Path to this page:
Subject: CVS commit: pkgsrc/www/ap-jk
From: OBATA Akio
Date: 2007-04-25 08:24:02
Message id: 20070425062402.9427A2150A@cvs.netbsd.org
Log Message:
Update ap-jk to 1.2.22.
Changes between 1.2.21 and 1.2.22
Native
Refactor line endings logging to make it correct for all platforms and \
webservers. (mturk)
Added command line windows make files. (mturk)
Allow fail_on_status directive to be multi line. (mturk)
42076: Fix name of new option from ForwardCertChain to ForwardSSLCertChain as \
documented. (rjung)
Docs: Fix a couple of typos, change format of a few tables, fix links to news \
pages. (rjung)
Fix correct URL for TC 6 examples in new IIS rewrite.properties configuration \
example file. (rjung)
Add svn properties to several files. (rjung)
Add TC 6 examples to uriworkermap.properties in config examples. (rjung)
Allow multiple status codes for fail_on_status directive. The status codes can \
be delimited by space or comma characters. (mturk)
IIS. Added pcre like regular expressions for url rewrite rules. (mturk)
41922: Apache 1.3. Enable JkEnvVar. (mturk)
Apache. Add --enable-flock configure parameter for explicit compilation of \
faster flock() system calls for OS supporting those calls. By default the fcntl \
system call for locking will be used that is a little bit slower but it can work \
on NFS mounted volumes as well. (mturk)
41562: Add Debug logging for read from client in ISAPI Redirector. Contributed \
by Tim Whittington. (mturk)
Apache. Add ForwardSSLCertChain JkOption. Contributed by Patrik Schnellmann. (mturk)
IIS. Do not forbid access to web-inf or meta-inf if there is no mapped worker. \
This allows to have resource with those names that are outside mapped contexts. \
(mturk)
Apache. Use process id for creating shared memory name and delete shared memory \
and shared memory lock files on exit. (mturk)
IIS. Fix Keep-Alive regression introduced in 1.2.21. (mturk)
Delete unused check for empty init_map during startup. (rjung)
41770: Fix startup error if no JkWorkersFile is used. (rjung)
Use JK_TRUE/JK_FALSE instead of OK/!OK as return values in init_jk(). (rjung)
Minor adjustments to apache startup log messages (when to use STDERR, remove \
deprecated NOERRNO flag, shm warning and warnings for usage of default files). \
(rjung)
Replace APR precompiler directive by httpd mpm_query to detect MPM threading. \
Add a debug log message about auto-detected pool size. (rjung)
Make MMN check easier to understand and a little more precise (for new \
ap_get_server_banner()/ap_get_server_description()). We use the new API only for \
Apache httpd 2.3. This way our binaries are not tightly coupled to a minor 2.0 \
version, and we don't use ap_get_server_banner() any way. (rjung)
Use the full description string ap_get_server_description() instead of the \
truncated info from ap_get_server_banner(), because this info gets used \
internally (status worker display and ajp14 backend communication) and is not \
send back to the normal user. (rjung)
41757: Document the "--enable-prefork" flag of configure. (rjung)
Enhance log messages for failures when parsing attribute maps. (rjung)
Correct log message during worker initialization, in case remote host could not \
be resolved. We logged the default host name "localhost" instead of \
the configured one. (rjung)
41770: Fix the second part of the bug: local_worker and local_worker_only is \
missing from the list of deprecated attributes (and not supported either), so \
prevents the web server from startup. (rjung)
Changes between 1.2.20 and 1.2.21
Native
CVE-2007-0774 : A denial of service and critical remote code execution \
vulnerability. Caused by buffer overflow in map_uri_to_worker() when URL were \
longer that 4095 bytes. Reported by ZDI (www.zerodayintiative.com). Please note \
this issue only affected versions 1.2.19 and 1.2.20 of the Apache Tomcat JK Web \
Server Connector and not previous versions. Tomcat 5.5.20 and Tomcat 4.1.34 \
included a vulnerable version in their source packages. Other versions of Tomcat \
were not affected.
Check the worker. parameters and don't start if the parameter is not a valid \
one. (jfclere)
41439: Allow session IDs to get stripped off URLs of static content in Apache \
by adding JkStripSession directive (configurable per vhost). (mturk)
Change semantics of empty defaults for JkEnvVar variables. Until 1.2.19: not \
allowed. In 1.2.20: send variables as empty strings, if neither set to non empty \
in config, nor during runtime. Starting with 1.2.21: If config has no second \
argument only send variable if set (even when set to empty string) during \
runtime. Allows good combination with condition attribute in tomcat access log. \
(rjung)
41610: Fix incorrect detection of missing Content-Length header leading to \
duplicate headers. Contributed by Boris Maras. (rjung)
Better build support for SunONE (Netscape/iPlanet) webservers. (jim)
Add warning if duplicate map keys are read and are not allowed, e.g. when \
parsing uriworkermap.properties. (rjung)
Don't concat worker names, if uriworkermap.properties has a duplicate pattern, \
instead overwrite the worker. (rjung)
Log deprecation message even in duplication case. (rjung)
uriworkermap.properties: Fix off-by-one problem when deleting URL mapping \
during reloading of uriworkermap.properties. (rjung)
41439: Allow session IDs to get stripped off URLs of static content in IIS \
(configurable). (rjung)
41333: Refactoring isapi_plugin configuration reading. (rjung)
41332: Add some more errno logging and unify the format. (rjung)
JkStatus: Improved logging by adding status worker name to messages. Added \
messages to the recover worker action. (rjung)
JkStatus: Refactoring searching for workers and sub workers. (rjung)
41318: Add configuration to make status worker user name checks case \
insensitive. (rjung)
JkStatus: Add estimated time until next global maintenance to other mime types \
and adopt jkstatus ant task. (rjung)
JkStatus: Show estimated time until next global maintenance. Change displayed \
time until next recovery to a min/max pair. (rjung)
JkStatus: Allow a user of a read/write status worker to switch it to and from \
read_only mode temporarily. (rjung)
JkStatus: Do not show read/write commands in a read_only status worker. (rjung)
JkStatus: Allow lb sub workers in error state to be marked for recovery \
administratively from the status worker. (rjung)
Load Balancer: Do not try to recover multiple times in parallel. Use additional \
runtime states "PROBE" and "FORCED". (rjung)
JkStatus: Improve data synchronization between different processes. (rjung)
41381: Fix segfault in feature fail_on_status (wrong order of log arguments). \
Patch by Juri Haberland. (rjung)
Use correct windows line endings for log file on WIN32 platform. (rjung)
Changes between 1.2.19 and 1.2.20
Native
JkStatus Ant Task documentation page. (pero/rjung)
JkStatus Ant Tasks: Add new tasks for update and reset. (pero)
JkStatus Ant Tasks: Update for new xml status format. (pero)
Allow integer and string values when setting enumeration/boolean attributes via \
status worker update action. (rjung)
Docs: New reference guide page for status worker. (rjung)
Docs: Renaming the config dir to reference and using the title Reference Guide \
in the docs. (rjung)
Added retry_on_status for workers directive. (mturk)
Status Worker: Add directive to make property prefix and good/bad rule \
configurable. (rjung)
Status Worker: Omit lb members when att=nosw. (rjung)
Status Worker: New command cmd=version for a short version output. (rjung)
Status Worker: New output stype mime=prop produces property lists. (rjung)
Apache: Fix incorrect handling of JkEnvVar when Vars are set multiple times. (rjung)
Renamed jvm_route to route. Deprecated jvm_route, but still use it as fallback \
when parsing the worker configuration. (rjung)
IIS: Make uriworkermap file reload check interval configurable. (mturk)
Apache: Make uriworkermap file reload check interval configurable. (rjung)
Status Worker: Add directives for customizing the XML output (ns, xmlns, \
doctype). (mturk)
Docs: New page with description of uriworkermap. (rjung)
Docs: Added short description of max_packet_size to worker reference. (rjung)
Status Worker: All functions accessible also for xml and txt mime types (list, \
show, update, reset). (rjung)
Status Worker: New global health indicators for load balancers named bad \
(error, recovering or stopped), degraded (busy or disabled) and good (the rest, \
active and OK or N/A). (rjung)
Status Worker: New edit page, to change one attribute for all members of a load \
balancer. (rjung)
Status Worker: Standard logging for status worker. (rjung)
Status Worker: code refactoring. (rjung)
Status Worker: New attribute user (list) denies access, if the request user in \
the sense of remote_user is not in this list. Empty list = no deny (rjung)
Status Worker: New attribute read_only disables the parts of the status worker, \
that change states and configurations. (rjung)
36121: Don't change main uri when mod_jk serves included uri. (markt)
Apache VHosts: Merge JkOptions +base - -base + +vhost - -vhost. (rjung)
Apache Docs: Adding requirements, context information, default values and \
inheritance rules to the Apache config documentation. (rjung)
Status Worker: Add source type to status worker, remove the redundant \
"context" column in the map listing (context=uri). (rjung)
uriworkermap: On reload of the file, all old entries from the previous file \
version get deleted, before the new ones are being read. (rjung)
Keep normal maps and exclusion maps internally separate. Don't treat them as \
the same when adding a rule. (rjung)
Status Worker: Display mapping rules also for non-lb workers and in global \
view. (rjung)
Apache VHosts: Use the vhost log files instead of the main log. (rjung)
Apache VHosts: Allow individual timestamp formats by refactoring the formatting \
method. (rjung)
Apache VHosts: Adding all missing config items to the virtual host level. Don't \
overwrite the settings from the global server, but inherit them in case they are \
not set in the virtual host. (rjung)
Apache: remove unnecessary function names from log messages. (rjung)
Apache: add a default log file location and a message, if the default gets \
used. (rjung)
Apache: add missing JK_IS_DEBUG_LEVEL() (rjung)
Apache VHosts: Allow JkWorkersFile, JKWorkerProperty, JkShmFile and \
JkShmFileSize only in global virtual server. (rjung)
Add some more jk_close_socket() and reduce log level for some info messages. (rjung)
Load Balancer: Added the Sessions strategy. Contributed by Takayuki Kaneko. (rjung)
Docs: Minor enhancements and syncing with more recent versions. (rjung)
40997: Separate uri mappings from their '!' counterpart when checking for \
duplicates in uriworkermap reloading. (rjung)
40877: Make sure the shared memory is reset on attach for multiple web server \
child processes. (mturk)
IIS: Added shm_size property to be able to deal with over 64 workers \
configurations. (mturk)
IIS: Increase default thread count to 250, so its the same as Apache Httpd \
default configuration. (mturk)
40966: Fix socket descriptor checks on windows. (mturk)
40965: Initialize missing service parameters. (mturk)
40938: Fix releasing of rewrite map. Thanks to Chris Adams for spotting that. \
(mturk)
Apache: Added +FlushHeader JkOptions. (mturk)
Added explicit flush when AJP body packet size is zero. (mturk)
40856: Fixing case sensitivity bug in URL mapping. (rjung)
40793: Documentation: Improvements to Apache HowTo provided by Paul Charles \
Leddy. (markt)
40774: Fixing wrong recursion termination. This one restricted the \
"reference" feature unintentionally to 20 workers. (rjung)
40716: Adding "reference" feature to IIS and Netscape. (rjung)
Documentation: Corrected SetEnvIf syntax in JK_WORKER_NAME example. (rjung)
Documentation: Added forgotten STATE and ACTIVATION notes for load balancer \
logging in Apache. (rjung)
Apache: Use instdso.sh instead libtool: libtool does not work on HP-UX for \
example. (jfclere)
Files: