STATUS revision 45740d5cd30d22f067c05b95f04f866abd7ebed8
0N/AAPACHE 2.0 STATUS: -*-text-*-
1821N/ALast modified at [$Date: 2002/06/11 05:33:07 $]
1008N/A
1008N/ARelease:
1008N/A
1008N/A 2.0.38 : in development.
1008N/A 2.0.37 : tagged June 11, 2002.
1008N/A 2.0.36 : released May 6, 2002 as GA.
1008N/A 2.0.35 : released April 5, 2002 as GA.
1008N/A 2.0.34 : tagged March 26, 2002.
1008N/A 2.0.33 : tagged March 6, 2002. not released.
1008N/A 2.0.32 : released Feburary 16, 2002 as beta.
1008N/A 2.0.31 : rolled Feburary 1, 2002. not released.
1008N/A 2.0.30 : tagged January 8, 2002. not rolled.
1008N/A 2.0.29 : tagged November 27, 2001. not rolled.
1008N/A 2.0.28 : released November 13, 2001 as beta.
1008N/A 2.0.27 : rolled November 6, 2001
1008N/A 2.0.26 : tagged October 16, 2001. not rolled.
1008N/A 2.0.25 : rolled August 29, 2001
1008N/A 2.0.24 : rolled August 18, 2001
1008N/A 2.0.23 : rolled August 9, 2001
1008N/A 2.0.22 : rolled July 29, 2001
1008N/A 2.0.21 : rolled July 20, 2001
1008N/A 2.0.20 : rolled July 8, 2001
1008N/A 2.0.19 : rolled June 27, 2001
1008N/A 2.0.18 : rolled May 18, 2001
1008N/A 2.0.17 : rolled April 17, 2001
0N/A 2.0.16 : rolled April 4, 2001
0N/A 2.0.15 : rolled March 21, 2001
1821N/A 2.0.14 : rolled March 7, 2001
1821N/A 2.0a9 : released December 12, 2000
1821N/A 2.0a8 : released November 20, 2000
1821N/A 2.0a7 : released October 8, 2000
1821N/A 2.0a6 : released August 18, 2000
1821N/A 2.0a5 : released August 4, 2000
1821N/A 2.0a4 : released June 7, 2000
1821N/A 2.0a3 : released April 28, 2000
1821N/A 2.0a2 : released March 31, 2000
1821N/A 2.0a1 : released March 10, 2000
1821N/A
1821N/APlease consult the following STATUS files for information
1821N/Aon related projects:
1821N/A
1821N/A * srclib/apr/STATUS
1821N/A * srclib/apr-util/STATUS
1821N/A * docs/STATUS
1821N/A
1821N/A
1821N/ACURRENT RELEASE NOTES:
1821N/A
1821N/A
1821N/ARELEASE SHOWSTOPPERS:
1821N/A
1821N/A
1821N/ACURRENT VOTES:
1821N/A
1821N/A * apachectl should revert to just being an init script and
1821N/A httpd.sh should be the wrapper for httpd which sources envvars
1821N/A and allows any options to be passed through
1821N/A
1821N/A +1: trawick
1821N/A
1008N/A * Should we always build [support*] binaries statically unless otherwise
1008N/A indicated?
1821N/A Message-ID: <20020129210006.B23512@Lithium.MeepZor.Com>
1008N/A
1008N/A +1: Ken, *wrowe [they are PITAs on OSX]
1008N/A -1: Justin, Ian
1008N/A
1008N/A * If the parent process dies, should the remaining child processes
1821N/A "gracefully" self-terminate. Or maybe we should make it a runtime
1821N/A option, or have a concept of 2 parent processes (one being a
1821N/A "hot spare").
1821N/A See: Message-ID: <3C58232C.FE91F19F@Golux.Com>
1821N/A
1821N/A Self-destruct: Ken, Martin
1821N/A Not self-destruct: BrianP, Ian, Cliff, BillS
1821N/A Make it runtime configurable: Aaron, Jim, Justin
1821N/A Have 2 parents: +1: Jim
0N/A -1: Justin, wrowe [for 2.0]
1821N/A +0: Martin (while standing by, could it do
1821N/A something useful?)
1821N/A
1821N/A * Make the worker MPM the default MPM for threaded Unix boxes.
1821N/A +1: Justin, Ian, Cliff, BillS
1821N/A +0: BrianP, Aaron (mutex contention is looking better with the
1821N/A latest code, let's continue tuning and testing)
1821N/A -0: Lars
1821N/A
1821N/ARELEASE NON-SHOWSTOPPERS BUT WOULD BE REAL NICE TO WRAP THESE UP:
1821N/A
1821N/A * Returning invalid 304 errors when filters are present. [PR 9673]
1821N/A Message-ID: <Pine.GSO.4.44.0206061713320.3848-100000@lab26.lacfas.hec.ca>
1821N/A Status: We should set r->no_local_copy, but where can we set it?
1821N/A We must set it before the handlers are run so that the
0N/A appropriate handler can call ap_meets_conditions() before
0N/A generating the data.
1008N/A
1821N/A * server pushed CGI's not working. (Is this a showstopper??)
1821N/A PR: 8482
1821N/A Message-ID: <3CE15B85.2FF45121@apache.org>
1821N/A
1821N/A * HP/UX 10.20: compile breakage in APR. Looks like it should be easy
1821N/A to fix, probably just some extraneous #include's that are fouling
1821N/A things up.
1821N/A PR: 9457
1821N/A Jeff: See my reply and patch in the PR (and previous commit to
1821N/A stop using "pipe" as a field name). If patch is committed, we
1821N/A should be okay. I'll wait to see if the user tests the patch.
1821N/A
1821N/A * exec cmd and suexec arg-passing enhancements
1821N/A Status: Patches proposed
1821N/A Message-ID: <20020526041748.A29148@prodigy.Redbrick.DCU.IE>
1821N/A (see the "proc.patch" and "suexec-shell.patch" links in this message)
1821N/A
1821N/A * Get mod_cache/mod_mem_cache out of experimental (still some
1821N/A work items left to complete)
1821N/A
1821N/A * The 2.0.36 worker MPM graceless shutdown changes work but are
1821N/A a bit clunky on some platforms; eg, on Linux, the loop to
1821N/A join each worker thread seems to hang, and the parent ends up
1821N/A killing off the child with SIGKILL. But at least it shuts down.
1821N/A
1821N/A * --enable-mods-shared="foo1 foo2" is busted on Darwin. Pier
1821N/A posted a patch (Message-ID: <B8DBBE8D.575A%pier@betaversion.org>).
1821N/A
1821N/A * We do not properly substitute the prefix-variables in the configuration
1821N/A scripts or generated-configs. (i.e. if sysconfdir is etc,
1821N/A httpd-std.conf points to conf.)
1821N/A
1821N/A * If any request gets through ap_process_request_internal() and is
1821N/A scheduled to be served by the core handler, without a flag that this
1821N/A r->filename was tested by dir/file_walk, we need to 500 at the very
1821N/A end of the ap_process_request_internal() processing so sub_req-esters
1821N/A know this request cannot be run. This provides authors of older
1821N/A modules better compatibility, while still improving the security and
1821N/A robustness of 2.0.
1821N/A
1821N/A Status: still need to decide where this goes, OtherBill comments...
1821N/A Message-ID: <065701c14526$495203b0$96c0b0d0@roweclan.net>
1821N/A [Deleted comments regarding the ap_run_handler phase, as irrelevant
1821N/A as BillS points out that "common case will be caught in
1821N/A default_handler already (with the r->finfo.filetype == 0 check)"
1821N/A and the issue is detecting this -before- we try to run the req.]
1821N/A
1821N/A gregames says: can this happen somehow without a broken module
1821N/A being involved? If not, why waste cycles trying to defend against
1821N/A potential broken modules? It seems futile.
0N/A wrowe counters: no, it shouldn't happen unless the module is broken.
1821N/A But the right answer is to fail the request up-front in dir/file
1008N/A walk if the path was entirely invalid; and we can't do that either
0N/A or we break modules that are unwilling to hook map_to_storage.
0N/A
0N/A * Rewrite core_output_filter. It is nearly impossible to support
1821N/A it with predictable results as it is implemented now.
0N/A
1008N/A * With AP_MODE_EXHAUSTIVE in the core, it is finally clear to me
1008N/A how the Perchild MPM should be re-written. It hasn't worked
1008N/A correctly since filters were added because it wasn't possible to
1008N/A get the content that had already been written and the socket at
1821N/A the same time. This mode lets us do that, so the MPM can be
1008N/A fixed.
1008N/A
1821N/A * htpasswd blindly processes the file you give it, and does no
0N/A sanity checking before totally corrupting whatever file it was
1008N/A you thought you had. It should check the input file and bail
1008N/A if it finds non-comment lines that do not contain exactly 1
1008N/A ':' character.
1008N/A Message-ID: <20020217150457.A31632@clove.org>
1008N/A
1008N/A * Can a static httpd be built reliably?
1008N/A Message-ID: <20020207142751.T31582@clove.org>
1008N/A
1008N/A * [Ken] Test suite failures:
1821N/A o worker is also failing some of the 'cgi' subtests
1008N/A (see <URL:http://Source-Zone.Org/Apache/regression/>):
1008N/A Justin says: "Worker should be fine and passes httpd-test here.
1008N/A If you can provide evidence that it can be reproduced
1008N/A outside of httpd-test, then it's a showstopper. I
1008N/A think it's a perl or a httpd-test problem."
1008N/A Not a showstopper: Justin
1821N/A
1008N/A * Usage of APR_BRIGADE_NORMALIZE in core_input_filter should be
1008N/A removed if possible.
0N/A Message-ID: <Pine.LNX.4.33.0201202232430.318-100000@deepthought.cs.virginia.edu>
0N/A
1008N/A * There is a bug in how we sort some hooks, at least the pre-config
1008N/A hook. The first time we call the hooks, they are in the correct
1008N/A order, but the second time, we don't sort them correctly. Currently,
1008N/A the modules/http/config.m4 file has been renamed to
1008N/A modules/http/config2.m4 to work around this problem, it should moved
0N/A back when this is fixed. rbb
1821N/A Justin says: "Is this really a showstopper? This has been here
1821N/A forever. What's wrong? Does this have to do with
1821N/A autoconf or m4?"
1821N/A Not a showstopper: Justin, BrianP, trawick, gregames
1821N/A
1821N/A * The Add...Filter and Set...Filter directives do not allow the
1821N/A administrator to order filters, beyond the order of filename (mime)
1821N/A extensions. It isn't clear if Set...Filter(s) should be inserted
1821N/A before or after the Add...Filter(s) which are ordered by sequence of
1821N/A filename extensions. At minimum, some sort of +-[0-10] syntax seems
1821N/A like the quickest fix for a 2.0 gold release.
1821N/A Justin says: "Could we delay this for a point release or 2.1?"
1821N/A Not a showstopper: justin, wrowe, trawick, stoddard, Jim, Ian, Aaron,
1821N/A gregames
1821N/A
1008N/A * Get perchild to work on platforms other than Linux. This
1008N/A will require a portable mechanism to pass data and file/socket
1008N/A descriptors between vhost child groups. An API was proposed
1008N/A on dev@apr:
1008N/A Message-ID: <20020111115006.K1529@clove.org>
0N/A
1821N/A * Try to get libtool inter-library dependency code working on AIX.
1821N/A Message-ID: <cm3n10lx555.fsf@rdu163-40-092.nc.rr.com>
1821N/A
1821N/A Justin says: If we get it working on AIX, we can enable this
1821N/A on all platforms and clean up our build system
1821N/A somewhat.
1821N/A Jeff says: I thought I tested a patch for you sometime in
1821N/A January that you were going to commit within a few
1821N/A days.
1821N/A
1821N/A * Handling of %2f in URIs. Currently both 1.3 and 2.0
1821N/A completely disallow %2f in the request URI path (see
1821N/A ap_unescape_url() in util.c). It's permitted and passed
1821N/A through in the query string, however. Roy says the
1821N/A original reason for disallowing it, from five years ago,
1821N/A was to protect CGI scripts that applied PATH_INFO to
1821N/A a filesystem location and which might be tricked by
1821N/A ..%2f..%2f(...). We *should* allow path-info of the
1821N/A form 'http://foo.com/index.cgi/path/to/path%2finfo'.
1821N/A Since we've revamped a lot of our processing of path
1821N/A segments, it would be nice to allow this, or at least
1821N/A allow it conditionally with a directive.
1821N/A
1821N/A * FreeBSD, threads, and worker MPM. All seems to work fine
1821N/A if you only have one worker process with many threads. Add
1821N/A a second worker process and the accept lock seems to be
1821N/A lost. This might be an APR issue with how it deals with
1821N/A the child_init hook (i.e. the fcntl lock needs to be resynced).
1821N/A More examination and analysis is required.
1821N/A Status: This has also been reported on Cygwin.
1821N/A Message-ID: <3C2CC514.8EF3BED1@wapme-systems.de> (cygnus)
1821N/A
1821N/A Justin says: So, FreeBSD-CURRENT and Cywin have the same
1821N/A problem. Yum. If another platform has this
1821N/A with worker, this becomes a showstopper.
1821N/A Aaron says: I spent some time disecting this and have come to
1821N/A the conclusion that it is not a problem in the worker MPM
1821N/A (or at least, it is not isolated to a problem in worker).
1821N/A I'll list some of the problems I'm seeing in case someone
1821N/A else wants to pick up where I've left off:
1821N/A - Delivery of just about any signal to one of the child
1821N/A processes will send it into an infinite loop as well.
1821N/A - Even though the parent is spinning out of control,
1821N/A at first the child or children will appear to work
1821N/A properly. At times it is possible to get it into a state,
1821N/A however, where a request will hang until another concurrent
1821N/A request "kicks" the first, at which point the second will
1821N/A hang. My theory is that this has to do with the
1821N/A pthread_cond_*() implementation in FreeBSD, but it's still
1821N/A possible that it is in APR.
1821N/A
1821N/A Justin adds: Oh, FreeBSD threads are implemented entirely with
1821N/A select()/poll()/longjmp(). Welcome to the nightmare.
1821N/A So, that means a ktrace output also has the thread
1821N/A scheduling internals in it (since it is all the same to
1821N/A the kernel). Which makes it hard to distinguish between
1821N/A our select() calls and their select() calls.
1821N/A *bangs head on wall repeatedly* But, some of the libc_r
1821N/A files have a DBG_MSG #define. This is moderately helpful
1821N/A when used with -DNO_DETACH. The kernel scheduler isn't
1008N/A waking up the threads on a select(). Yum. And, I bet
1008N/A those decrementing select calls have to do with the
1008N/A scheduler. Time to brush up on our OS fundamentals.
1008N/A
1008N/A * There is increasing demand from module writers for an API
1821N/A that will allow them to control the server � la apachectl.
1821N/A Reasons include sole-function servers that need to die if
1821N/A an external dependency (e.g., a database) fails, et cetera.
1821N/A Perhaps something in the (ever more abused) scoreboard?
1821N/A rbb: I don't believe the scoreboard is the correct mechanism
1821N/A for this. We already have a pipe that goes between parent
1821N/A and child for graceful shutdown events, along with an API that
1821N/A can be used to send a message down that pipe. In threaded MPMs,
1821N/A it is easy enough to make that one pipe be used for graceful
1821N/A and graceless events, and it is also easy to open that pipe
1821N/A to both parent and child for writing. Then we just need to
1821N/A figure out how to do graceless on non-threaded MPMs.
1821N/A
1821N/A * Allow the DocumentRoot directive within <Location > scopes? This
1821N/A allows the beloved (crusty) Alias /foo/ /somepath/foo/ followed
1821N/A by a <Directory /somepath/foo> to become simply
1821N/A <Location /foo/> DocumentRoot /somefile/foo (IMHO a bit more legible
1821N/A and in-your-face.) DocumentRoot unset would be accepted [and would
1821N/A not permit content to be served, only virtual resources such as
1821N/A server-info or server-status.
1821N/A This proposed change would _not_ depricate Alias.
1821N/A
1821N/A * Win32: Rotatelogs sometimes is not terminated when Apache
1821N/A goes down hard. FirstBill was looking at possibly tracking the
1821N/A child's-child processes in the parent process.
1821N/A OtherBill asks, wasn't this fixed?
1821N/A stoddard: Not fixed. Shared scoreboard might offer a good
1821N/A way for the parent to keep track of 'other child' processes
1821N/A and whack them if the child goes down.
1821N/A Other thoughts on walking the process chain using the NT kernel
1821N/A have also been proposed on APR.
1821N/A
1821N/A * Win32: Add a simple hold console open patch (wait for close or
1821N/A the ESC key, with a nice message) if the server died a bad
1821N/A death (non-zero exit code) in console mode.
1821N/A Resolution: bring forward same ugly hacks from 1.3.13-.20
1821N/A This is not so simple. Any exit() from APR or other libraries
1821N/A can't be caught unless we add some sort of apr_exit(rv) with
1821N/A registered apr_atexit() fn's that have the return code as an
1008N/A argument to the registered fn.
1008N/A
0N/A * Eliminate unnecessary creation of pipes in mod_cgid
1008N/A
1008N/A * Combine log_child and piped_log_spawn. Clean up http_log.c.
1008N/A Common logging API.
0N/A
1008N/A * Document mod_file_cache.
1008N/A
1008N/A * Platforms that do not support fork (primarily Win32 and AS/400)
1008N/A Architect start-up code that avoids initializing all the modules
0N/A in the parent process on platforms that do not support fork.
0N/A
0N/A * Win32: Migrate the MPM over to use APR thread/process calls. This
1008N/A would eliminate some code in the Win32 branch that essentially
1008N/A duplicates what is in APR.
1008N/A
1008N/A * There are still a number of places in the code where we are
1008N/A losing error status (i.e. throwing away the error returned by a
1008N/A system call and replacing it with a generic error code)
1008N/A
1008N/A * Mass vhosting version of suEXEC.
1934N/A
1934N/A * All DBMs suffer from confusion in support/dbmmanage (perl script) since
1934N/A the dbmmanage employs the first-matched dbm format. This is not
1934N/A necessarily the library that Apache was built with. Aught to
1934N/A rewrite dbmmanage upon installation to bin/ with the proper library
1008N/A for predictable mod_auth_dbm administration.
1008N/A Questions; htdbm exists, time to kill dbmmanage, or does it remain
1008N/A useful as a perl dbm management example? If we keep it,
1008N/A do we address the issue above?
1821N/A
1821N/A * Integrate mod_dav.
1821N/A Some additional items remaining:
1821N/A - case_preserved_filename stuff
1821N/A (use the new canonical name stuff?)
1821N/A - find a new home for ap_text(_header)
1821N/A - is it possible to remove the DAV: namespace stuff from util_xml?
1821N/A
1821N/A * ap_core_translate() and its use by mod_mmap_static and mod_file_cache
1821N/A are a bit wonky. The function should probably be exposed as a utility
1821N/A function (such as ap_translate_url2fs() or ap_validate_fs_url() or
1821N/A something). Another approach would be a new hook phase after
1821N/A "translate" which would allow the module to munge what the
1821N/A translation has decided to do.
1821N/A Status: Greg +1 (volunteers), Ryan +1
1821N/A
1821N/A * Explore use of a post-config hook for the code in http_main.c which
1934N/A calls ap_fixup_virutal_hosts(), ap_fini_vhost_config(), and
1821N/A ap_sort_hooks() [to reduce the logic in main()]
1821N/A
1821N/A * read the config tree just once, and process N times (as necessary)
1821N/A
1934N/A * (possibly) use UUIDs in mod_unique_id and/or mod_usertrack
1821N/A
1821N/A * (possibly) port the bug fix for PR 6942 (segv when LoadModule is put
1934N/A into a VirtualHost container) to 2.0.
1821N/A
1934N/A * shift stuff to mod_core.h
1934N/A
1934N/A * callers of ap_run_create_request() should check the return value
1934N/A for failure (Doug volunteers)
1934N/A
1934N/A * Win32: Get Apache working on Windows 95/98. The following work
1821N/A (at least) needs to be done:
1821N/A - Document warning that OSR2 is required (for Crypt functions, in
1821N/A rand.c, at least.) This could be resolved with an SSL library, or
1821N/A randomization in APR itself.
1821N/A - Bring the Win9xConHook.dll from 1.3 into 2.0 (no sense till it
1821N/A actually works) and add in a splash of Win9x service code.
1821N/A
1821N/A * Fix the worker MPM to use POD to kill child processes instead
1008N/A of ap_os_killpg, regardless of how they should die. (Ryan Bloom)
1008N/A
1934N/A * Scoreboard structures could be changed in the future such that
1934N/A proper alignment is not maintained, leading to segfaults on
1934N/A some systems. Cliff posted a patch to deal with this issue but
1934N/A later recanted. See this message to dev@apr.apache.org:
1821N/A Message-ID: <Pine.LNX.4.44.0203011354090.16457-200000@deepthought
1821N/A .cs.virginia.edu>
1934N/A
1934N/ATODO ISSUES REMAINING IN MOD_SSL:
1821N/A
1821N/A * In order to use a DSO version of mod_ssl we have to link with
1934N/A -lssl and -lcrypto. A workaround is in place right now where the
1934N/A entire EXTRA_LIBS macro is being appended to the objects list, but
1821N/A this is a hack. We should either revamp the APACHE_CHECK_SSL_TOOLKIT
1821N/A autoconf function or come up with some other autoconf checks to
1821N/A search for libssl and libcrypto and properly add them to mod_ssl's
1821N/A link flags.
1821N/A
1821N/A * SSL renegotiations in combination with POST request
1821N/A
1821N/A * Port or dispose all code inside #if 0...#endif blocks that remain
1821N/A from the porting effort.
1821N/A
1821N/A * Do we need SSL_set_read_ahead()?
1821N/A
1821N/A * the ssl_expr api is NOT THREAD SAFE. race conditions exist:
1821N/A -in ssl_expr_comp() if SSLRequire is used in .htaccess
1821N/A (ssl_expr_info is global)
1821N/A -is ssl_expr_eval() if there is an error
1821N/A (ssl_expr_error is global)
1821N/A
1821N/A * SSLRequire directive (parsing of) leaks memory
1821N/A
1821N/A * Diffie-Hellman-Parameters for temporary keys are hardcoded in
1821N/A ssl_engine_dh.c, while the comment in ssl_engine_kernel.c says:
1821N/A "it is suggested that keys be changed daily or every 500
1821N/A transactions, and more often if possible."
1821N/A
1821N/A * ssl_var_lookup could be rewritten to be MUCH faster
1821N/A
1821N/A
1821N/A * CRL callback should be pluggable
1821N/A
1821N/A * session cache store should be pluggable
1821N/A
1821N/A * init functions should return status code rather than ssl_die()
1821N/A
1934N/A * ssl_engine_pphrase.c needs to be reworked so it is generic enough
1934N/A to also decrypt proxy keys
1934N/A
1821N/A * the shmcb code should just align its memory segment rather than
1821N/A jumping through all the "safe" memcpy and memset hoops
1821N/A
1821N/A
1821N/AEXPERIMENTAL MODULES:
1821N/A Experimental modules should eventually be be promoted to fully supported
1821N/A status or removed from the repository entirely (ie, the
1821N/A 'experiment' failed). This section tracks what needs to happen to
1821N/A get the modules promoted to fully supported status.
1821N/A
1821N/A mod_cache/mod_mem_cache/mod_disk_cache:
1821N/A * mod_cache: handle cache_control: no_cache "field_name" to enable
1821N/A cacheing the response w/o header "field_name"
1821N/A See RFC2616 section 14.9.1
1821N/A
1821N/A * mod_cache: CacheEnable/CacheDisable should accept regular expressions.
1821N/A
1821N/A * mod_cache: Fix dependency on ATOMIC operators. Need
1821N/A APR_HAS_ATOMIC_* feature macros.
1821N/A
1821N/A * mod_disk_cache: Implement garbage collection
1821N/A
1934N/A * mod_mem_cache/mod_disk_cache: Need to be able to query cache
1934N/A status (num of entries, cache object properties, etc.).
1934N/A mod_status could be extended to query optional hooks defined
1821N/A by modules for the purpose of reporting module status.
1821N/A mod_cache (et. al.) could define optional hooks that are called
1821N/A to collect status. Status should be queryable by
1821N/A HTTP or SNMP?
1821N/A
1821N/A * mod_mem_cache: garbage collection. One strategy is to simply
1821N/A remove stale entries as we attempt to serve them. Another
1821N/A strategy is to kick off a GC thread that traverses the cache
1821N/A and preemptively remove stale entries. How to manage a
1821N/A cache that is full? Do LRU GC? Other? Bueller?
1821N/A
1821N/A * mod_mem_cache/mod_disk_cache: Complete implementing config
1821N/A directives.
1821N/A
1821N/A * Sample config for mod_cache/mod_mem_cache/mod_disk_cache for
1821N/A inclusion into httpd.conf.
1821N/A
1821N/A * mod_cache/mod_mem_cache/mod_disk_cache: Documentation.
1821N/A
1821N/APRs that have been suspended forever waiting for someone to
1821N/Aput them into 'the next release':
1821N/A
1821N/A * documentation and Q&A
1821N/A
1821N/A PR#2221: Make online documentation search link back to my installation
1821N/A Status:
1821N/A
1821N/A PR#2906: Propose that Apache recommend $UNIQUE_ID for all "session id"
1821N/A algorithms
1821N/A Status:
1821N/A
1821N/A PR#2793: When will Apache support P3P? Any Plans?
1934N/A Status:
1934N/A
1934N/A * build
1821N/A
1821N/A PR#2113: HTTP Server Rebuild Line Needs Changing for the better
1821N/A Status:
1821N/A
1821N/A PR#2421: problem specifying ndbm library for build ?with autoconfigure
1821N/A Status:
1821N/A
1821N/A * config
1821N/A
1821N/A PR#76: missing call to "setlocale();"
1821N/A Status:
1821N/A
1821N/A PR#628: Request of "Options SymLinksIfGroupMatch"
1821N/A Status:
1821N/A
1821N/A PR#793: RLimitCPU and RLimitMEM don't apply to all children like they should
1821N/A Status:
1821N/A
1821N/A PR#922: it is useful to allow specifiction that root-owned symlinks
1821N/A should always be followed
1934N/A Status:
1934N/A
1934N/A PR#1028: DoS attacks involving memory consumption
1821N/A Status:
1821N/A
1821N/A PR#1191: setlogin() is not called, causing problems with e.g. identd
1821N/A Status:
1821N/A
1821N/A PR#1204: regerror() exists, use it
1821N/A Status:
1821N/A
1821N/A PR#2284: Can not POST to ErrorDocument - Apache/1.3b6
1821N/A Status:
1821N/A
1821N/A PR#2396: Proposal for TimeZone directive
1821N/A Status:
1821N/A
1821N/A PR#2446: AllowOverride FileInfo is too coarse
1940N/A Status:
1821N/A
1821N/A PR#2760: [PATCH] User/Group for <Directory> and <Location> i.e. not only
1821N/A in global and <Virtual>.
1821N/A Status:
1934N/A
1934N/A PR#2907: suggestion: power up your Include directive :)
1934N/A Status:
1821N/A
1821N/A PR#3018: cannot limit some HTTP methods
1821N/A Status:
1821N/A
1821N/A PR#3677: New ErrorDocumentMatch directive
1821N/A Status:
1821N/A
1821N/A PR#4244: "Files" and "FilesMatch" regexp does not recognize bang as
1821N/A negation operator
1821N/A Status:
1821N/A
1821N/A PR#5993: AllowOverride should have a 'CheckNone' and 'AllowNone' argument
1821N/A instead of only 'None'
1821N/A Status:
1821N/A
1821N/A * mod_access
1008N/A
1008N/A PR#537: mod_access syntax allows hosts that should be restricted
1821N/A Status:
1821N/A
1821N/A PR#1287: add allow,deny/deny,allow warning to mod_access
1821N/A Status:
1821N/A
1821N/A PR#2512: <IfDenied> directive wanted
1821N/A Status:
1821N/A
1821N/A * mod_auth-any
1821N/A
1821N/A PR#557: ~UserHome directories are not honored in absolute pathname
1821N/A requests (.htaccess)
1821N/A Status:
1821N/A
1008N/A PR#1117: Using NIS passwd.byname dbm files with AuthDBMUserFile
1821N/A Status:
1821N/A
1821N/A PR#1809: Suggestion for improving authentication modules and core source
1821N/A code, problem with 401 and ErrorDocument
1821N/A Status:
1821N/A
1821N/A * mod_autoindex
1821N/A
1821N/A PR#1263: Add frame-safe anchor attribute to mod_autoindex links
1821N/A Status:
1821N/A
1821N/A * mod_cgi (and suexec)
1821N/A
1821N/A PR#921: suexec Uses cwd before filling it in, doesn't use syslog
1821N/A Status:
1821N/A
1821N/A PR#1176: Apache cannot handle continuation line in headers
1821N/A Status:
1821N/A
1821N/A PR#1120: suexec does not parse arguments to #exec cmd
1821N/A Status:
1821N/A
1008N/A PR#1268: CGI scripts running as Apache user: security (suexec etc.)
1008N/A Status:
1008N/A
1008N/A PR#1285: Error messages could be easier to spot in cgi.log file for suexec.c
1008N/A Status:
1008N/A
1008N/A PR#1905: suexec - Allow modules to set user:group for execution.
1008N/A Status:
1008N/A
1008N/A PR#2360: suexec for general access of user content?
1008N/A Status:
1008N/A
1008N/A PR#2460: TimeOut applies to output of CGI scripts
1008N/A Status:
1008N/A
1008N/A PR#2573: CGI's for general use still have to be run as another user
1008N/A with suExec
1008N/A Status:
1008N/A
1008N/A PR#4241: Need to be able to override shebang line to make CGI scripts
1008N/A more portable.
1008N/A Status:
1008N/A
1008N/A PR#4490: mod_cgi prevents handling of OPTIONS requests
1008N/A Status:
1008N/A
1008N/A * mod_env
1008N/A
1008N/A PR#370: Modified PATH environemnt variable is not passed, instead
1008N/A system's is used
1008N/A Status:
1254N/A
1254N/A * mod_headers
1254N/A
1254N/A PR#1383: I make mod_headers to modify request headers as well as
1254N/A response ones.
1254N/A Status:
1254N/A
1254N/A PR#1677: mod_headers should allow mod_log_config-style formats in
1254N/A header values
1254N/A Status:
1254N/A
1254N/A * mod_imap
1254N/A
1254N/A PR#759: imap should read <MAP><AREA>*</MAP> too!
1254N/A Status:
1254N/A
1254N/A * mod_include
1254N/A
1254N/A PR#78: Additional status for XBitHack directive
1008N/A Status:
1008N/A
1008N/A PR#623: A smarter "Last Modified" value for SSI documents (see PR number 600)
1008N/A Status:
1008N/A
1008N/A PR#1145: mod_include
1008N/A Allow for Last-Modified: without resorting to XBitHack
1008N/A Status:
1008N/A
1008N/A PR#1803: patches to mod_include to allow for file tests
1008N/A Status:
1008N/A
1008N/A PR#4459: Suggestion for better handling of Last-modified headers
1008N/A Status:
1008N/A
1008N/A * mod_info
1008N/A
1008N/A PR#2415: /server-info doesn't check for the virtual host to list the info
1008N/A Status:
1008N/A
1008N/A * mod_log-any
1008N/A
1008N/A PR#1050: Logging of virtual server to error_log as well
1008N/A Status:
1008N/A
1008N/A PR#1358: Selective url-encode of log fields (or maybe a pseudo
1008N/A log_rewrite module?)
1008N/A Status:
1008N/A
1008N/A PR#2073: pipelined connections are not logged correctly
1008N/A Status:
1008N/A
1008N/A PR#4448: Please allow CGI env variables (QUERY_STRING, ...) to be logged
1008N/A with %{}e
1008N/A Status:
1008N/A
1008N/A * mod_negotiation
1008N/A
1008N/A PR#3191: no way to set global quality-of-source (qs) coneg values
1008N/A with multiviews
1008N/A Status:
1008N/A
1008N/A * mod_proxy
1008N/A
1008N/A PR#362: Mod_proxy doesn't allow change of error pages
1008N/A Status:
1008N/A
1008N/A PR#440: Proxy doesn't deliver documents if not connected
1008N/A Status:
1008N/A
1008N/A PR#534: proxy converts ~name to %7Ename when name starts with a dot (.)
1008N/A Status:
1008N/A
1008N/A PR#612: Proxy FTP Authentication Fails
1008N/A Status:
1008N/A
1008N/A PR#700: Proxy doesn't do links right for OpenVMS files through ftp:
1008N/A Status:
1008N/A
1008N/A PR#980: Controlling Access to Remote Proxies would be nice...
1008N/A Status:
1008N/A
1008N/A PR#994: Adding authentication "on the fly" through the proxy module
1008N/A Status:
1008N/A
1008N/A PR#1085: ProxyRemote make a dead cycle.
1008N/A Status:
0N/A
1008N/A PR#1166: ``nph-'' not honored (no buffering) for ProxyRemote mapping
1008N/A Status:
1008N/A
1008N/A PR#1290: Need to know "hit-rate" on proxy cache
1008N/A Status:
1008N/A
1008N/A PR#1532: Proxy transfer logging
1008N/A Status:
1008N/A
1008N/A PR#1547: No HTTP_X_FORWARDED_FOR set...
1008N/A Status:
1008N/A
1008N/A PR#1567: ProxyRemote proxy requests fail authentication by firewall
1008N/A Status:
1008N/A
1008N/A PR#1702: mod_proxy to support persistent conns?
1008N/A Status:
1008N/A
1008N/A PR#1878: listing of proxy cache content
1008N/A Status:
1008N/A
1008N/A PR#2314: patterns in ProxyRemote
1008N/A Status:
1008N/A
1008N/A PR#2648: Cache file names in Proxy module
1008N/A Status:
1008N/A
1008N/A PR#3568: Accessing URL through proxy server corrupts data.
1008N/A Status:
1008N/A
1008N/A PR#3605: Some anonymous FTP URLs ask for authentication
1008N/A Status:
1008N/A
1008N/A * mod_rewrite
1008N/A
1008N/A PR#1582: mod_rewrite forms REQUEST_URI different than mod_cgi does
1008N/A Status:
1008N/A
1008N/A PR#2074: mod_rewrite doesn't pass Proxy Throughput on internal subrequests
1008N/A Status:
1008N/A
1008N/A * mod_status
1008N/A
1008N/A PR#2138: mod_status always displays 256 possible connection slots
1008N/A Status:
1008N/A
1008N/A PR#2343: Status module averages are for entire uptime
1008N/A Status:
1008N/A
1008N/A * apache-api
1008N/A
1008N/A PR#1004: request_config field in request_rec is moderately bogus
1008N/A Status:
1008N/A
1008N/A PR#1158: improvements to child spawning API
1008N/A Status:
1008N/A
1008N/A PR#1233: there is no way to keep per-connection per-module state
1008N/A Status:
1008N/A
1008N/A PR#2024: adding auth_why to conn_rec
1008N/A Status:
1008N/A
1008N/A PR#2873: Feedback/Comment on APACI
1008N/A Status:
1008N/A
1008N/A PR#3143: No module specific data hook for per-connection data
1008N/A Status:
1008N/A
1008N/A * generally odds and ends
1008N/A
1008N/A PR#2431: A small addition to rotatelogs.c to improve program functionality.
1008N/A Status:
1008N/A
1008N/A PR#2763: mailto tags and bundling bug report script
1008N/A Status:
1008N/A
1008N/A PR#2785: os-aix Support for System Resource Controller
1008N/A Status:
1008N/A
1008N/A PR#2889: Inclusion of RPM spec file in CVS/distributions
1008N/A Status:
1008N/A
1008N/A PR#5713: os-windows [PATCH] install as win32 service with domain account
1008N/A Status: Cannot accept password-as-arg, we should prompt the
1008N/A user when -k install/-k config with a user argument.
1008N/A
1008N/A
1008N/A
1008N/AOther bugs that need fixing:
1008N/A
1008N/A * ap_discard_request should be converted to use the bucket API
1008N/A directly rather than waste cycles copying buffers with the old API.
1008N/A
1008N/A * MaxRequestsPerChild measures connections, not requests.
1008N/A Until someone has a better way, we'll probably just rename it
1008N/A "MaxConnectionsPerChild".
1008N/A
1008N/A * Regex containers don't work in an intutive way
1008N/A Status: No one has come up with an efficient way to fix this
1008N/A behavior. Dean has suggested getting rid of regex containers
1008N/A completely.
1008N/A OtherBill suggests: We at least seem to agree on eliminating
1008N/A the <Container ~ foo> forms, and using only
1008N/A <ContainerMatch foo> semantics.
1008N/A
1008N/A * SIGSEGV on Linux (glibc 2.1.2) isn't caught properly by a
1008N/A sigwaiting thread. We need to work around this, perhaps unless
1008N/A there is hope soon for a fixed glibc.
1008N/A
1008N/A * orig_ct in the byterange/multipart handling may not be
1008N/A needed. Apache 1.3 just never stashed "multipart" into
1008N/A r->content_type. We should probably follow suit since the
1008N/A byterange stuff doesn't want the rest of the code to see the
1008N/A multipart content-type; the other code should still think it is
1008N/A dealing with the <orig_ct> stuff.
1008N/A Status: Greg volunteers to investigate (esp. since he was most
1008N/A likely the one to break it :-)
1008N/A
1008N/ABinaries (2.0.35):
1008N/A
1008N/A Platform Avail. Volunteer
1008N/A ------------------------------------------------------------------
1008N/A AIX 4.3.3 Bill Stoddard
1008N/A Mandrake 8.1 no Ryan Bloom
1008N/A FreeBSD 4.1 yes Ryan Bloom
1008N/A i386-unknown-freebsd4.5 yes Aaron Bannert
1008N/A OS X 10.1.3/Darwin 5.3 yes Jim Jagielski
1008N/A Solaris 8.x/sparc yes Jim Jagielski
1008N/A i686-pc-linux-gnu-rh70 yes Aaron Bannert
1008N/A i686-pc-linux-gnu-rh72 yes Aaron Bannert
1008N/A i386-pc-solaris2.8 yes Aaron Bannert
1008N/A powerpc-unknown-linux-gnu yes Graham Leggett
1008N/A NetWare yes Brad Nicholes
1008N/A Win32-x86 yes William Rowe
1008N/A
1008N/AOther features that need writing:
1008N/A
1008N/A * Finish infrastructure in core for async MPMs
1008N/A Status: post 2.0
1008N/A
1008N/A * TODO in source -- just do an egrep on "TODO" and see what's there
1008N/A
1008N/AAvailable Patches:
0N/A
0N/A * Martin Sojka <msojka@gmx.de>'s patch to add error reporting for failed
1008N/A htpasswd actions due to a full /tmp volume (other programs may have
0N/A similar problems?)
1008N/A PR: 6475
1008N/A Status:
* Mike Abbott's <mja@trudge.engr.sgi.com> patches to improve
performance
Status: These were written for 1.3, and are awaiting a port to
2.0
* Jim Winstead's <jimw@trainedmonkey.com> patch to add CookieDomain and
other small mod_usertrack features
* Dan Rench's <drench@xnet.com> patch to add allow the errmsg and timefmt
of SSI's to be modified in the config file. Patch is available in
PR6193