CHANGES revision b08558bf6a64f9501ad3eca34eaf4d978bd928cf
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek -*- coding: utf-8 -*-
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub HrozekChanges with Apache 2.3.13
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: Add support to ErrorLogFormat for logging the system unique
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek thread id under Linux. [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) event: New AsyncRequestWorkerFactor directive to influence how many
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek connections will be accepted per process. [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) prefork, worker, event: Rename MaxClients to MaxRequestWorkers which
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek describes more accurately what it does. [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) rotatelogs: Add -p argument to specify custom program to invoke
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek after a log rotation. PR 51285. [<sveniu ifi.uio.no>, Joe Orton]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_ssl: Don't do OCSP checks for valid self-issued certs. [Kaspar Brand]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_ssl: Avoid unnecessary renegotiations with SSLVerifyDepth 0.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek PR 48215. [Kaspar Brand]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_status: Display information about asynchronous connections in the
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek server-status. PR 44377. [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mpm_event: If the number of connections of a process is very high, or if
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek all workers are busy, don't accept new connections in that process.
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mpm_event: Process lingering close asynchronously instead of tying up
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek worker threads. [Jeff Trawick, Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mpm_event: If MaxMemFree is set, limit the number of pools that is kept
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek around. [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mpm_event: Fix graceful restart aborting connections. PR 43359.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Takashi Sato <takashi lans-tv com>]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_ssl: Disable AECDH ciphers in example config. PR 51363.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Rob Stradling <rob comodo com>]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: Introduce new function ap_get_conn_socket() to access the socket of
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek a connection. [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_data: Introduce a filter to support RFC2397 data URLs. [Graham
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_userdir/mod_alias/mod_vhost_alias: Correctly set DOCUMENT_ROOT,
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek CONTEXT_DOCUMENT_ROOT, CONTEXT_PREFIX. PR 26052. PR 46198.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: Allow to override document_root on a per-request basis. Introduce
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek new context_document_root and context_prefix which provide information
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek about non-global URI-to-directory mappings (from e.g. mod_userdir or
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek mod_alias) to scripts. PR 49705. [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: Add <ElseIf> and <Else> to complement <If> sections.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_ext_filter: Remove DebugLevel option in favor of per-module loglevel.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_include: Make the "#if expr" element use the new "ap_expr" expression
a4421a4261f73718e6b4c18c7bb9f020255e15c7Jakub Hrozek parser. The old parser can still be used by setting the new directive
a4421a4261f73718e6b4c18c7bb9f020255e15c7Jakub Hrozek SSILegacyExprParser. [Stefan Fritsch]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) core: Add some features to ap_expr for use by mod_include: a restricted
5d98dce1111f04475e0d14ace9a4bcb876206fa5Jakub Hrozek mode that does not allow to bypass request access restrictions; new
5d98dce1111f04475e0d14ace9a4bcb876206fa5Jakub Hrozek variables DOCUMENT_URI (alias for REQUEST_URI), LAST_MODIFIED; -A as an
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek alias for -U; an additional data entry in ap_expr_eval_ctx_t for use by
a4421a4261f73718e6b4c18c7bb9f020255e15c7Jakub Hrozek the consumer; an extensible ap_expr_exec_ctx() API that allows to use that
a4421a4261f73718e6b4c18c7bb9f020255e15c7Jakub Hrozek data entry. [Stefan Fritsch]
a4421a4261f73718e6b4c18c7bb9f020255e15c7Jakub Hrozek *) mod_include: Merge directory configs instead of one SSI* config directive
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek causing all other per-directory SSI* config directives to be reset.
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_charset_lite: Remove DebugLevel option in favour of per-module
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek loglevel. [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) core: Add ap_regexec_len() function that works with non-null-terminated
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek strings. PR 51231. [Yehezkel Horowitz <horowity checkpoint com>]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_authnz_ldap: If the LDAP server returns constraint violation,
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek don't treat this as an error but as "auth denied". [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_proxy_fcgi|scgi: Add support for "best guess" of PATH_INFO
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek for SCGI/FCGI. PR 50880, 50851. [Mark Montague <mark catseye.org>,
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek Jim Jagielski]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_cache: When content is served stale, and there is no means to
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek revalidate the content using ETag or Last-Modified, and we have
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek mandated no stale-on-error behaviour, stand down and don't cache.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek Saves a cache write that will never be read.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Graham Leggett]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_reqtimeout: Fix a timed out connection going into the keep-alive
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek state after a timeout when discarding a request body. PR 51103.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: Add various file existance test operators to ap_expr.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Stefan Fritsch]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_proxy_express: New mass reverse-proxy switch extension for
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek mod_proxy. [Jim Jagielski]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) configure: Fix script error when configuring module set "reallyall".
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek [Rainer Jung]
172bf27813151351a1ff8284a3d524660eca2efeJakub HrozekChanges with Apache 2.3.12
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) configure, core: Provide easier support for APR's hook probe
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek capability. [Jim Jagielski, Jeff Trawick]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) Silence autoconf 2.68 warnings. [Rainer Jung]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_authnz_ldap: Resolve crash when LDAP is used for authorization only
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek [Scott Hill <shill genscape.com>]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) support: Make sure check_forensic works with mod_unique_id loaded
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek [Joe Schaefer]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) Add child_status hook for tracking creation/termination of MPM child
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek processes. Add end_generation hook for notification when the last
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek MPM child of a generation exits. [Jeff Trawick]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_ldap: Make LDAPSharedCacheSize 0 create a non-shared-memory cache per
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek process as opposed to disabling caching completely. This allows to use
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek the non-shared-memory cache as a workaround for the shared memory cache
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek not being available during graceful restarts. PR 48958. [Stefan Fritsch]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) Add new ap_reserve_module_slots/ap_reserve_module_slots_directive API,
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek necessary if a module (like mod_perl) registers additional modules late
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek in the startup phase. [Stefan Fritsch]
a4421a4261f73718e6b4c18c7bb9f020255e15c7Jakub Hrozek *) core: Prevent segfault if DYNAMIC_MODULE_LIMIT is reached. PR 51072.
a4421a4261f73718e6b4c18c7bb9f020255e15c7Jakub Hrozek [Torsten Förtsch <torsten foertsch gmx net>]
a4421a4261f73718e6b4c18c7bb9f020255e15c7Jakub Hrozek *) WinNT MPM: Improve robustness under heavy load. [Jeff Trawick]
a4421a4261f73718e6b4c18c7bb9f020255e15c7Jakub Hrozek *) MinGW build improvements. PR 49535. [John Vandenberg
a4421a4261f73718e6b4c18c7bb9f020255e15c7Jakub Hrozek <jayvdb gmail.com>, Jeff Trawick]
a4421a4261f73718e6b4c18c7bb9f020255e15c7Jakub Hrozek *) core: Support module names with colons in loglevel configuration.
a4421a4261f73718e6b4c18c7bb9f020255e15c7Jakub Hrozek [Torsten Förtsch <torsten foertsch gmx net>]
a4421a4261f73718e6b4c18c7bb9f020255e15c7Jakub Hrozek *) mod_ssl, ab: Support OpenSSL compiled without SSLv2 support.
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek [Stefan Fritsch]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) core: Abort if the MPM is changed across restart. [Jeff Trawick]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_proxy_ajp: Add support for 'ProxyErrorOverride on'. PR 50945.
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek [Peter Pramberger <peter pramberger.at>, Jim Jagielski]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_proxy_fcgi: Add support for 'ProxyErrorOverride on'. PR 50913.
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek [Mark Montague <mark catseye.org>, Jim Jagielski]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) core: Change the APIs of ap_cfg_getline() and ap_cfg_getc() to return an
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek error code. Abort with a nice error message if a config line is too long.
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek Partial fix for PR 50824. [Stefan Fritsch]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_info: Dump config to stdout during startup if -DDUMP_CONFIG is
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek specified. PR 31956. [Stefan Fritsch]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) Restore visibility of DEFAULT_PIDLOG to core and modules. MPM
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek helper function ap_remove_pid() added. [Jeff Trawick]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) Enable DEFAULT_REL_RUNTIMEDIR on Windows and NetWare. [various]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) Correct C++ incompatibility with http_log.h. [Stefan Fritsch, Jeff
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_log_config: Prevent segfault. PR 50861. [Torsten Förtsch
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) core: AllowEncodedSlashes new option NoDecode to allow encoded slashes
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek in request URL path info but not decode them. Change behavior of option
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek "On" to decode the encoded slashes as 2.0 and 2.2 do. PR 35256,
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek PR 46830. [Dan Poirier]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_ssl: Check SNI hostname against Host header case-insensitively.
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek PR 49491. [Mayank Agrawal <magrawal.08 gmail.com>]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_ldap: Add LDAPConnectionPoolTTL to give control over lifetime
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek of bound backend LDAP connections. PR47634 [Eric Covener]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_cache: Make CacheEnable and CacheDisable configurable per
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek directory in addition to per server, making them work from within
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek a LocationMatch. [Graham Leggett]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) worker, event, prefork: Correct several issues when built as
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek DSOs; most notably, the scoreboard was reinitialized during graceful
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek restart, such that processes of the previous generation were not
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek observable. [Jeff Trawick]
172bf27813151351a1ff8284a3d524660eca2efeJakub HrozekChanges with Apache 2.3.11
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_win32: Added shebang check for '! so that .vbs scripts work as CGI.
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek Win32's cscript interpreter can only use a single quote as comment char.
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek [Guenter Knauf]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_proxy: balancer-manager now uses POST instead of GET.
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek [Jim Jagielski]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) core: new util function: ap_parse_form_data(). Previously,
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek this capability was tucked away in mod_request. [Jim Jagielski]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) core: new hook: ap_run_pre_read_request. [Jim Jagielski]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_cache: When a request other than GET or HEAD arrives, we must
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek invalidate existing cache entities as per RFC2616 13.10. PR 15868.
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek [Graham Leggett]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) modules: Fix many modules that were not correctly initializing if they
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek were not active during server startup but got enabled later during a
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek graceful restart. [Stefan Fritsch]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) core: Create new ap_state_query function that allows modules to determine
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek if the current configuration run is the initial one at server startup,
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek and if the server is started for testing/config dumping only.
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek [Stefan Fritsch]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_proxy: Runtime configuration of many parameters for existing
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek balancers via the balancer-manager. [Jim Jagielski]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_proxy: Runtime addition of new workers (BalancerMember) for existing
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek balancers via the balancer-manager. [Jim Jagielski]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_cache: When a bad Expires date is present, we need to behave as if
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek the Expires is in the past, not as if the Expires is missing. PR 16521.
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek [Co-Advisor <coad@measurement-factory.com>]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_cache: We must ignore quoted-string values that appear in a
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek Cache-Control header. PR 50199. [Graham Leggett]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_dav: Revert change to send 501 error if unknown Content-* header is
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek received for a PUT request. PR 42978. [Stefan Fritsch]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_cache: Respect s-maxage as described by RFC2616 14.9.3, which must
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek take precedence if present. PR 35247. [Graham Leggett]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_ssl: Fix a possible startup failure if multiple SSL vhosts
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek are configured with the same ServerName and private key file.
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek [Masahiro Matsuya <mmatsuya redhat.com>, Joe Orton]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_socache_dc: Make module compile by fixing some typos.
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek PR 50735 [Mark Montague <mark catseye.org>]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) prefork: Update MPM state in children during a graceful stop or
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek restart. PR 41743. [Andrew Punch <andrew.punch 247realmedia.com>]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_mime: Ignore leading dots when looking for mime extensions.
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek PR 50434 [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) core: Add support to set variables with the 'Define' directive. The
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek variables that can then be used in the config using the ${VAR} syntax
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek known from envvar interpolation. [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_proxy_http: make adding of X-Forwarded-* headers configurable.
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek ProxyAddHeaders defaults to On. [Vincent Deffontaines]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_slotmem_shm: Increase memory alignment for slotmem data.
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek [Rainer Jung]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_ssl: Add config options for OCSP: SSLOCSPResponderTimeout,
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek SSLOCSPResponseMaxAge, SSLOCSPResponseTimeSkew.
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek [Kaspar Brand <httpd-dev.2011 velox.ch>]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_ssl: Revamp output buffering to reduce network overhead for
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek output fragmented into many buckets, such as chunked HTTP responses.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: Apply <If> sections to all requests, not only to file base requests.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek Allow to use <If> inside <Directory>, <Location>, and <Files> sections.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek The merging of <If> sections now happens after the merging of <Location>
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek sections, even if an <If> section is embedded inside a <Directory> or
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek <Files> section. [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_proxy: Refactor usage of shared data by dropping the scoreboard
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek and using slotmem. Create foundation for dynamic growth/changes of
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek members within a balancer. Remove BalancerNonce in favor of a
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek per-balancer 'nonce' parameter. [Jim Jagielski]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_status: Don't show slots which are disabled by MaxClients as open.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek PR: 47022 [Jordi Prats <jordi prats gmail com>, Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mpm_prefork: Fix ap_mpm_query results for AP_MPMQ_MAX_DAEMONS and
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek AP_MPMQ_MAX_THREADS.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_authz_core: Fix bug in merging logic if user-based and non-user-based
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek authorization directives were mixed. [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_authn_socache: change directive name from AuthnCacheProvider
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek to AuthnCacheProvideFor. The term "provider" is overloaded in
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek this module, and we should avoid confusion between the provider
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek of a backend (AuthnCacheSOCache) and the authn provider(s) for
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek which this module provides cacheing (AuthnCacheProvideFor).
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_proxy_http: Allocate the fake backend request from a child pool
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek of the backend connection, instead of misusing the pool of the frontend
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek request. Fixes a thread safety issue where buckets set aside in the
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek backend connection leak into other threads, and then disappear when
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek the frontend request is cleaned up, in turn causing corrupted buckets
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek to make other threads spin. [Graham Leggett]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_ssl: Change the format of the SSL_{CLIENT,SERVER}_{I,S}_DN variables
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek to be RFC 2253 compatible, convert non-ASCII characters to UTF8, and
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek escape other special characters with backslashes. The old format can
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek still be used with the LegacyDNStringFormat argument to SSLOptions.
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) core, mod_rewrite: Make the REQUEST_SCHEME variable available to
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek scripts and mod_rewrite. [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_rewrite: Allow to use arbitrary boolean expressions (ap_expr) in
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek RewriteCond. [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_rewrite: Allow to unset environment variables using E=!VAR.
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek PR 49512. [Mark Drayton <mark markdrayton info>, Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_headers: Restore the 2.3.8 and earlier default for the first
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek argument of the Header directive ("onsuccess"). [Eric Covener]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) core: Disallow the mixing of relative and absolute Options PR 33708.
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek [Sönke Tesch <st kino-fahrplan.de>]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) core: When exporting request headers to HTTP_* environment variables,
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek drop variables whose names contain invalid characters. Describe in the
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek docs how to restore the old behaviour. [Malte S. Stretz <mss apache org>]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) core: When selecting an IP-based virtual host, favor an exact match for
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek the port over a wildcard (or omitted) port instead of favoring the one
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek that came first in the configuration file. [Eric Covener]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) core: Overlapping virtual host address/port combinations now implicitly
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek enable name-based virtual hosting for that address. The NameVirtualHost
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek directive has no effect, and _default_ is interpreted the same as "*".
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek [Eric Covener]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) core: In the absence of any Options directives, the default is now
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek "FollowSymlinks" instead of "All". [Igor Galić]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) rotatelogs: Add -e option to write logs through to stdout for optional
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek further processing. [Graham Leggett]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_ssl: Correctly read full lines in input filter when the line is
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek incomplete during first read. PR 50481. [Ruediger Pluem]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_authz_core: Add AuthzSendForbiddenOnFailure directive to allow
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek sending '403 FORBIDDEN' instead of '401 UNAUTHORIZED' if authorization
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek fails for an authenticated user. PR 40721. [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub HrozekChanges with Apache 2.3.10
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_rewrite: Don't implicitly URL-escape the original query string
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek when no substitution has changed it. PR 50447. [Eric Covener]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: Honor 'AcceptPathInfo OFF' during internal redirects,
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek such as per-directory mod_rewrite substitutions. PR 50349.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Eric Covener]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_rewrite: Add 'RewriteOptions InheritBefore' to put the base
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek rules/conditions before the overridden rules/conditions. PR 39313.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_autoindex: add IndexIgnoreReset to reset the list of IndexIgnored
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek filenames in higher precedence configuration sections. PR 24243.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Eric Covener]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_cgid: RLimit* directive support for mod_cgid. PR 42135
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Eric Covener]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: Fail startup when the argument to ServerName looks like a glob
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek or a regular expression instead of a hostname (*?[]). PR 39863
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_userdir: Add merging of enable, disable, and filename arguments
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek to UserDir directive, leaving enable/disable of userlists unmerged.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek PR 44076 [Eric Covener]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) httpd: When no -k option is provided on the httpd command line, the server
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek was starting without checking for an existing pidfile. PR 50350
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Eric Covener]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_proxy: Put the worker in error state if the SSL handshake with the
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek backend fails. PR 50332.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Daniel Ruggeri <DRuggeri primary.net>, Ruediger Pluem]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_cache_disk: Fix Windows build which was broken after renaming
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek the module. [Gregg L. Smith]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub HrozekChanges with Apache 2.3.9
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) SECURITY: CVE-2010-1623 (cve.mitre.org)
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek Fix a denial of service attack against mod_reqtimeout.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_headers: Change default first argument of Header directive
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek from "onsuccess" to "always". [Eric Covener]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_include: Add the onerror attribute to the include element,
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek allowing an URL to be specified to include on error. [Graham
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_cache_disk: mod_disk_cache renamed to mod_cache_disk, to be
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek consistent with the naming of other modules. [Graham Leggett]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_setenvif: Add SetEnvIfExpr directive to set env var depending on
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek expression. [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_proxy: Fix ProxyPassInterpolateEnv directive. PR 50292.
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) suEXEC: Add Suexec directive to disable suEXEC without renaming the
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek binary (Suexec Off), or force startup failure if suEXEC is required
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek but not supported (Suexec On). Change SuexecUserGroup to fail
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek startup instead of just printing a warning if suEXEC is disabled.
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek [Jeff Trawick]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: Add Error directive for aborting startup or htaccess processing
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek with a specified error message. [Jeff Trawick]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_rewrite: Fix the RewriteEngine directive to work within a
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek location. Previously, once RewriteEngine was switched on globally,
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek it was impossible to switch off. [Graham Leggett]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core, mod_include, mod_ssl: Move the expression parser derived from
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek mod_include back into mod_include. Replace ap_expr with a parser
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek derived from mod_ssl's parser. Make mod_ssl use the new parser. Rework
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek ap_expr's public interface and provide hooks for modules to add variables
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek and functions. [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: Do the hook sorting earlier so that the hooks are properly sorted
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek for the pre_config hook and during parsing the config. [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: In the absence of any AllowOverride directives, the default is now
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek "None" instead of "All". PR49823 [Eric Covener]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_proxy: Don't allow ProxyPass or ProxyPassReverse in
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek <Directory> or <Files>. PR47765 [Eric Covener]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) prefork/worker/event MPMS: default value (when no directive is present)
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek of MaxConnectionsPerChild/MaxRequestsPerChild is changed to 0 from 10000
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek to match default configuration and manual. PR47782 [Eric Covener]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) proxy_connect: Don't give up in the middle of a CONNECT tunnel
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek when the child process is starting to exit. PR50220. [Eric Covener]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_autoindex: Fix inheritance of mod_autoindex directives into
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek contexts that don't have any mod_autoindex directives. PR47766.
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek [Eric Covener]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_rewrite: Add END flag for RewriteRule to prevent further rounds
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek of rewrite processing when a per-directory substitution occurs.
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek [Eric Covener]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_ssl: Make sure to always log an error if loading of CA certificates
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek fails. PR 40312. [Paul Tiemann <issues apache org ourdetour com>]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_dav: Send 501 error if unknown Content-* header is received for a PUT
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek request (RFC 2616 9.6). PR 42978. [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_dav: Send 400 error if malformed Content-Range header is received for
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek a put request (RFC 2616 14.16). PR 49825. [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_proxy: Release the backend connection as soon as EOS is detected,
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek so the backend isn't forced to wait for the client to eventually
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek acknowledge the data. [Graham Leggett]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_proxy: Optimise ProxyPass within a Location so that it is stored
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek per-directory, and chosen during the location walk. Make ProxyPass
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek work correctly from within a LocationMatch. [Graham Leggett]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: Fix segfault if per-module LogLevel is on virtual host
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek scope. PR 50117. [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_proxy: Move the ProxyErrorOverride directive to have per
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek directory scope. [Graham Leggett]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_allowmethods: New module to deny certain HTTP methods without
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek interfering with authentication/authorization. [Paul Querna,
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek Igor Galić, Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_ssl: Log certificate information and improve error message if client
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek cert verification fails. PR 50093, PR 50094. [Lassi Tuura <lat cern ch>,
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) htcacheclean: Teach htcacheclean to limit cache size by number of
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek inodes in addition to size of files. Prevents a cache disk from
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek running out of space when many small files are cached.
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek [Graham Leggett]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: Rename MaxRequestsPerChild to MaxConnectionsPerChild, which
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek describes more accurately what the directive does. The old name
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek still works but logs a warning. [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_cache: Optionally serve stale data when a revalidation returns a
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek 5xx response, controlled by the CacheStaleOnError directive.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Graham Leggett]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) htcacheclean: Allow the listing of valid URLs within the cache, with
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek the option to list entry metadata such as sizes and times. [Graham
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_cache: correctly parse quoted strings in cache headers.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek PR 50199 [Nick Kew]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_cache: Allow control over the base URL of reverse proxied requests
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek using the CacheKeyBaseURL directive, so that the cache key can be
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek calculated from the endpoint URL instead of the server URL. [Graham
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_cache: CacheLastModifiedFactor, CacheStoreNoStore, CacheStorePrivate,
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek CacheStoreExpired, CacheIgnoreNoLastMod, CacheDefaultExpire,
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek CacheMinExpire and CacheMaxExpire can be set per directory/location.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Graham Leggett]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_disk_cache: CacheMaxFileSize, CacheMinFileSize, CacheReadSize and
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek CacheReadTime can be set per directory/location. [Graham Leggett]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: Speed up config parsing if using a very large number of config
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek files. PR 50002 [andrew cloudaccess net]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_cache: Support the caching of HEAD requests. [Graham Leggett]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) htcacheclean: Allow the option to round up file sizes to a given
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek block size, improving the accuracy of disk usage. [Graham Leggett]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_ssl: Add authz providers for use with mod_authz_core and its
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek RequireAny/RequireAll containers: 'ssl' (equivalent to SSLRequireSSL),
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek 'ssl-verify-client' (for use with 'SSLVerifyClient optional'), and
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek 'ssl-require' (expressions with same syntax as SSLRequire).
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_ssl: Make the ssl expression parser thread-safe. It now requires
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek bison instead of yacc. [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_disk_cache: Change on-disk header file format to support the
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek link of the device/inode of the data file to the matching header
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek file, and to support the option of not writing a data file when
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek the data file is empty. [Graham Leggett]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) core/mod_unique_id: Add generate_log_id hook to allow to use
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek the ID generated by mod_unique_id as error log ID for requests.
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_cache: Make sure that we never allow a 304 Not Modified response
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek that we asked for to leak to the client should the 304 response be
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek uncacheable. PR45341 [Graham Leggett]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_cache: Add the cache_status hook to register the final cache
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek decision hit/miss/revalidate. Add optional support for an X-Cache
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek and/or an X-Cache-Detail header to add the cache status to the
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek response. PR48241 [Graham Leggett]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_authz_host: Add 'local' provider that matches connections originating
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek on the local host. PR 19938. [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) Event MPM: Fix crash accessing pollset on worker thread when child
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek process is exiting. [Jeff Trawick]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) core: For process invocation (cgi, fcgid, piped loggers and so forth)
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek pass the system library path (LD_LIBRARY_PATH or platform-specific
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek variables) along with the system PATH, by default. Both should be
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek overridden together as desired using PassEnv etc; see mod_env.
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek [William Rowe]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_cache: Introduce CacheStoreExpired, to allow administrators to
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek capture a stale backend response, perform If-Modified-Since requests
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek against the backend, and serving from the cache all 304 responses.
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek This restores pre-2.2.4 cache behavior. [William Rowe]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_rewrite: Introduce <=, >= string comparison operators, and integer
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek comparators -lt, -le, -eq, -ge, and -gt. To help bash users and drop
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek the ambiguity of the symlink test "-ltest", introduce -h or -L as
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek symlink test operators. [William Rowe]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_cache: Give the cache provider the opportunity to choose to cache
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek or not cache based on the buckets present in the brigade, such as the
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek presence of a FILE bucket.
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek [Graham Leggett]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_authz_core: Allow authz providers to check args while reading the
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek config and allow to cache parsed args. Move 'all' and 'env' authz
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek providers from mod_authz_host to mod_authz_core. Add 'method' authz
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek provider depending on the HTTP method. [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_include: Move the request_rec within mod_include to be
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek exposed within include_ctx_t. [Graham Leggett]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_include: Reinstate support for UTF-8 character sets by allowing a
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek variable being echoed or set to be decoded and then encoded as separate
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek steps. PR47686 [Graham Leggett]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_cache: Add a discrete commit_entity() provider function within the
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek mod_cache provider interface which is called to indicate to the
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek provider that caching is complete, giving the provider the opportunity
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek to commit temporary files permanently to the cache in an atomic
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek fashion. Replace the inconsistent use of error cleanups with a formal
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek set of pool cleanups attached to a subpool, which is destroyed on error.
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek [Graham Leggett]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_cache: Change the signature of the store_body() provider function
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek within the mod_cache provider interface to support an "in" brigade
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek and an "out" brigade instead of just a single input brigade. This
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek gives a cache provider the option to consume only part of the brigade
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek passed to it, rather than the whole brigade as was required before.
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek This fixes an out of memory and a request timeout condition that would
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek occur when the original document was a large file. Introduce
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek CacheReadSize and CacheReadTime directives to mod_disk_cache to control
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek the amount of data to attempt to cache at a time. [Graham Leggett]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) core: Add ErrorLogFormat to allow configuring error log format, including
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek additional information that is logged once per connection or request. Add
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek error log IDs for connections and request to allow correlating error log
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek lines and the corresponding access log entry. [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) core: Disable sendfile by default. [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_cache: Check the request to determine whether we are allowed
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek to return cached content at all, and respect a "Cache-Control:
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek no-cache" header from a client. Previously, "no-cache" would
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek behave like "max-age=0". [Graham Leggett]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_cache: Use a proper filter context to hold filter data instead
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek of misusing the per-request configuration. Fixes a segfault on trunk
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek when the normal handler is used. [Graham Leggett]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) mod_cgid: Log a warning if the ScriptSock path is truncated because
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek it is too long. PR 49388. [Stefan Fritsch]
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek *) vhosts: Do not allow _default_ in NameVirtualHost, or mixing *
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek and non-* ports on NameVirtualHost, or multiple NameVirtualHost
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek directives for the same address:port, or NameVirtualHost
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek directives with no matching VirtualHosts, or multiple ip-based
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek VirtualHost sections for the same address:port. These were
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek previously accepted with a warning, but the behavior was
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek undefined. [Dan Poirier]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) mod_remoteip: Fix a segfault when using mod_remoteip in conjunction with
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek Allow/Deny. PR 49838. [Andrew Skalski <voltara gmail.com>]
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) core: DirectoryMatch can now match on the end of line character ($),
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek and sub-directories of matched directories are no longer implicitly
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek matched. PR49809 [Eric Covener]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) Regexps: introduce new higher-level regexp utility including parsing
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek and executing perl-style regexp ops (e.g s/foo/bar/i) and regexp memory
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek *) Proxy: support setting source address. PR 29404
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek [Multiple contributors iterating through bugzilla,
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek Aron Ujvari <xanco nikhok.hu>, Aleksey Midenkov <asm uezku.kemsu.ru>,
172bf27813151351a1ff8284a3d524660eca2efeJakub Hrozek <dan listening-station.net; trunk version Nick Kew]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) HTTP protocol: return 400 not 503 if we have to abort due to malformed
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek chunked encoding. [Nick Kew]
172bf27813151351a1ff8284a3d524660eca2efeJakub HrozekChanges with Apache 2.3.8
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) suexec: Support large log files. PR 45856. [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: Abort with sensible error message if no or more than one MPM is
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek loaded. [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_proxy: Rename erroronstatus to failonstatus.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Daniel Ruggeri <DRuggeri primary.net>]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_dav_fs: Fix broken "creationdate" property.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek Regression in version 2.3.7. [Rainer Jung]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub HrozekChanges with Apache 2.3.7
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) SECURITY: CVE-2010-1452 (cve.mitre.org)
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek mod_dav, mod_cache, mod_session: Fix Handling of requests without a path
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek segment. PR: 49246 [Mark Drayton, Jeff Trawick]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_ldap: Properly check the result returned by apr_ldap_init. PR 46076.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_rewrite: Log errors if rewrite map files cannot be opened. PR 49639.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_proxy_http: Support the 'ping' property for backend HTTP/1.1 servers
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek via leveraging 100-Continue as the initial "request".
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Jim Jagielski]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core/mod_authz_core: Introduce new access_checker_ex hook that enables
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek mod_authz_core to bypass authentication if access should be allowed by
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek IP address/env var/... [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: Introduce note_auth_failure hook to allow modules to add support
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek for additional auth types. This makes ap_note_auth_failure() work with
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek mod_auth_digest again. PR 48807. [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) socache modules: return APR_NOTFOUND when a lookup is not found [Nick Kew]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_authn_socache: new module [Nick Kew]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) configure: Add reallyall option for --enable-mods-shared. [Stefan Fritsch]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) Fix Windows build when using VC6. [Gregg L. Smith <lists glewis com>]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_rewrite: Allow to set environment variables without explicitly
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek giving a value. [Rainer Jung]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_rewrite: Remove superfluous EOL from rewrite logging. [Rainer Jung]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_include: recognise "text/html; parameters" as text/html
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek PR 49616 [Andrey Chernov <ache nagual.pp.ru>]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) CGI vars: allow PATH to be set by SetEnv, consistent with LD_LIBRARY_PATH
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek PR 43906 [Nick Kew]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) Core: Extra robustness: don't try authz and segfault if authn
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek fails to set r->user. Log bug and return 500 instead.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek PR 42995 [Nick Kew]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) HTTP protocol filter: fix handling of longer chunk extensions
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) Update SSL cipher suite and add example for SSLHonorCipherOrder.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Lars Eilebrecht, Rainer Jung]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) move AddOutputFilterByType from core to mod_filter. This should
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek fix nasty side-effects that happen when content_type is set
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek more than once in processing a request, and make it fully
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek compatible with dynamic and proxied contents. [Nick Kew]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_log_config: Implement logging for sub second timestamps and
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek request end time. [Rainer Jung]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub HrozekChanges with Apache 2.3.6
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) SECURITY: CVE-2009-3555 (cve.mitre.org)
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek mod_ssl: Comprehensive fix of the TLS renegotiation prefix injection
4e3495b3b8927a282adc48cc80f0611ecf79821bJakub Hrozek attack when compiled against OpenSSL version 0.9.8m or later. Introduces
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek the 'SSLInsecureRenegotiation' directive to reopen this vulnerability
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek and offer unsafe legacy renegotiation with clients which do not yet
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek support the new secure renegotiation protocol, RFC 5746.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Joe Orton, and with thanks to the OpenSSL Team]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) SECURITY: CVE-2009-3555 (cve.mitre.org)
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek mod_ssl: A partial fix for the TLS renegotiation prefix injection attack
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek by rejecting any client-initiated renegotiations. Forcibly disable
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek keepalive for the connection if there is any buffered data readable. Any
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek configuration which requires renegotiation for per-directory/location
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek access control is still vulnerable, unless using OpenSSL >= 0.9.8l.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Joe Orton, Ruediger Pluem, Hartmut Keil <Hartmut.Keil adnovum.ch>]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) SECURITY: CVE-2010-0408 (cve.mitre.org)
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek mod_proxy_ajp: Respond with HTTP_BAD_REQUEST when the body is not sent
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek when request headers indicate a request body is incoming; not a case of
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek HTTP_INTERNAL_SERVER_ERROR. [Niku Toivola <niku.toivola sulake.com>]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) SECURITY: CVE-2010-0425 (cve.mitre.org)
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek mod_isapi: Do not unload an isapi .dll module until the request
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek processing is completed, avoiding orphaned callback pointers.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Brett Gervasoni <brettg senseofsecurity.com>, Jeff Trawick]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: Filter init functions are now run strictly once per request
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek before handler invocation. The init functions are no longer run
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek for connection filters. PR 49328. [Joe Orton]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: Adjust the output filter chain correctly in an internal
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek redirect from a subrequest, preserving filters from the main
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek request as necessary. PR 17629. [Joe Orton]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) mod_cache: Explicitly allow cache implementations to cache a 206 Partial
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek Response if they so choose to do so. Previously an attempt to cache a 206
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek was arbitrarily allowed if the response contained an Expires or
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek Cache-Control header, and arbitrarily denied if both headers were missing.
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek [Graham Leggett]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) core: Add microsecond timestamp fractions, process id and thread id
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek to the error log. [Rainer Jung]
fa6c70fabb8dc2fab580a014cdcf1b0dd3e99554Sumit Bose *) configure: The "most" module set gets build by default. [Rainer Jung]
90acbcf20b5f896ca8f631923afe946c90d90de7Jakub Hrozek *) configure: Building dynamic modules (DSO) by default. [Rainer Jung]
APR Util 1.x crypto. [Rainer Jung]
mod_rewrite: Replace RewriteLog/RewriteLogLevel with trace log levels.
mod_ssl/mod_proxy*: Adjust loglevels to be less verbose at levels info
PR 49369 [Matthew Steele <mdsteele google.com>]
to use the HTTP username/pass instead of an anonymous or hard-coded
[Bryn Dole <dole blekko.com>]
to control/set the nonce used in the balancer-manager application.
code from a backend. PR 48939. [Daniel Ruggeri <DRuggeri primary.net>]
PR 48944. [Mark Drayton mark markdrayton.info]
[Dr Stephen Henson <steve openssl.org>, William Rowe]
[Ruediger Pluem, Mark Montague <markmont umich.edu>]
*) support/rotatelogs: Add -L option to create a link to the current
log file. PR 48761 [<lyndon orthanc.ca>, Dan Poirier]
*) mod_ldap: LDAPTrustedClientCert now accepts CA_DER/CA_BASE64 argument
PR 33112 [Joergen Thomsen <apache jth.net>]
*) support/rotatelogs: Support the simplest log rotation case, log
*) support/htcacheclean: Teach it how to write a pid file (modelled on
[Philippe Dutrueux <lilas evidian.com>, Rainer Jung]
*) apxs: Fix -A and -a options to ignore whitespace in httpd.conf
request. [Christian Folini <christian.folini netnea com>]
[Johannes Müller <joh_m gmx.de>, Stefan Fritsch]
*) SECURITY: CVE-2010-0434 (cve.mitre.org)
[Dodou Wang <wangdong.08 gmail.com>, Ruediger Pluem]
PR 41887 [Jan van den Berg <janvdberg gmail.com>]
PR 48416 [Dmitry Bakshaev <dab18 izhnet.ru>, Nick Kew]
(See util_mutex.h.) Build-time setting DEFAULT_LOCKFILE is no longer
*) SECURITY: CVE-2009-3095 (cve.mitre.org)
[Stefan Fritsch <sf fritsch.de>, Joe Orton]
*) SECURITY: CVE-2009-3094 (cve.mitre.org)
[Stefan Fritsch <sf fritsch.de>, Joe Orton]
instead of substrings. PR 28037. [Dan Franklin <dan dan-franklin.com>,
[Dr Stephen Henson <shenson oss-institute.org>]
PR 47178. [Philipp Hagemeister <oss phihag.de>]
Brian France <brian brianfrance.com>]
modules to avoid segmentation fault. PR 47951. [hirose31 gmail.com]
*) mod_logio/core: Report more accurate byte counts in mod_status if
for the default values of 1024 for LdapCacheEntries/LdapOpCacheEntries.
the request is a CONNECT request. [Bill Zajac <billz consultla.com>]
[Peter Grandi <pg_asf asf.for.sabi.co.uk>, Graham Leggett]
Log 408 errors in access log as was done in Apache 1.3.x.
PR 39785 [Nobutaka Mantani <nobutaka nobutaka.org>,
Stefan Fritsch <sf fritsch.de>, Dan Poirier]
Brian France <brian brianfrance.com>]
Brian France <brian brianfrance.com>]
[Stefan Fritsch <sf sfritsch.de>]
*) mod_session.c: Prevent a segfault when session is added but not
definition. [Stefan Fritsch sf sfritsch.de]
*) Add support for HTTP PUT to ab. [Jeff Barnes <jbarnesweb yahoo.com>]
PR 46971 [evanc nortel.com]
[Stefan Fritsch <sf sfritsch.de>]
for a file is missing. PR 47682 [Peter Poeml <poeml suse.de>]
*) SECURITY: CVE-2009-1890 (cve.mitre.org)
*) SECURITY: CVE-2009-1191 (cve.mitre.org)
by the client. PR 33098 [ Stefan Fritsch <sf sfritsch.de>]
PR 42175 [Jim Radford <radford blackbean.org>]
type. PR 45107. [Michael Ströder <michael stroeder.com>,
PR 44020 [Håkon Stordahl <hakon stordahl.org>]
CGI process. PR 47335 [Kornél Pál <kornelpal gmail.com>]
PR 46942 [Dan Poirier <poirier pobox.com>]
PR 44729 [Sönke Tesch <st kino-fahrplan.de>, Jim Jagielski]
PR 47177 [Carlos Garcia Braschi <cgbraschi gmail.com>]
PR 45082 [Vitaly Polonetsky <m_vitaly topixoft.com>]
[Marko Kevac <mkevac gmail.com>]
as A/UX, Next, and Tandem. [Jeff Trawick]
directory listing. PR 46789 [Dan Poirier <poirier pobox.com>]
of module state across unload/load. [Jeff Trawick]
[Dan Poirier <poirier pobox.com>]
[Geoff Keating <geoffk apple.com>]
with kqueue (BSD/OS X) and excessive CPU with event ports (Solaris).
a media type has not been configured via mime.types, AddType,
[Ryan Phillips <ryan-apache trolocsis.com>]
[<tlhackque yahoo.com>]
*) prefork: Fix child process hang during graceful restart/stop in
*) core/utils: Enhance ap_escape_html API to support escaping non-ASCII chars
PR 45529 [Bob Ionescu <bobsiegen googlemail.com>]
times out before returning status line/headers.
PR 39332 [Masaoki Kobayashi <masaoki techfirm.co.jp>]
[Theo Schlossnagle <jesus omniti.com>, Paul Querna]
modules/proxy/balancers [Jim Jagielski]
privileges and Unix user/group IDs [Nick Kew]
logic replicate 2.2.x authz logic, and replace <Satisfy*>, Reject,
*) unixd: turn existing code into a module, and turn the set user/group
Suggested By André Warnier <aw ice-sa.com> [Eric Covener]
*) mod_ssl: Send Content-Type application/ocsp-request for POST requests to
OSCP responders. PR 46014 [Dr Stephen Henson <steve openssl.org>]
*) New module mod_sed: filter Request/Response bodies through sed
null value. [David Shane Holden <dpejesh apache.org>]
both inside and outside the location/directory sections, as
form request with the type of application/x-www-form-urlencoded.
*) mod_authz_dbd: When redirecting after successful login/logout per
PR 44560 [Anders Kaseorg <anders kaseorg.com>]
mod_cache et.al. to trap the results of the redirect.
*) ApacheMonitor.exe: Introduce --kill argument for use by the
*) mod_ldap, mod_authnz_ldap: Add support for nested groups (i.e. the ability
[David M. Lee <dmlee crossroads.com>]
[Niklas Edmundsson <nikke acc.umu.se>]
[Niklas Edmundsson <nikke acc.umu.se>]
[Markus Schiegl <ms schiegl.com>]
*) Remove incorrect comments from scoreboard.h regarding conditional
[Chris Darroch <chrisd pearsoncmg.com>]
in ap_init_scoreboard(). [Chris Darroch <chrisd pearsoncmg.com>]
[Chris Darroch <chrisd pearsoncmg.com>]
and 'Reject' to mod_authz_core. The new directives introduce 'AND/OR'
*) mod_authz_dbd: SQL authz with Login/Session support [Nick Kew]
Apache 2.2.xx tree as documented, and except as noted, below.]
Changes with Apache 2.2.x and later:
Changes with Apache 2.0.x and later: