From: Eric Covener Date: Fri, 27 Sep 2024 13:05:54 +0000 (+0000) Subject: update-changes X-Git-Tag: 2.4.63-candidate~109 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=5849cf524118e53431598d65fa07c3f12a85e896;p=thirdparty%2Fapache%2Fhttpd.git update-changes [skip ci] git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1920976 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/CHANGES b/CHANGES index b79ec2b77ee..0b224034530 100644 --- a/CHANGES +++ b/CHANGES @@ -1,6 +1,23 @@ -*- coding: utf-8 -*- Changes with Apache 2.4.63 + *) mod_md: update to version 2.4.28 + - When the server starts, it looks for new, staged certificates to + activate. If the staged set of files in 'md/staging/' is messed + up, this could prevent further renewals to happen. Now, when the staging + set is present, but could not be activated due to an error, purge the + whole directory. [icing] + - Fix certificate retrieval on ACME renewal to not require a 'Location:' + header returned by the ACME CA. This was the way it was done in ACME + before it became an IETF standard. Let's Encrypt still supports this, + but other CAs do not. [icing] + - Restore compatibility with OpenSSL < 1.1. [ylavic] + + *) mod_tls: removed the experimental module. It now is availble standalone + from https://github.com/icing/mod_tls. The rustls provided API is not + stable and does not align with the httpd release cycle. + [Stefan Eissing] + *) mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F. PR 69197. [Yann Ylavic, Eric Covener] diff --git a/changes-entries/md_v2.4.28.txt b/changes-entries/md_v2.4.28.txt deleted file mode 100644 index 3eb2bc49177..00000000000 --- a/changes-entries/md_v2.4.28.txt +++ /dev/null @@ -1,11 +0,0 @@ - *) mod_md: update to version 2.4.28 - - When the server starts, it looks for new, staged certificates to - activate. If the staged set of files in 'md/staging/' is messed - up, this could prevent further renewals to happen. Now, when the staging - set is present, but could not be activated due to an error, purge the - whole directory. [icing] - - Fix certificate retrieval on ACME renewal to not require a 'Location:' - header returned by the ACME CA. This was the way it was done in ACME - before it became an IETF standard. Let's Encrypt still supports this, - but other CAs do not. [icing] - - Restore compatibility with OpenSSL < 1.1. [ylavic] diff --git a/changes-entries/tls_removed.txt b/changes-entries/tls_removed.txt deleted file mode 100644 index d56a3dc4e97..00000000000 --- a/changes-entries/tls_removed.txt +++ /dev/null @@ -1,4 +0,0 @@ - *) mod_tls: removed the experimental module. It now is availble standalone - from https://github.com/icing/mod_tls. The rustls provided API is not - stable and does not align with the httpd release cycle. - [Stefan Eissing]