1 |
** Changes from 0.1.4 to 0.1.5 - 03/04/2004 |
2 |
* Added dependency on gnutls 1.0.9 |
3 |
|
4 |
** Changes from 0.1.3 to 0.1.4 - 03/11/2003 |
5 |
* Better large file support (now uses the included autoconf macros) |
6 |
* Added dependency on gnutls 0.9.5 |
7 |
|
8 |
** Changes from 0.1.2 to 0.1.3 - 20/01/2003 |
9 |
* Added DefaultCharset configuration directive. The default |
10 |
character set given, will be appended to all text mime types. |
11 |
* Corrected bug in KeepAlive usage in HTTP/1.1, which made the |
12 |
server to ignore the value sent by the client. |
13 |
* CGIAction can now be used even if HIC CGIs are disabled. |
14 |
* Some optimizations in HTTP header parsing. |
15 |
* Added a more complete mime.types in examples/ contributed by |
16 |
<voidnull@qnet.pl>. |
17 |
* Added the MaxSSLConnections configuration directive. |
18 |
* Two mutexes are used in accept to allow parallel accepts |
19 |
of SSL and plain connections. |
20 |
* Added Dependency on gnutls 0.8.0. |
21 |
|
22 |
** Changes from 0.1.1 to 0.1.2 - 08/01/2003 |
23 |
* Allow running the server as root, if explicitly stated in |
24 |
configuration file. Patch by James Harr <james@grickle.org> |
25 |
* Better pthreads detection. |
26 |
* Outputs to error log if non executable CGIs are found. |
27 |
* Does not close HTTP/1.1 connections by default. |
28 |
* The current behavour is to demand the Host header in HTTP/1.1 |
29 |
requests. |
30 |
* Added support for CGIAction CGIs. There are just like CGIs |
31 |
but they are not executed. They are parsed using a given program. |
32 |
* Added init script for redhat in contrib/redhat/rc.hydra, |
33 |
contributed by <voidnull@qnet.pl>. |
34 |
|
35 |
** Changes from 0.1.0 to 0.1.1 - 17/12/2002 |
36 |
* Corrected bug in Keep-Alive mode when SSL or TLS was enabled. |
37 |
* Fixed unexpected timeout in first connection on an idle server. |
38 |
|
39 |
** Changes from 0.0.10 to 0.1.0 - 16/11/2002 |
40 |
* No changes. This is the final release by me --Nikos |
41 |
|
42 |
** Changes from 0.0.9 to 0.0.10 - 08/11/2002 |
43 |
* Corrected bug in error logging. |
44 |
* Use the TMPDIR environment variable instead of TMP to get |
45 |
the temporary directory. |
46 |
|
47 |
** Changes from 0.0.8 to 0.0.9 - 27/10/2002 |
48 |
* Long offsets are not used by default. |
49 |
* Use of pipes instead of temporary files, if the post data sent |
50 |
are less than PIPE_BUF. |
51 |
* More consistent logging. The server's hostname or "unknown" |
52 |
are prepended to the log message. |
53 |
* Corrected redirection/aliases behaviour, to match the documented one. |
54 |
* SSLParamsRefresh was renamed to MaintenanceInterval and is more |
55 |
generic, since it includes some server cleanups. |
56 |
* Added file access control lists per virtual host. Based on patch for |
57 |
Boa by Peter Korsgaard <jacmet@sunsite.dk> |
58 |
* Added the ability to disable HIC threads by using 0 in the |
59 |
HICThreads configuration directive. |
60 |
* Hydra now uses poll by default. Select is available using the --with-select |
61 |
configure option. |
62 |
|
63 |
** Changes from 0.0.7 to 0.0.8 - 25/10/2002 |
64 |
* Better pthread detection. |
65 |
* Better detection of dlopen call. |
66 |
* Some changes to compile in gcc 2.95 |
67 |
* Added support for FreeBSD's sendfile (untested). |
68 |
[Ported from Boa 0.94.14rc1] |
69 |
* add new state, IOSHUFFLE, which utilizes sendfile (or |
70 |
emulates it using the request's buffer, otherwise) |
71 |
* make the default socket size 32K. The client_stream_size stays constant |
72 |
at 8K, and the new 'buffer' size is 4K |
73 |
Note also that the new code uses the "default" socket buffer size |
74 |
it obtains with the first accept()ed socket. |
75 |
* make default behavior be to leave stderr alone, but tie it |
76 |
to cgilog otherwise |
77 |
* add [optional, Linux-only] check for sendfile system call |
78 |
* use --disable-sendfile to disable sendfile support |
79 |
sendfile support for files > 100K is default, now. |
80 |
It's significantly faster and easier than the alternative |
81 |
* umask ~0770 before exec |
82 |
* tie stdout to the access_log, unless there is no access_log, |
83 |
in which case tie it to /dev/null |
84 |
* use sensible defaults for umask (077) and (027 for CGI) |
85 |
* add and document new parameters (CGILog and CGIumask) |
86 |
* vast improvements to the cgi-test.cgi program, by Jon Nelson |
87 |
and Landon Curt Noll. |
88 |
* next 3 items by Don Mahurin (patches modified somewhat): |
89 |
* pidfile patch |
90 |
* default mime_types patch |
91 |
* NCSA environment environment variables wrapped in |
92 |
#ifdef USE_NCSA_CGI_ENV |
93 |
* fix some escaping issues with the directory indexer |
94 |
(Ulf Harnhammar) |
95 |
* backport poll support from 0.95 |
96 |
|
97 |
** Changes from 0.0.6 to 0.0.7 - 10/10/2002 |
98 |
* Added support for large files in 32 bit systems. |
99 |
* Added support for SSL_* variables in CGIs. |
100 |
* Added options in configuration file, to request and verify |
101 |
a client certificate. |
102 |
* The headers of HIC-CGIs are now parsed by the server. |
103 |
* Corrected behavour in SIGHUP signal handling, to reread |
104 |
the SSL related variables. |
105 |
* Children and HIC threads are now killed using a signal, to avoid |
106 |
unexpected errors, and memory leaks. |
107 |
|
108 |
** Changes from 0.0.5 to 0.0.6 - 03/10/2002 |
109 |
* Compatibility functions are now automatically included in hydra, if |
110 |
they are not found by the configure script. |
111 |
* Replaced the included scandir function, with the one in libc. |
112 |
* Fixed code, which compiled fine with gcc 3.2, but didn't compile at |
113 |
all, with any other compiler! |
114 |
* Improved the MaxConnections directive semantics. |
115 |
* Added a very primitive mime.types file in examples/ directory. |
116 |
|
117 |
** Changes from 0.0.4 to 0.0.5 - 02/10/2002 |
118 |
* If a requested CGI is not accesible then send 404 not found, instead |
119 |
of trying to execute it. |
120 |
* Corrected several stuff in HIC CGI handler. This allows Cookies, |
121 |
POST data and Queries to work properly. |
122 |
|
123 |
** Changes from 0.0.3 to 0.0.4 - 30/09/2002 |
124 |
* Added support for If-Range, If-Match, If-None-Match HTTP/1.1 header |
125 |
fields. The server also generates ETag headers for static content using |
126 |
the last modified field of the file, and the file size. This makes |
127 |
Hydra cache friendly. |
128 |
* Added support for multiple HIC threads. This gives a boost to script generation |
129 |
since they are no longer generated sequentially. |
130 |
|
131 |
** Changes from 0.0.2 to 0.0.3 - 28/09/2002 |
132 |
* Added support for dynamic modules that handle CGIs |
133 |
internally (HIC). That way Hydra can run PHP. |
134 |
* Fixes in CGI execution. CGIs that are not passed from aliasing |
135 |
functions now properly set PATH_INFO and PATH_TRANSLATED. |
136 |
(Needs further cleanup). |
137 |
* Cleaned up SSL support. Now hydra can be compiled even if gnutls |
138 |
is not available. |
139 |
|
140 |
** Changes from Boa/0.94.13 to Hydra/0.0.2 - 26/09/2002 |
141 |
* Added support for SSL 3.0 and TLS 1.0 protocols. |
142 |
* Added support for multiple CPU's by making the server |
143 |
run over a pool of threads. |
144 |
* Changed the file caching code. The mmap() calls are cached until |
145 |
the mmap list table is full. |
146 |
* Added support for HTTP/1.1 ranges. |
147 |
* Added support for hostname based virtual hosting. |
148 |
Also changed the semantics of Alias, ScriptAlias and Redirect, to |
149 |
take advantage of the host based virtual hosting. |
150 |
* Added support for the TCP_CORK tcp option in linux. |
151 |
* Cleaned up the CGI handling (gunzip, indexer are treated as CGIs) |
152 |
* Enhanced grammar to handle 3 and 4 argument options. |
153 |
* Added support for multiple directory indexes. |
154 |
* Dropped support for gunzip. |
155 |
* Use automake to create the distribution. |
156 |
|
157 |
** Changes from 0.94.12 to 0.94.13 |
158 |
* Change many instances of log_error_mesg + exit to DIE macro |
159 |
* Change all instance of log_error_mesg (without exit) to WARN macro |
160 |
* do a much better job of checking return values from malloc and |
161 |
especially strdup. |
162 |
* check results of calling umask and getrlimit |
163 |
* server_s is no longer a global int |
164 |
* check results of fork via switch instead of if (fork()) |
165 |
* check for getopt.h and include it if found |
166 |
* remove unused #defines, and add WARN macro, and replace |
167 |
many calls to log_error_mesg(..) with WARN macro |
168 |
* fix bug in get_commonlog_time where time_offset calculation was |
169 |
the opposite of what it should be ('-' and '+' were swapped) |
170 |
* fix compatability bug with old and newer versions of flex/yacc |
171 |
* add check for AC_FUNC_MMAP to configure.in |
172 |
* fix really lame thinko in normalize_path, which would prepend the |
173 |
results of earlier calls to results from later calls |
174 |
* Add MaxConnections, a configuration directive which allows the |
175 |
user to specify the maximum number of connections that Boa will |
176 |
accept concurrently. |
177 |
* add SERVER_ADDR and REQUEST_URI to environment of CGI |
178 |
* handle SIGBUS during writes of data that has been memory mapped |
179 |
* minor optimization in select.c that prevents DEAD requests from |
180 |
being added to the block set |
181 |
* fix bug in CGI environment script_name - closes sf.net bug #576725 |
182 |
* make 'status' variable local to requests.c, not local to every file |
183 |
by forgetting to declare 'extern' in globals.h :-| |
184 |
* make getsockname non-fatal, and do it every time because we may |
185 |
need it for the CGI |
186 |
* some minor refactoring optimizations in hash.c |
187 |
|
188 |
** Changes from 0.94.11 to 0.94.12 |
189 |
* Renamed Changelog ChangeLog, and moved up to top-level directory |
190 |
* Next 3 items due in part or whole thanks to |
191 |
Liam Widdowson |
192 |
* when printf'ing a pid type, force to int, because it could be |
193 |
something else on other platforms. Should probably change it to |
194 |
a long, and use that. |
195 |
* backported chroot commandline support from 0.95 |
196 |
* backported support for strdup, strstr, alphasort, and scandir |
197 |
from 0.95 |
198 |
* Fixed src/Makefile.in -- it didn't remove index_dir.o |
199 |
* backport create_temporary_file from 0.95 |
200 |
(instead of using tmpnam) |
201 |
* Allow non-standard date format 31 September 2000 23:59:59 GMT |
202 |
Patch by Landon Curt Noll |
203 |
* Skip whitespace before HTTP/major.minor |
204 |
Adapted patch from Landon Curt Noll |
205 |
* open /dev/null first thing (affects chrooting) |
206 |
* properly handle sigalrm -- use sigalrm_flag and sigalrm_run |
207 |
instead of handling the signal in the signal handler |
208 |
* update manpage slightly |
209 |
* send 400 BAD Request when resource does not start with '/' |
210 |
* add grp.h to boa.h's includes -- remove from boa.c and config.c |
211 |
* removed duplicate header includes from boa.c, config.c, get.c, |
212 |
ip.c, request.c, response.c |
213 |
* factor out creating the server socket and dropping privs |
214 |
into create_server_socket and drop_privs |
215 |
* type all functions in boa.c (except main) as static |
216 |
* set umask after opening /dev/null |
217 |
* tie stdin/stdout to /dev/null before commandline parse |
218 |
* removed old, unused chroot code |
219 |
* move builds_needs_escape earlier in the startup |
220 |
* move fork later in the startup |
221 |
* type all c_set_* as static in config.c |
222 |
* don't bother trying to change uid/gid (or error if the |
