You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by yl...@apache.org on 2022/03/07 14:54:52 UTC

svn commit: r1898697 - in /httpd/httpd/trunk: ./ changes-entries/

Author: ylavic
Date: Mon Mar  7 14:54:52 2022
New Revision: 1898697

URL: http://svn.apache.org/viewvc?rev=1898697&view=rev
Log:
Sync CHANGES entries [skip ci]

Removed:
    httpd/httpd/trunk/changes-entries/AP_MAX_LIMIT_XML_BODY.diff
    httpd/httpd/trunk/changes-entries/ab-keepalivefix.txt
    httpd/httpd/trunk/changes-entries/ab-rampdelay.txt
    httpd/httpd/trunk/changes-entries/ab-ssl-sense-fix.txt
    httpd/httpd/trunk/changes-entries/discard_body.diff
    httpd/httpd/trunk/changes-entries/http2_request_scheme.txt
    httpd/httpd/trunk/changes-entries/md_ignore_http_challenges.txt
    httpd/httpd/trunk/changes-entries/mpm_child_stopped.txt
    httpd/httpd/trunk/changes-entries/pr65881.txt
    httpd/httpd/trunk/changes-entries/pr65886.txt
    httpd/httpd/trunk/changes-entries/proxy_worker_name_384.txt
    httpd/httpd/trunk/changes-entries/rewrite_vs_proxy_mapping.txt
    httpd/httpd/trunk/changes-entries/watchdog_stopped.txt
Modified:
    httpd/httpd/trunk/CHANGES

Modified: httpd/httpd/trunk/CHANGES
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?rev=1898697&r1=1898696&r2=1898697&view=diff
==============================================================================
--- httpd/httpd/trunk/CHANGES [utf-8] (original)
+++ httpd/httpd/trunk/CHANGES [utf-8] Mon Mar  7 14:54:52 2022
@@ -1,6 +1,66 @@
                                                          -*- coding: utf-8 -*-
 Changes with Apache 2.5.1
 
+  *) ab: Add an optional ramp delay when starting concurrent connections so
+     as to not trigger denial of service protection in the network. Report
+     levels of concurrency achieved in cases where the test completes before
+     full concurrency is achieved. [Graham Leggett]
+
+  *) mod_http2: preserve the port number given in a HTTP/1.1
+     request that was Upgraded to HTTP/2. Fixes PR65881.
+     [Stefan Eissing]
+
+  *) mod_http2: :scheme pseudo-header values, not matching the
+     connection scheme, are forwarded via absolute uris to the
+     http protocol processing to preserve semantics of the request.
+     Checks on combinations of pseudo-headers values/absence
+     have been added as described in RFC 7540.
+     Fixes <https://github.com/icing/mod_h2/issues/230>.
+     [Stefan Eissing]
+
+  *) core/mpm: add hook 'child_stopped` that gets called when the MPM has
+     stopped all processing in a child process. This is when all running
+     threads shall be stopped and joined.
+     [Stefan Eissing]
+
+  *) core: Make sure and check that LimitXMLRequestBody fits in system memory.
+     [Ruediger Pluem, Yann Ylavic]
+
+  *) ab: Fix the detection for when the server performed a legitimate
+     connection close as per RFC7230 6.3.1. We must check whedther the
+     connection was previously kept alive, and not whether the current
+     closed request is keepalive. [Graham Leggett]
+
+  *) mod_rewrite: Make URI-to-filename rewrites work transparently with
+     proxy early mappings (mapping=servlet/decoded).  [Yann Ylavic]
+
+  *) mod_md: do not interfere with requests to /.well-known/acme-challenge/
+     resources if challenge type 'http-01' is not configured for a domain.
+     Fixes <https://github.com/icing/mod_md/issues/279>.
+     [Stefan Eissing]
+
+  *) mod_proxy: Bump limit of proxy workers names to 384 characters.  PR 53218
+     [Yann Ylavic]
+
+  *) core: Simpler connection close logic if discarding the request body fails.
+     [Yann Ylavic, Ruediger Pluem]
+
+  *) mod_proxy: Use the maxium of front end and backend timeouts instead of the
+     minimum when tunneling requests (websockets, CONNECT requests).
+     Backend timeouts can be configured more selectively (per worker if needed)
+     as front end timeouts and typically the backend timeouts reflect the
+     application requirements better.  PR 65886 [Ruediger Pluem]
+
+  *) mod_watchdog: use the `child_stopping` and `child_stopped` hooks
+     to shutdown workers before pool destruction releases global
+     resources and libraries.
+     [Stefan Eissing]
+
+  *) ab: Respond appropriately to SSL_ERROR_WANT_READ and SSL_ERROR_WANT_WRITE.
+     Previously the correct event was polled for, but the response to the poll
+     would call write instead of read, and read instead of write. PR 55952
+     [Graham Leggett]
+
   *) mod_md: the status description in MDomain's JSON, exposed in the
      md-status handler (if configure) did sometimes not carry the correct
      message when certificates needed renew.