Project description.

The Apache HTTP Server Project is an effort to develop and maintain an open-source HTTP server for modern operating systems including UNIX and Windows NT.

The goal of this project is to provide a secure, efficient and extensible server that provides HTTP services in sync with the current HTTP standards

Apache 2.1.8 Changelog
  • Fix lingering close implementation to match 1.3.x behaviour. PR 35292. [Joe Orton]
  • mod_ssl: Support limited buffering of request bodies to allow per-location renegotiation to proceed. PR 12355. [Joe Orton]
  • Fix regression since 2.0.x in AllowOverride Options handling. PR 35330. [kabe ]
  • mod_ssl: Fix memory leak in ssl_util_algotypeof(). PR 25659. [David Blake , Martin Kraemer]
  • prefork, worker and event MPMs: Support a graceful-stop procedure: Server will wait until existing requests are finished or until "GracefulShutdownTimeout" number of seconds before exiting. [Colm MacCarthaigh, Ken Coar, Bill Stoddard]
  • prefork, worker and event MPMs: Prevent children from holding open listening ports upon graceful restart or stop. PR 28167. [Colm MacCarthaigh, Brian Pinkerton ]
  • SECURITY: CVE-2005-2700 (cve.mitre.org) mod_ssl: Fix a security issue where "SSLVerifyClient" was not enforced in per-location context if "SSLVerifyClient optional" was configured in the vhost configuration. [Joe Orton]
  • mod_ssl: Catch parse errors from misconfigured or malformed CRLs. PR 36438. [Joe Orton]
  • mod_proxy/mod_proxy_balancer: lbmethods now implemented as providers. Prevent problems when no Vhost containers were configured with proxy balancers. [Jim Jagielski]
  • New provider function to list all available provider names in a specific group and version (ap_list_provider_names). [Jim Jagielski]
  • mod_cache: Enhance CacheEnable/CacheDisable to control caching on a per-protocol, per-host and per-path basis. Intended for proxy configurations. [Colm MacCarthaigh]
  • mod_disk_cache: Canonicalise the storage key, for improved hit/miss ratio. [Colm MacCarthaigh]
  • mod_cgid: Append .PID to the script socket filename and remove the script socket on exit. [Colm MacCarthaigh, Jim Jagielski]
  • mod_cgid: run the get_suexec_identity hook within the request-handler instead of within cgid. PR 36410. [Colm MacCarthaigh]
  • Linux 2.0: remove support for threaded MPM's due to linuxthreads use of SIGUSR1 clashing with graceful restart signal. [Colm MacCarthaigh]