CHANGES revision 87a26948305eab2bab8a4fb3f2a21f6725055790
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding -*- coding: utf-8 -*-
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffieldingChanges with Apache 2.5.0
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding
b99dbaab171d91e1b664397cc40e039d0c087c65fielding *) mod_ldap: Be more conservative with the last-used time for
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding LDAPConnectionPoolTTL. PR54587 [Eric Covener]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_deflate: Don't fail when flushing inflated data to the user-agent
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding and that coincides with the end of stream ("Zlib error flushing inflate
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding buffer"). PR 56196. [Christoph Fausak <christoph fausak glueckkanja.com>]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_proxy: Don't limit the size of the connectable Unix Domain Socket
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding paths. [Christophe Jaillet, Yann Ylavic]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_ssl: dump SSL IO/state for the write side of the connection(s),
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding like reads (level TRACE4). [Yann Ylavic]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_proxy: Shutdown (eg. close notify) the backend connection before
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding closing. [Yann Ylavic]
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding *) mpm_event[opt]: Send the SSL close notify alert when the KeepAliveTimeout
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding expires. PR54998. [Yann Ylavic]
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding *) mod_ssl: Ensure that the SSL close notify alert is flushed to the client.
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding PR54998. [Tim Kosse <tim.kosse filezilla-project.org>, Yann Ylavic]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding *) mod_log_config: Add GlobalLog to allow a globally defined log to
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding be inherited by virtual hosts that define a CustomLog.
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding [Edward Lu <Chaosed0 gmail.com>]
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) MPMs: Support SO_REUSEPORT to create multiple duplicated listener
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding records for scalability. [Yingqi Lu <yingqi.lu@intel.com>,
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding Jeff Trawick, Jim Jagielski]
64185f9824e42f21ca7b9ae6c004484215c031a7rbb
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_proxy_html: support automatic detection of doctype and processing
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding of FPIs. PR56285 [Micha Lenk <micha lenk info>, Nick Kew]
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding *) mod_proxy_html: skip documents shorter than 4 bytes
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding PR 56286 [Micha Lenk <micha lenk info>]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding *) mod_proxy_fdpass: Fix computation of the size of 'struct sockaddr_un'
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding when passed to 'connect()'.
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding [Graham Dumpleton <grahamd apache org>]
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding *) core: Add ap_mpm_resume_suspended() API to allow a suspended connection
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding to resume. PR56333
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding [Artem <artemciy gmail.com>, Edward Lu <Chaosed0 gmail.com>]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) core: Add ap_mpm_register_socket_callback_timeout() API. [Eric Covener]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding *) mod_proxy_wstunnel: Honor ProxyWebsocketIdleTimeout in asynchronous
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding processing mode. [Eric Covener]
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_authnz_ldap: Fail explicitly when the filter is too long. Remove
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding unnecessary apr_pstrdup() and strlen(). [Graham Leggett]
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding
7e79e8fd53348f9fc6e8009a4a2522425ab6f08ffielding *) Add the ldap-search option to mod_authnz_ldap, allowing authorization
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding to be based on arbitrary expressions that do not include the username.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding [Graham Leggett]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) Add the ldap function to the expression API, allowing LDAP filters and
785be1b6298010956622771c870ab3cd8ca57a2faaron distinguished names based on expressions to be escaped correctly to
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding guard against LDAP injection. [Graham Leggett]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
1b21d7b3d97def358b2e923655edeb16613a1c31gstein *) Add module mod_ssl_ct, which provides an implementation of Certificate
1b21d7b3d97def358b2e923655edeb16613a1c31gstein Transparency (RFC 6962) for httpd. [Jeff Trawick]
1b21d7b3d97def358b2e923655edeb16613a1c31gstein
1b21d7b3d97def358b2e923655edeb16613a1c31gstein *) mod_proxy: Preserve original request headers even if they differ
1b21d7b3d97def358b2e923655edeb16613a1c31gstein from the ones to be forwarded to the backend. PR 45387.
1b21d7b3d97def358b2e923655edeb16613a1c31gstein [Yann Ylavic]
1b21d7b3d97def358b2e923655edeb16613a1c31gstein
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_proxy: When ping/pong is configured for a worker, don't send or
2d71630471d1c23f0137309e3c3957c633ecbfd6rbb forward "100 Continue" (interim) response to the client if it does
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding not expect one. [Yann Ylavic]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_remoteip: Prevent an external proxy from presenting an internal
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding proxy. PR 55962. [Mike Rumph]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
51af95bb51b5084e883bad250b2afa2838e9ceebfielding *) mod_ssl: Add hooks to allow other modules to perform processing at
d4f1d9c1ff112a8ab9bee31f196973761329b236rbb several stages of initialization and connection handling. See
7fae9cc4639013f3c04c085547256c68814aee8ftrawick mod_ssl_openssl.h. [Jeff Trawick]
7fae9cc4639013f3c04c085547256c68814aee8ftrawick
7fae9cc4639013f3c04c085547256c68814aee8ftrawick *) mod_proxy_wstunnel: Avoid sending error responses down an upgraded
7fae9cc4639013f3c04c085547256c68814aee8ftrawick websockets connection as it is being close down. [Eric Covener]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_proxy_wstunnel: Allow the administrator to cap the amount
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding of time a synchronous websockets connection stays idle with
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding ProxyWebsocketIdleTimeout. [Eric Covener]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_proxy_wstunnel: Change to opt-in for asynchronous support, adding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding directives ProxyWebsocketAsync and ProxyWebsocketAsyncDelay.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding [Eric Covener]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_proxy_wstunnel: Stop leaking websockets backend connections under
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding event MPM (trunk-only). [Eric Covener]
785be1b6298010956622771c870ab3cd8ca57a2faaron
785be1b6298010956622771c870ab3cd8ca57a2faaron *) mod_proxy_http: Add detach_backend hook (potentially usable
785be1b6298010956622771c870ab3cd8ca57a2faaron in other proxy scheme handlers). [Jeff Trawick]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_deflate: Add DeflateAlterETag to control how the ETag
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding is modified. The 'NoChange' parameter mimics 2.2.x behavior.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding PR 45023, PR 39727. [Eric Covener]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_rewrite: Add 'BNF' (backreferences-no-plus) flag to RewriteRule to
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding allow spaces in backreferences to be encoded as %20 instead of '+'.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding [Eric Covener]
785be1b6298010956622771c870ab3cd8ca57a2faaron
785be1b6298010956622771c870ab3cd8ca57a2faaron *) mod_rewrite: Support an optional list of characters to escape in the
785be1b6298010956622771c870ab3cd8ca57a2faaron argument for the 'B' (escape backreferences) flag. [Eric Covener]
785be1b6298010956622771c870ab3cd8ca57a2faaron
785be1b6298010956622771c870ab3cd8ca57a2faaron *) mod_ssl: Add SSLOCSPUseRequestNonce directive to control whether or not
785be1b6298010956622771c870ab3cd8ca57a2faaron OCSP requests should use a nonce to be checked against the responder's
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding one. PR 56233. [ Yann Ylavic ]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
1ccd992d37d62c8cb2056126f2234f64ec189bfddougm *) mod_dir: Default to 2.2-like behavior and skip execution when method is
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding neither GET nor POST, such as for DAV requests. PR 54914. [Chris Darroch]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_rewrite: Rename the handler that does per-directory internal
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding redirects to "rewrite-redirect-handler" from "redirect-handler" so
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding it is less ambiguous and less likely to be reused. [Eric Covener]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_rewrite: Protect against looping with the [N] flag by enforcing a
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding default limit of 10000 iterations, and allowing each rule to change its
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding limit. [Eric Covener]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_ssl: Fix config merging of SSLOCSPEnable and SSLOCSPOverrideResponder.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding [Jeff Trawick]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) Add HttpContentLengthHeadZero and HttpExpectStrict directives.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding [Yehuda Sadeh <yehuda inktank com>, Justin Erenkrantz]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_ssl: Add -t -DDUMP_CA_CERTS option which dumps the filenames of all
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding configured SSL CA certificates to stdout the same way as DUMP_CERTS does.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding [Jan Kaluza]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_ssl: Don't flush when an EOS is received. Prepares mod_ssl
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding to support write completion. [Graham Leggett]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) core: Add parse_errorlog_arg callback to ap_errorlog_provider
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding to allow providers to check the ErrorLog argument. [Jan Kaluza]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_cgid: Use the servers Timeout for each read from a CGI script,
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding allow override with new CGIDRequestTimeout directive. PR43494
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding [Eric Covener, Toshikuni Fukaya <toshikuni-fukaya cybozu co jp>]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) core: ensure any abnormal exit is reported to stderr if it's a tty.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding PR 55670 [Nick Kew]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_lua: Let the Inter-VM get/set functions work with a global
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding shared memory pool instead of a per-process pool. [Daniel Gruno]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) ldap: Support ldaps when using the Microsoft LDAP SDK.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding PR 54626. [Jean-Frederic Clere]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_proxy: Add ap_connection_reusable() for checking if a connection
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding is reusable as of this point in processing. [Jeff Trawick]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_authnz_ldap: Change default value of AuthLDAPMaxSubGroupDepth to 0
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding to avoid performance problems when subgroups aren't in use. [Eric Covener]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_syslog: New module implementing syslog ap_error_log provider.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding Previously, this code was part of core, now it's in separate module.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding [Jan Kaluza]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
1ccd992d37d62c8cb2056126f2234f64ec189bfddougm *) core: Add ap_errorlog_provider to make ErrorLog logging modular. Move
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding syslog support from core to new mod_syslog. [Jan Kaluza]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_status, mod_echo: Fix the display of client addresses.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding They were truncated to 31 characters which is not enough for IPv6 addresses.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding PR 54848 [Bernhard Schmidt <berni birkenwald de>]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) core: Add ap_log_data(), ap_log_rdata(), etc. for logging buffers.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding [Jeff Trawick]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_unique_id: Use output of the PRNG rather than IP address and
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding pid, avoiding sleep() call and possible DNS issues at startup,
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding plus improving randomness for IPv6-only hosts.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding [Jan Kaluza <jkaluza redhat.com>]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_authnz_ldap: Support primitive LDAP servers that do not accept
1ccd992d37d62c8cb2056126f2234f64ec189bfddougm filters, such as "SDBM-backed LDAP" on z/OS, by allowing a special
785be1b6298010956622771c870ab3cd8ca57a2faaron filter "none" to be specified in AuthLDAPURL. [Eric Covener]
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_file_cache: mod_file_cache should be able to serve files that
8a261a9f7d18d1e862d63f68e93f288d3e1f0d94trawick haven't had a Content-Type set via e.g. mod_mime. [Eric Covener]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick *) core: merge AllowEncodedSlashes from the base configuration into
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick virtual hosts. [Eric Covener]
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick *) AIX: Install DSO's with "cp" instead of "install" in instdso.sh
8a261a9f7d18d1e862d63f68e93f288d3e1f0d94trawick [Eric Covener]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick *) mod_ldap: Don't keep retrying if a new LDAP connection times out.
785be1b6298010956622771c870ab3cd8ca57a2faaron [Eric Covener]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick *) mod_deflate: permit compilation of mod_deflate against a zlib that has
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick been configured with -D Z_PREFIX, which redefines the token "deflate".
e160b861b50a3a8dcc013b8cd3ef849fe777e52fgregames [Eric Covener]
e160b861b50a3a8dcc013b8cd3ef849fe777e52fgregames
e160b861b50a3a8dcc013b8cd3ef849fe777e52fgregames *) mod_auth_digest: Use the secret when generating nonces in all cases and
e160b861b50a3a8dcc013b8cd3ef849fe777e52fgregames not only when AuthName is used in .htaccess files (this change may cause
e160b861b50a3a8dcc013b8cd3ef849fe777e52fgregames problems if used with round robin load balancers). Don't regenerate the
e160b861b50a3a8dcc013b8cd3ef849fe777e52fgregames secret on graceful restarts. PR 54637 [Stefan Fritsch]
e160b861b50a3a8dcc013b8cd3ef849fe777e52fgregames
e160b861b50a3a8dcc013b8cd3ef849fe777e52fgregames *) core: Remove apr_brigade_flatten(), buffering and duplicated code
e160b861b50a3a8dcc013b8cd3ef849fe777e52fgregames from the HTTP_IN filter, parse chunks in a single pass with zero copy.
e160b861b50a3a8dcc013b8cd3ef849fe777e52fgregames Reduce memory usage by 48 bytes per request. [Graham Leggett]
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick *) core: Stop the HTTP_IN filter from attempting to write error buckets
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick to the output filters, which is bogus in the proxy case. Create a
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick clean mapping from APR codes to HTTP status codes, and use it where
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick needed. [Graham Leggett]
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick *) mod_proxy: Ensure network errors detected by the proxy are returned as
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick 504 Gateway Timout as opposed to 502 Bad Gateway, in order to be
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick compliant with RFC2616 14.9.4 Cache Revalidation and Reload Controls.
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez
eae32ab3fb398ca408bc2d45b22adf1b67a75471rbb <alejandro.alvarez.ayllon cern.ch>]
066877f1a045103acfdd376d48cdd473c33f409bdougm
eae32ab3fb398ca408bc2d45b22adf1b67a75471rbb *) mod_ldap: LDAP connections used for authentication were not respecting
785be1b6298010956622771c870ab3cd8ca57a2faaron LDAPConnectionPoolTimeout. PR 54587
785be1b6298010956622771c870ab3cd8ca57a2faaron
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick *) core: ap_rgetline_core now pulls from r->proto_input_filters.
066877f1a045103acfdd376d48cdd473c33f409bdougm
8a261a9f7d18d1e862d63f68e93f288d3e1f0d94trawick *) mod_proxy_html: process parsed comments immediately.
8a261a9f7d18d1e862d63f68e93f288d3e1f0d94trawick Fixes bug where parsed comments may be lost. [Nick Kew]
785be1b6298010956622771c870ab3cd8ca57a2faaron
785be1b6298010956622771c870ab3cd8ca57a2faaron *) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
066877f1a045103acfdd376d48cdd473c33f409bdougm
8a261a9f7d18d1e862d63f68e93f288d3e1f0d94trawick *) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick HTML/XHTML [Nick Kew]
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick
74b39333600dee3260355ad3a06e36ef6c61c8f1dreid *) core: Add option to add valgrind support. Use it to reduce false positive
74b39333600dee3260355ad3a06e36ef6c61c8f1dreid warnings in mod_ssl. [Stefan Fritsch]
74b39333600dee3260355ad3a06e36ef6c61c8f1dreid
74b39333600dee3260355ad3a06e36ef6c61c8f1dreid *) mod_authn_file, mod_authn_dbd, mod_authn_dbm, mod_authn_socache:
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick Cache the result of the most recent password hash verification for every
066877f1a045103acfdd376d48cdd473c33f409bdougm keep-alive connection. This saves some expensive calculations.
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick [Stefan Fritsch]
d17890657bc529b3f9db20e5546511182b829565dreid
d17890657bc529b3f9db20e5546511182b829565dreid *) http: Remove support for Request-Range header sent by Navigator 2-3 and
d17890657bc529b3f9db20e5546511182b829565dreid MSIE 3. [Stefan Fritsch]
d17890657bc529b3f9db20e5546511182b829565dreid
d17890657bc529b3f9db20e5546511182b829565dreid *) core, http: Extend HttpProtocol with an option to enforce stricter HTTP
6b38fca3ec543a0f72efd5683e91a0b30fc752d1trawick conformance or to only log the found problems. [Stefan Fritsch]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) core: Correctly parse an IPv6 literal host specification in an absolute
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding URL in the request line. [Stefan Fritsch]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) EventOpt MPM
785be1b6298010956622771c870ab3cd8ca57a2faaron
785be1b6298010956622771c870ab3cd8ca57a2faaron *) core: Add LogLevelOverride directive that allows to override the
785be1b6298010956622771c870ab3cd8ca57a2faaron loglevel for clients from certain IPs. This also works for things
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding like the SSL handshake where <If> LogLevel ... </If> is evaluated
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding too late. [Stefan Fritsch]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) core: Add new directive Warning to issue warnings from a configuration
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding file. Both Warning and Error now generate a timestamped log message.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding [Fabien Coelho]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
785be1b6298010956622771c870ab3cd8ca57a2faaron *) ap_expr: Add SERVER_PROTOCOL_VERSION, ..._MAJOR, and ..._MINOR
785be1b6298010956622771c870ab3cd8ca57a2faaron variables. [Stefan Fritsch]
785be1b6298010956622771c870ab3cd8ca57a2faaron
785be1b6298010956622771c870ab3cd8ca57a2faaron *) core: New directive RegisterHttpMethod for registering non-standard
785be1b6298010956622771c870ab3cd8ca57a2faaron HTTP methods. [Stefan Fritsch]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) core: New directive HttpProtocol which allows to disable HTTP/0.9
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding support. [Stefan Fritsch]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
785be1b6298010956622771c870ab3cd8ca57a2faaron *) mod_allowhandlers: New module to forbid specific handlers for specific
785be1b6298010956622771c870ab3cd8ca57a2faaron directories. [Stefan Fritsch]
785be1b6298010956622771c870ab3cd8ca57a2faaron
