Apache 2.4.64-rc1-candidate released

Published by

The Apache Software Foundation has released the candidate version 2.4.64-rc1 of its HTTP server for testing. This release includes multiple enhancements and fixes aimed at improving performance, security, and usability. Key updates include:

1. Worker-Level IO Buffer Size: The introduction of `iobuffersize` at the worker level allows for more fine-tuned control over IO buffer sizes.
2. OpenSSL Handling: The handling of `$SSLKEYLOGFILE` has been removed for OpenSSL 3.5 builds, which now manage this internally.
3. Log Level Adjustments: The log level for message AH01236 has been fixed for better clarity.
4. Proxy Connection Reuse: Improvements have been made to reuse `ProxyRemote` connections efficiently.
5. Systemd Support: Enhanced support for systemd socket activation has been added, along with logging of SELinux context during startup.
6. Mod_http2 and Mod_md Updates: Mod_http2 has been updated to version 2.0.32, resolving issues with long response headers and introducing new directives for header size limits. Mod_md has been upgraded to version 2.5.2, fixing TLS-ALPN-01 challenges and output formatting issues.

Additional enhancements include improved memory management in LuaOutputFilter, a regression fix for broken backend connections detection, and new API features in mod_dav.

In summary, Apache 2.4.64-rc1-candidate represents a significant step forward for the server, focusing on performance improvements, security enhancements, and better resource management. As this is a release candidate, users are encouraged to test it and provide feedback before the final version is released.

This release highlights the continuous development efforts by the Apache community to optimize server functionality and address user needs, ensuring that the software remains robust and reliable for web applications. Future updates may further expand on these improvements, potentially introducing additional features and optimizations based on user feedback and technological advancements

Apache 2.4.64-rc1-candidate released

The release candidate for Apache 2.4.64 is available for testing and has implemented several updates, such as the introduction of iobuffersize configured at the worker level for IO buffer size, the removal of $SSLKEYLOGFILE handling for OpenSSL 3.5 builds, adjustments to the log level for message AH01236, enhancements in reusing ProxyRemote connections when feasible, the addition of support for systemd socket activation, and the logging of the SELinux context during startup. Mod_http2 has been updated to version 2.0.32, resolving an issue with the management of lengthy response headers and introducing new directives to establish limits on response header sizes. Furthermore, improvements have been made to memory management in LuaOutputFilter, and a regression related to the detection of broken backend connections has been addressed. Mod_md has been upgraded to version 2.5.2, which resolves TLS-ALPN-01 challenges and corrects the absence of newlines in the status page output. Mod_dav has introduced an API to reveal the DavBasePath setting, while mod_md has incorporated support for ACME profiles, updated directives, and resolved issues related to the handling of corrupted httpd.json.

Apache 2.4.64-rc1-candidate released @ Linux Compatible