The release of the Apache HTTP Server 2.4.63 is now available, featuring 24 changes, including:
- The experimental mod_tls module built on top of rustls has been removed. This module is now being developed separately. The reason for the removal is the unstable rustls API and the mismatch between the development cycles of rustls and Apache httpd.
- The mod_md module, used for automating the retrieval and management of certificates using the ACME (Automatic Certificate Management Environment) protocol, has been updated. Issues with certificate renewal have been resolved. Error reporting during validation has been improved. domainsThe validation timeout has been increased.
- An ldap-search option has been added to mod_authnz_ldap, allowing authorization based on arbitrary expressions, not limited to username.
- Writing to the r.ap_auth_type parameter has been enabled in mod_lua.
- The ability to read PKCS#11 keys has been restored in mod_ssl when using a crypto engine without a configured ‘SSLCryptoDevice’ value.
- Support for the Request-Range header (not to be confused with the Range header), which was sent by Netscape Navigator 2-3 and MSIE 3 browsers, has been discontinued in the HTTP protocol handler.
Source: opennet.ru
