CHANGES revision 98829f154633ddefe1879d5e2096b35328ebd350
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User -*- coding: utf-8 -*-
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic UpdaterChanges with Apache 2.3.0
7a2a1b8b14fc804ac80612d7b98064095e445be5Automatic Updater[ When backported to 2.2.x, remove entry from this file ]
1167fc7904c5f0a472f8df207ac46dd52c7f1ec8Automatic Updater *) Fix garbled TRACE response on EBCDIC platforms.
0c39b3ed9409ecb277d5e32fa763a4e4d6598df8Automatic Updater [David Jones <oscaremma gmail.com>]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User *) core, authn/z: Determine registered authn/z providers directly in
fe84edc17e0d582cf7b4270f8df9d4742a107b1cAutomatic Updater ap_setup_auth_internal(), which allows optional functions that just
79b273c187a4aa1016a62181983dfdd0521681aeMark Andrews wrapped ap_list_provider_names() to be removed from authn/z modules.
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User [Chris Darroch]
b253dcf9668f95e141bce9556dc88e30d3305a1dTinderbox User *) authn/z: Convert common provider version strings to macros.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User [Chris Darroch]
bbde8dc56605130058a1540609264fa109da3b63Automatic Updater *) ab: Make ab.c compile on VC6. PR 45024 [Ruediger Pluem]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews *) configure: Don't reject libtool 2.x
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater PR 44817 [Arfrever Frehtes Taifersar Arahesis <Arfrever.FTA gmail.com>]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews *) suexec: When group is given as a numeric gid, validate it by looking up
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews the actual group name such that the name can be used in log entries.
a01aa536188bb3535dfc1107a623e6355a8e6b7cMark Andrews PR 7862 [<y-koga apache.or.jp>, Leif W <warp-9.9 usa.net>]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews *) core: When testing for slash-terminated configuration paths in
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater ap_location_walk(), don't look past the start of an empty string
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews such as that created by a <Location ""> directive.
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater [Chris Darroch]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater *) core, mod_proxy: If a kept_body is present, it becomes safe for
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater subrequests to support message bodies. Make sure that safety
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson checks within the core and within the proxy are not triggered
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater when kept_body is present. This makes it possible to embed
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User proxied POST requests within mod_include. [Graham Leggett]
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt *) mod_auth_form: Make sure the input filter stack is properly set
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater up before reading the login form. Make sure the kept body filter
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater is correctly inserted to ensure the body can be read a second
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt time safely should the authn be successful. [Graham Leggett,
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater Ruediger Pluem]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater *) mod_request: Insert the KEPT_BODY filter via the insert_filter
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt hook instead of during fixups. Add a safety check to ensure the
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater filters cannot be inserted more than once. [Graham Leggett,
2d2dc37599979c83495510f8af8d1756753aa2c5Automatic Updater Ruediger Pluem]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User *) core: Do not allow Options ALL if not all options are allowed to be
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater overwritten. PR 44262 [Michał Grzędzicki <lazy iq.pl>]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater *) ap_cache_cacheable_headers_out() will (now) always
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater merge an error heaeders _before_ clearing them and _before_
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater merging in the actual entity headers and doing normal
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater hop-by-hop cleansing. [Dirk-Willem van Gulik].
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater *) cache: retire ap_cache_cacheable_hdrs_out() which was used
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater for both in- and out-put headers; and replace it by a single
eabc9c3c07cd956d3c436bd7614cb162dabdda76Mark Andrews ap_cache_cacheable_headers() wrapped in a in- and out-put
eabc9c3c07cd956d3c436bd7614cb162dabdda76Mark Andrews specific ap_cache_cacheable_headers_in()/out(). The latter
eabc9c3c07cd956d3c436bd7614cb162dabdda76Mark Andrews which will also merge error and ensure content-type. To keep
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User cache modules consistent with ease. This API change bumps
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User up the minor MM by one [Dirk-Willem van Gulik].
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater *) mod_rewrite: Allow Cookie option to set secure and HttpOnly flags.
8e9f3b69914ee02a80b87c97b1f8093edb3e9ae0Automatic Updater PR 44799 [Christian Wenz <christian wenz.org>]
930f6069e5aa157cf6987cdafd412f5757a5a558Automatic Updater *) Move the KeptBodySize directive, kept_body filters and the
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews ap_parse_request_body function out of the http module and into a
930f6069e5aa157cf6987cdafd412f5757a5a558Automatic Updater new module called mod_request, reducing the size of the core.
80faf1588895fd26490f82f95a7a1b771df1c324Automatic Updater [Graham Leggett]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater *) mod_dbd: Handle integer configuration directive parameters with a
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews dedicated function.
693c4232dfdffaff672197d4b9fea944c64cf80aAutomatic Updater *) Change the directives within the mod_session* modules to be valid
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews both inside and outside the location/directory sections, as
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater suggested by wrowe. [Graham Leggett]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater *) mod_auth_form: Add a module capable of allowing end users to log
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater in using an HTML form, storing the credentials within mod_session.
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews [Graham Leggett]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson *) Add a function to the http filters that is able to parse an HTML
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater form request with the type of application/x-www-form-urlencoded.
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater [Graham Leggett]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater *) mod_session_crypto: Initialise SSL in the post config hook.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User [Ruediger Pluem, Graham Leggett]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews *) mod_session_dbd: Add a session implementation capable of storing
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User session information in a SQL database via the dbd interface. Useful
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User for sites where session privacy is important. [Graham Leggett]
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont *) mod_session_crypto: Add a session encoding implementation capable
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User of encrypting and decrypting sessions wherever they may be stored.
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User Introduces a level of privacy when sessions are stored on the
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont browser. [Graham Leggett]
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User *) mod_session_cookie: Add a session implementation capable of storing
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User session information within cookies on the browser. Useful for high
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews volume sites where server bound sessions are too resource intensive.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews [Graham Leggett]
24bf1e02f03577db0feb50b80238c4150c96d05dAutomatic Updater *) mod_session: Add a generic session interface to unify the different
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews attempts at saving persistent sessions across requests.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews [Graham Leggett]
a308b69ac66fadf66863484f301314d6e6a3f1d2Automatic Updater *) core, authn/z: Avoid calling access control hooks for internal requests
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews with configurations which match those of initial request. Revert to
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews original behaviour (call access control hooks for internal requests
a01aa536188bb3535dfc1107a623e6355a8e6b7cMark Andrews with URIs different from initial request) if any access control hooks or
89623368b8f662d458d9964b923050f33c5f75b0Tinderbox User providers are not registered as permitting this optimization.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews Introduce wrappers for access control hook and provider registration
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrews which can accept additional mode and flag data. [Chris Darroch]
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrews *) Introduced ap_expr API for expression evaluation.
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrews This is adapted from mod_include, which is the first module
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrews to use the new API.
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater *) mod_authz_dbd: When redirecting after successful login/logout per
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater AuthzDBDRedirectQuery, do not report authorization failure, and use
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater first row returned by database query instead of last row.
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater [Chris Darroch]
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater *) mod_ldap: Correctly return all requested attribute values
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater when some attributes have a null value.
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater PR 44560 [Anders Kaseorg <anders kaseorg.com>]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater *) core: check symlink ownership if both FollowSymlinks and
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews SymlinksIfOwnerMatch are set [Nick Kew]
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater *) core: fix origin checking in SymlinksIfOwnerMatch
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater PR 36783 [Robert L Mathews <rob-apache.org.bugs tigertech.net>]
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic Updater *) Activate mod_cache, mod_file_cache and mod_disc_cache as part of the
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic Updater 'most' set for '--enable-modules' and '--enable-shared-mods'. Include
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic Updater mod_mem_cache in 'all' as well. [Dirk-Willem van Gulik]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson *) Also install mod_so.h, mod_rewrite.h and mod_cache.h; as these
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater contain public function declarations which are useful for
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User third party module authors. PR 42431 [Dirk-Willem van Gulik].
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User *) mod_dir, mod_negotiation: pass the output filter information
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User to newly created sub requests; as these are later on used
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User as true requests with an internal redirect. This allows for
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User mod_cache et.al. to trap the results of the redirect.
f132a836c4e386b1af045dd8fe7106ae61b90bffAutomatic Updater [Dirk-Willem van Gulik, Ruediger Pluem]
c6a0f4ae1d7183a16ffb196b86b647f870694796Automatic Updater *) mod_ldap: Add support (taking advantage of the new APR capability)
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater for ldap rebind callback while chasing referrals. This allows direct
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User searches on LDAP servers (in particular MS Active Directory 2003+)
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User using referrals without the use of the global catalog.
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater PRs 26538, 40268, and 42557 [Paul J. Reder]
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater *) Support chroot on Unix-family platforms
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater PR 43596 [Dimitar Pashev <mitko banksoft-bg.com>]
9c446b72069d0ab9f710502f4d7048e50875fccbAutomatic Updater *) mod_ssl: Added server name indication support (SNI, RFC 4366).
e85565067cf73f8cc21ee29b11761659f1d47ee9Automatic Updater PR 34607. [Kaspar Brand <asfbugz velox.ch>]. A test configuration
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater can be created with test/make_sni.sh [Dirk-Willem van Gulik].
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater *) ApacheMonitor.exe: Introduce --kill argument for use by the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater installer. This will permit the installation tool to remove
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater all running instances before attempting to remove the .exe.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater [William Rowe]
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater *) mod_ssl: Add support for OCSP validation of client certificates.
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater PR 41123. [Marc Stern <marc.stern approach.be>, Joe Orton]
3f616e6f846be57b1717c6beaba0f74de9d5a7c6Automatic Updater *) mod_unique_id: Fix timestamp value in UNIQUE_ID.
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater PR 37064 [Kobayashi <kobayashi firstserver.co.jp>]
19b3dc94bce93fa76bd7e066f9298630dbc9dcb4Automatic Updater *) mod_serf: New module for Reverse Proxying. [Paul Querna]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater *) core: Add the option to keep aside a request body up to a certain
7f94d9a8162c9a96b56e66176702b66e79d8e1a2Automatic Updater size that would otherwise be discarded, to be consumed by filters
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater such as mod_include. When enabled for a directory, POST requests
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to shtml files can be passed through to embedded scripts as POST
5ecad47f69b3fd945472ab2900a9ff826a7ce2f6Automatic Updater requests, rather being downgraded to GET requests. [Graham Leggett]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater *) mod_ssl: Fix TLS upgrade (RFC 2817) support. PR 41231. [Joe Orton]
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater *) scoreboard: Correctly declare ap_time_process_request.
7262eb86f2b465822206122921e2f357218f0cfdAutomatic Updater PR 43789 [Tom Donovan <Tom.Donovan acm.org>]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater *) core; scoreboard: ap_get_scoreboard_worker(sbh) now takes the sbh member
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater from the connection rec, ap_get_scoreboard_worker(proc, thread) will now
bbb069be941f649228760edcc241122933c066d2Automatic Updater provide the unusual legacy lookup. [William Rowe]
4cda4fd158d6ded5586bacea8c388445d99611eaAutomatic Updater *) mpm winnt: fix null pointer dereference
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews PR 42572 [Davi Arnaut]
80faf1588895fd26490f82f95a7a1b771df1c324Automatic Updater *) mod_authnz_ldap, mod_authn_dbd: Tidy up the code to expose authn
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews parameters to the environment. Improve portability to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater EBCDIC machines by using apr_toupper(). [Martin Kraemer]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews *) mod_ldap, mod_authnzldap: Add support for nested groups (i.e. the ability
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews to authorize an authenticated user via a "require ldap-group X" directive
89623368b8f662d458d9964b923050f33c5f75b0Tinderbox User where the user is not in group X, but is in a subgroup contained in X.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews PR 42891 [Paul J. Reder]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews *) mod_ssl: Add support for caching SSL Sessions in memcached. [Paul Querna]
7a2a1b8b14fc804ac80612d7b98064095e445be5Automatic Updater *) ab: Add -r option to continue after socket receive errors.
f132a836c4e386b1af045dd8fe7106ae61b90bffAutomatic Updater [Filip Hanik <devlist hanik.com>]
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User *) mod_ldap: Fix the search limit parameter to ldap_search_ext_s()
f7a71eef29bcbf892270460269c79664f600cffdAutomatic Updater for SDKs that define LDAP_NO_LIMIT to something other than -1.
3e5340279d8875d136a4dd815cccad0044aa2644Automatic Updater [David Jones <oscaremma gmail.com>]
fe84edc17e0d582cf7b4270f8df9d4742a107b1cAutomatic Updater *) apxs: Enhance -q flag to print all known variables and their values
cf7e98f59148b559946a7f1ca728471374f1eef3Automatic Updater when invoked without variable name(s).
930f6069e5aa157cf6987cdafd412f5757a5a558Automatic Updater [William Rowe, Sander Temme]
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater *) apxs: Eliminate run-time check for mod_so. PR 40653.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater [David M. Lee <dmlee crossroads.com>]
c3fd32ed29e9e419bb56583f4272a506773b1ea0Automatic Updater *) beos MPM: Create pmain pool and run modules' child_init hooks when
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson entering ap_mpm_run(), then destroy pmain when exiting ap_mpm_run().
c3fd32ed29e9e419bb56583f4272a506773b1ea0Automatic Updater [Chris Darroch]
a382ca49c874d38ad3ac8995b49f9f27128e4ca9Automatic Updater *) netware MPM: Destroy pmain pool when exiting ap_mpm_run() so that
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User cleanups registered in modules' child_init hooks are performed.
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater [Chris Darroch]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User *) mod_dbd: Stash DBD connections in request_config of initial request
3857cb6fcabeb79d85de4b3e3e4ab99912b701f8Mark Andrews only, or else sub-requests and internal redirections may cause
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User entire DBD pool to be stashed in a single HTTP request. [Chris Darroch]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews *) Fix issue which could cause error messages to be written to access logs
9174e44c14b1cb91a651fa1dc29470438c246ab9Automatic Updater on Win32. PR 40476. [Tom Donovan <Tom.Donovan acm.org>]
e2caa7536302de34de6cc04025abcd53dc3a499aAutomatic Updater *) The LockFile directive, which specifies the location of
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User the accept() mutex lockfile, is deprecated. Instead, the
8292deab031e7599cd7622aa7675fbe139ca6095Mark Andrews AcceptMutex directive now takes an optional lockfile
0b57424d28c9a67018107133f9fbc0a7dcf057e2Mark Andrews location parameter, ala SSLMutex. [Jim Jagielski]
0b57424d28c9a67018107133f9fbc0a7dcf057e2Mark Andrews *) mod_authn_dbd: Export any additional columns queried in the SQL select
dc11390a658e02e1a03accd4dbe14c94fa9de556Automatic Updater into the environment with the name AUTHENTICATE_<COLUMN>. This brings
08d53af7d51409036462fa80fb1bde7a8c2ac123Automatic Updater mod_authn_dbd behaviour in line with mod_authnz_ldap. [Graham Leggett]
b109432c3a939bff66a463be86c371bd88efe3aaAutomatic Updater *) mod_dbd: Key the storage of prepared statements on the hex string
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater value of server_rec, rather than the server name, as the server name
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews may change (eg when the server name is set) at any time, causing
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews weird behaviour in modules dependent on mod_dbd. [Graham Leggett]
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater *) mod_proxy_fcgi: Added win32 build. [Mladen Turk]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews *) sendfile_nonblocking() takes the _brigade_ as an argument, gets
3351ccbd5c1961404044f8273d54dad405f53960Mark Andrews the first bucket from the brigade, finds it not to be a FILE
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater bucket and barfs. The fix is to pass a bucket rather than a brigade.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews [Niklas Edmundsson <nikke acc.umu.se>]
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater *) mod_rewrite: support rewritemap by SQL query [Nick Kew]
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater *) ap_get_server_version() has been removed. Third-party modules must
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater now use ap_get_server_banner() or ap_get_server_description().
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater [Jeff Trawick]
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater *) All MPMs: Introduce a check_config phase between pre_config and
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater open_logs, to allow modules to review interdependent configuration
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater directive values and adjust them while messages can still be logged
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater to the console. Handle relevant MPM directives during this phase
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater and format messages for both the console and the error log, as
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater appropriate. [Chris Darroch]
b253dcf9668f95e141bce9556dc88e30d3305a1dTinderbox User *) mod_proxy: don't URLencode tilde in path component
b253dcf9668f95e141bce9556dc88e30d3305a1dTinderbox User [Stijn Hoop <stijn sandcat.nl>]
b253dcf9668f95e141bce9556dc88e30d3305a1dTinderbox User *) mpm_winnt: Fix return values from wait_for_many_objects.
b253dcf9668f95e141bce9556dc88e30d3305a1dTinderbox User The return value is index to the signaled thread in the
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User creted_threads array. We can not use WAIT_TIMEOUT because
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User his value is defined as 258, thus limiting the MaxThreads
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater to that value. [Mladen Turk]
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater *) core: Do not allow internal redirects like the DirectoryIndex of mod_dir
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to circumvent the symbolic link checks imposed by FollowSymLinks and
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews SymLinksIfOwnerMatch. [Nick Kew, Ruediger Pluem, William Rowe]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews *) mod_proxy: Support environment variable interpolation in reverse
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews proxying directives. [Nick Kew]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater *) core: Add the filename of the configuration file to the warning message
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater about the useless use of AllowOverride. PR 39992.
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater [Darryl Miles <darryl darrylmiles.org>]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater *) New SSLLogLevelDebugDump [ None (default) | IO (not bytes) | Bytes ]
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews configures the I/O Dump of SSL traffic, when LogLevel is set to Debug.
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews The default is none as this is far greater debugging resolution than
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User the typical administrator is prepared to untangle. [William Rowe]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington *) mod_disk_cache: If possible, check if the size of an object to cache is
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User within the configured boundaries before actually saving data.
f7369b2881b5e63d69600adcedc8ba938303d30cTinderbox User [Niklas Edmundsson <nikke acc.umu.se>]
b13d89bd89878137c81b36a36596cca3920f27a4Automatic Updater *) mod_cache: Convert all values to seconds before comparing them when
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User checking whether to send a Warning header for a stale response.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User PR 39713. [Owen Taylor <otaylor redhat.com>]
f7369b2881b5e63d69600adcedc8ba938303d30cTinderbox User *) mod_disk_cache: Delete temporary files if they cannot be renamed to their
f7369b2881b5e63d69600adcedc8ba938303d30cTinderbox User final name. [Davi Arnaut <davi haxent.com.br>]
bc0a4c01beede169df81a3ee5b614ed9e82339dbAutomatic Updater *) Worker and event MPMs: Remove improper scoreboard updates which were
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User performed in the event of a fork() failure. [Chris Darroch]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington *) Add support for fcgi:// proxies to mod_rewrite.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington [Markus Schiegl <ms schiegl.com>]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington *) Remove incorrect comments from scoreboard.h regarding conditional
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington loading of worker_score structure with mod_status, and remove unused
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington definitions relating to old life_status field.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington [Chris Darroch <chrisd pearsoncmg.com>]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington *) Remove allocation of memory for unused array of lb_score pointers
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington in ap_init_scoreboard(). [Chris Darroch <chrisd pearsoncmg.com>]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington *) Add mod_proxy_fcgi, a FastCGI back end for mod_proxy.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington [Garrett Rooney, Jim Jagielski, Paul Querna]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington *) Event MPM: Fill in the scoreboard's tid field. PR 38736.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington [Chris Darroch <chrisd pearsoncmg.com>]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington *) mod_charset_lite: Remove Content-Length when output filter can
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington invalidate it. Warn when input filter can invalidate it.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington [Jeff Trawick]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington *) Authz: Add the new module mod_authn_core that will provide common
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington authn directives such as 'AuthType', 'AuthName'. Move the directives
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington 'AuthType' and 'AuthName' out of the core module and merge mod_authz_alias
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington into mod_authn_core. [Brad Nicholes]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington *) Authz: Move the directives 'Order', 'Allow', 'Deny' and 'Satisfy'
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington into the new module mod_access_compat which can be loaded to provide
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington support for these directives.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington [Brad Nicholes]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington *) Authz: Move the 'Require' directive from the core module as well as
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington add the directives '<SatisfyAll>', '<SatisfyOne>', '<RequireAlias>'
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington and 'Reject' to mod_authz_core. The new directives introduce 'AND/OR'
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington logic into the authorization processing. [Brad Nicholes]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington *) Authz: Add the new module mod_authz_core which acts as the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington authorization provider vector and contains common authz
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington directives. [Brad Nicholes]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington *) Authz: Renamed mod_authz_dbm authz providers from 'group' and
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington 'file-group' to 'dbm-group' and 'dbm-file-group'. [Brad Nicholes]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington *) Authz: Added the new authz providers 'env', 'ip', 'host', 'all' to handle
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington host-based access control provided by mod_authz_host and invoked
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington through the 'Require' directive. [Brad Nicholes]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington *) Authz: Convert all of the authz modules from hook based to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington provider based. [Brad Nicholes]
56effd2e3f579fd77b1fb37d47871d1bf1286bc4Automatic Updater *) mod_cache: Add CacheMinExpire directive to set the minimum time in
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater seconds to cache a document.
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater [Brian Akins <brian.akins turner.com>, Ruediger Pluem]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater *) mod_authz_dbd: SQL authz with Login/Session support [Nick Kew]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater *) Fix typo in ProxyStatus syntax error message.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User [Christophe Jaillet <christophe.jaillet wanadoo.fr>]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater *) Asynchronous write completion for the Event MPM. [Brian Pane]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater *) Added an End-Of-Request bucket type. The logging of a request and
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater the freeing of its pool are now done when the EOR bucket is destroyed.
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater This has the effect of delaying the logging until right after the last
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater of the response is sent; ap_core_output_filter() calls the access logger
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater indirectly when it destroys the EOR bucket. [Brian Pane]
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington *) Rewrite of logresolve support utility: IPv6 addresses are now supported
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington and the format of statistical output has changed. [Colm MacCarthaigh]
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington *) Rewrite of ap_coreoutput_filter to do nonblocking writes [Brian Pane]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews *) Added new connection states for handler and write completion
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington *) mod_cgid: Refuse to work on Solaris 10 due to OS bugs. PR 34264.
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews [Justin Erenkrantz]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington *) Teach mod_ssl to use arbitrary OIDs in an SSLRequire directive,
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater allowing string-valued client certificate attributes to be used for
099b86fb8136a7dff81df85cf395978c16eb254cAutomatic Updater access control, as in: SSLRequire "value" in OID("1.3.6.1.4.1.18060.1")
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington [Martin Kraemer, David Reid]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington [Apache 2.1.0-dev includes those bug fixes and changes with the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Apache 2.2.xx tree as documented, and except as noted, below.]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterChanges with Apache 2.2.x and later:
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterChanges with Apache 2.0.x and later:
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserChanges with Apache 1.3.x and later: