CHANGES revision 8c4967445b49a1612b3f98c1dada65e597ecfe26
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder -*- coding: utf-8 -*-
25cc5fbba63f84b47e389af749f55abbbde71c8cChristian MaederChanges with Apache 2.5.0
25cc5fbba63f84b47e389af749f55abbbde71c8cChristian Maeder *) mod_proxy_fcgi: Handle reading protocol data that is split between
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder packets. [Jeff Trawick]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_proxy_fcgi: Remove 64K limit on encoded length of all envvars.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder An individual envvar with an encoded length of more than 16K will be
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder omitted. [Jeff Trawick]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) core: draft-ietf-httpbis-p1-messaging-23 corrections regarding
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder TE/CL conflicts. [Yann Ylavic <ylavic.dev gmail com>, Jim Jagielski]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_proxy_fcgi: Use apr_socket_timeout_get instead of hard-coded
08e5741dd8b6bf9b7419e89298e384e18bc57f64Christian Maeder 30 seconds timeout. [Jan Kaluza]
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder *) WinNT MPM: If ap_run_pre_connection() fails or sets c->aborted, don't
ce8b15da31cd181b7e90593cbbca98f47eda29d6Till Mossakowski save the socket for reuse by the next worker as if it were an
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder APR_SO_DISCONNECTED socket. Restores 2.2 behavior. [Eric Covener]
760ae19a92dde8249679a674f93f58d26a7c5f6bChristian Maeder *) mod_cache: Avoid a crash with strcmp() when the hostname is not provided.
88c800932dd7053322501ea2039d9f234be6866cKlaus Luettich [Graham Leggett]
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder *) mod_lua: Add rudimentary support for WebSocket interaction. This is
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder currently request-bound and only supports the WS protocol. [Daniel Gruno]
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder *) mod_lua: Add getcookie/setcookie for reading/writing HTTP cookies
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder [Daniel Gruno]
8410667510a76409aca9bb24ff0eda0420088274Christian Maeder *) WinNT MPM: Don't crash during child process initialization if the
8410667510a76409aca9bb24ff0eda0420088274Christian Maeder Listen protocol is unrecognized. [Jeff Trawick]
404166b9366552e9ec5abb87a37c76ec8a815fb7Klaus Luettich *) mod_lua: Add a logging hook for modifying/skipping logs. [Daniel Gruno]
fdb2d618144159395f7bf8ce3327b3c112a17dd3Till Mossakowski *) mod_status, mod_echo: Fix the display of client addresses.
404166b9366552e9ec5abb87a37c76ec8a815fb7Klaus Luettich They were truncated to 31 characters which is not enough for IPv6 addresses.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder PR 54848 [Bernhard Schmidt <berni birkenwald de>]
d67a33b40578beef2e255a274f89bb9c34aaf056Christian Maeder *) mod_lua: If the first yield() of a LuaOutputFilter returns a string, it should
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder be prefixed to the response as documented. [Eric Covener]
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder *) mod_lua: Remove ETAG, Content-Length, and Content-MD5 when a LuaOutputFilter
6e049108aa87dc46bcff96fae50a4625df1d9648Klaus Luettich is configured without mod_filter. [Eric Covener]
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder *) mod_lua: Register LuaOutputFilter scripts as changing the content and
c6fcd42c6d6d9dae8c7835c24fcb7ce8531a9050Christian Maeder content-length by default, when run my mod_filter. Previously,
c6fcd42c6d6d9dae8c7835c24fcb7ce8531a9050Christian Maeder growing or shrinking a response that started with Content-Length set
31c49f2fa23d4ac089f35145d80a224deb6ea7e4Till Mossakowski would require mod_filter and FilterProtocol change=yes. [Eric Covnener]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_lua: Return a 500 error if a LuaHook* script doesn't return a
857992065be4ed40a72c6296b6c0aec62ab4c5b9Christian Maeder numeric return code. [Eric Covener]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) Add experimental cmake-based build system for Windows. [Jeff Trawick,
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder *) mod_authnz_fcgi: New module to enable FastCGI authorizer
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder applications to authenticate and/or authorize clients.
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder [Jeff Trawick]
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder *) mod_auth_basic: Add AuthBasicUseDigestAlgorithm directive to
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder allow migration of passwords from digest to basic authentication.
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder [Chris Darroch]
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder *) core: Add util_fcgi.h and associated definitions and support
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder routines for FastCGI, based largely on mod_proxy_fcgi.
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder [Jeff Trawick]
f4505a64a089693012a3f5c3b1f12a82cd7a2a5aKlaus Luettich *) core: Add ap_log_data(), ap_log_rdata(), etc. for logging buffers.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder [Jeff Trawick]
f4505a64a089693012a3f5c3b1f12a82cd7a2a5aKlaus Luettich *) mod_unique_id: Use output of the PRNG rather than IP address and
f4505a64a089693012a3f5c3b1f12a82cd7a2a5aKlaus Luettich pid, avoiding sleep() call and possible DNS issues at startup,
f4505a64a089693012a3f5c3b1f12a82cd7a2a5aKlaus Luettich plus improving randomness for IPv6-only hosts.
5d4038657f6a63e131f5804af2f7957b69e15a43Klaus Luettich [Jan Kaluza <jkaluza redhat.com>]
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder *) mod_authnz_ldap: Support primitive LDAP servers that do not accept
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder filters, such as "SDBM-backed LDAP" on z/OS, by allowing a special
77a65251ee036c6aaf09c2775315a4ee24259fbdJorina Freya Gerken filter "none" to be specified in AuthLDAPURL. [Eric Covener]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_file_cache: mod_file_cache should be able to serve files that
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder haven't had a Content-Type set via e.g. mod_mime. [Eric Covener]
97812b7ce9860bf514a8822a63503451795dbc65Klaus Luettich *) core: merge AllowEncodedSlashes from the base configuration into
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder virtual hosts. [Eric Covener]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) AIX: Install DSO's with "cp" instead of "install" in instdso.sh
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder [Eric Covener]
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder *) mod_ldap: Don't keep retrying if a new LDAP connection times out.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder [Eric Covener]
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder *) mod_deflate: permit compilation of mod_deflate against a zlib that has
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder been configured with -D Z_PREFIX, which redefines the token "deflate".
08e5741dd8b6bf9b7419e89298e384e18bc57f64Christian Maeder [Eric Covener]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_socache_shmcb.c: Remove arbitrary restriction on shared memory size
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder previously limited to 64MB. [Jens Låås <jelaas gmail.com>]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) mod_auth_digest: Use the secret when generating nonces in all cases and
9df11f85fd7f8c4745d64464876e84ec4e263692Christian Maeder not only when AuthName is used in .htaccess files (this change may cause
5b818f10e11fc79def1fdd5c8a080d64a6438d87Christian Maeder problems if used with round robin load balancers). Don't regenerate the
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers secret on graceful restarts. PR 54637 [Stefan Fritsch]
5d4038657f6a63e131f5804af2f7957b69e15a43Klaus Luettich *) ab: Add a new -l parameter in order not to check the length of the responses.
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder This can be usefull with dynamic pages.
c432483b64662e8db604a58758cd18ea7fa65659Christian Maeder PR9945, PR27888, PR42040 [<ccikrs1 cranbrook edu>]
857992065be4ed40a72c6296b6c0aec62ab4c5b9Christian Maeder *) mod_logio: new format-specifier %C (combined) which is the sum of received
8659594bb40eb5f3da5439692f0908300947191eSonja Gröning and sent byte counts.
8c692d0cc44e7df93f58a3eed0d9774ba5908339Jorina Freya Gerken PR54015 [Christophe Jaillet]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) core: Remove apr_brigade_flatten(), buffering and duplicated code
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder from the HTTP_IN filter, parse chunks in a single pass with zero copy.
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder Reduce memory usage by 48 bytes per request. [Graham Leggett]
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder *) core: Stop the HTTP_IN filter from attempting to write error buckets
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder to the output filters, which is bogus in the proxy case. Create a
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder clean mapping from APR codes to HTTP status codes, and use it where
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder needed. [Graham Leggett]
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder *) mod_proxy: Ensure network errors detected by the proxy are returned as
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder 504 Gateway Timout as opposed to 502 Bad Gateway, in order to be
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder compliant with RFC2616 14.9.4 Cache Revalidation and Reload Controls.
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder *) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder *) core, mod_ssl: Enable the ability for a module to reverse the sense of
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder a poll event from a read to a write or vice versa. This is a step on
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers the way to allow mod_ssl taking full advantage of the event MPM.
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder [Graham Leggett]
51e836611726885f6d2719d959ed1b51f8fd06f4Klaus Luettich *) mod_ldap: LDAP connections used for authentication were not respecting
fdb2d618144159395f7bf8ce3327b3c112a17dd3Till Mossakowski LDAPConnectionPoolTimeout. PR 54587
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder *) core: ap_rgetline_core now pulls from r->proto_input_filters.
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder *) mod_proxy_html: process parsed comments immediately.
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder Fixes bug where parsed comments may be lost. [Nick Kew]
a348b2eb46eb51f376c910d6dd4415fdab6713bdChristian Maeder *) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
c0c2380bced8159ff0297ece14eba948bd236471Christian Maeder *) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
40a2368e1fa061488d0be6886368ab1c8391b97fChristian Maeder *) core: Add option to add valgrind support. Use it to reduce false positive
6e049108aa87dc46bcff96fae50a4625df1d9648Klaus Luettich warnings in mod_ssl. [Stefan Fritsch]
dbe752ee940baae7f9f231f29c62284bb0f90a25Christian Maeder *) mod_authn_file, mod_authn_dbd, mod_authn_dbm, mod_authn_socache:
dbe752ee940baae7f9f231f29c62284bb0f90a25Christian Maeder Cache the result of the most recent password hash verification for every
dbe752ee940baae7f9f231f29c62284bb0f90a25Christian Maeder keep-alive connection. This saves some expensive calculations.
dbe752ee940baae7f9f231f29c62284bb0f90a25Christian Maeder [Stefan Fritsch]
dbe752ee940baae7f9f231f29c62284bb0f90a25Christian Maeder *) http: Remove support for Request-Range header sent by Navigator 2-3 and
dbe752ee940baae7f9f231f29c62284bb0f90a25Christian Maeder MSIE 3. [Stefan Fritsch]
dbe752ee940baae7f9f231f29c62284bb0f90a25Christian Maeder *) core, http: Extend HttpProtocol with an option to enforce stricter HTTP
dbe752ee940baae7f9f231f29c62284bb0f90a25Christian Maeder conformance or to only log the found problems. [Stefan Fritsch]
53818ced114da21321063fff307aa41c1ab31dd3Achim Mahnke *) core: Correctly parse an IPv6 literal host specification in an absolute
53818ced114da21321063fff307aa41c1ab31dd3Achim Mahnke URL in the request line. [Stefan Fritsch]
53818ced114da21321063fff307aa41c1ab31dd3Achim Mahnke *) mod_ssl: Add support for OpenSSL configuration commands [Stephen Henson]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) EventOpt MPM
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) core: Add LogLevelOverride directive that allows to override the
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder loglevel for clients from certain IPs. This also works for things
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder like the SSL handshake where <If> LogLevel ... </If> is evaluated
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder too late. [Stefan Fritsch]
857992065be4ed40a72c6296b6c0aec62ab4c5b9Christian Maeder *) core: Add new directive Warning to issue warnings from a configuration
fdb2d618144159395f7bf8ce3327b3c112a17dd3Till Mossakowski file. Both Warning and Error now generate a timestamped log message.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder [Fabien Coelho]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) ap_expr: Add SERVER_PROTOCOL_VERSION, ..._MAJOR, and ..._MINOR
b49276c9f50038e0bd499ad49f7bd6444566a834Christian Maeder variables. [Stefan Fritsch]
ed9207cf24e96b0d6f59985822054ae28cb69b2eChristian Maeder *) core: New directive RegisterHttpMethod for registering non-standard
b49276c9f50038e0bd499ad49f7bd6444566a834Christian Maeder HTTP methods. [Stefan Fritsch]
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder *) core: New directive HttpProtocol which allows to disable HTTP/0.9
33d042fe6a9eb27a4c48f840b80838f3e7d98e34Christian Maeder support. [Stefan Fritsch]
fa21fba9ceb1ddf7b3efd54731a12ed8750191d8Christian Maeder *) mod_allowhandlers: New module to forbid specific handlers for specific
fa21fba9ceb1ddf7b3efd54731a12ed8750191d8Christian Maeder directories. [Stefan Fritsch]
05a8b581f98b928baca6dab60cd20277659ac760Christian Maeder *) mod_systemd: New module, for integration with systemd on Linux.
ed9207cf24e96b0d6f59985822054ae28cb69b2eChristian Maeder [Jan Kaluza <jkaluza redhat.com>]
b49276c9f50038e0bd499ad49f7bd6444566a834Christian Maeder *) WinNT MPM: Store pid and generation for each thread in scoreboard
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder to allow tracking of threads from exiting children via mod_status
b49276c9f50038e0bd499ad49f7bd6444566a834Christian Maeder or other such mechanisms. [Jeff Trawick]
b905126bab9454b89041f92b3c50bb9efc85e427Klaus Luettich *) mod_ssl: Catch missing or mismatched client cert/key pairs with
6e049108aa87dc46bcff96fae50a4625df1d9648Klaus Luettich SSLProxyMachineCertificateFile/Path directives. PR 52212.
b905126bab9454b89041f92b3c50bb9efc85e427Klaus Luettich [Keith Burdis <keith burdis.org>, Joe Orton]
08e5741dd8b6bf9b7419e89298e384e18bc57f64Christian Maeder *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
53818ced114da21321063fff307aa41c1ab31dd3Achim Mahnke - APIs: ap_log_pid(), ap_remove_pid, ap_read_pid()
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder - core: the scoreboard (ScoreBoardFile), pid file (PidFile), and
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder mutexes (Mutex)
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder - mod_cache: thundering herd lock directory
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder - mod_lbmethod_heartbeat, mod_heartmonitor: heartbeat storage file
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder - mod_ldap: shared memory cache
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder - mod_socache_shmcb, mod_socache_dbm: shared memory or dbm for cache
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder [Jeff Trawick]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) suexec: Add --enable-suexec-capabilites support on Linux, to use
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder setuid/setgid capability bits rather than a setuid root binary.
b905126bab9454b89041f92b3c50bb9efc85e427Klaus Luettich *) suexec: Add support for logging to syslog as an alternative to logging
b905126bab9454b89041f92b3c50bb9efc85e427Klaus Luettich to a file; configure --without-suexec-logfile --with-suexec-syslog.
33d042fe6a9eb27a4c48f840b80838f3e7d98e34Christian Maeder *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder [Matthew Steele <mdsteele google.com>]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
dbe752ee940baae7f9f231f29c62284bb0f90a25Christian Maeder be compiled by the build compiler instead of the host compiler.
dbe752ee940baae7f9f231f29c62284bb0f90a25Christian Maeder Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
ef67402074be14deb95e4ff564737d5593144130Klaus Luettich PR 51257. [Guenter Knauf]
dbe752ee940baae7f9f231f29c62284bb0f90a25Christian Maeder *) core: In maintainer mode, replace apr_palloc with a version that
ef67402074be14deb95e4ff564737d5593144130Klaus Luettich initializes the allocated memory with non-zero values, except if
5958fabb264ec3f5b2125ac5602121bd34814a79Klaus Luettich AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]
e7e1ab2ac3f1fded8611bb92ae00e8f3b8c693fbKlaus Luettich *) mod_policy: Add a new testing module to help server administrators
ef67402074be14deb95e4ff564737d5593144130Klaus Luettich enforce a configurable level of protocol compliance on their
1323eba62fc519b068f5aaec4f9d2be05ffabea9Klaus Luettich servers and application servers behind theirs. [Graham Leggett]
1323eba62fc519b068f5aaec4f9d2be05ffabea9Klaus Luettich *) mod_firehose: Add a new debugging module able to record traffic
725a68ec81cba9b8aa8647bebfb5baa449803e7eKlaus Luettich passing through the server in such a way that connections and/or
d579f5b263e6c73d466c265f2fbfd45b0e69ca64Klaus Luettich requests be reconstructed and replayed. [Graham Leggett]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_noloris
61fa0ac06ede811c7aad54ec4c4202346727368eChristian Maeder *) Simple MPM
4e7050bcbcf0f372a5bad32ecd0282bccabf0983Klaus Luettich [Apache 2.5.0-dev includes those bug fixes and changes with the
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder Apache 2.4.xx tree as documented below, except as noted.]
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian MaederChanges with Apache 2.4.x and later:
4e7050bcbcf0f372a5bad32ecd0282bccabf0983Klaus Luettich *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup
340706b6c0c6e3dbacdd7003e20e9cab7f9aa765Christian MaederChanges with Apache 2.2.x and later:
340706b6c0c6e3dbacdd7003e20e9cab7f9aa765Christian Maeder *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
fdb2d618144159395f7bf8ce3327b3c112a17dd3Till MossakowskiChanges with Apache 2.0.x and later: