CHANGES revision a449830d5caa5b9900fe64cc383658b3641f9810
967e5f3c25249c779575864692935627004d3f9eChristian Maeder -*- coding: utf-8 -*-
967e5f3c25249c779575864692935627004d3f9eChristian MaederChanges with Apache 2.3.0
967e5f3c25249c779575864692935627004d3f9eChristian Maeder[ When backported to 2.2.x, remove entry from this file ]
75a6279dbae159d018ef812185416cf6df386c10Till Mossakowski
967e5f3c25249c779575864692935627004d3f9eChristian Maeder *) cache: retire ap_cache_cacheable_hdrs_out() which was used
967e5f3c25249c779575864692935627004d3f9eChristian Maeder for both in- and out-put headers; and replace it by a single
967e5f3c25249c779575864692935627004d3f9eChristian Maeder ap_cache_cacheable_headers() wrapped in a in- and out-put
89054b2b95a3f92e78324dc852f3d34704e2ca49Christian Maeder specific ap_cache_cacheable_headers_in()/out(). The latter
967e5f3c25249c779575864692935627004d3f9eChristian Maeder which will also merge error and ensure content-type. To keep
967e5f3c25249c779575864692935627004d3f9eChristian Maeder cache modules consistent with ease. This API change bumps
967e5f3c25249c779575864692935627004d3f9eChristian Maeder up the minor MM by one [Dirk-Willem van Gulik].
967e5f3c25249c779575864692935627004d3f9eChristian Maeder
967e5f3c25249c779575864692935627004d3f9eChristian Maeder *) mod_rewrite: Allow Cookie option to set secure and HttpOnly flags.
967e5f3c25249c779575864692935627004d3f9eChristian Maeder PR 44799 [Christian Wenz <christian wenz.org>]
967e5f3c25249c779575864692935627004d3f9eChristian Maeder
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder *) Move the KeptBodySize directive, kept_body filters and the
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder ap_parse_request_body function out of the http module and into a
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder new module called mod_request, reducing the size of the core.
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder [Graham Leggett]
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) rotatelogs: Log the current file size and error code/description
967e5f3c25249c779575864692935627004d3f9eChristian Maeder when failing to write to the log file. [Jeff Trawick]
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder *) mod_dbd: Handle integer configuration directive parameters with a
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder dedicated function.
967e5f3c25249c779575864692935627004d3f9eChristian Maeder
9744c7d9fa61d255d5e73beec7edc3499522e9e2Till Mossakowski *) Change the directives within the mod_session* modules to be valid
9744c7d9fa61d255d5e73beec7edc3499522e9e2Till Mossakowski both inside and outside the location/directory sections, as
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder suggested by wrowe. [Graham Leggett]
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder *) mod_auth_form: Add a module capable of allowing end users to log
89054b2b95a3f92e78324dc852f3d34704e2ca49Christian Maeder in using an HTML form, storing the credentials within mod_session.
89054b2b95a3f92e78324dc852f3d34704e2ca49Christian Maeder [Graham Leggett]
89054b2b95a3f92e78324dc852f3d34704e2ca49Christian Maeder
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder *) Add a function to the http filters that is able to parse an HTML
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder form request with the type of application/x-www-form-urlencoded.
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder [Graham Leggett]
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder *) mod_session_crypto: Initialise SSL in the post config hook.
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder [Ruediger Pluem, Graham Leggett]
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder *) mod_session_dbd: Add a session implementation capable of storing
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder session information in a SQL database via the dbd interface. Useful
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder for sites where session privacy is important. [Graham Leggett]
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder *) mod_session_crypto: Add a session encoding implementation capable
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder of encrypting and decrypting sessions wherever they may be stored.
af621d0066770895fd79562728e93099c8c52060Christian Maeder Introduces a level of privacy when sessions are stored on the
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder browser. [Graham Leggett]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mod_session_cookie: Add a session implementation capable of storing
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder session information within cookies on the browser. Useful for high
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder volume sites where server bound sessions are too resource intensive.
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder [Graham Leggett]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mod_session: Add a generic session interface to unify the different
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder attempts at saving persistent sessions across requests.
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder [Graham Leggett]
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder *) core, authn/z: Avoid calling access control hooks for internal requests
89054b2b95a3f92e78324dc852f3d34704e2ca49Christian Maeder with configurations which match those of initial request. Revert to
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder original behaviour (call access control hooks for internal requests
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder with URIs different from initial request) if any access control hooks or
89054b2b95a3f92e78324dc852f3d34704e2ca49Christian Maeder providers are not registered as permitting this optimization.
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder Introduce wrappers for access control hook and provider registration
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder which can accept additional mode and flag data. [Chris Darroch]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mod_dav: Return "method not allowed" if the destination URI of a WebDAV
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder copy / move operation is no DAV resource. PR 44734 [Ruediger Pluem]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) Introduced ap_expr API for expression evaluation.
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder This is adapted from mod_include, which is the first module
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder to use the new API.
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder [Nick Kew]
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder *) mod_authz_dbd: When redirecting after successful login/logout per
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder AuthzDBDRedirectQuery, do not report authorization failure, and use
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder first row returned by database query instead of last row.
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder [Chris Darroch]
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder *) mod_rewrite: Initialize hash needed by ap_register_rewrite_mapfunc early
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder enough. PR 44641 [Daniel Lescohier <daniel.lescohier cnet.com>]
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder *) mod_authn_dbd: Disambiguate and tidy database authentication
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder error messages. PR 43210. [Chris Darroch, Phil Endecott
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder <spam_from_apache_bugzilla chezphil.org>]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder *) mod_cache: Handle If-Range correctly if the cached resource was stale.
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder PR 44579 [Ruediger Pluem]
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder *) mod_ldap: Correctly return all requested attribute values
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder when some attributes have a null value.
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder PR 44560 [Anders Kaseorg <anders kaseorg.com>]
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder *) core: check symlink ownership if both FollowSymlinks and
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder SymlinksIfOwnerMatch are set [Nick Kew]
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder *) core: fix origin checking in SymlinksIfOwnerMatch
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder PR 36783 [Robert L Mathews <rob-apache.org.bugs tigertech.net>]
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder *) rotatelogs: Added '-f' option to force rotatelogs to create the
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder logfile as soon as started, and not wait until it reads the
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder first entry. [Jim Jagielski]
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder *) mod_proxy: Do not try a direct connection if the connection via a
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder remote proxy failed before and the request has a request body.
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder [Ruediger Pluem]
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder *) Added 'disablereuse' option for ProxyPass which, essentially,
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder disables connection pooling for the backend servers.
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder [Jim Jagielski]
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder *) Activate mod_cache, mod_file_cache and mod_disc_cache as part of the
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder 'most' set for '--enable-modules' and '--enable-shared-mods'. Include
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder mod_mem_cache in 'all' as well. [Dirk-Willem van Gulik]
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder *) Also install mod_so.h, mod_rewrite.h and mod_cache.h; as these
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder contain public function declarations which are useful for
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder third party module authors. PR 42431 [Dirk-Willem van Gulik].
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder *) mod_dir, mod_negotiation: pass the output filter information
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder to newly created sub requests; as these are later on used
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder as true requests with an internal redirect. This allows for
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder mod_cache et.al. to trap the results of the redirect.
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder [Dirk-Willem van Gulik, Ruediger Pluem]
fd896e2068ad7e50aed66ac18c3720ea7ff2619fChristian Maeder
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder *) mod_proxy_ajp: Do not retry request in the case that we either failed to
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder sent a part of the request body or if the request is not idempotent.
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder PR 44334 [Ruediger Pluem]
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder *) rotatelogs: Don't leak memory when reopening the logfile.
967e5f3c25249c779575864692935627004d3f9eChristian Maeder PR 40183 [Ruediger Pluem, Takashi Sato <serai lans-tv.com>]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mod_ldap: Add support (taking advantage of the new APR capability)
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder for ldap rebind callback while chasing referrals. This allows direct
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder searches on LDAP servers (in particular MS Active Directory 2003+)
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder using referrals without the use of the global catalog.
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder PRs 26538, 40268, and 42557 [Paul J. Reder]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) Support chroot on Unix-family platforms
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder PR 43596 [Dimitar Pashev <mitko banksoft-bg.com>]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mod_proxy_http: Return HTTP status codes instead of apr_status_t
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder values for errors encountered while forwarding the request body
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder PR 44165 [Eric Covener]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mod_ssl: Added server name indication support (SNI, RFC 4366).
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder PR 34607. [Kaspar Brand <asfbugz velox.ch>]. A test configuration
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder can be created with test/make_sni.sh [Dirk-Willem van Gulik].
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) ApacheMonitor.exe: Introduce --kill argument for use by the
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder installer. This will permit the installation tool to remove
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder all running instances before attempting to remove the .exe.
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder [William Rowe]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mod_proxy: Lower memory consumption for short lived connections.
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder PR 44026. [Ruediger Pluem]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mod_proxy: Keep connections to the backend persistent in the HTTPS case.
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder [Ruediger Pluem]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) rotatelogs: Improve atomicity when using -l and cleaup code.
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder PR 44004 [Rainer Jung]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mod_ssl: Add support for OCSP validation of client certificates.
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder PR 41123. [Marc Stern <marc.stern approach.be>, Joe Orton]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mod_unique_id: Fix timestamp value in UNIQUE_ID.
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder PR 37064 [Kobayashi <kobayashi firstserver.co.jp>]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mod_serf: New module for Reverse Proxying. [Paul Querna]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) core: Add the option to keep aside a request body up to a certain
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder size that would otherwise be discarded, to be consumed by filters
09eef8548cd62d787cf3a6535f9eae10592eec89Christian Maeder such as mod_include. When enabled for a directory, POST requests
09eef8548cd62d787cf3a6535f9eae10592eec89Christian Maeder to shtml files can be passed through to embedded scripts as POST
09eef8548cd62d787cf3a6535f9eae10592eec89Christian Maeder requests, rather being downgraded to GET requests. [Graham Leggett]
09eef8548cd62d787cf3a6535f9eae10592eec89Christian Maeder
09eef8548cd62d787cf3a6535f9eae10592eec89Christian Maeder *) mod_ssl: Fix TLS upgrade (RFC 2817) support. PR 41231. [Joe Orton]
09eef8548cd62d787cf3a6535f9eae10592eec89Christian Maeder
09eef8548cd62d787cf3a6535f9eae10592eec89Christian Maeder *) scoreboard: Correctly declare ap_time_process_request.
09eef8548cd62d787cf3a6535f9eae10592eec89Christian Maeder PR 43789 [Tom Donovan <Tom.Donovan acm.org>]
09eef8548cd62d787cf3a6535f9eae10592eec89Christian Maeder
09eef8548cd62d787cf3a6535f9eae10592eec89Christian Maeder *) core; scoreboard: ap_get_scoreboard_worker(sbh) now takes the sbh member
adee28c3eb7bb0b9bb045d26ee6d35e19cf39053Christian Maeder from the connection rec, ap_get_scoreboard_worker(proc, thread) will now
adee28c3eb7bb0b9bb045d26ee6d35e19cf39053Christian Maeder provide the unusual legacy lookup. [William Rowe]
adee28c3eb7bb0b9bb045d26ee6d35e19cf39053Christian Maeder
adee28c3eb7bb0b9bb045d26ee6d35e19cf39053Christian Maeder *) mpm winnt: fix null pointer dereference
89054b2b95a3f92e78324dc852f3d34704e2ca49Christian Maeder PR 42572 [Davi Arnaut]
adee28c3eb7bb0b9bb045d26ee6d35e19cf39053Christian Maeder
adee28c3eb7bb0b9bb045d26ee6d35e19cf39053Christian Maeder *) core: reinstate location walk to fix config for subrequests
adee28c3eb7bb0b9bb045d26ee6d35e19cf39053Christian Maeder PR 41960 [Jose Kahan <jose w3.org>]
adee28c3eb7bb0b9bb045d26ee6d35e19cf39053Christian Maeder
adee28c3eb7bb0b9bb045d26ee6d35e19cf39053Christian Maeder *) mod_log_config: Add format options for %p so that the actual local
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder or remote port can be logged. PR 43415. [Adam Hasselbalch Hansen
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder <ahh@one.com>, Ruediger Pluem, Jeff Trawick]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mod_authnz_ldap, mod_authn_dbd: Tidy up the code to expose authn
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder parameters to the environment. Improve portability to
89054b2b95a3f92e78324dc852f3d34704e2ca49Christian Maeder EBCDIC machines by using apr_toupper(). [Martin Kraemer]
967e5f3c25249c779575864692935627004d3f9eChristian Maeder
967e5f3c25249c779575864692935627004d3f9eChristian Maeder *) mod_ldap, mod_authnzldap: Add support for nested groups (i.e. the ability
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder to authorize an authenticated user via a "require ldap-group X" directive
967e5f3c25249c779575864692935627004d3f9eChristian Maeder where the user is not in group X, but is in a subgroup contained in X.
967e5f3c25249c779575864692935627004d3f9eChristian Maeder PR 42891 [Paul J. Reder]
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder *) mod_ssl: Add support for caching SSL Sessions in memcached. [Paul Querna]
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder *) ab: Add -r option to continue after socket receive errors.
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder [Filip Hanik <devlist hanik.com>]
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder *) mod_ldap: Fix the search limit parameter to ldap_search_ext_s()
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder for SDKs that define LDAP_NO_LIMIT to something other than -1.
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder [David Jones <oscaremma gmail.com>]
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder *) apxs: Enhance -q flag to print all known variables and their values
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder when invoked without variable name(s).
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder [William Rowe, Sander Temme]
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder *) apxs: Eliminate run-time check for mod_so. PR 40653.
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder [David M. Lee <dmlee crossroads.com>]
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder *) beos MPM: Create pmain pool and run modules' child_init hooks when
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder entering ap_mpm_run(), then destroy pmain when exiting ap_mpm_run().
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder [Chris Darroch]
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder *) netware MPM: Destroy pmain pool when exiting ap_mpm_run() so that
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder cleanups registered in modules' child_init hooks are performed.
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder [Chris Darroch]
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder
967e5f3c25249c779575864692935627004d3f9eChristian Maeder *) mod_dbd: Stash DBD connections in request_config of initial request
bfa9e03532243ceb487f0384d0f6a447f1ce7670Till Mossakowski only, or else sub-requests and internal redirections may cause
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder entire DBD pool to be stashed in a single HTTP request. [Chris Darroch]
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder *) Fix issue which could cause error messages to be written to access logs
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder on Win32. PR 40476. [Tom Donovan <Tom.Donovan acm.org>]
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder *) The LockFile directive, which specifies the location of
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder the accept() mutex lockfile, is deprecated. Instead, the
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder AcceptMutex directive now takes an optional lockfile
bfa9e03532243ceb487f0384d0f6a447f1ce7670Till Mossakowski location parameter, ala SSLMutex. [Jim Jagielski]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mod_authn_dbd: Export any additional columns queried in the SQL select
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder into the environment with the name AUTHENTICATE_<COLUMN>. This brings
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder mod_authn_dbd behaviour in line with mod_authnz_ldap. [Graham Leggett]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mod_dbd: Key the storage of prepared statements on the hex string
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder value of server_rec, rather than the server name, as the server name
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder may change (eg when the server name is set) at any time, causing
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder weird behaviour in modules dependent on mod_dbd. [Graham Leggett]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mod_proxy_fcgi: Added win32 build. [Mladen Turk]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) sendfile_nonblocking() takes the _brigade_ as an argument, gets
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder the first bucket from the brigade, finds it not to be a FILE
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder bucket and barfs. The fix is to pass a bucket rather than a brigade.
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder [Niklas Edmundsson <nikke acc.umu.se>]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mod_rewrite: support rewritemap by SQL query [Nick Kew]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) ap_get_server_version() has been removed. Third-party modules must
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder now use ap_get_server_banner() or ap_get_server_description().
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder [Jeff Trawick]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) All MPMs: Introduce a check_config phase between pre_config and
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder open_logs, to allow modules to review interdependent configuration
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder directive values and adjust them while messages can still be logged
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder to the console. Handle relevant MPM directives during this phase
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder and format messages for both the console and the error log, as
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder appropriate. [Chris Darroch]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mod_proxy: don't URLencode tilde in path component
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder [Stijn Hoop <stijn sandcat.nl>]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mpm_winnt: Fix return values from wait_for_many_objects.
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder The return value is index to the signaled thread in the
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder creted_threads array. We can not use WAIT_TIMEOUT because
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder his value is defined as 258, thus limiting the MaxThreads
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder to that value. [Mladen Turk]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) core: Do not allow internal redirects like the DirectoryIndex of mod_dir
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder to circumvent the symbolic link checks imposed by FollowSymLinks and
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder SymLinksIfOwnerMatch. [Nick Kew, Ruediger Pluem, William Rowe]
967e5f3c25249c779575864692935627004d3f9eChristian Maeder
967e5f3c25249c779575864692935627004d3f9eChristian Maeder *) mod_proxy: Support environment variable interpolation in reverse
967e5f3c25249c779575864692935627004d3f9eChristian Maeder proxying directives. [Nick Kew]
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder *) core: Add the filename of the configuration file to the warning message
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder about the useless use of AllowOverride. PR 39992.
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder [Darryl Miles <darryl darrylmiles.org>]
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder *) New SSLLogLevelDebugDump [ None (default) | IO (not bytes) | Bytes ]
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder configures the I/O Dump of SSL traffic, when LogLevel is set to Debug.
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder The default is none as this is far greater debugging resolution than
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder the typical administrator is prepared to untangle. [William Rowe]
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder *) mod_disk_cache: If possible, check if the size of an object to cache is
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder within the configured boundaries before actually saving data.
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder [Niklas Edmundsson <nikke acc.umu.se>]
967e5f3c25249c779575864692935627004d3f9eChristian Maeder
967e5f3c25249c779575864692935627004d3f9eChristian Maeder *) mod_cache: Convert all values to seconds before comparing them when
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder checking whether to send a Warning header for a stale response.
09eef8548cd62d787cf3a6535f9eae10592eec89Christian Maeder PR 39713. [Owen Taylor <otaylor redhat.com>]
09eef8548cd62d787cf3a6535f9eae10592eec89Christian Maeder
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder *) mod_disk_cache: Delete temporary files if they cannot be renamed to their
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder final name. [Davi Arnaut <davi haxent.com.br>]
7221c71b38c871ce66eee4537cb681d468308dfbChristian Maeder
967e5f3c25249c779575864692935627004d3f9eChristian Maeder *) Worker and event MPMs: Remove improper scoreboard updates which were
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder performed in the event of a fork() failure. [Chris Darroch]
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder *) Add support for fcgi:// proxies to mod_rewrite.
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder [Markus Schiegl <ms schiegl.com>]
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder *) Remove incorrect comments from scoreboard.h regarding conditional
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder loading of worker_score structure with mod_status, and remove unused
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder definitions relating to old life_status field.
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder [Chris Darroch <chrisd pearsoncmg.com>]
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder *) Remove allocation of memory for unused array of lb_score pointers
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder in ap_init_scoreboard(). [Chris Darroch <chrisd pearsoncmg.com>]
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder *) Add mod_proxy_fcgi, a FastCGI back end for mod_proxy.
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder [Garrett Rooney, Jim Jagielski, Paul Querna]
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder
dedabc954aa15f6ad0764472a9434dc6dafe3db2Christian Maeder *) Event MPM: Fill in the scoreboard's tid field. PR 38736.
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder [Chris Darroch <chrisd pearsoncmg.com>]
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder *) mod_charset_lite: Remove Content-Length when output filter can
0a8ea95bcf0e3f84fed0b725c049ec2a956a4a28Christian Maeder invalidate it. Warn when input filter can invalidate it.
9744c7d9fa61d255d5e73beec7edc3499522e9e2Till Mossakowski [Jeff Trawick]
af621d0066770895fd79562728e93099c8c52060Christian Maeder
89054b2b95a3f92e78324dc852f3d34704e2ca49Christian Maeder *) Authz: Add the new module mod_authn_core that will provide common
af621d0066770895fd79562728e93099c8c52060Christian Maeder authn directives such as 'AuthType', 'AuthName'. Move the directives
58b671de3fe578346fef9642ffa3c5a0a0edb3cbTill Mossakowski 'AuthType' and 'AuthName' out of the core module and merge mod_authz_alias
58b671de3fe578346fef9642ffa3c5a0a0edb3cbTill Mossakowski into mod_authn_core. [Brad Nicholes]
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder *) Authz: Move the directives 'Order', 'Allow', 'Deny' and 'Satisfy'
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder into the new module mod_access_compat which can be loaded to provide
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder support for these directives.
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder [Brad Nicholes]
997c56f3bc74a703043010978e5013fdb074d659Christian Maeder
58b671de3fe578346fef9642ffa3c5a0a0edb3cbTill Mossakowski *) Authz: Move the 'Require' directive from the core module as well as
58b671de3fe578346fef9642ffa3c5a0a0edb3cbTill Mossakowski add the directives '<SatisfyAll>', '<SatisfyOne>', '<RequireAlias>'
af621d0066770895fd79562728e93099c8c52060Christian Maeder and 'Reject' to mod_authz_core. The new directives introduce 'AND/OR'
af621d0066770895fd79562728e93099c8c52060Christian Maeder logic into the authorization processing. [Brad Nicholes]
af621d0066770895fd79562728e93099c8c52060Christian Maeder
af621d0066770895fd79562728e93099c8c52060Christian Maeder *) Authz: Add the new module mod_authz_core which acts as the
af621d0066770895fd79562728e93099c8c52060Christian Maeder authorization provider vector and contains common authz
af621d0066770895fd79562728e93099c8c52060Christian Maeder directives. [Brad Nicholes]
af621d0066770895fd79562728e93099c8c52060Christian Maeder
af621d0066770895fd79562728e93099c8c52060Christian Maeder *) Authz: Renamed mod_authz_dbm authz providers from 'group' and
'file-group' to 'dbm-group' and 'dbm-file-group'. [Brad Nicholes]
*) Authz: Added the new authz providers 'env', 'ip', 'host', 'all' to handle
host-based access control provided by mod_authz_host and invoked
through the 'Require' directive. [Brad Nicholes]
*) Authz: Convert all of the authz modules from hook based to
provider based. [Brad Nicholes]
*) mod_cache: Add CacheMinExpire directive to set the minimum time in
seconds to cache a document.
[Brian Akins <brian.akins turner.com>, Ruediger Pluem]
*) mod_authz_dbd: SQL authz with Login/Session support [Nick Kew]
*) Fix typo in ProxyStatus syntax error message.
[Christophe Jaillet <christophe.jaillet wanadoo.fr>]
*) Asynchronous write completion for the Event MPM. [Brian Pane]
*) Added an End-Of-Request bucket type. The logging of a request and
the freeing of its pool are now done when the EOR bucket is destroyed.
This has the effect of delaying the logging until right after the last
of the response is sent; ap_core_output_filter() calls the access logger
indirectly when it destroys the EOR bucket. [Brian Pane]
*) Rewrite of logresolve support utility: IPv6 addresses are now supported
and the format of statistical output has changed. [Colm MacCarthaigh]
*) Rewrite of ap_coreoutput_filter to do nonblocking writes [Brian Pane]
*) Added new connection states for handler and write completion
[Brian Pane]
*) mod_cgid: Refuse to work on Solaris 10 due to OS bugs. PR 34264.
[Justin Erenkrantz]
*) Teach mod_ssl to use arbitrary OIDs in an SSLRequire directive,
allowing string-valued client certificate attributes to be used for
access control, as in: SSLRequire "value" in OID("1.3.6.1.4.1.18060.1")
[Martin Kraemer, David Reid]
[Apache 2.1.0-dev includes those bug fixes and changes with the
Apache 2.2.xx tree as documented, and except as noted, below.]
Changes with Apache 2.2.x and later:
*) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
Changes with Apache 2.0.x and later:
*) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup
Changes with Apache 1.3.x and later:
*) http://svn.apache.org/viewvc/httpd/httpd/branches/1.3.x/src/CHANGES?view=markup