CHANGES revision 9bd00b872dfdc194657b87270a175fc0e8f64018
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder -*- coding: utf-8 -*-
25cc5fbba63f84b47e389af749f55abbbde71c8cChristian MaederChanges with Apache 2.5.0
25cc5fbba63f84b47e389af749f55abbbde71c8cChristian Maeder *) core: Support custom ErrorDocuments for HTTP 501 and 414 status codes.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder PR 57167 [Edward Lu <Chaosed0 gmail.com>]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_proxy_connect: Don't issue AH02447 on sockets hangups, let the read
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder determine whether it is a normal close or a real error. PR 57168. [Yann
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_proxy_wstunnel: abort backend connection on polling error to avoid
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder further processing. [Yann Ylavic]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_buffer: Forward flushed input data immediatly and avoid (unlikely)
b9625461755578f3eed04676d42a63fd2caebd0cChristian Maeder access to freed memory. [Yann Ylavic, Christophe Jaillet]
327a9b9bf44b6e33f71fee7526dc1c0035251591Christian Maeder *) mod_proxy: Use the correct server name for SNI in case the backend
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder SSL connection itself is established via a proxy server.
76712faeb5ffeb3ff704404a34f2b8d284aa92bcChristian Maeder PR 57139 [Szabolcs Gyurko <szabolcs gyurko.org>]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_ssl: Do not crash when looking up SSL related variables during
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder expression evaluation on non SSL connections. PR 57070 [Ruediger Pluem]
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder *) core: Ensure that httpd exits with an error status when the MPM fails
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder to run. [Yann Ylavic]
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder *) mod_cache_socache: Change average object size hint from 32 bytes to
c55a0f77be7e88d3620b419ec8961f4379a586e3Klaus Luettich 2048 bytes. [Rainer Jung]
857992065be4ed40a72c6296b6c0aec62ab4c5b9Christian Maeder *) mod_cache_socache: Add cache status to server-status. [Rainer Jung]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_ssl: Move OCSP stapling information from a per-certificate store to
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder a per-server hash. PR 54357, PR 56919. [Alex Bligh <alex alex.org.uk>,
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder Kaspar Brand]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_substitute: Restrict configuration in .htaccess to
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder FileInfo as documented. [Rainer Jung]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_substitute: Make maximum line length configurable. [Rainer Jung]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_substitute: Fix line length limitation in case of regexp plus flatten.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) apreq: Content-Length header should be always interpreted as a decimal.
ed9207cf24e96b0d6f59985822054ae28cb69b2eChristian Maeder Leading 0 could be erroneously considered as an octal value. PR 56598.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder [Chris Card <ctcard hotmail com>]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_proxy: Now allow for 191 character worker names, with non-fatal
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder errors if name is truncated. PR53218. [Jim Jagielski]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_ssl: Add optional function "ssl_get_tls_cb" to allow support
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder for channel bindings. [Simo Sorce <simo redhat.com>]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_proxy_wstunnel: Concurrent websockets messages could be
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers lost or delayed with ProxyWebsocketAsync enabled.
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder [Edward Lu <Chaosed0 gmail.com>]
33d042fe6a9eb27a4c48f840b80838f3e7d98e34Christian Maeder *) core, mod_info: Add compiled and loaded PCRE versions to version
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder number display. [Rainer Jung]
ebe517300051f765f2ed856a789dd5613d681ab0Klaus Luettich *) mpm_winnt: Accept utf-8 (Unicode) service names and descriptions for
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers internationalization. [William Rowe]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mpm_winnt: Normalize the error and status messages emitted by service.c,
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder the service control interface for Windows. [William Rowe]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_authnz_ldap: Return LDAP connections to the pool before the handler
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder is run, instead of waiting until the end of the request. [Eric Covener]
ebe517300051f765f2ed856a789dd5613d681ab0Klaus Luettich *) mod_ldap: Be more conservative with the last-used time for
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers LDAPConnectionPoolTTL. PR54587 [Eric Covener]
c55a0f77be7e88d3620b419ec8961f4379a586e3Klaus Luettich *) mod_deflate: Don't fail when flushing inflated data to the user-agent
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder and that coincides with the end of stream ("Zlib error flushing inflate
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder buffer"). PR 56196. [Christoph Fausak <christoph fausak glueckkanja.com>]
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder *) mod_proxy: Don't limit the size of the connectable Unix Domain Socket
ce50fe187cdae64e75e510daafb78156280bdb91Christian Maeder paths. [Christophe Jaillet, Yann Ylavic]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_ssl: dump SSL IO/state for the write side of the connection(s),
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder like reads (level TRACE4). [Yann Ylavic]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) mod_proxy: Shutdown (eg. close notify) the backend connection before
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers closing. [Yann Ylavic]
5d4038657f6a63e131f5804af2f7957b69e15a43Klaus Luettich *) mpm_event[opt]: Send the SSL close notify alert when the KeepAliveTimeout
5d4038657f6a63e131f5804af2f7957b69e15a43Klaus Luettich expires. PR54998. [Yann Ylavic]
c432483b64662e8db604a58758cd18ea7fa65659Christian Maeder *) mod_ssl: Ensure that the SSL close notify alert is flushed to the client.
857992065be4ed40a72c6296b6c0aec62ab4c5b9Christian Maeder PR54998. [Tim Kosse <tim.kosse filezilla-project.org>, Yann Ylavic]
857992065be4ed40a72c6296b6c0aec62ab4c5b9Christian Maeder *) mod_log_config: Add GlobalLog to allow a globally defined log to
e8d782e6e650b71a2b0ee8461fd8d9fa31525591Christian Maeder be inherited by virtual hosts that define a CustomLog.
857992065be4ed40a72c6296b6c0aec62ab4c5b9Christian Maeder [Edward Lu <Chaosed0 gmail.com>]
96ef2e46d048c357927f2795a40e9e66f21b85fbSonja Gröning *) MPMs: Support SO_REUSEPORT to create multiple duplicated listener
8659594bb40eb5f3da5439692f0908300947191eSonja Gröning records for scalability. [Yingqi Lu <yingqi.lu@intel.com>,
857992065be4ed40a72c6296b6c0aec62ab4c5b9Christian Maeder Jeff Trawick, Jim Jagielski]
96ef2e46d048c357927f2795a40e9e66f21b85fbSonja Gröning *) mod_proxy_html: support automatic detection of doctype and processing
96ef2e46d048c357927f2795a40e9e66f21b85fbSonja Gröning of FPIs. PR56285 [Micha Lenk <micha lenk info>, Nick Kew]
96ef2e46d048c357927f2795a40e9e66f21b85fbSonja Gröning *) mod_proxy_html: skip documents shorter than 4 bytes
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers PR 56286 [Micha Lenk <micha lenk info>]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) mod_proxy_fdpass: Fix computation of the size of 'struct sockaddr_un'
857992065be4ed40a72c6296b6c0aec62ab4c5b9Christian Maeder when passed to 'connect()'.
857992065be4ed40a72c6296b6c0aec62ab4c5b9Christian Maeder [Graham Dumpleton <grahamd apache org>]
857992065be4ed40a72c6296b6c0aec62ab4c5b9Christian Maeder *) core: Add ap_mpm_resume_suspended() API to allow a suspended connection
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers to resume. PR56333
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers [Artem <artemciy gmail.com>, Edward Lu <Chaosed0 gmail.com>]
327a9b9bf44b6e33f71fee7526dc1c0035251591Christian Maeder *) core: Add ap_mpm_register_socket_callback_timeout() API. [Eric Covener]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_proxy_wstunnel: Honor ProxyWebsocketIdleTimeout in asynchronous
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder processing mode. [Eric Covener]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_authnz_ldap: Fail explicitly when the filter is too long. Remove
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder unnecessary apr_pstrdup() and strlen(). [Graham Leggett]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) Add the ldap-search option to mod_authnz_ldap, allowing authorization
857992065be4ed40a72c6296b6c0aec62ab4c5b9Christian Maeder to be based on arbitrary expressions that do not include the username.
857992065be4ed40a72c6296b6c0aec62ab4c5b9Christian Maeder [Graham Leggett]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) Add the ldap function to the expression API, allowing LDAP filters and
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder distinguished names based on expressions to be escaped correctly to
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder guard against LDAP injection. [Graham Leggett]
b49276c9f50038e0bd499ad49f7bd6444566a834Christian Maeder *) Add module mod_ssl_ct, which provides an implementation of Certificate
88c800932dd7053322501ea2039d9f234be6866cKlaus Luettich Transparency (RFC 6962) for httpd. [Jeff Trawick]
b49276c9f50038e0bd499ad49f7bd6444566a834Christian Maeder *) mod_proxy: Preserve original request headers even if they differ
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder from the ones to be forwarded to the backend. PR 45387.
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder [Yann Ylavic]
fa21fba9ceb1ddf7b3efd54731a12ed8750191d8Christian Maeder *) mod_remoteip: Prevent an external proxy from presenting an internal
fa21fba9ceb1ddf7b3efd54731a12ed8750191d8Christian Maeder proxy. PR 55962. [Mike Rumph]
ed9207cf24e96b0d6f59985822054ae28cb69b2eChristian Maeder *) mod_ssl: Add hooks to allow other modules to perform processing at
ed9207cf24e96b0d6f59985822054ae28cb69b2eChristian Maeder several stages of initialization and connection handling. See
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_proxy_wstunnel: Avoid sending error responses down an upgraded
b49276c9f50038e0bd499ad49f7bd6444566a834Christian Maeder websockets connection as it is being close down. [Eric Covener]
b49276c9f50038e0bd499ad49f7bd6444566a834Christian Maeder *) mod_proxy_wstunnel: Allow the administrator to cap the amount
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder of time a synchronous websockets connection stays idle with
f29371d8bd5a232c974e736b06d0d8a655d320fbKlaus Luettich ProxyWebsocketIdleTimeout. [Eric Covener]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_proxy_wstunnel: Change to opt-in for asynchronous support, adding
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder directives ProxyWebsocketAsync and ProxyWebsocketAsyncDelay.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder [Eric Covener]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_proxy_wstunnel: Stop leaking websockets backend connections under
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder event MPM (trunk-only). [Eric Covener]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_proxy_http: Add detach_backend hook (potentially usable
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder in other proxy scheme handlers). [Jeff Trawick]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_deflate: Add DeflateAlterETag to control how the ETag
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder is modified. The 'NoChange' parameter mimics 2.2.x behavior.
33d042fe6a9eb27a4c48f840b80838f3e7d98e34Christian Maeder PR 45023, PR 39727. [Eric Covener]
33d042fe6a9eb27a4c48f840b80838f3e7d98e34Christian Maeder *) mod_rewrite: Add 'BNF' (backreferences-no-plus) flag to RewriteRule to
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder allow spaces in backreferences to be encoded as %20 instead of '+'.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder [Eric Covener]
ef67402074be14deb95e4ff564737d5593144130Klaus Luettich *) mod_rewrite: Support an optional list of characters to escape in the
ef67402074be14deb95e4ff564737d5593144130Klaus Luettich argument for the 'B' (escape backreferences) flag. [Eric Covener]
ef67402074be14deb95e4ff564737d5593144130Klaus Luettich *) mod_dir: Default to 2.2-like behavior and skip execution when method is
19933e754a6a244efca3b63184fb191668e08931Klaus Luettich neither GET nor POST, such as for DAV requests. PR 54914. [Chris Darroch]
02a42d9fbc41445bac7e93a3df810a531f14e1a0Christian Maeder *) mod_rewrite: Rename the handler that does per-directory internal
02a42d9fbc41445bac7e93a3df810a531f14e1a0Christian Maeder redirects to "rewrite-redirect-handler" from "redirect-handler" so
ef67402074be14deb95e4ff564737d5593144130Klaus Luettich it is less ambiguous and less likely to be reused. [Eric Covener]
1323eba62fc519b068f5aaec4f9d2be05ffabea9Klaus Luettich *) mod_rewrite: Protect against looping with the [N] flag by enforcing a
1323eba62fc519b068f5aaec4f9d2be05ffabea9Klaus Luettich default limit of 10000 iterations, and allowing each rule to change its
725a68ec81cba9b8aa8647bebfb5baa449803e7eKlaus Luettich limit. [Eric Covener]
33d042fe6a9eb27a4c48f840b80838f3e7d98e34Christian Maeder *) mod_ssl: Fix config merging of SSLOCSPEnable and SSLOCSPOverrideResponder.
33d042fe6a9eb27a4c48f840b80838f3e7d98e34Christian Maeder [Jeff Trawick]
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder *) Add HttpContentLengthHeadZero and HttpExpectStrict directives.
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder [Yehuda Sadeh <yehuda inktank com>, Justin Erenkrantz]
33d042fe6a9eb27a4c48f840b80838f3e7d98e34Christian Maeder *) mod_ssl: Add -t -DDUMP_CA_CERTS option which dumps the filenames of all
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder configured SSL CA certificates to stdout the same way as DUMP_CERTS does.
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder *) mod_ssl: Don't flush when an EOS is received. Prepares mod_ssl
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder to support write completion. [Graham Leggett]
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder *) core: Add parse_errorlog_arg callback to ap_errorlog_provider
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder to allow providers to check the ErrorLog argument. [Jan Kaluza]
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder *) mod_cgid: Use the servers Timeout for each read from a CGI script,
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder allow override with new CGIDRequestTimeout directive. PR43494
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder [Eric Covener, Toshikuni Fukaya <toshikuni-fukaya cybozu co jp>]
33d042fe6a9eb27a4c48f840b80838f3e7d98e34Christian Maeder *) core: ensure any abnormal exit is reported to stderr if it's a tty.
f4ca4fdf5f65975ce3d5fe7c7325bc3741983d01Christian Maeder PR 55670 [Nick Kew]
149dd26a03ea86cfd27e9cdf1c4e5f731be98d72Christian Maeder *) mod_lua: Let the Inter-VM get/set functions work with a global
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder shared memory pool instead of a per-process pool. [Daniel Gruno]
ac43fa22d2d3f91a17674ac164cba3cf39a17795Klaus Luettich *) ldap: Support ldaps when using the Microsoft LDAP SDK.
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers PR 54626. [Jean-Frederic Clere]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) mod_proxy: Add ap_connection_reusable() for checking if a connection
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder is reusable as of this point in processing. [Jeff Trawick]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) mod_authnz_ldap: Change default value of AuthLDAPMaxSubGroupDepth to 0
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder to avoid performance problems when subgroups aren't in use. [Eric Covener]
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder *) mod_syslog: New module implementing syslog ap_error_log provider.
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder Previously, this code was part of core, now it's in separate module.
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder *) core: Add ap_errorlog_provider to make ErrorLog logging modular. Move
ac0bbbcb2774629bb87986e69cf53d3402c5f575Christian Maeder syslog support from core to new mod_syslog. [Jan Kaluza]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) mod_status, mod_echo: Fix the display of client addresses.
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers They were truncated to 31 characters which is not enough for IPv6 addresses.
ac43fa22d2d3f91a17674ac164cba3cf39a17795Klaus Luettich PR 54848 [Bernhard Schmidt <berni birkenwald de>]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) core: Add ap_log_data(), ap_log_rdata(), etc. for logging buffers.
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers [Jeff Trawick]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) mod_unique_id: Use output of the PRNG rather than IP address and
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers pid, avoiding sleep() call and possible DNS issues at startup,
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers plus improving randomness for IPv6-only hosts.
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers [Jan Kaluza <jkaluza redhat.com>]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) mod_authnz_ldap: Support primitive LDAP servers that do not accept
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers filters, such as "SDBM-backed LDAP" on z/OS, by allowing a special
ba0ec5e897ef99d420c8c14c2374e0f32b7043dbKlaus Luettich filter "none" to be specified in AuthLDAPURL. [Eric Covener]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) mod_file_cache: mod_file_cache should be able to serve files that
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder haven't had a Content-Type set via e.g. mod_mime. [Eric Covener]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) core: merge AllowEncodedSlashes from the base configuration into
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder virtual hosts. [Eric Covener]
26f228bf3a3fea810223396e5794c217a79a8d5bChristian Maeder *) AIX: Install DSO's with "cp" instead of "install" in instdso.sh
b9625461755578f3eed04676d42a63fd2caebd0cChristian Maeder [Eric Covener]
b9625461755578f3eed04676d42a63fd2caebd0cChristian Maeder *) mod_ldap: Don't keep retrying if a new LDAP connection times out.
b9625461755578f3eed04676d42a63fd2caebd0cChristian Maeder [Eric Covener]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) mod_deflate: permit compilation of mod_deflate against a zlib that has
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder been configured with -D Z_PREFIX, which redefines the token "deflate".
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder [Eric Covener]
d67a33b40578beef2e255a274f89bb9c34aaf056Christian Maeder *) mod_auth_digest: Use the secret when generating nonces in all cases and
26f228bf3a3fea810223396e5794c217a79a8d5bChristian Maeder not only when AuthName is used in .htaccess files (this change may cause
26f228bf3a3fea810223396e5794c217a79a8d5bChristian Maeder problems if used with round robin load balancers). Don't regenerate the
d67a33b40578beef2e255a274f89bb9c34aaf056Christian Maeder secret on graceful restarts. PR 54637 [Stefan Fritsch]
ba904a15082557e939db689fcfba0c68c9a4f740Christian Maeder *) core: Remove apr_brigade_flatten(), buffering and duplicated code
ba904a15082557e939db689fcfba0c68c9a4f740Christian Maeder from the HTTP_IN filter, parse chunks in a single pass with zero copy.
ba904a15082557e939db689fcfba0c68c9a4f740Christian Maeder Reduce memory usage by 48 bytes per request. [Graham Leggett]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) core: Stop the HTTP_IN filter from attempting to write error buckets
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder to the output filters, which is bogus in the proxy case. Create a
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder clean mapping from APR codes to HTTP status codes, and use it where
26f228bf3a3fea810223396e5794c217a79a8d5bChristian Maeder needed. [Graham Leggett]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_proxy: Ensure network errors detected by the proxy are returned as
b9625461755578f3eed04676d42a63fd2caebd0cChristian Maeder 504 Gateway Timout as opposed to 502 Bad Gateway, in order to be
75cda7e5b890d050d560d970af244a183f28328fKlaus Luettich compliant with RFC2616 14.9.4 Cache Revalidation and Reload Controls.
b9625461755578f3eed04676d42a63fd2caebd0cChristian Maeder *) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
b9625461755578f3eed04676d42a63fd2caebd0cChristian Maeder [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_ldap: LDAP connections used for authentication were not respecting
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder LDAPConnectionPoolTimeout. PR 54587
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) core: ap_rgetline_core now pulls from r->proto_input_filters.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_proxy_html: process parsed comments immediately.
96ef2e46d048c357927f2795a40e9e66f21b85fbSonja Gröning Fixes bug where parsed comments may be lost. [Nick Kew]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
470ca7a2797069ae4b27c34c1b71419f67be1f84Christian Maeder *) core: Add option to add valgrind support. Use it to reduce false positive
470ca7a2797069ae4b27c34c1b71419f67be1f84Christian Maeder warnings in mod_ssl. [Stefan Fritsch]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_authn_file, mod_authn_dbd, mod_authn_dbm, mod_authn_socache:
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder Cache the result of the most recent password hash verification for every
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder keep-alive connection. This saves some expensive calculations.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder [Stefan Fritsch]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) http: Remove support for Request-Range header sent by Navigator 2-3 and
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder MSIE 3. [Stefan Fritsch]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) core, http: Extend HttpProtocol with an option to enforce stricter HTTP
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder conformance or to only log the found problems. [Stefan Fritsch]
ce50fe187cdae64e75e510daafb78156280bdb91Christian Maeder *) core: Correctly parse an IPv6 literal host specification in an absolute
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder URL in the request line. [Stefan Fritsch]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) EventOpt MPM
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) core: Add LogLevelOverride directive that allows to override the
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder loglevel for clients from certain IPs. This also works for things
ce50fe187cdae64e75e510daafb78156280bdb91Christian Maeder like the SSL handshake where <If> LogLevel ... </If> is evaluated
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder too late. [Stefan Fritsch]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) core: Add new directive Warning to issue warnings from a configuration
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder file. Both Warning and Error now generate a timestamped log message.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder [Fabien Coelho]
327a9b9bf44b6e33f71fee7526dc1c0035251591Christian Maeder *) ap_expr: Add SERVER_PROTOCOL_VERSION, ..._MAJOR, and ..._MINOR
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder variables. [Stefan Fritsch]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) core: New directive RegisterHttpMethod for registering non-standard
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder HTTP methods. [Stefan Fritsch]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) core: New directive HttpProtocol which allows to disable HTTP/0.9
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder support. [Stefan Fritsch]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_allowhandlers: New module to forbid specific handlers for specific
b49276c9f50038e0bd499ad49f7bd6444566a834Christian Maeder directories. [Stefan Fritsch]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_systemd: New module, for integration with systemd on Linux.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder [Jan Kaluza <jkaluza redhat.com>]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) WinNT MPM: Store pid and generation for each thread in scoreboard
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers to allow tracking of threads from exiting children via mod_status
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers or other such mechanisms. [Jeff Trawick]
c55a0f77be7e88d3620b419ec8961f4379a586e3Klaus Luettich *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
c55a0f77be7e88d3620b419ec8961f4379a586e3Klaus Luettich - APIs: ap_log_pid(), ap_remove_pid, ap_read_pid()
c55a0f77be7e88d3620b419ec8961f4379a586e3Klaus Luettich - core: the scoreboard (ScoreBoardFile), pid file (PidFile), and
c55a0f77be7e88d3620b419ec8961f4379a586e3Klaus Luettich mutexes (Mutex)
5d4038657f6a63e131f5804af2f7957b69e15a43Klaus Luettich - mod_cache: thundering herd lock directory
5d4038657f6a63e131f5804af2f7957b69e15a43Klaus Luettich - mod_lbmethod_heartbeat, mod_heartmonitor: heartbeat storage file
5d4038657f6a63e131f5804af2f7957b69e15a43Klaus Luettich - mod_ldap: shared memory cache
5d4038657f6a63e131f5804af2f7957b69e15a43Klaus Luettich - mod_socache_shmcb, mod_socache_dbm: shared memory or dbm for cache
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers [Jeff Trawick]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) suexec: Add --enable-suexec-capabilites support on Linux, to use
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder setuid/setgid capability bits rather than a setuid root binary.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) suexec: Add support for logging to syslog as an alternative to logging
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder to a file; configure --without-suexec-logfile --with-suexec-syslog.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder [Matthew Steele <mdsteele google.com>]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder be compiled by the build compiler instead of the host compiler.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder PR 51257. [Guenter Knauf]
efa8f9db01f64e2c719c201e4037743caefae045Klaus Luettich *) core: In maintainer mode, replace apr_palloc with a version that
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder initializes the allocated memory with non-zero values, except if
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]
b49276c9f50038e0bd499ad49f7bd6444566a834Christian Maeder *) mod_policy: Add a new testing module to help server administrators
d67a33b40578beef2e255a274f89bb9c34aaf056Christian Maeder enforce a configurable level of protocol compliance on their
d67a33b40578beef2e255a274f89bb9c34aaf056Christian Maeder servers and application servers behind theirs. [Graham Leggett]
8b0f493ae42bad8b94918cc0957f1af57096cda4Felix Reckers *) mod_firehose: Add a new debugging module able to record traffic
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder passing through the server in such a way that connections and/or
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder requests be reconstructed and replayed. [Graham Leggett]
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) mod_noloris
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) Simple MPM
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder [Apache 2.5.0-dev includes those bug fixes and changes with the
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder Apache 2.4.xx tree as documented below, except as noted.]
1a6464613c59e35072b90ca296ae402cbe956144Christian MaederChanges with Apache 2.4.x and later:
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian MaederChanges with Apache 2.2.x and later:
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian Maeder *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
5191fa24c532d1f67e7a642e9aece65efb8a0975Christian MaederChanges with Apache 2.0.x and later: