_rewrite: Don't implicitly URL-escape the original query string
af84459fbf938e508fd10b01cb8d699c79083813takashi when no substitution has changed it. PR 50447. [Eric Covener]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Honor 'AcceptPathInfo OFF' during internal redirects,
af84459fbf938e508fd10b01cb8d699c79083813takashi such as per-directory mod_rewrite substitutions. PR 50349.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Eric Covener]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_rewrite: Add 'RewriteOptions InheritBefore' to put the base
af84459fbf938e508fd10b01cb8d699c79083813takashi rules/conditions before the overridden rules/conditions. PR 39313.
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_autoindex: add IndexIgnoreReset to reset the list of IndexIgnored
af84459fbf938e508fd10b01cb8d699c79083813takashi filenames in higher precedence configuration sections. PR 24243.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Eric Covener]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_cgid: RLimit* directive support for mod_cgid. PR 42135
af84459fbf938e508fd10b01cb8d699c79083813takashi [Eric Covener]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Fail startup when the argument to ServerName looks like a glob
af84459fbf938e508fd10b01cb8d699c79083813takashi or a regular expression instead of a hostname (*?[]). PR 39863
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_userdir: Add merging of enable, disable, and filename arguments
af84459fbf938e508fd10b01cb8d699c79083813takashi to UserDir directive, leaving enable/disable of userlists unmerged.
af84459fbf938e508fd10b01cb8d699c79083813takashi PR 44076 [Eric Covener]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) httpd: When no -k option is provided on the httpd command line, the server
af84459fbf938e508fd10b01cb8d699c79083813takashi was starting without checking for an existing pidfile. PR 50350
af84459fbf938e508fd10b01cb8d699c79083813takashi [Eric Covener]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_proxy: Put the worker in error state if the SSL handshake with the
af84459fbf938e508fd10b01cb8d699c79083813takashi backend fails. PR 50332.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Daniel Ruggeri <DRuggeri primary.net>, Ruediger Pluem]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_cache_disk: Fix Windows build which was broken after renaming
af84459fbf938e508fd10b01cb8d699c79083813takashi the module. [Gregg L. Smith]
af84459fbf938e508fd10b01cb8d699c79083813takashiChanges with Apache 2.3.9
af84459fbf938e508fd10b01cb8d699c79083813takashi *) SECURITY: CVE-2010-1623 (cve.mitre.org)
af84459fbf938e508fd10b01cb8d699c79083813takashi Fix a denial of service attack against mod_reqtimeout.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_headers: Change default first argument of Header directive
af84459fbf938e508fd10b01cb8d699c79083813takashi from "onsuccess" to "always". [Eric Covener]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_include: Add the onerror attribute to the include element,
af84459fbf938e508fd10b01cb8d699c79083813takashi allowing an URL to be specified to include on error. [Graham
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_cache_disk: mod_disk_cache renamed to mod_cache_disk, to be
af84459fbf938e508fd10b01cb8d699c79083813takashi consistent with the naming of other modules. [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_setenvif: Add SetEnvIfExpr directive to set env var depending on
af84459fbf938e508fd10b01cb8d699c79083813takashi expression. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_proxy: Fix ProxyPassInterpolateEnv directive. PR 50292.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) suEXEC: Add Suexec directive to disable suEXEC without renaming the
af84459fbf938e508fd10b01cb8d699c79083813takashi binary (Suexec Off), or force startup failure if suEXEC is required
af84459fbf938e508fd10b01cb8d699c79083813takashi but not supported (Suexec On). Change SuexecUserGroup to fail
af84459fbf938e508fd10b01cb8d699c79083813takashi startup instead of just printing a warning if suEXEC is disabled.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Jeff Trawick]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Add Error directive for aborting startup or htaccess processing
af84459fbf938e508fd10b01cb8d699c79083813takashi with a specified error message. [Jeff Trawick]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_rewrite: Fix the RewriteEngine directive to work within a
af84459fbf938e508fd10b01cb8d699c79083813takashi location. Previously, once RewriteEngine was switched on globally,
3c13a815670b54d1c17bf02954f7d2b066cde95cnd it was impossible to switch off. [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core, mod_include, mod_ssl: Move the expression parser derived from
af84459fbf938e508fd10b01cb8d699c79083813takashi mod_include back into mod_include. Replace ap_expr with a parser
af84459fbf938e508fd10b01cb8d699c79083813takashi derived from mod_ssl's parser. Make mod_ssl use the new parser. Rework
af84459fbf938e508fd10b01cb8d699c79083813takashi ap_expr's public interface and provide hooks for modules to add variables
af84459fbf938e508fd10b01cb8d699c79083813takashi and functions. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Do the hook sorting earlier so that the hooks are properly sorted
af84459fbf938e508fd10b01cb8d699c79083813takashi for the pre_config hook and during parsing the config. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: In the absence of any AllowOverride directives, the default is now
af84459fbf938e508fd10b01cb8d699c79083813takashi "None" instead of "All". PR49823 [Eric Covener]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_proxy: Don't allow ProxyPass or ProxyPassReverse in
af84459fbf938e508fd10b01cb8d699c79083813takashi <Directory> or <Files>. PR47765 [Eric Covener]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) prefork/worker/event MPMS: default value (when no directive is present)
af84459fbf938e508fd10b01cb8d699c79083813takashi of MaxConnectionsPerChild/MaxRequestsPerChild is changed to 0 from 10000
af84459fbf938e508fd10b01cb8d699c79083813takashi to match default configuration and manual. PR47782 [Eric Covener]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) proxy_connect: Don't give up in the middle of a CONNECT tunnel
af84459fbf938e508fd10b01cb8d699c79083813takashi when the child process is starting to exit. PR50220. [Eric Covener]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_autoindex: Fix inheritance of mod_autoindex directives into
af84459fbf938e508fd10b01cb8d699c79083813takashi contexts that don't have any mod_autoindex directives. PR47766.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Eric Covener]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_rewrite: Add END flag for RewriteRule to prevent further rounds
3c13a815670b54d1c17bf02954f7d2b066cde95cnd of rewrite processing when a per-directory substitution occurs.
3c13a815670b54d1c17bf02954f7d2b066cde95cnd [Eric Covener]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_ssl: Make sure to always log an error if loading of CA certificates
af84459fbf938e508fd10b01cb8d699c79083813takashi fails. PR 40312. [Paul Tiemann <issues apache org ourdetour com>]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_dav: Send 501 error if unknown Content-* header is received for a PUT
af84459fbf938e508fd10b01cb8d699c79083813takashi request (RFC 2616 9.6). PR 42978. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_dav: Send 400 error if malformed Content-Range header is received for
af84459fbf938e508fd10b01cb8d699c79083813takashi a put request (RFC 2616 14.16). PR 49825. [Stefan Fritsch]
78f97ce162b66a0dbfd7af4dcd9984f162569b04minfrin *) mod_proxy: Release the backend connection as soon as EOS is detected,
af84459fbf938e508fd10b01cb8d699c79083813takashi so the backend isn't forced to wait for the client to eventually
af84459fbf938e508fd10b01cb8d699c79083813takashi acknowledge the data. [Graham Leggett]
78f97ce162b66a0dbfd7af4dcd9984f162569b04minfrin *) mod_proxy: Optimise ProxyPass within a Location so that it is stored
3c13a815670b54d1c17bf02954f7d2b066cde95cnd per-directory, and chosen during the location walk. Make ProxyPass
3c13a815670b54d1c17bf02954f7d2b066cde95cnd work correctly from within a LocationMatch. [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Fix segfault if per-module LogLevel is on virtual host
af84459fbf938e508fd10b01cb8d699c79083813takashi scope. PR 50117. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_proxy: Move the ProxyErrorOverride directive to have per
af84459fbf938e508fd10b01cb8d699c79083813takashi directory scope. [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_allowmethods: New module to deny certain HTTP methods without
af84459fbf938e508fd10b01cb8d699c79083813takashi interfering with authentication/authorization. [Paul Querna,
3c13a815670b54d1c17bf02954f7d2b066cde95cnd Igor Galić, Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_ssl: Log certificate information and improve error message if client
af84459fbf938e508fd10b01cb8d699c79083813takashi cert verification fails. PR 50093, PR 50094. [Lassi Tuura <lat cern ch>,
af84459fbf938e508fd10b01cb8d699c79083813takashi Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) htcacheclean: Teach htcacheclean to limit cache size by number of
af84459fbf938e508fd10b01cb8d699c79083813takashi inodes in addition to size of files. Prevents a cache disk from
af84459fbf938e508fd10b01cb8d699c79083813takashi running out of space when many small files are cached.
3c13a815670b54d1c17bf02954f7d2b066cde95cnd [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Rename MaxRequestsPerChild to MaxConnectionsPerChild, which
af84459fbf938e508fd10b01cb8d699c79083813takashi describes more accurately what the directive does. The old name
af84459fbf938e508fd10b01cb8d699c79083813takashi still works but logs a warning. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_cache: Optionally serve stale data when a revalidation returns a
af84459fbf938e508fd10b01cb8d699c79083813takashi 5xx response, controlled by the CacheStaleOnError directive.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) htcacheclean: Allow the listing of valid URLs within the cache, with
af84459fbf938e508fd10b01cb8d699c79083813takashi the option to list entry metadata such as sizes and times. [Graham
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_cache: correctly parse quoted strings in cache headers.
af84459fbf938e508fd10b01cb8d699c79083813takashi PR 50199 [Nick Kew]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_cache: Allow control over the base URL of reverse proxied requests
cd6c8de3bedcc401ee230159b0439fa20f44488etakashi using the CacheKeyBaseURL directive, so that the cache key can be
af84459fbf938e508fd10b01cb8d699c79083813takashi calculated from the endpoint URL instead of the server URL. [Graham
3c13a815670b54d1c17bf02954f7d2b066cde95cnd *) mod_cache: CacheLastModifiedFactor, CacheStoreNoStore, CacheStorePrivate,
af84459fbf938e508fd10b01cb8d699c79083813takashi CacheStoreExpired, CacheIgnoreNoLastMod, CacheDefaultExpire,
af84459fbf938e508fd10b01cb8d699c79083813takashi CacheMinExpire and CacheMaxExpire can be set per directory/location.
3c13a815670b54d1c17bf02954f7d2b066cde95cnd [Graham Leggett]
cd6c8de3bedcc401ee230159b0439fa20f44488etakashi *) mod_disk_cache: CacheMaxFileSize, CacheMinFileSize, CacheReadSize and
af84459fbf938e508fd10b01cb8d699c79083813takashi CacheReadTime can be set per directory/location. [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Speed up config parsing if using a very large number of config
af84459fbf938e508fd10b01cb8d699c79083813takashi files. PR 50002 [andrew cloudaccess net]
3c13a815670b54d1c17bf02954f7d2b066cde95cnd *) mod_cache: Support the caching of HEAD requests. [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) htcacheclean: Allow the option to round up file sizes to a given
af84459fbf938e508fd10b01cb8d699c79083813takashi block size, improving the accuracy of disk usage. [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_ssl: Add authz providers for use with mod_authz_core and its
af84459fbf938e508fd10b01cb8d699c79083813takashi RequireAny/RequireAll containers: 'ssl' (equivalent to SSLRequireSSL),
af84459fbf938e508fd10b01cb8d699c79083813takashi 'ssl-verify-client' (for use with 'SSLVerifyClient optional'), and
af84459fbf938e508fd10b01cb8d699c79083813takashi 'ssl-require' (expressions with same syntax as SSLRequire).
af84459fbf938e508fd10b01cb8d699c79083813takashi [Stefan Fritsch]
3c13a815670b54d1c17bf02954f7d2b066cde95cnd *) mod_ssl: Make the ssl expression parser thread-safe. It now requires
af84459fbf938e508fd10b01cb8d699c79083813takashi bison instead of yacc. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_disk_cache: Change on-disk header file format to support the
af84459fbf938e508fd10b01cb8d699c79083813takashi link of the device/inode of the data file to the matching header
8e9c6d6438af1ccb46adaa60d34caa3ac98f3851igalic file, and to support the option of not writing a data file when
8e9c6d6438af1ccb46adaa60d34caa3ac98f3851igalic the data file is empty. [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core/mod_unique_id: Add generate_log_id hook to allow to use
af84459fbf938e508fd10b01cb8d699c79083813takashi the ID generated by mod_unique_id as error log ID for requests.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_cache: Make sure that we never allow a 304 Not Modified response
af84459fbf938e508fd10b01cb8d699c79083813takashi that we asked for to leak to the client should the 304 response be
af84459fbf938e508fd10b01cb8d699c79083813takashi uncacheable. PR45341 [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_cache: Add the cache_status hook to register the final cache
3c13a815670b54d1c17bf02954f7d2b066cde95cnd decision hit/miss/revalidate. Add optional support for an X-Cache
3c13a815670b54d1c17bf02954f7d2b066cde95cnd and/or an X-Cache-Detail header to add the cache status to the
af84459fbf938e508fd10b01cb8d699c79083813takashi response. PR48241 [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_authz_host: Add 'local' provider that matches connections originating
3c13a815670b54d1c17bf02954f7d2b066cde95cnd on the local host. PR 19938. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) Event MPM: Fix crash accessing pollset on worker thread when child
3c13a815670b54d1c17bf02954f7d2b066cde95cnd process is exiting. [Jeff Trawick]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: For process invocation (cgi, fcgid, piped loggers and so forth)
af84459fbf938e508fd10b01cb8d699c79083813takashi pass the system library path (LD_LIBRARY_PATH or platform-specific
3c13a815670b54d1c17bf02954f7d2b066cde95cnd variables) along with the system PATH, by default. Both should be
af84459fbf938e508fd10b01cb8d699c79083813takashi overridden together as desired using PassEnv etc; see mod_env.
af84459fbf938e508fd10b01cb8d699c79083813takashi [William Rowe]
9a58dc6a2b26ec128b1270cf48810e705f1a90dbsf *) mod_cache: Introduce CacheStoreExpired, to allow administrators to
af84459fbf938e508fd10b01cb8d699c79083813takashi capture a stale backend response, perform If-Modified-Since requests
af84459fbf938e508fd10b01cb8d699c79083813takashi against the backend, and serving from the cache all 304 responses.
af84459fbf938e508fd10b01cb8d699c79083813takashi This restores pre-2.2.4 cache behavior. [William Rowe]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_rewrite: Introduce <=, >= string comparison operators, and integer
0cf3cdbaa1dad11cbf1ce32e48f1b4ec88cf779fnilgun comparators -lt, -le, -eq, -ge, and -gt. To help bash users and drop
af84459fbf938e508fd10b01cb8d699c79083813takashi the ambiguity of the symlink test "-ltest", introduce -h or -L as
af84459fbf938e508fd10b01cb8d699c79083813takashi symlink test operators. [William Rowe]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_cache: Give the cache provider the opportunity to choose to cache
af84459fbf938e508fd10b01cb8d699c79083813takashi or not cache based on the buckets present in the brigade, such as the
af84459fbf938e508fd10b01cb8d699c79083813takashi presence of a FILE bucket.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_authz_core: Allow authz providers to check args while reading the
af84459fbf938e508fd10b01cb8d699c79083813takashi config and allow to cache parsed args. Move 'all' and 'env' authz
af84459fbf938e508fd10b01cb8d699c79083813takashi providers from mod_authz_host to mod_authz_core. Add 'method' authz
af84459fbf938e508fd10b01cb8d699c79083813takashi provider depending on the HTTP method. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_include: Move the request_rec within mod_include to be
af84459fbf938e508fd10b01cb8d699c79083813takashi exposed within include_ctx_t. [Graham Leggett]
3c13a815670b54d1c17bf02954f7d2b066cde95cnd *) mod_include: Reinstate support for UTF-8 character sets by allowing a
af84459fbf938e508fd10b01cb8d699c79083813takashi variable being echoed or set to be decoded and then encoded as separate
af84459fbf938e508fd10b01cb8d699c79083813takashi steps. PR47686 [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_cache: Add a discrete commit_entity() provider function within the
af84459fbf938e508fd10b01cb8d699c79083813takashi mod_cache provider interface which is called to indicate to the
af84459fbf938e508fd10b01cb8d699c79083813takashi provider that caching is complete, giving the provider the opportunity
af84459fbf938e508fd10b01cb8d699c79083813takashi to commit temporary files permanently to the cache in an atomic
af84459fbf938e508fd10b01cb8d699c79083813takashi fashion. Replace the inconsistent use of error cleanups with a formal
af84459fbf938e508fd10b01cb8d699c79083813takashi set of pool cleanups attached to a subpool, which is destroyed on error.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_cache: Change the signature of the store_body() provider function
af84459fbf938e508fd10b01cb8d699c79083813takashi within the mod_cache provider interface to support an "in" brigade
af84459fbf938e508fd10b01cb8d699c79083813takashi and an "out" brigade instead of just a single input brigade. This
af84459fbf938e508fd10b01cb8d699c79083813takashi gives a cache provider the option to consume only part of the brigade
af84459fbf938e508fd10b01cb8d699c79083813takashi passed to it, rather than the whole brigade as was required before.
af84459fbf938e508fd10b01cb8d699c79083813takashi This fixes an out of memory and a request timeout condition that would
af84459fbf938e508fd10b01cb8d699c79083813takashi occur when the original document was a large file. Introduce
af84459fbf938e508fd10b01cb8d699c79083813takashi CacheReadSize and CacheReadTime directives to mod_disk_cache to control
af84459fbf938e508fd10b01cb8d699c79083813takashi the amount of data to attempt to cache at a time. [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Add ErrorLogFormat to allow configuring error log format, including
af84459fbf938e508fd10b01cb8d699c79083813takashi additional information that is logged once per connection or request. Add
af84459fbf938e508fd10b01cb8d699c79083813takashi error log IDs for connections and request to allow correlating error log
af84459fbf938e508fd10b01cb8d699c79083813takashi lines and the corresponding access log entry. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Disable sendfile by default. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_cache: Check the request to determine whether we are allowed
af84459fbf938e508fd10b01cb8d699c79083813takashi to return cached content at all, and respect a "Cache-Control:
af84459fbf938e508fd10b01cb8d699c79083813takashi no-cache" header from a client. Previously, "no-cache" would
af84459fbf938e508fd10b01cb8d699c79083813takashi behave like "max-age=0". [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_cache: Use a proper filter context to hold filter data instead
af84459fbf938e508fd10b01cb8d699c79083813takashi of misusing the per-request configuration. Fixes a segfault on trunk
af84459fbf938e508fd10b01cb8d699c79083813takashi when the normal handler is used. [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_cgid: Log a warning if the ScriptSock path is truncated because
3c13a815670b54d1c17bf02954f7d2b066cde95cnd it is too long. PR 49388. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) vhosts: Do not allow _default_ in NameVirtualHost, or mixing *
af84459fbf938e508fd10b01cb8d699c79083813takashi and non-* ports on NameVirtualHost, or multiple NameVirtualHost
af84459fbf938e508fd10b01cb8d699c79083813takashi directives for the same address:port, or NameVirtualHost
af84459fbf938e508fd10b01cb8d699c79083813takashi directives with no matching VirtualHosts, or multiple ip-based
af84459fbf938e508fd10b01cb8d699c79083813takashi VirtualHost sections for the same address:port. These were
3c13a815670b54d1c17bf02954f7d2b066cde95cnd previously accepted with a warning, but the behavior was
af84459fbf938e508fd10b01cb8d699c79083813takashi undefined. [Dan Poirier]
0cf3cdbaa1dad11cbf1ce32e48f1b4ec88cf779fnilgun *) mod_remoteip: Fix a segfault when using mod_remoteip in conjunction with
af84459fbf938e508fd10b01cb8d699c79083813takashi Allow/Deny. PR 49838. [Andrew Skalski <voltara gmail.com>]
0cf3cdbaa1dad11cbf1ce32e48f1b4ec88cf779fnilgun *) core: DirectoryMatch can now match on the end of line character ($),
af84459fbf938e508fd10b01cb8d699c79083813takashi and sub-directories of matched directories are no longer implicitly
3c13a815670b54d1c17bf02954f7d2b066cde95cnd matched. PR49809 [Eric Covener]
3c13a815670b54d1c17bf02954f7d2b066cde95cnd *) Regexps: introduce new higher-level regexp utility including parsing
af84459fbf938e508fd10b01cb8d699c79083813takashi and executing perl-style regexp ops (e.g s/foo/bar/i) and regexp memory
8e9c6d6438af1ccb46adaa60d34caa3ac98f3851igalic *) Proxy: support setting source address. PR 29404
8e9c6d6438af1ccb46adaa60d34caa3ac98f3851igalic [Multiple contributors iterating through bugzilla,
8e9c6d6438af1ccb46adaa60d34caa3ac98f3851igalic Aron Ujvari <xanco nikhok.hu>, Aleksey Midenkov <asm uezku.kemsu.ru>,
af84459fbf938e508fd10b01cb8d699c79083813takashi <dan listening-station.net; trunk version Nick Kew]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) HTTP protocol: return 400 not 503 if we have to abort due to malformed
3c13a815670b54d1c17bf02954f7d2b066cde95cnd chunked encoding. [Nick Kew]
af84459fbf938e508fd10b01cb8d699c79083813takashiChanges with Apache 2.3.8
0cf3cdbaa1dad11cbf1ce32e48f1b4ec88cf779fnilgun *) suexec: Support large log files. PR 45856. [Stefan Fritsch]
3c13a815670b54d1c17bf02954f7d2b066cde95cnd *) core: Abort with sensible error message if no or more than one MPM is
af84459fbf938e508fd10b01cb8d699c79083813takashi loaded. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_proxy: Rename erroronstatus to failonstatus.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Daniel Ruggeri <DRuggeri primary.net>]
9a58dc6a2b26ec128b1270cf48810e705f1a90dbsf *) mod_dav_fs: Fix broken "creationdate" property.
af84459fbf938e508fd10b01cb8d699c79083813takashi Regression in version 2.3.7. [Rainer Jung]
af84459fbf938e508fd10b01cb8d699c79083813takashiChanges with Apache 2.3.7
af84459fbf938e508fd10b01cb8d699c79083813takashi *) SECURITY: CVE-2010-1452 (cve.mitre.org)
78f97ce162b66a0dbfd7af4dcd9984f162569b04minfrin mod_dav, mod_cache, mod_session: Fix Handling of requests without a path
af84459fbf938e508fd10b01cb8d699c79083813takashi segment. PR: 49246 [Mark Drayton, Jeff Trawick]
cd6c8de3bedcc401ee230159b0439fa20f44488etakashi *) mod_ldap: Properly check the result returned by apr_ldap_init. PR 46076.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_rewrite: Log errors if rewrite map files cannot be opened. PR 49639.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Stefan Fritsch]
8e9c6d6438af1ccb46adaa60d34caa3ac98f3851igalic *) mod_proxy_http: Support the 'ping' property for backend HTTP/1.1 servers
8e9c6d6438af1ccb46adaa60d34caa3ac98f3851igalic via leveraging 100-Continue as the initial "request".
8e9c6d6438af1ccb46adaa60d34caa3ac98f3851igalic [Jim Jagielski]
8e9c6d6438af1ccb46adaa60d34caa3ac98f3851igalic *) core/mod_authz_core: Introduce new access_checker_ex hook that enables
8e9c6d6438af1ccb46adaa60d34caa3ac98f3851igalic mod_authz_core to bypass authentication if access should be allowed by
af84459fbf938e508fd10b01cb8d699c79083813takashi IP address/env var/... [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Introduce note_auth_failure hook to allow modules to add support
af84459fbf938e508fd10b01cb8d699c79083813takashi for additional auth types. This makes ap_note_auth_failure() work with
af84459fbf938e508fd10b01cb8d699c79083813takashi mod_auth_digest again. PR 48807. [Stefan Fritsch]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) socache modules: return APR_NOTFOUND when a lookup is not found [Nick Kew]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_authn_socache: new module [Nick Kew]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) configure: Add reallyall option for --enable-mods-shared. [Stefan Fritsch]
78f97ce162b66a0dbfd7af4dcd9984f162569b04minfrin *) Fix Windows build when using VC6. [Gregg L. Smith <lists glewis com>]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_rewrite: Allow to set environment variables without explicitly
af84459fbf938e508fd10b01cb8d699c79083813takashi giving a value. [Rainer Jung]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_rewrite: Remove superfluous EOL from rewrite logging. [Rainer Jung]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_include: recognise "text/html; parameters" as text/html
af84459fbf938e508fd10b01cb8d699c79083813takashi PR 49616 [Andrey Chernov <ache nagual.pp.ru>]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) CGI vars: allow PATH to be set by SetEnv, consistent with LD_LIBRARY_PATH
af84459fbf938e508fd10b01cb8d699c79083813takashi PR 43906 [Nick Kew]
78f97ce162b66a0dbfd7af4dcd9984f162569b04minfrin *) Core: Extra robustness: don't try authz and segfault if authn
78f97ce162b66a0dbfd7af4dcd9984f162569b04minfrin fails to set r->user. Log bug and return 500 instead.
af84459fbf938e508fd10b01cb8d699c79083813takashi PR 42995 [Nick Kew]
78f97ce162b66a0dbfd7af4dcd9984f162569b04minfrin *) HTTP protocol filter: fix handling of longer chunk extensions
af84459fbf938e508fd10b01cb8d699c79083813takashi *) Update SSL cipher suite and add example for SSLHonorCipherOrder.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Lars Eilebrecht, Rainer Jung]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) move AddOutputFilterByType from core to mod_filter. This should
af84459fbf938e508fd10b01cb8d699c79083813takashi fix nasty side-effects that happen when content_type is set
af84459fbf938e508fd10b01cb8d699c79083813takashi more than once in processing a request, and make it fully
af84459fbf938e508fd10b01cb8d699c79083813takashi compatible with dynamic and proxied contents. [Nick Kew]
78f97ce162b66a0dbfd7af4dcd9984f162569b04minfrin *) mod_log_config: Implement logging for sub second timestamps and
af84459fbf938e508fd10b01cb8d699c79083813takashi request end time. [Rainer Jung]
af84459fbf938e508fd10b01cb8d699c79083813takashiChanges with Apache 2.3.6
78f97ce162b66a0dbfd7af4dcd9984f162569b04minfrin *) SECURITY: CVE-2009-3555 (cve.mitre.org)
af84459fbf938e508fd10b01cb8d699c79083813takashi mod_ssl: Comprehensive fix of the TLS renegotiation prefix injection
af84459fbf938e508fd10b01cb8d699c79083813takashi attack when compiled against OpenSSL version 0.9.8m or later. Introduces
af84459fbf938e508fd10b01cb8d699c79083813takashi the 'SSLInsecureRenegotiation' directive to reopen this vulnerability
78f97ce162b66a0dbfd7af4dcd9984f162569b04minfrin and offer unsafe legacy renegotiation with clients which do not yet
af84459fbf938e508fd10b01cb8d699c79083813takashi support the new secure renegotiation protocol, RFC 5746.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Joe Orton, and with thanks to the OpenSSL Team]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) SECURITY: CVE-2009-3555 (cve.mitre.org)
af84459fbf938e508fd10b01cb8d699c79083813takashi mod_ssl: A partial fix for the TLS renegotiation prefix injection attack
af84459fbf938e508fd10b01cb8d699c79083813takashi by rejecting any client-initiated renegotiations. Forcibly disable
af84459fbf938e508fd10b01cb8d699c79083813takashi keepalive for the connection if there is any buffered data readable. Any
af84459fbf938e508fd10b01cb8d699c79083813takashi configuration which requires renegotiation for per-directory/location
af84459fbf938e508fd10b01cb8d699c79083813takashi access control is still vulnerable, unless using OpenSSL >= 0.9.8l.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Joe Orton, Ruediger Pluem, Hartmut Keil <Hartmut.Keil adnovum.ch>]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) SECURITY: CVE-2010-0408 (cve.mitre.org)
af84459fbf938e508fd10b01cb8d699c79083813takashi mod_proxy_ajp: Respond with HTTP_BAD_REQUEST when the body is not sent
af84459fbf938e508fd10b01cb8d699c79083813takashi when request headers indicate a request body is incoming; not a case of
af84459fbf938e508fd10b01cb8d699c79083813takashi HTTP_INTERNAL_SERVER_ERROR. [Niku Toivola <niku.toivola sulake.com>]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) SECURITY: CVE-2010-0425 (cve.mitre.org)
af84459fbf938e508fd10b01cb8d699c79083813takashi mod_isapi: Do not unload an isapi .dll module until the request
af84459fbf938e508fd10b01cb8d699c79083813takashi processing is completed, avoiding orphaned callback pointers.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Brett Gervasoni <brettg senseofsecurity.com>, Jeff Trawick]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Filter init functions are now run strictly once per request
af84459fbf938e508fd10b01cb8d699c79083813takashi before handler invocation. The init functions are no longer run
af84459fbf938e508fd10b01cb8d699c79083813takashi for connection filters. PR 49328. [Joe Orton]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Adjust the output filter chain correctly in an internal
3c13a815670b54d1c17bf02954f7d2b066cde95cnd redirect from a subrequest, preserving filters from the main
3c13a815670b54d1c17bf02954f7d2b066cde95cnd request as necessary. PR 17629. [Joe Orton]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_cache: Explicitly allow cache implementations to cache a 206 Partial
af84459fbf938e508fd10b01cb8d699c79083813takashi Response if they so choose to do so. Previously an attempt to cache a 206
af84459fbf938e508fd10b01cb8d699c79083813takashi was arbitrarily allowed if the response contained an Expires or
af84459fbf938e508fd10b01cb8d699c79083813takashi Cache-Control header, and arbitrarily denied if both headers were missing.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Graham Leggett]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Add microsecond timestamp fractions, process id and thread id
af84459fbf938e508fd10b01cb8d699c79083813takashi to the error log. [Rainer Jung]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) configure: The "most" module set gets build by default. [Rainer Jung]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) configure: Building dynamic modules (DSO) by default. [Rainer Jung]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) configure: Fix broken VPATH build when using included APR.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Rainer Jung]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_session_crypto: Fix configure problem when building
af84459fbf938e508fd10b01cb8d699c79083813takashi with APR 2 and for VPATH builds with included APR.
78f97ce162b66a0dbfd7af4dcd9984f162569b04minfrin [Rainer Jung]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) mod_session_crypto: API compatibility with APR 2 crypto and
af84459fbf938e508fd10b01cb8d699c79083813takashi APR Util 1.x crypto. [Rainer Jung]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) ab: Fix memory leak with -v2 and SSL. PR 49383.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Pavel Kankovsky <peak argo troja mff cuni cz>]
af84459fbf938e508fd10b01cb8d699c79083813takashi *) core: Add per-module and per-directory loglevel configuration.
af84459fbf938e508fd10b01cb8d699c79083813takashi Add some more trace logging.
af84459fbf938e508fd10b01cb8d699c79083813takashi mod_rewrite: Replace RewriteLog/RewriteLogLevel with trace log levels.
f086b4b402fa9a2fefc7dda85de2a3cc1cd0a654rjung mod_ssl: Replace LogLevelDebugDump with trace log levels.
af84459fbf938e508fd10b01cb8d699c79083813takashi mod_ssl/mod_proxy*: Adjust loglevels to be less verbose at levels info
af84459fbf938e508fd10b01cb8d699c79083813takashi mod_dumpio: Replace DumpIOLogLevel with trace log levels.
af84459fbf938e508fd10b01cb8d699c79083813takashi [Stefan Fritsch]
PR 49369 [Matthew Steele <mdsteele google.com>]
to use the HTTP username/pass instead of an anonymous or hard-coded
[Bryn Dole <dole blekko.com>]
to control/set the nonce used in the balancer-manager application.
code from a backend. PR 48939. [Daniel Ruggeri <DRuggeri primary.net>]
PR 48944. [Mark Drayton mark markdrayton.info]
[Dr Stephen Henson <steve openssl.org>, William Rowe]
[Ruediger Pluem, Mark Montague <markmont umich.edu>]
*) support/rotatelogs: Add -L option to create a link to the current
log file. PR 48761 [<lyndon orthanc.ca>, Dan Poirier]
*) mod_ldap: LDAPTrustedClientCert now accepts CA_DER/CA_BASE64 argument
PR 33112 [Joergen Thomsen <apache jth.net>]
*) support/rotatelogs: Support the simplest log rotation case, log
*) support/htcacheclean: Teach it how to write a pid file (modelled on
[Philippe Dutrueux <lilas evidian.com>, Rainer Jung]
*) apxs: Fix -A and -a options to ignore whitespace in httpd.conf
request. [Christian Folini <christian.folini netnea com>]
[Johannes Müller <joh_m gmx.de>, Stefan Fritsch]
*) SECURITY: CVE-2010-0434 (cve.mitre.org)
[Dodou Wang <wangdong.08 gmail.com>, Ruediger Pluem]
PR 41887 [Jan van den Berg <janvdberg gmail.com>]
PR 48416 [Dmitry Bakshaev <dab18 izhnet.ru>, Nick Kew]
(See util_mutex.h.) Build-time setting DEFAULT_LOCKFILE is no longer
*) SECURITY: CVE-2009-3095 (cve.mitre.org)
[Stefan Fritsch <sf fritsch.de>, Joe Orton]
*) SECURITY: CVE-2009-3094 (cve.mitre.org)
[Stefan Fritsch <sf fritsch.de>, Joe Orton]
instead of substrings. PR 28037. [Dan Franklin <dan dan-franklin.com>,
[Dr Stephen Henson <shenson oss-institute.org>]
PR 47178. [Philipp Hagemeister <oss phihag.de>]
Brian France <brian brianfrance.com>]
modules to avoid segmentation fault. PR 47951. [hirose31 gmail.com]
*) mod_logio/core: Report more accurate byte counts in mod_status if
for the default values of 1024 for LdapCacheEntries/LdapOpCacheEntries.
the request is a CONNECT request. [Bill Zajac <billz consultla.com>]
[Peter Grandi <pg_asf asf.for.sabi.co.uk>, Graham Leggett]
Log 408 errors in access log as was done in Apache 1.3.x.
PR 39785 [Nobutaka Mantani <nobutaka nobutaka.org>,
Stefan Fritsch <sf fritsch.de>, Dan Poirier]
Brian France <brian brianfrance.com>]
Brian France <brian brianfrance.com>]
[Stefan Fritsch <sf sfritsch.de>]
*) mod_session.c: Prevent a segfault when session is added but not
definition. [Stefan Fritsch sf sfritsch.de]
*) Add support for HTTP PUT to ab. [Jeff Barnes <jbarnesweb yahoo.com>]
PR 46971 [evanc nortel.com]
[Stefan Fritsch <sf sfritsch.de>]
for a file is missing. PR 47682 [Peter Poeml <poeml suse.de>]
*) SECURITY: CVE-2009-1890 (cve.mitre.org)
*) SECURITY: CVE-2009-1191 (cve.mitre.org)
by the client. PR 33098 [ Stefan Fritsch <sf sfritsch.de>]
PR 42175 [Jim Radford <radford blackbean.org>]
type. PR 45107. [Michael Ströder <michael stroeder.com>,
PR 44020 [Håkon Stordahl <hakon stordahl.org>]
CGI process. PR 47335 [Kornél Pál <kornelpal gmail.com>]
PR 46942 [Dan Poirier <poirier pobox.com>]
PR 44729 [Sönke Tesch <st kino-fahrplan.de>, Jim Jagielski]
PR 47177 [Carlos Garcia Braschi <cgbraschi gmail.com>]
PR 45082 [Vitaly Polonetsky <m_vitaly topixoft.com>]
[Marko Kevac <mkevac gmail.com>]
as A/UX, Next, and Tandem. [Jeff Trawick]
directory listing. PR 46789 [Dan Poirier <poirier pobox.com>]
of module state across unload/load. [Jeff Trawick]
[Dan Poirier <poirier pobox.com>]
[Geoff Keating <geoffk apple.com>]
with kqueue (BSD/OS X) and excessive CPU with event ports (Solaris).
a media type has not been configured via mime.types, AddType,
[Ryan Phillips <ryan-apache trolocsis.com>]
[<tlhackque yahoo.com>]
*) prefork: Fix child process hang during graceful restart/stop in
*) core/utils: Enhance ap_escape_html API to support escaping non-ASCII chars
PR 45529 [Bob Ionescu <bobsiegen googlemail.com>]
times out before returning status line/headers.
PR 39332 [Masaoki Kobayashi <masaoki techfirm.co.jp>]
[Theo Schlossnagle <jesus omniti.com>, Paul Querna]
modules/proxy/balancers [Jim Jagielski]
privileges and Unix user/group IDs [Nick Kew]
logic replicate 2.2.x authz logic, and replace <Satisfy*>, Reject,
*) unixd: turn existing code into a module, and turn the set user/group
Suggested By André Warnier <aw ice-sa.com> [Eric Covener]
*) mod_ssl: Send Content-Type application/ocsp-request for POST requests to
OSCP responders. PR 46014 [Dr Stephen Henson <steve openssl.org>]
*) New module mod_sed: filter Request/Response bodies through sed
null value. [David Shane Holden <dpejesh apache.org>]
both inside and outside the location/directory sections, as
form request with the type of application/x-www-form-urlencoded.
*) mod_authz_dbd: When redirecting after successful login/logout per
PR 44560 [Anders Kaseorg <anders kaseorg.com>]
mod_cache et.al. to trap the results of the redirect.
*) ApacheMonitor.exe: Introduce --kill argument for use by the
*) mod_ldap, mod_authnz_ldap: Add support for nested groups (i.e. the ability
[David M. Lee <dmlee crossroads.com>]
[Niklas Edmundsson <nikke acc.umu.se>]
[Niklas Edmundsson <nikke acc.umu.se>]
[Markus Schiegl <ms schiegl.com>]
*) Remove incorrect comments from scoreboard.h regarding conditional
[Chris Darroch <chrisd pearsoncmg.com>]
in ap_init_scoreboard(). [Chris Darroch <chrisd pearsoncmg.com>]
[Chris Darroch <chrisd pearsoncmg.com>]
and 'Reject' to mod_authz_core. The new directives introduce 'AND/OR'
*) mod_authz_dbd: SQL authz with Login/Session support [Nick Kew]
Apache 2.2.xx tree as documented, and except as noted, below.]
Changes with Apache 2.2.x and later:
Changes with Apache 2.0.x and later: