The release also prioritizes security improvements, particularly for mod_md, enhancing its resilience against issues with locally stored OCSP responses that lack certain 'valid' keys. Furthermore, a fix has been implemented to address minor memory leaks linked to OpenSSL's BIGNUM handling.
Other notable upgrades include the introduction of the H2MaxStreamErrors directive in mod_http2, enabling users to specify the maximum number of errors allowed between the client and server before disconnecting. Enhanced error handling for proxy configurations has also been integrated into mod_proxy_http2. The mpm_common module now features the ListenTCPDeferAccept setting, which provides better control over TCP_DEFER_ACCEPT socket options for listening ports. Finally, mod_ssl has received enhancements through the new SSLVHostSNIPolicy directive, which improves the management of virtual host compatibility settings.
This release candidate includes a variety of enhancements across different modules, reflecting Apache's commitment to continuous improvement and security. Users interested in a deeper understanding of the updates are encouraged to review the official release notes and changelog. For those eager to experiment with the new features firsthand, the Apache HTTPD GitHub page is available for accessing the release.
In light of these updates, it is clear that Apache is actively working to enhance the performance, security, and configurability of its HTTP server. As the software landscape continues to evolve, users can expect ongoing developments and innovative features in future releases. To stay updated, users should regularly check for new release candidates and official announcements from Apache
Apache 2.4.66 RC1 released
Apache has released version 2.4.66 Release Candidate (RC1), featuring several significant updates and fixes. Key changes include improvements to mod_http2, addressing issues with cached content and push diary management, as well as enhancements to mod_md, which now allows administrators to control certificate renewal checks after server restarts. The release also includes security hardening for mod_md and a fix for minor memory leaks in OpenSSL's BIGNUM handling. Additionally, various other modules have been updated to offer improved features, such as the ability to set error thresholds in mod_http2 and enhanced proxy configuration error support in mod_proxy_http2.
