CHANGES revision bbb08feeeef547b0908b16df6cbbb65da656b86f
1a38107941725211e7c3f051f7a8f5e12199f03acmaeder -*- coding: utf-8 -*-
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae BungiuChanges with Apache 2.5.0
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) mod_cache: Ensure that we don't attempt to replace a cached response
431571057e88a650a974adec93ea4bb5173b6213Felix Gabriel Mance with an older response as per RFC2616 13.12. [Graham Leggett, Co-Advisor
431571057e88a650a974adec93ea4bb5173b6213Felix Gabriel Mance *) core, mod_cache: Ensure RFC2616 compliance in ap_meets_conditions()
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu with weak validation combined with If-Range and Range headers. Break
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu out explicit conditional header checks to be useable elsewhere in the
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu server. Ensure weak validation RFC compliance in the byteranges filter.
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu Ensure RFC validation compliance when serving cached entities. PR 16142
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu [Graham Leggett, Co-Advisor <coad measurement-factory.com>]
19e01e1a7e319063434bd86c8ecbc5f241ef9993Felix Gabriel Mance *) core: Add the ability to do explicit matching on weak and strong ETags
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu as per RFC2616 Section 13.3.3. [Graham Leggett, Co-Advisor
a604cbad8e2202147b5c6bb9f2e06ae61162d654Felix Gabriel Mance *) mod_cache: Ensure that updated responses to HEAD requests don't get
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu mistakenly paired with a previously cached body. Ensure that any existing
be2439588008221e691321fdf4f75432cfb72878Felix Gabriel Mance body is removed when a HEAD request is cached. [Graham Leggett,
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu Co-Advisor <coad measurement-factory.com>]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) mod_cache: Honour Cache-Control: no-store in a request. [Graham Leggett]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) mod_cache: RFC2616 14.9.3 The s-maxage directive also implies the
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu semantics of the proxy-revalidate directive. [Graham Leggett]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) mod_cache: Make sure that contradictory entity headers present in a 304
e0f1794e365dd347e97b37d7d22b2fce27296fa1Christian Maeder Not Modified response are caught and cause the entity to be removed.
424860079d47bf490fa98d5d7498096a0447c569mcodescu [Graham Leggett]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) mod_cache: Make sure Vary processing handles multivalued Vary headers and
1a38107941725211e7c3f051f7a8f5e12199f03acmaeder multivalued headers referred to via Vary. [Graham Leggett]
32bbac77828be0233953f8fe476edb0a9585408dChristian Maeder *) mod_cache: When serving from cache, only the last header of a multivalued
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu header was taken into account. Fixed. [Graham Leggett]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) mod_cache: Ignore response headers specified by no-cache=header and
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu private=header as specified by RFC2616 14.9.1 What is Cacheable. Ensure
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu that these headers are still processed when multiple Cache-Control
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu headers are present in the response. PR 54706 [Graham Leggett,
431571057e88a650a974adec93ea4bb5173b6213Felix Gabriel Mance *) mod_cache: Invalidate cached entities in response to RFC2616 Section
1a38107941725211e7c3f051f7a8f5e12199f03acmaeder 13.10 Invalidation After Updates or Deletions. PR 15868 [Graham
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) mod_dav: Do not segfault on PROPFIND with a zero length DBM.
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu PR 52559 [Diego Santa Cruz <diego.santaCruz spinetix.com>]
be00381168b3f10192afabbba136fb06d3a9f358Christian Maeder *) mod_dav: Do not fail PROPPATCH when prop namespace is not known.
be00381168b3f10192afabbba136fb06d3a9f358Christian Maeder PR 52559 [Diego Santa Cruz <diego.santaCruz spinetix.com>]
27fdf879983dd28e211b41f3be6c0e930b7c816bFelix Gabriel Mance *) mod_dav: When a PROPPATCH attempts to remove a non-existent dead
7852de3551fc797566ee71165bafe05b6d81728cnotanartist property on a resource for which there is no dead property in the same
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu namespace httpd segfaults. PR 52559 [Diego Santa Cruz
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) mod_dav: PROPPATCH delete (svn propdel) silently discards errors.
27fdf879983dd28e211b41f3be6c0e930b7c816bFelix Gabriel Mance PR 53525 [Arwin Arni <arwin collab.net>]
d0f58d27c2536eba454d8f77de8617bc6a2c99cdFelix Gabriel Mance *) mod_dav: Ensure URI is correctly uriencoded on return. PR 54611
d0f58d27c2536eba454d8f77de8617bc6a2c99cdFelix Gabriel Mance [Timothy Wood <tjw omnigroup.com>]
431571057e88a650a974adec93ea4bb5173b6213Felix Gabriel Mance *) mod_dav: Sending a If or If-Match header with an invalid ETag doesn't
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu result in a 412 Precondition Failed. PR 54610 [Timothy Wood
60f30f0eeeacdfc1e0dfe39664373ddf5a0675adFelix Gabriel Mance *) mod_dav: Make sure that when we prepare an If URL for Etag comparison,
60f30f0eeeacdfc1e0dfe39664373ddf5a0675adFelix Gabriel Mance we compare unencoded paths. PR 53910 [Timothy Wood <tjw omnigroup.com>]
424860079d47bf490fa98d5d7498096a0447c569mcodescu *) core, mod_ssl: Lift the restriction that prevents mod_ssl taking
424860079d47bf490fa98d5d7498096a0447c569mcodescu full advantage of the event MPM. Enable the ability for a module
424860079d47bf490fa98d5d7498096a0447c569mcodescu to reverse the sense of a poll event from a read to a write or vice
60f30f0eeeacdfc1e0dfe39664373ddf5a0675adFelix Gabriel Mance versa. [Graham Leggett]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) htpasswd: Add -v option to verify a password. [Stefan Fritsch]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) htpasswd, htdbm: Fix password generation. PR 54735. [Stefan Fritsch]
7852de3551fc797566ee71165bafe05b6d81728cnotanartist *) mod_dav: Improve error handling in dav_method_put(), add new
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu dav_join_error() function. PR 54145. [Ben Reser <ben reser.org>]
9475501a6acf48434052d9e6f4a05ed6681eaaabFrancisc Nicolae Bungiu *) mod_auth_digest: Fix crashes if shm initialization failed. [Stefan
80875f917d741946a39d0ec0b5721e46ba609823Till Mossakowski *) mod_ldap: LDAP connections used for authentication were not respecting
80875f917d741946a39d0ec0b5721e46ba609823Till Mossakowski LDAPConnectionPoolTimeout. PR 54587
0dd6e7830de0887c9a12356447975a826b3b3db2Christian Maeder *) core: ap_rgetline_core now pulls from r->proto_input_filters.
424860079d47bf490fa98d5d7498096a0447c569mcodescu *) mod_proxy_html: process parsed comments immediately.
0dd6e7830de0887c9a12356447975a826b3b3db2Christian Maeder Fixes bug where parsed comments may be lost. [Nick Kew]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
d0f58d27c2536eba454d8f77de8617bc6a2c99cdFelix Gabriel Mance *) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) core: Add option to add valgrind support. Use it to reduce false positive
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu warnings in mod_ssl. [Stefan Fritsch]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) mod_lua: Add bindings for apr_dbd/mod_dbd database access
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) mod_authn_file, mod_authn_dbd, mod_authn_dbm, mod_authn_socache:
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu Cache the result of the most recent password hash verification for every
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu keep-alive connection. This saves some expensive calculations.
3d3889e0cefcdce9b3f43c53aaa201943ac2e895Jonathan von Schroeder [Stefan Fritsch]
3d3889e0cefcdce9b3f43c53aaa201943ac2e895Jonathan von Schroeder *) http: Remove support for Request-Range header sent by Navigator 2-3 and
3d3889e0cefcdce9b3f43c53aaa201943ac2e895Jonathan von Schroeder MSIE 3. [Stefan Fritsch]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) core, http: Extend HttpProtocol with an option to enforce stricter HTTP
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu conformance or to only log the found problems. [Stefan Fritsch]
3d3889e0cefcdce9b3f43c53aaa201943ac2e895Jonathan von Schroeder *) core: Correctly parse an IPv6 literal host specification in an absolute
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu URL in the request line. [Stefan Fritsch]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) mod_ssl: add support for subjectAltName-based host name checking
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu in proxy mode. PR 54030. [Kaspar Brand]
d3cb3401882f6956de016f8eecbec1cd3b868acbFelix Gabriel Mance *) mpm_event: Check that AsyncRequestWorkerFactor is not negative. PR 54254.
d3cb3401882f6956de016f8eecbec1cd3b868acbFelix Gabriel Mance [Jackie Zhang <jackie qq zhang gmail com>]
d3cb3401882f6956de016f8eecbec1cd3b868acbFelix Gabriel Mance *) mod_ssl: Add support for OpenSSL configuration commands [Stephen Henson]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) EventOpt MPM
7852de3551fc797566ee71165bafe05b6d81728cnotanartist *) core: Add LogLevelOverride directive that allows to override the
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu loglevel for clients from certain IPs. This also works for things
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu like the SSL handshake where <If> LogLevel ... </If> is evaluated
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu too late. [Stefan Fritsch]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) core: Add new directive Warning to issue warnings from a configuration
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu file. Both Warning and Error now generate a timestamped log message.
0dd6e7830de0887c9a12356447975a826b3b3db2Christian Maeder [Fabien Coelho]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) ap_expr: Add SERVER_PROTOCOL_VERSION, ..._MAJOR, and ..._MINOR
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu variables. [Stefan Fritsch]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) core: New directive RegisterHttpMethod for registering non-standard
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu HTTP methods. [Stefan Fritsch]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) core: New directive HttpProtocol which allows to disable HTTP/0.9
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu support. [Stefan Fritsch]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) mod_allowhandlers: New module to forbid specific handlers for specific
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu directories. [Stefan Fritsch]
32bbac77828be0233953f8fe476edb0a9585408dChristian Maeder *) configure: Fix processing of --disable-FEATURE for various features.
80875f917d741946a39d0ec0b5721e46ba609823Till Mossakowski [Jeff Trawick]
80875f917d741946a39d0ec0b5721e46ba609823Till Mossakowski *) mod_systemd: New module, for integration with systemd on Linux.
80875f917d741946a39d0ec0b5721e46ba609823Till Mossakowski [Jan Kaluza <jkaluza redhat.com>]
80875f917d741946a39d0ec0b5721e46ba609823Till Mossakowski *) mod_cache_socache: New cache implementation backed by mod_socache
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu that replaces mod_mem_cache removed from httpd v2.2. [Graham
cf0439f74f1d55a9840d38a88f9b0f4fc00d5547Christian Maeder *) core: Add dirwalk_stat and pre_htaccess hooks, allowing mpm-itk
cf0439f74f1d55a9840d38a88f9b0f4fc00d5547Christian Maeder to be used without patches to httpd core. [Jeff Trawick]
7852de3551fc797566ee71165bafe05b6d81728cnotanartist *) mod_lua: Add LuaInputFilter/LuaOutputFilter for creating content
80875f917d741946a39d0ec0b5721e46ba609823Till Mossakowski filters in Lua [Daniel Gruno]
cf0439f74f1d55a9840d38a88f9b0f4fc00d5547Christian Maeder *) WinNT MPM: Store pid and generation for each thread in scoreboard
cf0439f74f1d55a9840d38a88f9b0f4fc00d5547Christian Maeder to allow tracking of threads from exiting children via mod_status
cf0439f74f1d55a9840d38a88f9b0f4fc00d5547Christian Maeder or other such mechanisms. [Jeff Trawick]
cf0439f74f1d55a9840d38a88f9b0f4fc00d5547Christian Maeder *) mod_ssl: Catch missing or mismatched client cert/key pairs with
cf0439f74f1d55a9840d38a88f9b0f4fc00d5547Christian Maeder SSLProxyMachineCertificateFile/Path directives. PR 52212.
cf0439f74f1d55a9840d38a88f9b0f4fc00d5547Christian Maeder [Keith Burdis <keith burdis.org>, Joe Orton]
cf0439f74f1d55a9840d38a88f9b0f4fc00d5547Christian Maeder *) mod_lua: Allow scripts handled by the lua-script handler to return
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu a status code to the client (such as a 302 or a 500) [Daniel Gruno]
7852de3551fc797566ee71165bafe05b6d81728cnotanartist *) mod_lua: Decline handling 'lua-script' if the file doesn't exist,
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu rather than throwing an internal server error. [Daniel Gruno]
80875f917d741946a39d0ec0b5721e46ba609823Till Mossakowski *) mod_lua: Add functions r:flush and r:sendfile as well as additional
624f8c31bd8d6746b93f4b5966aa6fc7680fefc5Felix Gabriel Mance request information to the request_rec structure. [Daniel Gruno]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) mod_lua: Add a server scope for Lua states, which creates a pool of
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu states with managable minimum and maximum size. [Daniel Gruno]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) core: Add post_perdir_config hook.
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu [Steinar Gunderson <sgunderson bigfoot.com>]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) mod_lua: Add new directive, LuaMapHandler, for dynamically mapping
b84c87f199dc287d235d7dad6ea344f6912ef531Christian Maeder URIs to Lua scripts and functions using regular expressions.
624f8c31bd8d6746b93f4b5966aa6fc7680fefc5Felix Gabriel Mance [Daniel Gruno]
624f8c31bd8d6746b93f4b5966aa6fc7680fefc5Felix Gabriel Mance *) mod_lua: Add new directive LuaCodeCache for controlling in-memory
1a38107941725211e7c3f051f7a8f5e12199f03acmaeder caching of lua scripts. [Daniel Gruno]
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
ee93ea764a2b8189253e912c8447f9419033f6d4Francisc Nicolae Bungiu - APIs: ap_log_pid(), ap_remove_pid, ap_read_pid()
d0f58d27c2536eba454d8f77de8617bc6a2c99cdFelix Gabriel Mance - core: the scoreboard (ScoreBoardFile), pid file (PidFile), and
431571057e88a650a974adec93ea4bb5173b6213Felix Gabriel Mance mutexes (Mutex)
431571057e88a650a974adec93ea4bb5173b6213Felix Gabriel Mance - mod_cache: thundering herd lock directory
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu - mod_lbmethod_heartbeat, mod_heartmonitor: heartbeat storage file
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu - mod_ldap: shared memory cache
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu - mod_socache_shmcb, mod_socache_dbm: shared memory or dbm for cache
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu [Jeff Trawick]
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu *) suexec: Add --enable-suexec-capabilites support on Linux, to use
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu setuid/setgid capability bits rather than a setuid root binary.
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu [Joe Orton]
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu *) suexec: Add support for logging to syslog as an alternative to logging
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu to a file; configure --without-suexec-logfile --with-suexec-syslog.
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu [Joe Orton]
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu [Matthew Steele <mdsteele google.com>]
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu be compiled by the build compiler instead of the host compiler.
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu PR 51257. [Guenter Knauf]
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu *) core: In maintainer mode, replace apr_palloc with a version that
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu initializes the allocated memory with non-zero values, except if
b90f0b7fd6ccfbdd7e5adb65b1f6c02c7758ff5cmcodescu AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]
passing through the server in such a way that connections and/or
Apache 2.4.xx tree as documented below, except as noted.]
Changes with Apache 2.4.x and later:
Changes with Apache 2.2.x and later:
Changes with Apache 2.0.x and later: