Apache HTTP Server version 2.4.63 has been released.
The most significant changes:
- mod_ssl: Improvements have been made to error handling during OpenSSL initialization. The server will now correctly terminate startup if OpenSSL initialization fails. This is crucial for ensuring server startup reliability.
- mod_md (updates): Changes have been made to the handling of ACME certificates:
- Domain verification wait timeouts have been increased proxy server from 30 seconds to 5 minutes.
- A problem has been fixed regarding obtaining certificates during ACME updates, which no longer requires a ‘Location:’ header, improving compatibility with other CAs besides Let’s Encrypt.
- Enhancements have been introduced that allow for more efficient certificate management during errors and to activate them in case of failures.
- mod_proxy: Parameters for ProxyPassMatch are now supported, including substitutions in the host name and port. This is important for more flexible proxy configuration.servers.
- mod_authnz_ldap: An ldap-search option has been added, allowing authorization based on arbitrary LDAP expressions without using a username. This expands authorization configuration capabilities.
- mod_rewrite: Rules dealing with question marks have been improved, and protection against the UnsafeAllow3F error has been added. This change is crucial for the proper functioning of rewritten URLs, especially in complex configurations.
- mod_proxy_balancer: Sticky session parameter handling in the balancer configuration has been fixed. This is important for correctly managing sessions when load balancing is used.
- mod_lua: The r.ap_auth_type field is now writable. This opens up new possibilities for configuration and working with authentication in Apache through Lua.
- mod_tls: The experimental module has been removed and is now available separately. This may affect those who used it for working with TLS through Rust.
Source: linux.org.ru
