update-changes

[skip ci] git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1920976 13f79535-47bb-0310-9956-ffa450edef68
apache · Sep 27, 2024 · 5849cf5 · 5849cf5
1 parent 9b557dd
commit 5849cf5
Show file tree

Hide file tree

Showing 3 changed files with 17 additions and 15 deletions.
diff --git a/CHANGES b/CHANGES
@@ -1,6 +1,23 @@
                                                          -*- coding: utf-8 -*-
 Changes with Apache 2.4.63
 
+  *) mod_md: update to version 2.4.28
+     - When the server starts, it looks for new, staged certificates to
+       activate. If the staged set of files in 'md/staging/<domain>' is messed
+       up, this could prevent further renewals to happen. Now, when the staging
+       set is present, but could not be activated due to an error, purge the
+       whole directory. [icing]
+     - Fix certificate retrieval on ACME renewal to not require a 'Location:'
+       header returned by the ACME CA. This was the way it was done in ACME
+       before it became an IETF standard. Let's Encrypt still supports this,
+       but other CAs do not. [icing]
+     - Restore compatibility with OpenSSL < 1.1. [ylavic]
+
+  *) mod_tls: removed the experimental module. It now is availble standalone
+     from https://github.com/icing/mod_tls. The rustls provided API is not
+     stable and does not align with the httpd release cycle.
+     [Stefan Eissing]
+
   *) mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
      PR 69197. [Yann Ylavic, Eric Covener]
 

diff --git a/changes-entries/md_v2.4.28.txt b/changes-entries/md_v2.4.28.txt
diff --git a/changes-entries/tls_removed.txt b/changes-entries/tls_removed.txt