223 |
requested uid/gid doesn't exist) if not UID 0 |
224 |
* return more appropriate error code when foo.html gives |
225 |
access denied, but foo.html.gz gives some other error |
226 |
(essentially report error associated with foo.html, not foo.html.gz) |
227 |
* send NOT Implemented when an unknown method is attempted |
228 |
* always attempt a 32k read right before close |
229 |
(stopgap until blackhole can be merged) |
230 |
* allow more than 1 space in logline between method, resource, |
231 |
and http version |
232 |
* don't use inline functions |
233 |
* update configure.in so that autoconf 2.50 doesn't complain (as much) |
234 |
* properly use VPATH and srcdir according to autoconf docs |
235 |
* change curly-braces to parentheses in Makefilein |
236 |
* use $^ instead of manually listing the dependencies in Makefile.in |
237 |
* remove tests section in Makefile.in |
238 |
* write tags not TAGS in Makefile.in |
239 |
* Add gethostbyname and inet_aton to function checks |
240 |
* Add code from 0.95 which checks for socket in -lsocket, |
241 |
inet_aton in -lresolv, and gethost{by}name in -lnsl |
242 |
* Also remove broken bc-based "how big is an unsigned int" checks: |
243 |
assume minimum of 32 bits and check in escape.c at runtime. |
244 |
* Added new file: README.chroot.solaris, based on a |
245 |
modified version by Liam Widdowson |
246 |
* Add check_struct_for.m4, which allows us to check a structure |
247 |
for a member (found at http://www.gnu.org/software/ac-archive/ |
248 |
authored by Wes Hardaker |
249 |
* Call "aclocal -I ." to rebuild aclocal.m4 |
250 |
* Using new check-struct-for-member autoconf macro, check |
251 |
for tm_gmtoff and tm_zone in struct tm -- useful in |
252 |
portability tests for localtime. |
253 |
* Also check sockaddr_in for structure sin_len so we can set |
254 |
it properly. |
255 |
* index_dir.c (which ends up in boa_indexer) can now be compiled |
256 |
with USE_LOCALTIME, and if so, it will report the local time |
257 |
using the timezone name. Otherwise it uses UTC time and UTC |
258 |
timezone designation. |
259 |
* fix buglet in mmap_cache.c which shows up when under |
260 |
heavy load by many different files. |
261 |
Found and squashed by Michal Kara |
262 |
* normalize paths on Aliases, log files, server root, dirmaker |
263 |
This makes sure that paths are 'absolute' |
264 |
* don't generate DOCUMENT_ROOT or SERVER_ROOT, |
265 |
CGIs have no business knowing that information |
266 |
* if CGI, chdir to the cgi's root path |
267 |
Bug found by Matt Callaway |
268 |
* remove ChrootPath and PidFile directives from the parser |
269 |
(they aren't used anyway) |
270 |
* keep track of maximum file descriptor in use to optimize call |
271 |
to select() |
272 |
* apply IPv6 patch from Jari Korva |
273 |
* optimize keep-alive copy data routine |
274 |
* try to use memcpy instead of strcpy/strcat in more places (alias.c) |
275 |
* update .depend file |
276 |
* use fcntl + GET_FL to get a file descriptor's flags, then |
277 |
add or remove only the bits we want to set. This prevents |
278 |
accidentally setting or unsettings bits we don't have anything |
279 |
to do with inadvertantly. (removed, at least temporarily. |
280 |
Show me a system where it is needed -- LRD) |
281 |
* make sure to call FD_ZERO when we handle a restart |
282 |
* in read.c, don't call boa_perror on read failure -- socket is |
283 |
dead or messed up anyway, no reason to try to write to it. |
284 |
* explicit .SUFFIXES in Makefile.in |
285 |
* boa.objdump target added |
286 |
* use @MAKE_SET@ (for when $(MAKE) != "make") |
287 |
* add -Wundef -Wwrite-strings -Wredundant-decls -Winline to GCC_FLAGS |
288 |
* change Paul Phillips' and Larry Doolittle's emails in source |
289 |
* add --disable-debug, --enable-profile, --with-dmalloc, and --with-efence |
290 |
* test for failed-but-return-was-successful setuid: |
291 |
http://www.securityfocus.com/bid/1322 |
292 |
* use _exit not exit in CGI child |
293 |
* always place new keepalive request on blocked list, we can't be |
294 |
sure of the state of the active list, and since enqueue places |
295 |
things at the *front* of the list, it doesn't do us much good |
296 |
to place the new request on the active list anyway. |
297 |
* update some Copyright statements for 2002 |
298 |
* When comparing the uri to an alias, only compare if |
299 |
the uri length is greater than or equal to the length of the alias |
300 |
* in init_script_alias, make sure to check for document_root before |
301 |
trying to use it |
302 |
* script_name is now just a copy of the request, rather |
303 |
than some complicated variation on the pathname |
304 |
* change the way the CGI environment is handled. |
305 |
Now, it is allocated at request allocation time, and exists |
306 |
throughout the life of the structure. |
307 |
* check memory allocations, etc.. when creating the static |
308 |
CGI environment and when making new CGI environment variables |
309 |
* wait until process_option_end to call unescape_uri, clean_pathname, |
310 |
and translate_uri |
311 |
* remove debian package information |
312 |
* move RedHat packaging information to contrib |
313 |
* remove tests -- they weren't usable anyway |
314 |
* add some new hash routines, and use djb2 (a variant on a |
315 |
hash algorithm popularized by Dan J. Bernstein) |
316 |
* a side-effect of the new hash routines is a bugfix, |
317 |
involving negative return values from hash routines. |
318 |
This has been fixed. |
319 |
* add a routine, show_hash_stats, which is called with other |
320 |
statistical output via sigalarm |
321 |
* remove some duplicate prototypes from config.c |
322 |
* make simple_itoa take an unsigned int |
323 |
* try to make NOBLOCK handling in compat.h compatible with Solaris |
324 |
* make sure to update current_time before calling signal handlers |
325 |
* alter primary loop to make sure that select gets called even |
326 |
when there are requests that are not blocking, and call fdset_update |
327 |
and process_requests (when appropriate) after signal handlers but |
328 |
before select to make sure that blocked requests are still handled |
329 |
by select after a sighup. (Thanks to Karl Olsen) |
330 |
* pull select loop into select.c |
331 |
* poll server socket once per active connection |
332 |
* add send_r_service_unavailable and use it when appropriate |
333 |
* state uptime in seconds at normal program termination |
334 |
* include sys/fcntl.h if it is found by configure |
335 |
* fix POST bug where a content-length < 0 would cause Boa to |
336 |
consume its full share of CPU until killed |
337 |
Bug report by Landon Curt Noll |
338 |
* add CGIPath configuration variable |
339 |
based upon a patch by Landon Curt Noll |
340 |
* add function boa_atoi, which wraps atoi, but does not |
341 |
accept negative values. Additionally, it checks to make sure |
342 |
the converted value and the original value are the same, avoiding |
343 |
issues like "124.3" -> "123" and "123abc" -=> "123". |
344 |
Either a value is an int or it isn't - no middle ground. |
345 |
* use boa_atoi to convert content-length from client. |
346 |
* add new #define - SINGLE_POST_LIMIT_DEFAULT, which defines |
347 |
(in bytes) the *default* single_post_limit. |
348 |
* single_post_limit is now in bytes. |
349 |
* when adding aliases, only "normalize" paths that start |
350 |
with "./" - this is a departure from previous behavior |
351 |
* add "?" to the list of characters that it is safe to leave unescaped |
352 |
* clean up Makefile.in of no-longer-pertinent comments |
353 |
* add send_r_bad_gateway and use it |
354 |
* tie stderr to either cgi_log_fd or devnullfd - either way |
355 |
make sure stderr is a valid filehandle before cgi execution |
356 |
* cgi_env is no longer allocated, it's part of the struct now |
357 |
* fix bug in CgiPath logic |
358 |
* when unable to allocate memory for an environment variable, log it |
359 |
* add clear_common_env, which de-allocates the cgi_common_env stuff |
360 |
[NEVER USE THIS outside of a terminal signal handler!] |
361 |
* don't be so wasteful of memory in normalize_path |
362 |
* adapted fix for alias expansion from Brieuc Jeunhomme |
363 |
|
364 |
** Changes from 0.94.10.1 to 0.94.11 |
365 |
* use LIBS in Makefile.in (which propagates from autoconf) |
366 |
* properly free memory allocated by scandir in index_dir.c |
367 |
* rearrange some header files and includes |
368 |
* on reads and writes, don't check for -1, check for < 0 |
369 |
* include fix by William Meadows |
370 |
for escape.c which fixes segfaults due to improper allocation |
371 |
* above fix by William Meadows no longer needed; |
372 |
escape.c and escape.h rewritten by Larry Doolittle -- requires |
373 |
at least 32 bit words, but is correct (jdn's 1st attempt was faulty) |
374 |
|
375 |
** Changes from 0.94.10 to 0.94.10.1 |
376 |
* Actually update the SERVER_VERSION in src/defines.h |
377 |
|
378 |
** Changes from 0.94.9 to 0.94.10 |
379 |
* Fixes escaping rules |
380 |
* Fixes segfault when directory_index is undefined and |
381 |
directory needs to be generated |
382 |
* adds dummy signal handlers for SIGUSR1 and SIGUSR2 (Closes SF #425921) |
383 |
* Update documentation regarding mime.types (Closes Debian #69991) |
384 |
* Make sure documentation builds (Closes Debian #110818) |
385 |
|
386 |
** Changes from 0.94.8.3 to 0.94.9 |
387 |
* src/Makefile.in updated to take CFLAGS, LIBS, and LDFLAGS |
388 |
from autoconf |
389 |
* Update escaping rules with latest RFC |
390 |
* unescape_uri skips fragments and also stop parsing at '?' |
391 |
* Don't accept fd over FD_SETSIZE in request.c:get_request |
392 |
* use backported documentation from 0.95 |
393 |
* make sure POST fd gets closed even on client cancel |
394 |
* use backported index_dir.c from 0.95 |
395 |
* support subdirectories in ScriptAlias directories |
396 |
* add SinglePostLimit (int, in Kilobytes) to config system |
397 |
* check for ENOSPC on body write |
398 |
* use environment variable TMP (or "/tmp" if not available), |
399 |
and chdir there when boa exits. |
400 |
* add 1-time-only hack to make a 32kB read at the end of a request |
401 |
on POST or PUT |
402 |
* close unused file descriptors (/dev/null in boa.c, and the |
403 |
unused part of the pipes call in cgi.c) |
404 |
* made Makefile.in VPATH happy |
405 |
|
406 |
** Changes from 0.94.8.2 to 0.94.8.3 |
407 |
* Move unescape_uri *before* clean_pathname to prevent |
408 |
encoding of / and .. in pathname |
409 |
* wrap execution of GUNZIP in cgi.c with #ifdef GUNZIP |
410 |
* stop parsing when fragment found in URL ('#') |
411 |
|
412 |
** Changes from 0.94.8.1 to 0.94.8.2 |
413 |
* close pipes[1] in child and generate HTTP_REFERER environment |
414 |
variable in cgi.c |
415 |
* Minor changes to the Debian package |
416 |
|
417 |
** Changes from 0.94.8 to 0.94.8.1 |
418 |
* Change umask call from (umask(0600)) to (umask(~0600)) |
419 |
|
420 |
** Changes from 0.94.7 to 0.94.8 |
421 |
* Fix major thinko in temp file permissions |
422 |
* unlink temporary file immediately following creation |
423 |
* implement maximum # of active connections at 10 less than RLIMIT_NOFILE |
424 |
to avoid or eliminate crashes resulting from running out of |
425 |
file descriptors |
426 |
* Fix thinko in POST |
427 |
|
428 |
** Changes from 0.94.6 to 0.94.7 |
429 |
* STDIN and STDOUT are now tied to /dev/null |
430 |
* sets PATH_MAX to 2048 if not defined (for Hurd) |
431 |
* core dumps (should never happen) would be located in /tmp |
432 |
* alter behavior when select gets a EBADF |
433 |
* add translation for the \" char -> " |
434 |
* remove use of sys_errlist. Use perror. |
435 |
* better makedist.sh (still a stupid program though) |
436 |
|
437 |
** Changes from 0.94.5 to 0.94.6 |
438 |
* Removed doc++ commenting |
439 |
* Removed erroneous debugging statments |
440 |
* Move some stuff out of config.c (read_config_file) to boa.c |
441 |
* Altered some of fixup_server_root() |
442 |
* Bug fix in get.c re: automatic gunzip |
443 |
* Added some stubs for chroot code (*not* ready yet) |
444 |
|
445 |
** Changes from 0.94.4 to 0.94.5 |
446 |
* Alteration of most of the comments and such for doc++ use |
447 |
* Fixed buffer overflow in alias.c |
448 |
* Fixed buffer underflow in util.c |
449 |
|
450 |
** Changes from 0.94.3 to 0.94.4 |
451 |
* Better escaping of data to user, both for HTTP headers and HTML body |
452 |
* Proper escaping of output in CGI example perl scripts |
453 |
|
454 |
** Changes from 0.94.0 to 0.94.2 |
455 |
* Fixed obnoxious pipeline bug |
456 |
* Fixed (sorta) a compilation/core bug for *BSD systems |
457 |
Original code by Thomas Neumann |
458 |
* Moved to GPLv2 |
459 |
* Changed manpage to section 8 |
460 |
* boa.sgml now references a .png file instead of evil .gif |
461 |
|
462 |
** Changes from 0.93.19.2 to 0.94.0 |
463 |
* Added UseGMT to the configuration parser |
464 |
* util.c commonlog now logs in Apache-style commonlog time format |
465 |
* Remove SO_SNDBUF on-start message |
466 |
|
467 |
** Changes from 0.93.19 to 0.93.19.2 |
468 |
* Changed to combined log (from NCSA access_log format) ala Drew Streib |
469 |
* Altered POST cgi code to handle bug in Netscape |
470 |
* SO_SNDBUF changes by Larry |
471 |
|
472 |
** Changes from 0.93.17.2 to 0.93.19 (all 0.93.18.x changes inclusive) |
473 |
* Update of some copyright statements for 99 |
474 |
* Replacement of sprintf with strlen/memcpy or strcpy/strcat |
475 |
wherever possible |
476 |
* Significant rearrangement in alias.c, minor functional differences |
477 |
(some CGI environment variables handled differently) |
478 |
* Removal of die function. Replace with log_err_mesg and exit. |
479 |
* initial IPv6 stubs and support |
480 |
* Move #include "config.h" to top of boa.h where it will do some good |
481 |
* Stubs and functions for strstr and strdup |
482 |
* Seperation of buffer code into it's own file |
483 |
* Significant changes to cgi.c et al (cgi_header.c, etc...) |
484 |
* Speed patches by removal of "extra" calls to time(): Use global variable! |
485 |
* pipelining changes... it works now. |
486 |
* require content-length from clients (ala rfc1945) |
487 |
* alter body_read and body_write to work more efficiently with known content-length |
488 |
* move read(2) part to *after* parsing... |
489 |
* added support for additional header message in send_redirect_temp |
490 |
* change use of NO_ZERO_FILL_LENGTH to offsetof() use |
491 |
* Remove SO_REUSEADDR setting on each client socket, Paul Saab |
492 |
* Avoid SO_SNDBUF setting if possible |
493 |
* Large quantities of otherwise not-insignificant changes |
494 |
|
495 |
** Changes from 0.93.17.2 to 0.93.17.3 |
496 |
* Put on-the-fly directories back in, stripped down from the 0.92 version |
497 |
* Fixed DocumentRoot, ServerAdmin and ServerName null-value handling in |
498 |
CGI environment generation |
499 |
* Fixed argument order in Script* directives (bug introduced in 0.93.17.2) |
500 |
* Got rid of MAX_CGI_VARS because it was not being used consistently, or |
501 |
for that matter, at all, really. |
502 |
* Added some more FASCIST_LOGGING to cgi.c |
503 |
* Minor mmap patch by LRD for request.c |
504 |
|
505 |
** Changes from 0.93.17.1 to 0.93.17.2 |
506 |
* Added "Listen" directive for server bind address, as most recently |
507 |
suggested by David N. Welton |
508 |
* Put virtualhost feature in, was experimental in 0.92q |
509 |
|
510 |
** Changes from 0.93.16.2 to 0.93.17.1 |
511 |
* New config file parser (supposed to be more maintainable) (LRD) |
512 |
* Support for "|command" and ":host:port" syntax for logfiles (untested) (LRD) |
513 |
|
514 |
** Changes for the 0.93 version ** |
515 |
* Huge quantities of changes |
516 |
* keepalive Bugfix in 0.93.16.2 by Jon Nelson |
517 |
report by Craig Silverstein of Google fame. |
518 |
* patch for config.h by Craig Silverstein |
519 |
* fixed "Parent Directory" problem in boa_indexer for title "/" |
520 |
(Debian bug #36165) |
521 |
* More Craig Silverstein |
522 |
modifications, namely: |
523 |
ErrorLog (if omitted, print to stderr) |
524 |
DocumentRoot (if omitted, can only server user-dir files) |
525 |
DirectoryIndex (if omitted, always use DirectoryMaker) |
526 |
MimeTypes (if omitted, don't load -- users can use AddType instead) |
527 |
|
528 |
|
529 |
** Changes from v0.92o to v0.92p ** |
530 |
|
531 |
* Documented misbehavior of CGI, SIGHUP, short aliases, stale dircache. |
532 |
* Documented how to patch signals.c for use on SunOS. |
533 |
* Closed file descriptor leak when redirecting a bare directory URL to |
534 |
one with an appended "/". |
535 |
* Closed potential file descriptor leak if errors encountered generating |
536 |
on-the-fly index. |
537 |
* Cleaned up include file handling to be simultaneously compatible with |
538 |
Linux, SunOS, HP-UX, and AIX. |
539 |
* Supress message body for codes 302, 400, 403, 404, 500, and 501 if |
540 |
incoming request is "HEAD". |
541 |
|
542 |
** Changes from v0.91 to v0.92o ** |
543 |
(0.92o released 27 December, 1996) |
544 |
|
545 |
* Maintenance handover from Paul Phillips to Larry Doolittle |
546 |
* Changed (char)NULL to '\0' |
547 |
* Cleaned up signal handler prototypes in signals.c |
548 |
* Modified handling of CGI environment variable PATH_TRANSLATED, |
549 |
should now work the same as NCSA. |
550 |
* More conservative buffer size in add_cgi_env() |
551 |
* Build argv list for a CGI script according to spec |
552 |
* Speedup process_header_line, eliminate potential memory leak |
553 |
* Occasional spelling fixes and lint removal |
554 |
* Added REMOTE_PORT env var for CGI scripts, to allow easy ident lookups |
555 |
* Changed rfc822 time format |
556 |
* Log timeouts and broken connections |
557 |
* Fix mime suffix handling for filenames with multiple "."s |
558 |
* Initialize conn->time_last, fixes bug with rapid-fire connections |
559 |
* Performance tweak to req_write() |
560 |
* Changed http_version from float to char[8] |
561 |
* Rewrote on-the-fly directory generation; it works now |
562 |
* Added user configurable dircache directory in boa.conf |
563 |
* Fixed "simple" response bugs, including incorrect CGI handling |
564 |
* Keepalive (HTTP/1.1 draft) support, mostly by Jon Nelson |
565 |
* Close data_fd in 304 Not Modified flow of control |
566 |
* Switch socket flags to non-blocking before cgi handoff |
567 |
* Try to handle errno properly in the face of multiple errors |
568 |
* Close fd's of all other transactions before cgi handoff |
569 |
* Move real work for sighup and sigchld out of signal handler |
570 |
* Fix free(req->cgi_env) in request.c |
571 |
* Response message cleanup - better match to HTML-2.0 DTD |
572 |
* Experimental Virtual Host code from Russ Nelson |
573 |
* Expand buffer for escaped URI in init_get() |
574 |
* SIGTERM triggers lame duck mode until all pending transactions complete |
575 |
* Close and unlink temp file for POST in parent process |
576 |
|
577 |
** Changes from v0.90 to v0.91 ** |
578 |
|
579 |
* Cleaned up main while loop |
580 |
* Optimized request line parsing |
581 |
* Added state machine for header reads -- necessary to deal wtih |
582 |
possibility of obtaining header data in multiple reads. This |
583 |
also allows interactive use of server. |
584 |
* Added 500/501 return codes for various conditions |
585 |
|
586 |
** v0.90 ** |
587 |
|
588 |
* Initial release |
589 |
|