785be1b6298010956622771c870ab3cd8ca57a2faaron *) mod_systemd: New module, for integration with systemd on Linux.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding [Jan Kaluza <jkaluza redhat.com>]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) WinNT MPM: Store pid and generation for each thread in scoreboard
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding to allow tracking of threads from exiting children via mod_status
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding or other such mechanisms. [Jeff Trawick]
785be1b6298010956622771c870ab3cd8ca57a2faaron
785be1b6298010956622771c870ab3cd8ca57a2faaron *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding - APIs: ap_log_pid(), ap_remove_pid, ap_read_pid()
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding - core: the scoreboard (ScoreBoardFile), pid file (PidFile), and
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding mutexes (Mutex)
785be1b6298010956622771c870ab3cd8ca57a2faaron - mod_cache: thundering herd lock directory
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding - mod_lbmethod_heartbeat, mod_heartmonitor: heartbeat storage file
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding - mod_ldap: shared memory cache
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding - mod_socache_shmcb, mod_socache_dbm: shared memory or dbm for cache
1ccd992d37d62c8cb2056126f2234f64ec189bfddougm [Jeff Trawick]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) suexec: Add --enable-suexec-capabilites support on Linux, to use
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding setuid/setgid capability bits rather than a setuid root binary.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding [Joe Orton]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) suexec: Add support for logging to syslog as an alternative to logging
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding to a file; configure --without-suexec-logfile --with-suexec-syslog.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding [Joe Orton]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding [Matthew Steele <mdsteele google.com>]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding be compiled by the build compiler instead of the host compiler.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding PR 51257. [Guenter Knauf]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) core: In maintainer mode, replace apr_palloc with a version that
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding initializes the allocated memory with non-zero values, except if
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]
785be1b6298010956622771c870ab3cd8ca57a2faaron
785be1b6298010956622771c870ab3cd8ca57a2faaron *) mod_policy: Add a new testing module to help server administrators
785be1b6298010956622771c870ab3cd8ca57a2faaron enforce a configurable level of protocol compliance on their
785be1b6298010956622771c870ab3cd8ca57a2faaron servers and application servers behind theirs. [Graham Leggett]
785be1b6298010956622771c870ab3cd8ca57a2faaron
785be1b6298010956622771c870ab3cd8ca57a2faaron *) mod_firehose: Add a new debugging module able to record traffic
785be1b6298010956622771c870ab3cd8ca57a2faaron passing through the server in such a way that connections and/or
785be1b6298010956622771c870ab3cd8ca57a2faaron requests be reconstructed and replayed. [Graham Leggett]
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_noloris
1ccd992d37d62c8cb2056126f2234f64ec189bfddougm
785be1b6298010956622771c870ab3cd8ca57a2faaron *) APREQ
785be1b6298010956622771c870ab3cd8ca57a2faaron
785be1b6298010956622771c870ab3cd8ca57a2faaron *) Simple MPM
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) mod_serf
785be1b6298010956622771c870ab3cd8ca57a2faaron
785be1b6298010956622771c870ab3cd8ca57a2faaron [Apache 2.5.0-dev includes those bug fixes and changes with the
785be1b6298010956622771c870ab3cd8ca57a2faaron Apache 2.4.xx tree as documented below, except as noted.]
785be1b6298010956622771c870ab3cd8ca57a2faaron
785be1b6298010956622771c870ab3cd8ca57a2faaronChanges with Apache 2.4.x and later:
785be1b6298010956622771c870ab3cd8ca57a2faaron
785be1b6298010956622771c870ab3cd8ca57a2faaron *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup
785be1b6298010956622771c870ab3cd8ca57a2faaron
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fieldingChanges with Apache 2.2.x and later:
1ccd992d37d62c8cb2056126f2234f64ec189bfddougm
785be1b6298010956622771c870ab3cd8ca57a2faaron *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fieldingChanges with Apache 2.0.x and later:
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding