OpenIDC/mod_auth_openidc v2.4.11.1

release 2.4.11.1

on GitHub

Note that as of release 2.4.11 running mod_auth_openidc behind a reverse proxy that sets X-Forwarded-* headers needs explicit configuration of OIDCXForwardedHeaders for mod_auth_openidc to interpret those headers, thus this may break existing configurations if unmodified for the former.

Bugfixes

• fix OIDCUnAuthAction pass not passing claims for authenticated users, see #790, thanks @cm0s
• fix race conditions in the file cache backend, see #777, thanks @dbakker and @blackwhiser1
• fix memory leaks over graceful restarts, see #823 and #824, thanks @smanolache
• avoid using %llu print formatter and switch to %lu for unsigned long so it works cross platform
• add a check to make sure URLs do not contain unencoded Unicode characters, see #796, thanks @cnico

Features

• warn about mismatch between incoming X-Forwarded-* headers and OIDCXForwardedHeaders configuration
• add support for OpenSSL 3.0

Other

• remove test-cmd jwk2cert command
• correct ap_hook_insert_filter function signature in stub.c, part 2, closes #784, thanks @stroeder
• add Valgrind Github action

Commercial

• binary packages for various other platforms such as Microsoft Windows 64bit/32bit, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7/8 on Power PC (ppc64, ppc64le), Oracle Linux 6/7, older Ubuntu and Debian distro's, Oracle HTTP Server 11.1/12.1/12.2, IBM HTTP Server 8/9, Solaris 11.4 and Mac OS X are available under a commercial agreement via sales@zmartzone.eu
• support for Redis over TLS, Redis (TLS) Sentinel, and Redis (TLS) Cluster is available under a commercial license via sales@zmartzone.eu