CHANGES revision 9db549cd545d738d931852ac4267d62221162f7f
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe -*- coding: utf-8 -*-
c10c16dec587a0662068f6e2991c29ed3a9db943Richard LoweChanges with Apache 2.5.0
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_cache: Avoid sending 304 responses during failed revalidations
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe PR56881. [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) core: Avoid useless warning message when parsing a section guarded by
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe <IfDefine foo> if $(foo) is used within the section.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe PR 56858 [Christophe Jaillet]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy_fcgi: Fix faulty logging of large amounts of stderr from the
ed22c7109fc5dd9e1b7a5d0333bdc7ad2718e2abYuri Pankov application. PR 56858. [Manuel Mausz <manuel-asf mausz.at>]
ed22c7109fc5dd9e1b7a5d0333bdc7ad2718e2abYuri Pankov *) mod_ratelimit: Drop severity of AH01455 and AH01457 (ap_pass_brigade
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe failed) messages from ERROR to TRACE1. Other filters do not bother
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe re-reporting failures from lower level filters. PR56832. [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy_http: Proxy responses with error status and
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe "ProxyErrorOverride On" hang until proxy timeout.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe PR53420 [Rainer Jung]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy_wstunnel: Concurrent websockets messages could be
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe lost or delayed with ProxyWebsocketAsync enabled.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Edward Lu <Chaosed0 gmail.com>]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) core, mod_info: Add compiled and loaded PCRE versions to version
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe number display. [Rainer Jung]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mpm_winnt: Accept utf-8 (Unicode) service names and descriptions for
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe internationalization. [William Rowe]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mpm_winnt: Normalize the error and status messages emitted by service.c,
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe the service control interface for Windows. [William Rowe]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) SECURITY: CVE-2013-5704 (cve.mitre.org)
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe core: HTTP trailers could be used to replace HTTP headers
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe late during request processing, potentially undoing or
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe otherwise confusing modules that examined or modified
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe request headers earlier. Adds "MergeTrailers" directive to restore
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe legacy behavior. [Edward Lu, Yann Ylavic, Joe Orton, Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) http_protocol: fix logic in ap_method_list_(add|remove) in order:
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe - to correctly reset bits
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe - not to modify the 'method_mask' bitfield unnecessarily
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_log_config: Allow three character log formats to be registered. For
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe backwards compatibility, the first character of a three-character format
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe must be the '^' (caret) character. [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_authnz_ldap: Return LDAP connections to the pool before the handler
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe is run, instead of waiting until the end of the request. [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_ldap: Be more conservative with the last-used time for
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe LDAPConnectionPoolTTL. PR54587 [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_deflate: Don't fail when flushing inflated data to the user-agent
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe and that coincides with the end of stream ("Zlib error flushing inflate
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe buffer"). PR 56196. [Christoph Fausak <christoph fausak glueckkanja.com>]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy: Don't limit the size of the connectable Unix Domain Socket
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe paths. [Christophe Jaillet, Yann Ylavic]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_ssl: dump SSL IO/state for the write side of the connection(s),
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe like reads (level TRACE4). [Yann Ylavic]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy: Shutdown (eg. close notify) the backend connection before
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe closing. [Yann Ylavic]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mpm_event[opt]: Send the SSL close notify alert when the KeepAliveTimeout
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe expires. PR54998. [Yann Ylavic]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_ssl: Ensure that the SSL close notify alert is flushed to the client.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe PR54998. [Tim Kosse <tim.kosse filezilla-project.org>, Yann Ylavic]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_log_config: Add GlobalLog to allow a globally defined log to
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe be inherited by virtual hosts that define a CustomLog.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Edward Lu <Chaosed0 gmail.com>]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) MPMs: Support SO_REUSEPORT to create multiple duplicated listener
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe records for scalability. [Yingqi Lu <yingqi.lu@intel.com>,
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe Jeff Trawick, Jim Jagielski]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy_html: support automatic detection of doctype and processing
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe of FPIs. PR56285 [Micha Lenk <micha lenk info>, Nick Kew]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy_html: skip documents shorter than 4 bytes
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe PR 56286 [Micha Lenk <micha lenk info>]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy_fdpass: Fix computation of the size of 'struct sockaddr_un'
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe when passed to 'connect()'.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Graham Dumpleton <grahamd apache org>]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) core: Add ap_mpm_resume_suspended() API to allow a suspended connection
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe to resume. PR56333
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Artem <artemciy gmail.com>, Edward Lu <Chaosed0 gmail.com>]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) core: Add ap_mpm_register_socket_callback_timeout() API. [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy_wstunnel: Honor ProxyWebsocketIdleTimeout in asynchronous
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe processing mode. [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_authnz_ldap: Fail explicitly when the filter is too long. Remove
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe unnecessary apr_pstrdup() and strlen(). [Graham Leggett]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) Add the ldap-search option to mod_authnz_ldap, allowing authorization
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe to be based on arbitrary expressions that do not include the username.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Graham Leggett]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) Add the ldap function to the expression API, allowing LDAP filters and
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe distinguished names based on expressions to be escaped correctly to
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe guard against LDAP injection. [Graham Leggett]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) Add module mod_ssl_ct, which provides an implementation of Certificate
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe Transparency (RFC 6962) for httpd. [Jeff Trawick]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy: Preserve original request headers even if they differ
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe from the ones to be forwarded to the backend. PR 45387.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Yann Ylavic]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_remoteip: Prevent an external proxy from presenting an internal
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe proxy. PR 55962. [Mike Rumph]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_ssl: Add hooks to allow other modules to perform processing at
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe several stages of initialization and connection handling. See
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy_wstunnel: Avoid sending error responses down an upgraded
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe websockets connection as it is being close down. [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy_wstunnel: Allow the administrator to cap the amount
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe of time a synchronous websockets connection stays idle with
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe ProxyWebsocketIdleTimeout. [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy_wstunnel: Change to opt-in for asynchronous support, adding
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe directives ProxyWebsocketAsync and ProxyWebsocketAsyncDelay.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy_wstunnel: Stop leaking websockets backend connections under
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe event MPM (trunk-only). [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy_http: Add detach_backend hook (potentially usable
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe in other proxy scheme handlers). [Jeff Trawick]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_deflate: Add DeflateAlterETag to control how the ETag
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe is modified. The 'NoChange' parameter mimics 2.2.x behavior.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe PR 45023, PR 39727. [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_rewrite: Add 'BNF' (backreferences-no-plus) flag to RewriteRule to
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe allow spaces in backreferences to be encoded as %20 instead of '+'.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_rewrite: Support an optional list of characters to escape in the
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe argument for the 'B' (escape backreferences) flag. [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_ssl: Add SSLOCSPUseRequestNonce directive to control whether or not
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe OCSP requests should use a nonce to be checked against the responder's
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe one. PR 56233. [ Yann Ylavic ]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_dir: Default to 2.2-like behavior and skip execution when method is
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe neither GET nor POST, such as for DAV requests. PR 54914. [Chris Darroch]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_rewrite: Rename the handler that does per-directory internal
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe redirects to "rewrite-redirect-handler" from "redirect-handler" so
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe it is less ambiguous and less likely to be reused. [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_rewrite: Protect against looping with the [N] flag by enforcing a
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe default limit of 10000 iterations, and allowing each rule to change its
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe limit. [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_ssl: Fix config merging of SSLOCSPEnable and SSLOCSPOverrideResponder.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Jeff Trawick]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) Add HttpContentLengthHeadZero and HttpExpectStrict directives.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Yehuda Sadeh <yehuda inktank com>, Justin Erenkrantz]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_ssl: Add -t -DDUMP_CA_CERTS option which dumps the filenames of all
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe configured SSL CA certificates to stdout the same way as DUMP_CERTS does.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Jan Kaluza]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_ssl: Don't flush when an EOS is received. Prepares mod_ssl
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe to support write completion. [Graham Leggett]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) core: Add parse_errorlog_arg callback to ap_errorlog_provider
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe to allow providers to check the ErrorLog argument. [Jan Kaluza]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_cgid: Use the servers Timeout for each read from a CGI script,
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe allow override with new CGIDRequestTimeout directive. PR43494
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Eric Covener, Toshikuni Fukaya <toshikuni-fukaya cybozu co jp>]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) core: ensure any abnormal exit is reported to stderr if it's a tty.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe PR 55670 [Nick Kew]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_lua: Let the Inter-VM get/set functions work with a global
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe shared memory pool instead of a per-process pool. [Daniel Gruno]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) ldap: Support ldaps when using the Microsoft LDAP SDK.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe PR 54626. [Jean-Frederic Clere]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy: Add ap_connection_reusable() for checking if a connection
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe is reusable as of this point in processing. [Jeff Trawick]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_authnz_ldap: Change default value of AuthLDAPMaxSubGroupDepth to 0
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe to avoid performance problems when subgroups aren't in use. [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_syslog: New module implementing syslog ap_error_log provider.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe Previously, this code was part of core, now it's in separate module.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Jan Kaluza]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) core: Add ap_errorlog_provider to make ErrorLog logging modular. Move
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe syslog support from core to new mod_syslog. [Jan Kaluza]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_status, mod_echo: Fix the display of client addresses.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe They were truncated to 31 characters which is not enough for IPv6 addresses.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe PR 54848 [Bernhard Schmidt <berni birkenwald de>]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) core: Add ap_log_data(), ap_log_rdata(), etc. for logging buffers.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Jeff Trawick]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_unique_id: Use output of the PRNG rather than IP address and
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe pid, avoiding sleep() call and possible DNS issues at startup,
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe plus improving randomness for IPv6-only hosts.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Jan Kaluza <jkaluza redhat.com>]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_authnz_ldap: Support primitive LDAP servers that do not accept
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe filters, such as "SDBM-backed LDAP" on z/OS, by allowing a special
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe filter "none" to be specified in AuthLDAPURL. [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_file_cache: mod_file_cache should be able to serve files that
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe haven't had a Content-Type set via e.g. mod_mime. [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) core: merge AllowEncodedSlashes from the base configuration into
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe virtual hosts. [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) AIX: Install DSO's with "cp" instead of "install" in instdso.sh
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_ldap: Don't keep retrying if a new LDAP connection times out.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_deflate: permit compilation of mod_deflate against a zlib that has
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe been configured with -D Z_PREFIX, which redefines the token "deflate".
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Eric Covener]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_auth_digest: Use the secret when generating nonces in all cases and
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe not only when AuthName is used in .htaccess files (this change may cause
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe problems if used with round robin load balancers). Don't regenerate the
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe secret on graceful restarts. PR 54637 [Stefan Fritsch]
ed22c7109fc5dd9e1b7a5d0333bdc7ad2718e2abYuri Pankov *) core: Remove apr_brigade_flatten(), buffering and duplicated code
ed22c7109fc5dd9e1b7a5d0333bdc7ad2718e2abYuri Pankov from the HTTP_IN filter, parse chunks in a single pass with zero copy.
ed22c7109fc5dd9e1b7a5d0333bdc7ad2718e2abYuri Pankov Reduce memory usage by 48 bytes per request. [Graham Leggett]
ed22c7109fc5dd9e1b7a5d0333bdc7ad2718e2abYuri Pankov *) core: Stop the HTTP_IN filter from attempting to write error buckets
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe to the output filters, which is bogus in the proxy case. Create a
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe clean mapping from APR codes to HTTP status codes, and use it where
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe needed. [Graham Leggett]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy: Ensure network errors detected by the proxy are returned as
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe 504 Gateway Timout as opposed to 502 Bad Gateway, in order to be
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe compliant with RFC2616 14.9.4 Cache Revalidation and Reload Controls.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_ldap: LDAP connections used for authentication were not respecting
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe LDAPConnectionPoolTimeout. PR 54587
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) core: ap_rgetline_core now pulls from r->proto_input_filters.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy_html: process parsed comments immediately.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe Fixes bug where parsed comments may be lost. [Nick Kew]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) core: Add option to add valgrind support. Use it to reduce false positive
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe warnings in mod_ssl. [Stefan Fritsch]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_authn_file, mod_authn_dbd, mod_authn_dbm, mod_authn_socache:
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe Cache the result of the most recent password hash verification for every
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe keep-alive connection. This saves some expensive calculations.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Stefan Fritsch]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) http: Remove support for Request-Range header sent by Navigator 2-3 and
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe MSIE 3. [Stefan Fritsch]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) core, http: Extend HttpProtocol with an option to enforce stricter HTTP
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe conformance or to only log the found problems. [Stefan Fritsch]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) core: Correctly parse an IPv6 literal host specification in an absolute
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe URL in the request line. [Stefan Fritsch]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) EventOpt MPM
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) core: Add LogLevelOverride directive that allows to override the
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe loglevel for clients from certain IPs. This also works for things
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe like the SSL handshake where <If> LogLevel ... </If> is evaluated
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe too late. [Stefan Fritsch]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) core: Add new directive Warning to issue warnings from a configuration
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe file. Both Warning and Error now generate a timestamped log message.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Fabien Coelho]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) ap_expr: Add SERVER_PROTOCOL_VERSION, ..._MAJOR, and ..._MINOR
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe variables. [Stefan Fritsch]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) core: New directive RegisterHttpMethod for registering non-standard
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe HTTP methods. [Stefan Fritsch]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) core: New directive HttpProtocol which allows to disable HTTP/0.9
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe support. [Stefan Fritsch]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_allowhandlers: New module to forbid specific handlers for specific
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe directories. [Stefan Fritsch]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_systemd: New module, for integration with systemd on Linux.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Jan Kaluza <jkaluza redhat.com>]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) WinNT MPM: Store pid and generation for each thread in scoreboard
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe to allow tracking of threads from exiting children via mod_status
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe or other such mechanisms. [Jeff Trawick]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe - APIs: ap_log_pid(), ap_remove_pid, ap_read_pid()
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe - core: the scoreboard (ScoreBoardFile), pid file (PidFile), and
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe mutexes (Mutex)
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe - mod_cache: thundering herd lock directory
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe - mod_lbmethod_heartbeat, mod_heartmonitor: heartbeat storage file
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe - mod_ldap: shared memory cache
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe - mod_socache_shmcb, mod_socache_dbm: shared memory or dbm for cache
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Jeff Trawick]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) suexec: Add --enable-suexec-capabilites support on Linux, to use
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe setuid/setgid capability bits rather than a setuid root binary.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) suexec: Add support for logging to syslog as an alternative to logging
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe to a file; configure --without-suexec-logfile --with-suexec-syslog.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Matthew Steele <mdsteele google.com>]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe be compiled by the build compiler instead of the host compiler.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe PR 51257. [Guenter Knauf]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) core: In maintainer mode, replace apr_palloc with a version that
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe initializes the allocated memory with non-zero values, except if
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_policy: Add a new testing module to help server administrators
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe enforce a configurable level of protocol compliance on their
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe servers and application servers behind theirs. [Graham Leggett]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_firehose: Add a new debugging module able to record traffic
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe passing through the server in such a way that connections and/or
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe requests be reconstructed and replayed. [Graham Leggett]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) mod_noloris
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) Simple MPM
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe [Apache 2.5.0-dev includes those bug fixes and changes with the
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe Apache 2.4.xx tree as documented below, except as noted.]
c10c16dec587a0662068f6e2991c29ed3a9db943Richard LoweChanges with Apache 2.4.x and later:
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup
c10c16dec587a0662068f6e2991c29ed3a9db943Richard LoweChanges with Apache 2.2.x and later:
c10c16dec587a0662068f6e2991c29ed3a9db943Richard Lowe *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
c10c16dec587a0662068f6e2991c29ed3a9db943Richard LoweChanges with Apache 2.0.x and later: