1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
|
_ _
_ __ ___ ___ __| | ___ ___| | mod_ssl
| '_ ` _ \ / _ \ / _` | / __/ __| | Apache Interface to OpenSSL
| | | | | | (_) | (_| | \__ \__ \ | www.modssl.org
|_| |_| |_|\___/ \__,_|___|___/___/_| ftp.modssl.org
|_____|
_____________________________________________________________________________
NEWS
This document summarizes all important changes between major mod_ssl
versions, i.e. between 2.x and 2.(x+1).
Major Changes with mod_ssl 2.8:
o Upgrade to Apache 1.3.{17,18,19,20,22,23,24,26,29,31}
o Various Bugfixes and Cleanups
Major Changes with mod_ssl 2.7:
o Added experimental support for OpenSSL's crypto device support
o Completely removed RSAref support
o Added new Cyclic Buffer based Shared Memory Session Cache variant
o Restructured the Session Cache implementation(s)
o Upgrade to Apache 1.3.14
Major Changes with mod_ssl 2.6:
o Support for PRNG seeding via Entropy Gathering Daemon (EGD)
o Enhanced HTTPS proxy support (still experimental)
o New ca-bundle.crt extracted from Netscape Communicator 4.72's cert7.db
o Upgrade to Apache 1.3.12
Major Changes with mod_ssl 2.5:
o Upgrade to Apache 1.3.11
o Support for OpenSSL >= 0.9.4
o Lots of small bugfixes and cleanups
Major Changes with mod_ssl 2.4:
o New `SSLOptions +StdEnvVars' and additional SSL_* variables.
o Fixed SSL shutdown handling in case of pending outgoing data.
o Fixed semaphore based SSLMutex variant.
o Fixed timeout handling of internal OpenSSL cache.
o Fixed `SSLOptions +ExportOptions'
o Lots of small bugfixes and cleanups
o Upgrade to Apache 1.3.9
Major Changes with mod_ssl 2.3:
o Full Diffie-Hellman/DSA support for certs/keys and ciphers
o DSA support for cert/key generation
o Upgraded to OpenSSL 0.9.3 API
o Added SSL_SESSION_ID variable
o Added ``SSLOptions +StrictRequire''
o Shared Memory support to Extended API (EAPI) via MM library.
o Shared Memory based SSL Session Cache
o Support for X.509 CA Certificate Revocation Lists (CRL)
o Switched all addresses and references to new modssl.org domain
o Kicked out all remaining SSLeay dependencies
Major Changes with mod_ssl 2.2:
o New companion module: mod_define
o Support for DER+Base64 and plain DER certs/keys in addition to PEM
o Added mod_ssl vendor extension support via EAPI
o Switched from SSLeay to OpenSSL as the primary toolkit
o Overhauled and fixed the SSL shutdown phase
o New diretive SSLProtocol for configuring SSL protocol flavors
o Support for per-directory(!) SSL configuration parameters
o Support for manual feeding the Pseudo Random Number Generator (PRNG)
Major Changes with mod_ssl 2.1:
o Support for binary compatibility to non-EAPI DSOs.
o Now gives an error page when one connects with HTTP to HTTPS port
o Fix handling of socket connection timeouts
o Support for OpenSSL
o Support for Server Gated Cryptography (SGC) / Global ID facility
o Added APXS/DSO support to mod_ssl distribution
o Created a completely new second-generation user manual with WML
o Increase performance by kicking out NO_WRITEV requirement
o Fixed CA-certificate-chain list sending
o Replace ugly directives with a general SSLOptions directive
o Full support for Dynamic Shared Objects (DSO)
o Replaced all global variables with EAPI variants
o Replaced all SSL patches with a new generic Extended API (EAPI)
o Added a flexible on-the-fly directive mapping facility
o Added support for X.509v3 certificates in `make certificate' procedure
o Ported to the Win32 platform (Windows 95/98/NT)
o Support for exporting whole client certificates to the environment
o Added a flexible and generic variable lookup facility
o Added a flexible authentication facility: SSLRequire
o Internal HTTPS client support for mod_proxy when mod_ssl is loaded
o Added a general Mutex facility
o Splitted the source code into smaller pieces
o Replaced the gcache facility with a (N)DBM based session cache
o Completely new pass phrase handling and terminal dialog
o Cleaned up the SSL* directives
o Added a flexible and consistent new logging facility.
Major Changes with mod_ssl 2.0:
o Added RSAref support
o Created the first time a complete module documentation
o Enhanced `make certificate' procedure (four types of certs)
o New libssl.module script for smooth Apache source tree integration
o Full Apache Autoconf-style Interface (APACI) support
o Dropped support for SSLeay < version 0.8.x
o Finally ported to the Apache 1.3 API
o Replaced all unsafe and security-risky programming constructs
o Completely overhauled the source code line-by-line
o Created a facility to assemble the distribution out of CVS
o Imported Apache-SSL into a CVS source repository
|
