advanced.xml

mod_log_config: instead of using the new dedicated

pattern format "%M" for duration milliseconds,

overload the existing "%D" to choose the time precision

("%{s}D" for seconds, "%{ms}D" for milliseconds and

"%{us}D" for microseconds).

The existing %T and %D without precision are kept for

compatibility.

The previously introduced "%M" (r1677187) is removed,

it has not yet been released. Format pattern characters

are rare, so we should only use a new one if an

existing one isn't a good fit.

Fix syntax.

Follow-up to r1680895:

Let %T be the format character which accepts time resolution

arguments.

Submitted by: rjung, trawick

Reviewed/backported by: jim

mpm_event: Allow for timer events duplicates.

Meanwhile ap[r]_skiplist_add()...

mpm_event: follow up to r1666468.

We only need one compare function for add semantic with apr_skiplist_insert()

and unique timers (pointers). It also should work with apr_skiplist_remove()

and apr_skiplist_find(), be they used some day.

mpm_event: follow up to r1666468 and r1666618.

We don't need to return 0 in the compare function, but for debugging purpose

which we could implement later if necessary (in a separate function).

For now, keep the function simple as in 2.4.x to ease backport, and add a

comment about why we never return 0 here.

Submitted by: ylavic

Reviewed/backported by: jim

Add output for "?auto" version of server-status

to proxy status, mod_ssl session cache info,

mod_cache_socache and the status hook of the

individual socache implementations.

Followon to r1671397 for proxy server-status

in auto mode:

- don't show HTML legend

- Show correct worker name

More followon to r1671397 for proxy server-status

in auto mode:

- remove remaining HTML markup

Submitted by: rjung

Reviewed/backported by: jim

Put quotation marks around most arbitrary-text or filesystem

strings for directives:

* {Alias,Redirect,Proxy*}{,Match}

* <{Directory,Files,Location}{,Match}>

core: If explicitly configured, use the KeepaliveTimeout value of the

virtual host which handled the latest request on the connection, or by

default the one of the first virtual host bound to the same IP:port.

For non-async MPMs, use either r->server's or c->base_server's value in

ap_process_http_sync_connection() depending on a new server_rec's flag

called keep_alive_timeout_set and determined at config time.

For event MPM, use a queue per timeout value, chaining the queues per

type (keepalive wrt KeepAliveTimeout, write completion wrt to Timeout)

so that maintenance can be done on all the queues from the head, and such

that insertions/maintenance remain in O(1).

A server config is created and pointing to the queue of each vhost at

post_config time, hence the config can be associated to the connection

state (cs) at post_read_request time (keep_alive_timeout_set is used to

determine r->server vs c->base_server here), and we can simply insert

with TO_QUEUE_INSERT(cs->sc->q, cs). PR56226.

While at it, since each queue now embeds it own timeout and hence the

expiration_time of the cs has changed to a queue_timestamp (the time it

was queued), we can detect clock skews and expire entries immediatly if

the system is set (eg. far) in the past during runtime and we want to

avoid waiting for (eg.) centuries before the current logic kills them.

Any entry which is registered above now + q->timeout is concerned, and

is now cleaned from the queue when encountered. PR57374.

core: Follow up to r1664071: comments on new keep_alive_timeout_set flag.

Submitted by: ylavic

Reviewed/backported by: jim

mod_proxy_http: Don't expect the backend to ack the "Connection: close" to

finally close those not meant to be kept alive by SetEnv proxy-nokeepalive

or force-proxy-request-1.0, and respond with 502 instead of 400 if its

Connection header is invalid.

Submitted by: ylavic

Reviewed/backported by: jim

mpm_event: follow up to r1538490, r1545736, r1604350, r1639614 and r1642868.

Clear and restore sbh in notify_suspend() and notify_resume() respectively.

Submitted by: ylavic

Reviewed/backported by: jim

too much DirectoryMatch matching and is not critical to have in.

Discussion on dev@ on trunk rev commit msg for r1635428

Also, I don't think the addition in the middle of the core_dir_config

given that the core_dir_config is exposed to modules as kind

of a special case.

Add class attributes for empty descriptions

Submitted by: druggeri

Reviewed/backported by: jim

Fix computation of the size of 'struct sockaddr_un' when passed to 'connect()'.

Use the same logic as the one in ' in 'proxy_util.c'.

mod_proxy: Don't limit the size of the connectable Unix Domain Socket paths.

Since connect() to UDS path is used at several places, introduce

ap_proxy_connect_uds() in proxy_util.

Submitted by: jailletc36, ylavic

Reviewed/backported by: jim

mod_proxy_wstunnel: abort backend connection on polling error to avoid

further processing (lingering close, SSL shutdown).

Submitted by: ylavic

Reviewed/backported by: jim

mod_cache: avoid unlikely access to freed memory.

Submitted by: ylavic

Reviewed/backported by: jim

Move OCSP stapling information from a per-certificate store

(ex_data attached to an X509 *) to a per-server hash which is

allocated from the pconf pool. Fixes PR 54357, PR 56919 and

a leak with the certinfo_free cleanup function (missing

OCSP_CERTID_free).

* modules/ssl/ssl_util_stapling.c: drop certinfo_free, and add

ssl_stapling_certid_free (used with apr_pool_cleanup_register).

Switch to a stapling_certinfo hash which is keyed by the SHA-1

digest of the certificate's DER encoding, rework ssl_stapling_init_cert

to only store info once per certificate (allocated from the pconf

to the extent possible) and extend the logging.

* modules/ssl/ssl_private.h: adjust prototype for

ssl_stapling_init_cert, replace ssl_stapling_ex_init with

ssl_stapling_certinfo_hash_init

* modules/ssl/ssl_engine_init.c: adjust ssl_stapling_* calls

Based on initial work by Alex Bligh <alex alex.org.uk>

Follow up to r1629372: ensure compatibily with OpenSSL < 1.0 (sk_OPENSSL_STRING_value).

Follow up to r1629372 and r1629485: ensure compatibily with OpenSSL < 1.0 (sk_OPENSSL_STRING_[num|value|pop] macros).

Submitted by: kbrand, ylavic, ylavic

Reviewed/backported by: jim

Rename module name in doxygen + partly revert r832442 which skipped doxygen doc generation for 'mod_watchdog.h'

s/apr_pstrndup/apr_pstrmemdup/ to save a few cycles

Use ap_remove_input_filter_byhandle instead of duplicating the code.

Remove some 'register' in variable declaration.

Remove some 'register' in variable declaration.

Save a few cycles by calling 'apr_isalnum' instead of 'apr_isalpha' and 'apr_isdigit'.

Do not use deprecated define.

No change in generated code because MODULE_MAGIC_NUMBER is defined as:

#define MODULE_MAGIC_NUMBER MODULE_MAGIC_NUMBER_MAJOR

Submitted by: jailletc36

Reviewed/backported by: jim