CHANGES revision a51677a04fed21affebc84f6065a77ac33aa8ed0
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley -*- coding: utf-8 -*-
7d32c065c7bb56f281651ae3dd2888f32ce4f1d9Bob HalleyChanges with Apache 2.3.0
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley[ When backported to 2.2.x, remove entry from this file ]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) core, authn/z: Determine registered authn/z providers directly in
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley ap_setup_auth_internal(), which allows optional functions that just
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley wrapped ap_list_provider_names() to be removed from authn/z modules.
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley [Chris Darroch]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) authn/z: Convert common provider version strings to macros.
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley [Chris Darroch]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) ab: Make ab.c compile on VC6. PR 45024 [Ruediger Pluem]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) configure: Don't reject libtool 2.x
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley PR 44817 [Arfrever Frehtes Taifersar Arahesis <Arfrever.FTA gmail.com>]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) suexec: When group is given as a numeric gid, validate it by looking up
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley the actual group name such that the name can be used in log entries.
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley PR 7862 [<y-koga apache.or.jp>, Leif W <warp-9.9 usa.net>]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) core: When testing for slash-terminated configuration paths in
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley ap_location_walk(), don't look past the start of an empty string
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley such as that created by a <Location ""> directive.
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley [Chris Darroch]
440be4c866f6935ac069db79a414304507a664c2Michael Graff *) core, mod_proxy: If a kept_body is present, it becomes safe for
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley subrequests to support message bodies. Make sure that safety
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley checks within the core and within the proxy are not triggered
5135844210552b359cdd42f483e52633f2680889Andreas Gustafsson when kept_body is present. This makes it possible to embed
726290e9d5b720b736fa39d9f7d92c2efb7d1f24Bob Halley proxied POST requests within mod_include. [Graham Leggett]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) mod_auth_form: Make sure the input filter stack is properly set
2504b0a58600c1156a6b829c816d13c58a069453Bob Halley up before reading the login form. Make sure the kept body filter
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley is correctly inserted to ensure the body can be read a second
c56c5586b49ccddbaf7e2b5c6c06adee1c509253Bob Halley time safely should the authn be successful. [Graham Leggett,
7457bbd82fa701ee78f709cd157436e6878b43d1Bob Halley Ruediger Pluem]
00e7d7a0e8529998c78b73371dc90fbf680b57efBob Halley *) mod_request: Insert the KEPT_BODY filter via the insert_filter
c56c5586b49ccddbaf7e2b5c6c06adee1c509253Bob Halley hook instead of during fixups. Add a safety check to ensure the
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley filters cannot be inserted more than once. [Graham Leggett,
b984520acca2532d048eae929dc0682dd334c7a3Brian Wellington Ruediger Pluem]
290074dd410acdd003f67f99409d75e0dcacd97bAndreas Gustafsson *) core: Do not allow Options ALL if not all options are allowed to be
070d058606dff606710f320b071891bf16e02076Andreas Gustafsson overwritten. PR 44262 [Michał Grzędzicki <lazy iq.pl>]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) ap_cache_cacheable_headers_out() will (now) always
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley merge an error heaeders _before_ clearing them and _before_
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley merging in the actual entity headers and doing normal
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley hop-by-hop cleansing. [Dirk-Willem van Gulik].
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) cache: retire ap_cache_cacheable_hdrs_out() which was used
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley for both in- and out-put headers; and replace it by a single
6f44af1c8320e84d6b0c0c42bacadfe3020d9a91Mark Andrews ap_cache_cacheable_headers() wrapped in a in- and out-put
6f44af1c8320e84d6b0c0c42bacadfe3020d9a91Mark Andrews specific ap_cache_cacheable_headers_in()/out(). The latter
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley which will also merge error and ensure content-type. To keep
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley cache modules consistent with ease. This API change bumps
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley up the minor MM by one [Dirk-Willem van Gulik].
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) mod_rewrite: Allow Cookie option to set secure and HttpOnly flags.
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley PR 44799 [Christian Wenz <christian wenz.org>]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) Move the KeptBodySize directive, kept_body filters and the
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley ap_parse_request_body function out of the http module and into a
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley new module called mod_request, reducing the size of the core.
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley [Graham Leggett]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) mod_dbd: Handle integer configuration directive parameters with a
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley dedicated function.
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) Change the directives within the mod_session* modules to be valid
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley both inside and outside the location/directory sections, as
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley suggested by wrowe. [Graham Leggett]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) mod_auth_form: Add a module capable of allowing end users to log
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley in using an HTML form, storing the credentials within mod_session.
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley [Graham Leggett]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) Add a function to the http filters that is able to parse an HTML
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley form request with the type of application/x-www-form-urlencoded.
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley [Graham Leggett]
6d39d25c557d3778ea8dc1d032cb443302879aa7Andreas Gustafsson *) mod_session_crypto: Initialise SSL in the post config hook.
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson [Ruediger Pluem, Graham Leggett]
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson *) mod_session_dbd: Add a session implementation capable of storing
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson session information in a SQL database via the dbd interface. Useful
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson for sites where session privacy is important. [Graham Leggett]
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson *) mod_session_crypto: Add a session encoding implementation capable
c627721fedbb33c18bf577c46ff281a8c3bc082fMark Andrews of encrypting and decrypting sessions wherever they may be stored.
c627721fedbb33c18bf577c46ff281a8c3bc082fMark Andrews Introduces a level of privacy when sessions are stored on the
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley browser. [Graham Leggett]
c627721fedbb33c18bf577c46ff281a8c3bc082fMark Andrews *) mod_session_cookie: Add a session implementation capable of storing
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley session information within cookies on the browser. Useful for high
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley volume sites where server bound sessions are too resource intensive.
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson [Graham Leggett]
00e7d7a0e8529998c78b73371dc90fbf680b57efBob Halley *) mod_session: Add a generic session interface to unify the different
7457bbd82fa701ee78f709cd157436e6878b43d1Bob Halley attempts at saving persistent sessions across requests.
00e7d7a0e8529998c78b73371dc90fbf680b57efBob Halley [Graham Leggett]
7457bbd82fa701ee78f709cd157436e6878b43d1Bob Halley *) core, authn/z: Avoid calling access control hooks for internal requests
00e7d7a0e8529998c78b73371dc90fbf680b57efBob Halley with configurations which match those of initial request. Revert to
00e7d7a0e8529998c78b73371dc90fbf680b57efBob Halley original behaviour (call access control hooks for internal requests
c627721fedbb33c18bf577c46ff281a8c3bc082fMark Andrews with URIs different from initial request) if any access control hooks or
00e7d7a0e8529998c78b73371dc90fbf680b57efBob Halley providers are not registered as permitting this optimization.
7457bbd82fa701ee78f709cd157436e6878b43d1Bob Halley Introduce wrappers for access control hook and provider registration
7457bbd82fa701ee78f709cd157436e6878b43d1Bob Halley which can accept additional mode and flag data. [Chris Darroch]
7457bbd82fa701ee78f709cd157436e6878b43d1Bob Halley *) Introduced ap_expr API for expression evaluation.
7457bbd82fa701ee78f709cd157436e6878b43d1Bob Halley This is adapted from mod_include, which is the first module
7457bbd82fa701ee78f709cd157436e6878b43d1Bob Halley to use the new API.
7457bbd82fa701ee78f709cd157436e6878b43d1Bob Halley *) mod_authz_dbd: When redirecting after successful login/logout per
19f08273e2592fa48608ec1ac5e021b4b3489030Bob Halley AuthzDBDRedirectQuery, do not report authorization failure, and use
fd15c8e32ed0c1cfd3ed737858a81966e7fbaeacAndreas Gustafsson first row returned by database query instead of last row.
2504b0a58600c1156a6b829c816d13c58a069453Bob Halley [Chris Darroch]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) mod_ldap: Correctly return all requested attribute values
726290e9d5b720b736fa39d9f7d92c2efb7d1f24Bob Halley when some attributes have a null value.
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley PR 44560 [Anders Kaseorg <anders kaseorg.com>]
c56c5586b49ccddbaf7e2b5c6c06adee1c509253Bob Halley *) core: check symlink ownership if both FollowSymlinks and
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley SymlinksIfOwnerMatch are set [Nick Kew]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) core: fix origin checking in SymlinksIfOwnerMatch
b984520acca2532d048eae929dc0682dd334c7a3Brian Wellington PR 36783 [Robert L Mathews <rob-apache.org.bugs tigertech.net>]
5135844210552b359cdd42f483e52633f2680889Andreas Gustafsson *) Activate mod_cache, mod_file_cache and mod_disc_cache as part of the
f93d33e24fdf76eb2558168f018b8992bcfc5681Andreas Gustafsson 'most' set for '--enable-modules' and '--enable-shared-mods'. Include
72f8abc08b889aeca5768104e8a6d670ed1c9ffbAndreas Gustafsson mod_mem_cache in 'all' as well. [Dirk-Willem van Gulik]
03ccfda9ec9fde56c83b381eccbac44071b36143Andreas Gustafsson *) Also install mod_so.h, mod_rewrite.h and mod_cache.h; as these
03ccfda9ec9fde56c83b381eccbac44071b36143Andreas Gustafsson contain public function declarations which are useful for
03ccfda9ec9fde56c83b381eccbac44071b36143Andreas Gustafsson third party module authors. PR 42431 [Dirk-Willem van Gulik].
0157410ea7680a43f83c5c581c570de73a5a869eMichael Graff *) mod_dir, mod_negotiation: pass the output filter information
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley to newly created sub requests; as these are later on used
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley as true requests with an internal redirect. This allows for
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley mod_cache et.al. to trap the results of the redirect.
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley [Dirk-Willem van Gulik, Ruediger Pluem]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) mod_ldap: Add support (taking advantage of the new APR capability)
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley for ldap rebind callback while chasing referrals. This allows direct
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley searches on LDAP servers (in particular MS Active Directory 2003+)
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley using referrals without the use of the global catalog.
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley PRs 26538, 40268, and 42557 [Paul J. Reder]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) Support chroot on Unix-family platforms
03ccfda9ec9fde56c83b381eccbac44071b36143Andreas Gustafsson PR 43596 [Dimitar Pashev <mitko banksoft-bg.com>]
03ccfda9ec9fde56c83b381eccbac44071b36143Andreas Gustafsson *) mod_ssl: Added server name indication support (SNI, RFC 4366).
7457bbd82fa701ee78f709cd157436e6878b43d1Bob Halley PR 34607. [Kaspar Brand <asfbugz velox.ch>]. A test configuration
7457bbd82fa701ee78f709cd157436e6878b43d1Bob Halley can be created with test/make_sni.sh [Dirk-Willem van Gulik].
9e565c950b7eef312b2f56125fde371bf1e3f4b7Andreas Gustafsson *) ApacheMonitor.exe: Introduce --kill argument for use by the
7457bbd82fa701ee78f709cd157436e6878b43d1Bob Halley installer. This will permit the installation tool to remove
9e565c950b7eef312b2f56125fde371bf1e3f4b7Andreas Gustafsson all running instances before attempting to remove the .exe.
c627721fedbb33c18bf577c46ff281a8c3bc082fMark Andrews [William Rowe]
00e7d7a0e8529998c78b73371dc90fbf680b57efBob Halley *) mod_ssl: Add support for OCSP validation of client certificates.
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson PR 41123. [Marc Stern <marc.stern approach.be>, Joe Orton]
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson *) mod_unique_id: Fix timestamp value in UNIQUE_ID.
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley PR 37064 [Kobayashi <kobayashi firstserver.co.jp>]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) mod_serf: New module for Reverse Proxying. [Paul Querna]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) core: Add the option to keep aside a request body up to a certain
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley size that would otherwise be discarded, to be consumed by filters
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley such as mod_include. When enabled for a directory, POST requests
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley to shtml files can be passed through to embedded scripts as POST
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley requests, rather being downgraded to GET requests. [Graham Leggett]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) mod_ssl: Fix TLS upgrade (RFC 2817) support. PR 41231. [Joe Orton]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) scoreboard: Correctly declare ap_time_process_request.
c56c5586b49ccddbaf7e2b5c6c06adee1c509253Bob Halley *) core; scoreboard: ap_get_scoreboard_worker(sbh) now takes the sbh member
c56c5586b49ccddbaf7e2b5c6c06adee1c509253Bob Halley from the connection rec, ap_get_scoreboard_worker(proc, thread) will now
c56c5586b49ccddbaf7e2b5c6c06adee1c509253Bob Halley provide the unusual legacy lookup. [William Rowe]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) mpm winnt: fix null pointer dereference
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley PR 42572 [Davi Arnaut]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) mod_authnz_ldap, mod_authn_dbd: Tidy up the code to expose authn
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley parameters to the environment. Improve portability to
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley EBCDIC machines by using apr_toupper(). [Martin Kraemer]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) mod_ldap, mod_authnzldap: Add support for nested groups (i.e. the ability
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley to authorize an authenticated user via a "require ldap-group X" directive
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley where the user is not in group X, but is in a subgroup contained in X.
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley PR 42891 [Paul J. Reder]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) mod_ssl: Add support for caching SSL Sessions in memcached. [Paul Querna]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) mod_ldap: Fix the search limit parameter to ldap_search_ext_s()
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley for SDKs that define LDAP_NO_LIMIT to something other than -1.
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley [David Jones <oscaremma gmail.com>]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) apxs: Enhance -q flag to print all known variables and their values
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley when invoked without variable name(s).
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley [William Rowe, Sander Temme]
03ccfda9ec9fde56c83b381eccbac44071b36143Andreas Gustafsson *) apxs: Eliminate run-time check for mod_so. PR 40653.
72f8abc08b889aeca5768104e8a6d670ed1c9ffbAndreas Gustafsson [David M. Lee <dmlee crossroads.com>]
72f8abc08b889aeca5768104e8a6d670ed1c9ffbAndreas Gustafsson *) beos MPM: Create pmain pool and run modules' child_init hooks when
f93d33e24fdf76eb2558168f018b8992bcfc5681Andreas Gustafsson entering ap_mpm_run(), then destroy pmain when exiting ap_mpm_run().
726290e9d5b720b736fa39d9f7d92c2efb7d1f24Bob Halley [Chris Darroch]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) netware MPM: Destroy pmain pool when exiting ap_mpm_run() so that
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley cleanups registered in modules' child_init hooks are performed.
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley [Chris Darroch]
38980568375a6505452550b5677104ab44291b66Bob Halley *) mod_dbd: Stash DBD connections in request_config of initial request
38980568375a6505452550b5677104ab44291b66Bob Halley only, or else sub-requests and internal redirections may cause
2504b0a58600c1156a6b829c816d13c58a069453Bob Halley entire DBD pool to be stashed in a single HTTP request. [Chris Darroch]
fd15c8e32ed0c1cfd3ed737858a81966e7fbaeacAndreas Gustafsson *) Fix issue which could cause error messages to be written to access logs
fd15c8e32ed0c1cfd3ed737858a81966e7fbaeacAndreas Gustafsson on Win32. PR 40476. [Tom Donovan <Tom.Donovan acm.org>]
5135844210552b359cdd42f483e52633f2680889Andreas Gustafsson *) The LockFile directive, which specifies the location of
c627721fedbb33c18bf577c46ff281a8c3bc082fMark Andrews the accept() mutex lockfile, is deprecated. Instead, the
7457bbd82fa701ee78f709cd157436e6878b43d1Bob Halley AcceptMutex directive now takes an optional lockfile
7457bbd82fa701ee78f709cd157436e6878b43d1Bob Halley location parameter, ala SSLMutex. [Jim Jagielski]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) mod_authn_dbd: Export any additional columns queried in the SQL select
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley into the environment with the name AUTHENTICATE_<COLUMN>. This brings
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley mod_authn_dbd behaviour in line with mod_authnz_ldap. [Graham Leggett]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) mod_dbd: Key the storage of prepared statements on the hex string
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley value of server_rec, rather than the server name, as the server name
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley may change (eg when the server name is set) at any time, causing
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley weird behaviour in modules dependent on mod_dbd. [Graham Leggett]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) mod_proxy_fcgi: Added win32 build. [Mladen Turk]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) sendfile_nonblocking() takes the _brigade_ as an argument, gets
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley the first bucket from the brigade, finds it not to be a FILE
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley bucket and barfs. The fix is to pass a bucket rather than a brigade.
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley [Niklas Edmundsson <nikke acc.umu.se>]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) mod_rewrite: support rewritemap by SQL query [Nick Kew]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) ap_get_server_version() has been removed. Third-party modules must
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley now use ap_get_server_banner() or ap_get_server_description().
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley [Jeff Trawick]
c56c5586b49ccddbaf7e2b5c6c06adee1c509253Bob Halley *) All MPMs: Introduce a check_config phase between pre_config and
c56c5586b49ccddbaf7e2b5c6c06adee1c509253Bob Halley open_logs, to allow modules to review interdependent configuration
c56c5586b49ccddbaf7e2b5c6c06adee1c509253Bob Halley directive values and adjust them while messages can still be logged
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley to the console. Handle relevant MPM directives during this phase
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley and format messages for both the console and the error log, as
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley appropriate. [Chris Darroch]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) mod_proxy: don't URLencode tilde in path component
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley [Stijn Hoop <stijn sandcat.nl>]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) mpm_winnt: Fix return values from wait_for_many_objects.
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley The return value is index to the signaled thread in the
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley creted_threads array. We can not use WAIT_TIMEOUT because
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley his value is defined as 258, thus limiting the MaxThreads
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley to that value. [Mladen Turk]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) core: Do not allow internal redirects like the DirectoryIndex of mod_dir
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley to circumvent the symbolic link checks imposed by FollowSymLinks and
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley SymLinksIfOwnerMatch. [Nick Kew, Ruediger Pluem, William Rowe]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) mod_proxy: Support environment variable interpolation in reverse
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley proxying directives. [Nick Kew]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) core: Add the filename of the configuration file to the warning message
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley about the useless use of AllowOverride. PR 39992.
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley [Darryl Miles <darryl darrylmiles.org>]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) New SSLLogLevelDebugDump [ None (default) | IO (not bytes) | Bytes ]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley configures the I/O Dump of SSL traffic, when LogLevel is set to Debug.
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley The default is none as this is far greater debugging resolution than
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley the typical administrator is prepared to untangle. [William Rowe]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) mod_disk_cache: If possible, check if the size of an object to cache is
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley within the configured boundaries before actually saving data.
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley [Niklas Edmundsson <nikke acc.umu.se>]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) mod_cache: Convert all values to seconds before comparing them when
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley checking whether to send a Warning header for a stale response.
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley PR 39713. [Owen Taylor <otaylor redhat.com>]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) mod_disk_cache: Delete temporary files if they cannot be renamed to their
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley final name. [Davi Arnaut <davi haxent.com.br>]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) Worker and event MPMs: Remove improper scoreboard updates which were
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley performed in the event of a fork() failure. [Chris Darroch]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) Add support for fcgi:// proxies to mod_rewrite.
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley [Markus Schiegl <ms schiegl.com>]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) Remove incorrect comments from scoreboard.h regarding conditional
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley loading of worker_score structure with mod_status, and remove unused
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley definitions relating to old life_status field.
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley [Chris Darroch <chrisd pearsoncmg.com>]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) Remove allocation of memory for unused array of lb_score pointers
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley in ap_init_scoreboard(). [Chris Darroch <chrisd pearsoncmg.com>]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) Add mod_proxy_fcgi, a FastCGI back end for mod_proxy.
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley [Garrett Rooney, Jim Jagielski, Paul Querna]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) Event MPM: Fill in the scoreboard's tid field. PR 38736.
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley [Chris Darroch <chrisd pearsoncmg.com>]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) mod_charset_lite: Remove Content-Length when output filter can
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley invalidate it. Warn when input filter can invalidate it.
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley [Jeff Trawick]
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley *) Authz: Add the new module mod_authn_core that will provide common
f94f59d746daffc38356d0a019b64eb01d2341c0Bob Halley authn directives such as 'AuthType', 'AuthName'. Move the directives
19f08273e2592fa48608ec1ac5e021b4b3489030Bob Halley 'AuthType' and 'AuthName' out of the core module and merge mod_authz_alias
38980568375a6505452550b5677104ab44291b66Bob Halley into mod_authn_core. [Brad Nicholes]
e3027d397f237ff018174fd17bf377a4a1890c6bBob Halley *) Authz: Move the directives 'Order', 'Allow', 'Deny' and 'Satisfy'
e3027d397f237ff018174fd17bf377a4a1890c6bBob Halley into the new module mod_access_compat which can be loaded to provide
e3027d397f237ff018174fd17bf377a4a1890c6bBob Halley support for these directives.
0df20c101eea3ffa57d9554ec20a1b710fa63064Bob Halley [Brad Nicholes]
0df20c101eea3ffa57d9554ec20a1b710fa63064Bob Halley *) Authz: Move the 'Require' directive from the core module as well as
38980568375a6505452550b5677104ab44291b66Bob Halley add the directives '<SatisfyAll>', '<SatisfyOne>', '<RequireAlias>'
726290e9d5b720b736fa39d9f7d92c2efb7d1f24Bob Halley and 'Reject' to mod_authz_core. The new directives introduce 'AND/OR'
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley logic into the authorization processing. [Brad Nicholes]
c56c5586b49ccddbaf7e2b5c6c06adee1c509253Bob Halley *) Authz: Add the new module mod_authz_core which acts as the
726290e9d5b720b736fa39d9f7d92c2efb7d1f24Bob Halley authorization provider vector and contains common authz
c56c5586b49ccddbaf7e2b5c6c06adee1c509253Bob Halley directives. [Brad Nicholes]
19f08273e2592fa48608ec1ac5e021b4b3489030Bob Halley *) Authz: Renamed mod_authz_dbm authz providers from 'group' and
c56c5586b49ccddbaf7e2b5c6c06adee1c509253Bob Halley 'file-group' to 'dbm-group' and 'dbm-file-group'. [Brad Nicholes]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) Authz: Added the new authz providers 'env', 'ip', 'host', 'all' to handle
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley host-based access control provided by mod_authz_host and invoked
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley through the 'Require' directive. [Brad Nicholes]
e485d16462b0a66b835107fae04fe9d562e77af0Bob Halley *) Authz: Convert all of the authz modules from hook based to
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley provider based. [Brad Nicholes]
0df20c101eea3ffa57d9554ec20a1b710fa63064Bob Halley *) mod_cache: Add CacheMinExpire directive to set the minimum time in
0df20c101eea3ffa57d9554ec20a1b710fa63064Bob Halley seconds to cache a document.
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley [Brian Akins <brian.akins turner.com>, Ruediger Pluem]
726290e9d5b720b736fa39d9f7d92c2efb7d1f24Bob Halley *) mod_authz_dbd: SQL authz with Login/Session support [Nick Kew]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) Fix typo in ProxyStatus syntax error message.
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley [Christophe Jaillet <christophe.jaillet wanadoo.fr>]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) Asynchronous write completion for the Event MPM. [Brian Pane]
726290e9d5b720b736fa39d9f7d92c2efb7d1f24Bob Halley *) Added an End-Of-Request bucket type. The logging of a request and
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley the freeing of its pool are now done when the EOR bucket is destroyed.
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley This has the effect of delaying the logging until right after the last
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley of the response is sent; ap_core_output_filter() calls the access logger
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley indirectly when it destroys the EOR bucket. [Brian Pane]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) Rewrite of logresolve support utility: IPv6 addresses are now supported
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley and the format of statistical output has changed. [Colm MacCarthaigh]
205790a755849f9b9ec12dd7836dcd87ca580d89Bob Halley *) Rewrite of ap_coreoutput_filter to do nonblocking writes [Brian Pane]
19f08273e2592fa48608ec1ac5e021b4b3489030Bob Halley *) Added new connection states for handler and write completion
19f08273e2592fa48608ec1ac5e021b4b3489030Bob Halley [Brian Pane]
c56c5586b49ccddbaf7e2b5c6c06adee1c509253Bob Halley *) mod_cgid: Refuse to work on Solaris 10 due to OS bugs. PR 34264.
c56c5586b49ccddbaf7e2b5c6c06adee1c509253Bob Halley [Justin Erenkrantz]
c56c5586b49ccddbaf7e2b5c6c06adee1c509253Bob Halley *) Teach mod_ssl to use arbitrary OIDs in an SSLRequire directive,
c56c5586b49ccddbaf7e2b5c6c06adee1c509253Bob Halley allowing string-valued client certificate attributes to be used for
19f08273e2592fa48608ec1ac5e021b4b3489030Bob Halley access control, as in: SSLRequire "value" in OID("1.3.6.1.4.1.18060.1")
c56c5586b49ccddbaf7e2b5c6c06adee1c509253Bob Halley [Martin Kraemer, David Reid]
fd15c8e32ed0c1cfd3ed737858a81966e7fbaeacAndreas Gustafsson [Apache 2.1.0-dev includes those bug fixes and changes with the
726290e9d5b720b736fa39d9f7d92c2efb7d1f24Bob Halley Apache 2.2.xx tree as documented, and except as noted, below.]
fd15c8e32ed0c1cfd3ed737858a81966e7fbaeacAndreas GustafssonChanges with Apache 2.2.x and later:
fd15c8e32ed0c1cfd3ed737858a81966e7fbaeacAndreas Gustafsson *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
19f08273e2592fa48608ec1ac5e021b4b3489030Bob HalleyChanges with Apache 2.0.x and later:
38980568375a6505452550b5677104ab44291b66Bob Halley *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup
38980568375a6505452550b5677104ab44291b66Bob HalleyChanges with Apache 1.3.x and later: