Skip to content

v3.0.0 (2014-11-30)

Compare
Choose a tag to compare
@svanzoest svanzoest released this 01 Dec 07:15
· 1130 commits to main since this release

Major version update because of SSL Improvements and new platform MPM and Version defaults.

  • [GH-286] Refactor MPM and Apache version defaults: default is now apache 2.4
  • [GH-281] mod_ssl: Disable SSLv3 by default to protect against POODLE attack (CVE-2014-3566)
  • [GH-280] mod_ssl: Major update with modern Cipher Suite, and best practices.
    Updated to a more modern default apache.mod_ssl.cipher_suite.
    Added the following additional mod_ssl attributes
    • apache.mod_ssl.honor_cipher_order
    • apache.mod_ssl.insecure_renegotiation
    • apache.mod_ssl.strict_sni_vhost_check
    • apache.mod_ssl.session_cache_timeout
    • apache.mod_ssl.compression
    • apache.mod_ssl.use_stapling
    • apache.mod_ssl.stapling_responder_timeout
    • apache.mod_ssl.stapling_return_responder_errors
    • apache.mod_ssl.stapling_cache
    • apache.mod_ssl.pass_phrase_dialog
    • apache.mod_ssl.mutex
    • apache.mod_ssl.directives
  • [GH-278] Improved chefspec tests execution time
  • [GH-277] Optimize files watching for Guard on Win32 platform
  • [GH-270] Don't attempt start until after configuration is written
  • [GH-268] Now uses chefspec 4.1
  • [GH-267] Use Supermarket as the Berkshelf 3 source
  • [GH-266] Rubocop based ruby style/syntax improvements
  • [GH-264] mod_ssl: Add new attribute for to be ready to any custom directive
  • [GH-249] Don't prepend Apache log path when requesting error logging to syslog
  • [GH-247] Explicitly include mod_ldap before mod_authnz_ldap
  • [GH-243] Expand mpm options for different distros/versions.
  • [GH-239] Added apache.mod_php5.install_method attribute defaults to package. Install packages unless PHP is compiled from source.
  • OneHealth Solutions was acquired by Viverae
  • Remove ArchLinux pacman as a dependency and handle similar to apt, yum, zypper
  • Adjust ubuntu apache 2.4 docroot_dir to match package (from /var/www to /var/www/html)
  • [GH-238] Bump service config syntax check guard timeout to 10 seconds
  • [GH-235] Removed apache2::mpm_itk which is not part of core and therefore should be its own cookbook
  • [GH-234] /var/run/httpd/mod_fcgid directory now belongs to apache on Fedora/RHEL systems.
  • [GH-233] Default web_app template should return 503 status code when maintenance file is present
  • [GH-232] Cookbook now deletes a2* if they are symlinks before dropping template versions
  • [GH-222] Set TraceEnable to off by default.
  • [GH-213] Adjust chefspec to use the package resource on FreeBSD (previously freebsd_package)
  • [GH-212] New attribute apache.locale which sets LANG. defaults to 'C'
  • [GH-210] Clarify web_app definition usage around configuration templates.
  • [GH-208] apache_conf now accepts source and