CHANGES revision a77e5e9b423083b5436bbfd84e8b57329b738feb
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt -*- coding: utf-8 -*-
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsChanges with Apache 2.5.0
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *) mod_session: When we have a session we were unable to decode,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews behave as if there was no session at all. [Thomas Eckert
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_session: Fix problems interpreting the SessionInclude and
28a8f5b0de57d269cf2845c69cb6abe18cbd3b3aMark Andrews SessionExclude configuration. PR 56038. [Erik Pearson
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_rewrite: Rename the handler that does per-directory internal
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt redirects to "rewrite-redirect-handler" from "redirect-handler" so
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt it is less ambiguous and less likely to be reused. [Eric Covener]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_dir: Don't search for a DirectoryIndex or DirectorySlash on a URL
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt that was just rewritten by mod_rewrite. PR53929. [Eric Covener]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_dir: Add DirectoryCheckHandler to allow a 2.2-like behavior, skipping
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt execution when a handler is already set. PR53929. [Eric Covener]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_rewrite: Protect against looping with the [N] flag by enforcing a
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt default limit of 10000 iterations, and allowing each rule to change its
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt limit. [Eric Covener]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_ssl: Fix config merging of SSLOCSPEnable and SSLOCSPOverrideResponder.
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt [Jeff Trawick]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) Add HttpContentLengthHeadZero and HttpExpectStrict directives.
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt [Yehuda Sadeh <yehuda inktank com>, Justin Erenkrantz]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) core: Support named groups and backreferences within the LocationMatch,
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt DirectoryMatch, FilesMatch and ProxyMatch directives. [Graham Leggett]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_ssl: Remove the hardcoded algorithm-type dependency for the
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt SSLCertificateFile and SSLCertificateKeyFile directives, to enable
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt future algorithm agility, and deprecate the SSLCertificateChainFile
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt directive (obsoleted by SSLCertificateFile). [Kaspar Brand]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) FreeBSD: Disable IPv4-mapped listening sockets by default for versions
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt 5+ instead of just for FreeBSD 5. PR 53824. [Jeff Trawick]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_auth_form: Add a debug message when the fields on a form are not
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt recognised. [Graham Leggett]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_ssl: Add -t -DDUMP_CA_CERTS option which dumps the filenames of all
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt configured SSL CA certificates to stdout the same way as DUMP_CERTS does.
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt [Jan Kaluza]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_headers: Allow the "value" parameter of Header and RequestHeader to
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt contain an ap_expr expression if prefixed with "expr=". [Eric Covener]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) Add suspend_connection and resume_connection hooks to notify modules
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt when the thread/connection relationship changes. (Currently implemented
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt only for the Event MPM; should be implemented for all async MPMs.)
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt [Jeff Trawick]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_ssl: Don't flush when an EOS is received. Prepares mod_ssl
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt to support write completion. [Graham Leggett]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) prefork: Fix long delays when doing a graceful restart.
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt PR 54852 [Jim Jagielski, Arkadiusz Miskiewicz <arekm maven pl>]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) core: Add parse_errorlog_arg callback to ap_errorlog_provider
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt to allow providers to check the ErrorLog argument. [Jan Kaluza]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) core: Detect incomplete body in HTTP input filter and return
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt APR_INCOMPLETE. PR 55475 [Yann Ylavic <ylavic dev gmail com>]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_cgid: Use the servers Timeout for each read from a CGI script,
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt allow override with new CGIDRequestTimeout directive. PR43494
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt [Eric Covener, Toshikuni Fukaya <toshikuni-fukaya cybozu co jp>]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) core: Add missing Reason-Phrase in HTTP response headers.
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt PR 54946. [Rainer Jung]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) core: ensure any abnormal exit is reported to stderr if it's a tty.
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt PR 55670 [Nick Kew]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_proxy: Added support for unix domain sockets as the
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt backend server endpoint [Jim Jagielski, Blaise Tarr
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt <blaise tarr gmail com>]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_auth_form: Make sure the optional functions are loaded even when
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt the AuthFormProvider isn't specified. [Graham Leggett]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_lua: Let the Inter-VM get/set functions work with a global
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt shared memory pool instead of a per-process pool. [Daniel Gruno]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) ldap: Support ldaps when using the Microsoft LDAP SDK.
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt PR 54626. [Jean-Frederic Clere]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_proxy: Add ap_connection_reusable() for checking if a connection
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt is reusable as of this point in processing. [Jeff Trawick]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_authnz_ldap: Change default value of AuthLDAPMaxSubGroupDepth to 0
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt to avoid performance problems when subgroups aren't in use. [Eric Covener]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_syslog: New module implementing syslog ap_error_log provider.
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt Previously, this code was part of core, now it's in separate module.
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt [Jan Kaluza]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) core: Add ap_errorlog_provider to make ErrorLog logging modular. Move
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt syslog support from core to new mod_syslog. [Jan Kaluza]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) core: draft-ietf-httpbis-p1-messaging-23 corrections regarding
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt TE/CL conflicts. [Yann Ylavic <ylavic.dev gmail com>, Jim Jagielski]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_proxy_fcgi: Use apr_socket_timeout_get instead of hard-coded
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt 30 seconds timeout. [Jan Kaluza]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) WinNT MPM: If ap_run_pre_connection() fails or sets c->aborted, don't
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt save the socket for reuse by the next worker as if it were an
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt APR_SO_DISCONNECTED socket. Restores 2.2 behavior. [Eric Covener]
f07b2fccaf6be13d9440d323e9e79ee84fe345e2Evan Hunt *) mod_lua: Add a logging hook for modifying/skipping logs. [Daniel Gruno]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_status, mod_echo: Fix the display of client addresses.
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt They were truncated to 31 characters which is not enough for IPv6 addresses.
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt PR 54848 [Bernhard Schmidt <berni birkenwald de>]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_lua: If the first yield() of a LuaOutputFilter returns a string, it should
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt be prefixed to the response as documented. [Eric Covener]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_lua: Remove ETAG, Content-Length, and Content-MD5 when a LuaOutputFilter
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt is configured without mod_filter. [Eric Covener]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_lua: Register LuaOutputFilter scripts as changing the content and
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt content-length by default, when run my mod_filter. Previously,
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt growing or shrinking a response that started with Content-Length set
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt would require mod_filter and FilterProtocol change=yes. [Eric Covener]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_lua: Return a 500 error if a LuaHook* script doesn't return a
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt numeric return code. [Eric Covener]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_authnz_fcgi: New module to enable FastCGI authorizer
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt applications to authenticate and/or authorize clients.
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt [Jeff Trawick]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) core: Add ap_log_data(), ap_log_rdata(), etc. for logging buffers.
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt [Jeff Trawick]
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt *) mod_unique_id: Use output of the PRNG rather than IP address and
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt pid, avoiding sleep() call and possible DNS issues at startup,
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt plus improving randomness for IPv6-only hosts.
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt [Jan Kaluza <jkaluza redhat.com>]
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt *) mod_authnz_ldap: Support primitive LDAP servers that do not accept
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt filters, such as "SDBM-backed LDAP" on z/OS, by allowing a special
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt filter "none" to be specified in AuthLDAPURL. [Eric Covener]
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt *) mod_file_cache: mod_file_cache should be able to serve files that
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt haven't had a Content-Type set via e.g. mod_mime. [Eric Covener]
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt *) core: merge AllowEncodedSlashes from the base configuration into
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt virtual hosts. [Eric Covener]
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt *) AIX: Install DSO's with "cp" instead of "install" in instdso.sh
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt [Eric Covener]
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt *) mod_ldap: Don't keep retrying if a new LDAP connection times out.
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt [Eric Covener]
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt *) mod_deflate: permit compilation of mod_deflate against a zlib that has
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt been configured with -D Z_PREFIX, which redefines the token "deflate".
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt [Eric Covener]
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt *) mod_socache_shmcb.c: Remove arbitrary restriction on shared memory size
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt previously limited to 64MB. [Jens Låås <jelaas gmail.com>]
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt *) mod_auth_digest: Use the secret when generating nonces in all cases and
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt not only when AuthName is used in .htaccess files (this change may cause
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt problems if used with round robin load balancers). Don't regenerate the
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt secret on graceful restarts. PR 54637 [Stefan Fritsch]
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt *) core: Remove apr_brigade_flatten(), buffering and duplicated code
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt from the HTTP_IN filter, parse chunks in a single pass with zero copy.
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt Reduce memory usage by 48 bytes per request. [Graham Leggett]
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt *) core: Stop the HTTP_IN filter from attempting to write error buckets
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt to the output filters, which is bogus in the proxy case. Create a
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt clean mapping from APR codes to HTTP status codes, and use it where
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt needed. [Graham Leggett]
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt *) mod_proxy: Ensure network errors detected by the proxy are returned as
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt 504 Gateway Timout as opposed to 502 Bad Gateway, in order to be
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt compliant with RFC2616 14.9.4 Cache Revalidation and Reload Controls.
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt *) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) core, mod_ssl: Enable the ability for a module to reverse the sense of
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt a poll event from a read to a write or vice versa. This is a step on
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt the way to allow mod_ssl taking full advantage of the event MPM.
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt [Graham Leggett]
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_ldap: LDAP connections used for authentication were not respecting
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt LDAPConnectionPoolTimeout. PR 54587
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) core: ap_rgetline_core now pulls from r->proto_input_filters.
c46ce2d79b4398a3db7c25b50c7ca3b292f0afa8Evan Hunt *) mod_proxy_html: process parsed comments immediately.
HTML/XHTML [Nick Kew]
[Jan Kaluza <jkaluza redhat.com>]
*) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
setuid/setgid capability bits rather than a setuid root binary.
[Matthew Steele <mdsteele google.com>]
passing through the server in such a way that connections and/or
Apache 2.4.xx tree as documented below, except as noted.]
Changes with Apache 2.4.x and later:
Changes with Apache 2.2.x and later:
Changes with Apache 2.0.x and later: