/
STATUS
370 lines (307 loc) · 17.3 KB
/
STATUS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
APACHE 2.4 STATUS: -*- mode: text; coding: utf-8 -*-
Last modified at [$Date$]
The current version of this file can be found at:
* http://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x/STATUS
Documentation status is maintained separately and can be found at:
* docs/STATUS in this source tree, or
* http://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x/docs/STATUS
The current development branch of this software can be found at:
* http://svn.apache.org/repos/asf/httpd/httpd/trunk
Consult the following STATUS files for information on related projects:
* http://svn.apache.org/repos/asf/apr/apr/trunk/STATUS
* http://svn.apache.org/repos/asf/apr/apr/branches/1.4.x/STATUS
* http://svn.apache.org/repos/asf/apr/apr-util/branches/1.4.x/STATUS
* http://svn.apache.org/repos/asf/apr/apr/branches/1.5.x/STATUS
* http://svn.apache.org/repos/asf/apr/apr-util/branches/1.5.x/STATUS
Patches considered for backport are noted in their branches' STATUS:
* http://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x/STATUS
* http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/STATUS
* http://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x/STATUS
Release history:
[NOTE that x.{odd}.z versions are strictly Alpha/Beta releases,
while x.{even}.z versions are Stable/GA releases.]
2.4.13 : In development.
2.4.12 : Tagged on January 22, 2015.
2.4.11 : Tagged on January 15, 2015. Not released.
2.4.10 : Tagged on July 15, 2014. Released July 21, 2014
2.4.9 : Tagged on March 13, 2014. Released on March 17, 2014
2.4.8 : Tagged on March 11, 2014. Not released.
2.4.7 : Tagged on November 19, 2013. Released on Nov 25, 2013
2.4.6 : Tagged on July 15, 2013. Released July, 22, 2013
2.4.5 : Tagged on July 11, 2013, not released.
2.4.4 : Tagged on February 18, 2013. Released Feb 25, 2013
2.4.3 : Tagged on August 17, 2012. Released Aug 18, 2012
2.4.2 : Tagged on April 5, 2012. Released Apr 17, 2012.
2.4.1 : Tagged on February 13, 2012. Released Feb 21, 2012.
2.4.0 : Tagged on January 16, 2012, not released.
2.3.16 : Tagged on December 15, 2011.
2.3.15 : Tagged on November 8, 2011. Released Nov. 15, 2011.
2.3.14 : Tagged on August 1, 2011. Released Aug. 9, 2011.
2.3.13 : Tagged on June 28, 2011, not released.
2.3.12 : Tagged on May 11, 2011. Released May 23, 2011.
2.3.11 : Released as Beta on March 7, 2011.
2.3.10 : Tagged on December 13, 2010. Released Dec 21, 2010.
2.3.9 : Tagged on November 23, 2010, not released.
2.3.8 : Tagged on August 24, 2010.
2.3.7 : Tagged on August 19, 2010, not released.
2.3.6 : Released on June 21, 2010.
2.3.5 : Released on January 26, 2010.
2.3.4 : Released on December 8, 2009.
2.3.3 : Tagged on November 11, 2009, not released.
2.3.2 : Tagged on March 23, 2009, not released.
2.3.1 : Tagged on January 2, 2009, not released.
2.3.0 : Tagged on December 6, 2008, not released.
Contributors looking for a mission:
* Just do an egrep on "TODO" or "XXX" in the source.
* Review the bug database at: http://issues.apache.org/bugzilla/
* Review the "PatchAvailable" bugs in the bug database:
https://issues.apache.org/bugzilla/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&product=Apache+httpd-2&keywords=PatchAvailable
After testing, you can append a comment saying "Reviewed and tested".
* Open bugs in the bug database.
* See also the STATUS file in the docs/ directory, which lists documentation-specific TODO items.
CURRENT RELEASE NOTES:
* Forward binary compatibility is expected of Apache 2.4.x releases, such
that no MMN major number changes will occur after 2.4.1. Such changes can
only be made in the trunk.
* All commits to branches/2.4.x must be reflected in SVN trunk,
as well, if they apply. Logical progression is commit to trunk
then merge into branches/2.4.x, as applicable.
* Current exceptions for RTC for this branch:
. mod_lua
. documentation
. non-Unix build
. non-Unix, single-platform code
RELEASE SHOWSTOPPERS:
PATCHES ACCEPTED TO BACKPORT FROM TRUNK:
[ start all new proposals below, under PATCHES PROPOSED. ]
PATCHES PROPOSED TO BACKPORT FROM TRUNK:
[ New proposals should be added at the end of the list ]
* mod_buffer: Forward flushed input data immediately and avoid (unlikely)
access to freed memory.
trunk patch: http://svn.apache.org/r1632742
http://svn.apache.org/r1634836 (CHANGES entry)
2.4.x patches: trunk works (modulo CHANGES).
+1: ylavic
ylavic: http://people.apache.org/~ylavic/httpd-r1632742-x-w.diff is the
same patch without space changes (may be easier to review).
* mod_proxy: Add ap_proxy_define_match_worker() and use it for ProxyPassMatch
and ProxyMatch section to distinguish between normal workers and workers
with regex substitutions in the name. Implement handling of such workers
in ap_proxy_get_worker(). Fixes the bug when regex workers were not
matched and used for request. PR 43513.
trunk patch: http://svn.apache.org/r1609680
http://svn.apache.org/r1641381
2.4.x patch: trunk works
+1: jkaluza, ylavic
* mod_rewrite: use the context info API to alleviate the need to specify
a RewriteBase in some situations
trunk patch: http://svn.apache.org/r1642484
2.4.x patch: trunk works
+1 covener, jim
* mod_proxy_ajp: Fix client connection errors handling and logged status
when it occurs. PR 56823.
trunk patch: http://svn.apache.org/r1643537
http://svn.apache.org/r1643543
2.4.x patch: trunk works (module CHANGES)
+1: ylavic, jim
* core: Add ap_errorlog_provider to make ErrorLog logging modular. This
backport keeps syslog logging as part of httpd core and only adds
API to allow other modules to be used for error logging.
trunk patch: http://svn.apache.org/r1525597
http://svn.apache.org/r1525664
http://svn.apache.org/r1525845
http://svn.apache.org/r1527003
http://svn.apache.org/r1527005
http://svn.apache.org/r1532344
http://svn.apache.org/r1539988
http://svn.apache.org/r1541029
http://svn.apache.org/r1543979
http://svn.apache.org/r1544156
http://svn.apache.org/r1626978
2.4.x patch: http://people.apache.org/~jkaluza/patches/httpd-2.4.x-errorlog_provider.patch
+1: jkaluza
* mod_journald: Add new module mod_journald to log error logs into journald.
This patch needs changes done in mod_systemd patch (already
proposed for 2.4.x).
trunk patch: http://svn.apache.org/r1610339
http://svn.apache.org/r1621806
2.4.x patch: http://people.apache.org/~jkaluza/patches/httpd-2.4.x-mod_journald.patch
+1: jkaluza
* MPMs: Support SO_REUSEPORT to create multiple duplicated listener
records for scalability (full log in 2.4.x patch).
trunk patch: http://svn.apache.org/r1599531
http://svn.apache.org/r1599593
http://svn.apache.org/r1599601
http://svn.apache.org/r1599603
http://svn.apache.org/r1601558
http://svn.apache.org/r1629909
http://svn.apache.org/r1629918
http://svn.apache.org/r1629990
http://svn.apache.org/r1635521
http://svn.apache.org/r1635859
http://svn.apache.org/r1640145
http://svn.apache.org/r1640161
http://svn.apache.org/r1640184
http://svn.apache.org/r1640763
http://svn.apache.org/r1643179
http://svn.apache.org/r1656368
2.4.x patch: http://people.apache.org/~ylavic/httpd-2.4.x-ap_listeners_buckets.patch
+1: ylavic
* mod_cgi, mod_cgid: If both modules get installed,
use IfModule for MPM to LoadModule mod_cgi for prefork
and mod_cgid for all other MPMs. PR 57379.
Previously when combined with --enable-load-all-modules
both modules were loaded and it was undefined
which one actually handled cgi requests.
Based on a patch by olli hauer <ohauer gmx.de>.
trunk patch: http://svn.apache.org/r1652955
http://svn.apache.org/r1652985
http://svn.apache.org/r1652989
2.4.x patch: trunk works
+1: rjung, ylavic
* mod_ssl: Add support for extracting subjectAltName entries of type
rfc822Name and dNSName into SSL_{CLIENT,SERVER}_SAN_{Email,DNS}_n
variables. (also covers PR57207)
trunk patch: https://svn.apache.org/r1650047
2.4.x patch: trunk patch works (modulo CHANGES)
+1: kbrand, ylavic
* mod_proxy_http: Don't establish or reuse a backend connection before pre-
fetching the request body, so to minimize the delay between it is supposed
to be alive and the first bytes sent: this is a best effort to prevent the
backend from closing because of idle or keepalive timeout in the meantime.
Also, handle a new "proxy-flushall" environment variable which allows to
flush any forwarded body data immediately. PR 56541+37920.
trunk patch: http://svn.apache.org/r1656259
http://svn.apache.org/r1656359 (CHANGES entry)
2.4.x patch: trunk works (modulo CHANGES, docs/log-message-tags)
+1: ylavic
* mod_ssl: Add the SSL_CLIENT_CERT_RFC4523_CEA variable, which provides
a combination of certificate serialNumber and issuer as defined by
CertificateExactMatch in RFC4523.
trunk patch: http://svn.apache.org/r1661258
2.4.x patch: trunk works
+1: minfrin, ylavic
*) mod_deflate: A misplaced check prevents limiting small bodies with the
new inflate limits. PR56872.
trunk patch: http://svn.apache.org/r1619383
http://svn.apache.org/r1619444
http://svn.apache.org/r1662245 (CHANGES entry)
http://svn.apache.org/r1662246 (updated CHANGES entry)
2.4.x patch: trunk works (modulo CHANGES)
http://people.apache.org/~ylavic/httpd-2.4.x-mod_deflate-PR56872.patch
+1: ylavic, covener
*) mod_proxy: Use the correct server name for SNI in case the backend
SSL connection itself is established via a proxy server. PR 57139
trunk patch: http://svn.apache.org/r1634120
2.4.x patch: trunk works (modulo CHANGES)
+1: ylavic
*) mpm_event: Clear and restore sbh in notify_suspend() and notify_resume()
respectively. This merges a missing fix from r1545736 (sbh = NULL before
notify_suspend() for write completion, near line 1068 in 2.4.12) which was
missed between r1541207 and r1642858.
trunk patch: http://svn.apache.org/r1663017
2.4.x patch: http://people.apache.org/~ylavic/httpd-2.4.x-mpm_event-notify_suspend_sbh.patch
(trunk works, but the above contains the CHANGES entry, which is 2.4.x only...)
+1 ylavic, covener
*) core: Add expression support to ErrorDocument. Switch from a fixed
sized 664 byte array per merge to a hash table.
trunk patch: http://svn.apache.org/r1661448
2.4.x patch: http://people.apache.org/~minfrin/httpd-core-errordocument24-3.patch
minfrin: +1
OTHER PROPOSALS
* A list of further possible backports can be found at:
http://people.apache.org/~rjung/patches/possible-backports-httpd-trunk-2_4.txt
If you want to propose one of those, please add them above.
PATCHES/ISSUES THAT ARE BEING WORKED
PATCHES/ISSUES THAT ARE STALLED
* mod_systemd: New module, for integration with systemd on Linux.
trunk patch: http://svn.apache.org/r1393976
http://svn.apache.org/r1393997
http://svn.apache.org/r1484554
http://svn.apache.org/r1528032
http://svn.apache.org/r1528034
http://svn.apache.org/r1614821
http://svn.apache.org/r1618579
http://svn.apache.org/r1618588
2.4.x patch: http://people.apache.org/~jkaluza/patches/mod_systemd/httpd-2.4.x-mod_systemd.patch
+1: jkaluza
* core: Add support for systemd socket activation.
trunk patch: http://svn.apache.org/r1511033
http://svn.apache.org/r1608686
http://svn.apache.org/r1608694
http://svn.apache.org/r1608703
http://svn.apache.org/r1608721
http://svn.apache.org/r1608744
2.4.x patch: http://people.apache.org/~jkaluza/patches/mod_systemd/httpd-2.4.x-socket-activation.patch
+1: jkaluza
* core: Stop the HTTP_IN filter from attempting to write error buckets
to the output filters
trunk patch: https://svn.apache.org/viewvc?view=revision&revision=1482522
https://svn.apache.org/viewvc?view=revision&revision=1482918
2.4.x patch: /* working on it */
+1: jim
* mod_proxy: Ensure network errors detected by the proxy are returned as
504 Gateway Timout as opposed to 502 Bad Gateway
trunk patch: https://svn.apache.org/viewvc?view=revision&revision=1480058
2.4.x patch: trunk patch works modulo CHANGES
+1:
-1: rpluem: This change is still disputed. See
http://mail-archives.apache.org/mod_mbox/httpd-dev/201305.mbox/%3C1B16B9E3-87BA-4EEF-939C-7C7313B54714%40gbiv.com%3E
* cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will be
compiled by the build compiler instead of the host compiler.
Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
Trunk patches: http://svn.apache.org/viewvc?view=revision&revision=1327907
http://svn.apache.org/viewvc?view=revision&revision=1328390
http://svn.apache.org/viewvc?view=revision&revision=1328714
2.4 patch: http://people.apache.org/~fuankg/diffs/httpd-2.4.x-cross_compile.diff
fuankg: on hold until we agree for a better and more simple solution ...
* mod_ssl: Add support for Next Protocol Negotiation.
Trunk patch:
http://svn.apache.org/viewvc?view=revision&revision=1332643
2.4.x patch:
Trunk patch works.
+1: ben
sf says: Needs r1345599, too.
And wrowe's comment about the 2.2 patch is also valid for 2.4:
http://svn.apache.org/viewvc?view=revision&revision=1354823
* Makefile.win: Added copying of .vbs / .wsf CGIs to Windows install target.
Moved fixing of shebang to separate target so that it is
no longer executed by default and all CGIs remain inactive.
trunk patch: http://svn.apache.org/viewvc?view=revision&revision=1387984
http://svn.apache.org/viewvc?view=revision&revision=1421203
http://svn.apache.org/viewvc?view=revision&revision=1421591
2.4.x patch: http://people.apache.org/~fuankg/diffs/httpd-2.4.x-Makefile.win.diff
+1 fuankg, gsmith
-.8: trawick
This commit is essentially deciding that an httpd install on
Windows now has printenv/testcgi written in 2 more languages.
To the extent that the usefulness is that it shows how to make scripts
of these types executable by httpd, I believe that the documentation
is the proper place to solve that. To the extent that the usefullness
is to show how to implement a CGI in these particular languages, I believe
that the httpd distribution and documentation in general is not the
place for that. Historically these types of scripts have caused problems
for downstream vendorsas well as newbies (and sometimes the intersection
of those two groups) who don't understand that these are information leaks
once they are enabled, and the subtlety of the way they are disabled ("Apache
messed up the first line; let me fix that") contributes to that.
fuankg notes: I've just added a big warning to all CGI scripts which should now
make absolutely clear that these CGIs are for testing purpose only - so those
who enable those scripts with inserting the right shebang should be 100% aware
of any risks (this should cover your last point).
jim: trawick, does the above address your concerns?
trawick: to some extent (somebody reading the script gets an idea)
Why isn't the configuration requirement documented instead
of described indirectly in a sample?
Why are these new samples added to the install without three
votes? (I didn't veto it; put your name next to the two
existing ones and I'll be satisified that enough people
considered this addition as an appropriate solution for a
real httpd usability problem.)
wrowe: I'd agree with trawick, and suggest that these scripts can begin
their life somewhere in the manual/ tree. This really seems like
the place where /usr/share/httpd/examples/ would be useful, but
there isn't an ordinary directory for that. Since we want none
of the scripts to function 'out of the box', what about a new
cgi-examples/ dir alongside cgi-bin/? Otherwise manual/cgi/examples
might work?