OpenIDC/mod_auth_openidc v2.4.11.3

release 2.4.11.3

on GitHub

Note that as of release 2.4.11 running mod_auth_openidc behind a reverse proxy that sets X-Forwarded-* headers needs explicit configuration of OIDCXForwardedHeaders for mod_auth_openidc to interpret those headers, thus this may break existing configurations if unmodified for the former.

Bugfixes

• avoid memory leak when using PCRE2 regular expressions with array matching; closes #902; thanks @smanolache
• avoid memory leak when cjose_jws_get_plaintext fails; closes #903; thanks @smanolache
• fix handling of IPv6 based logout URLs; thanks @@codemaker219

Features

• Use optionally provided sid and iss request parameters during front channel logout; see #855; thanks @rpluem-vf
• support Forwarded header in addition to X-Forwarded-*; see #853; thanks @studersi

Commercial

• binary packages for various other platforms such as Microsoft Windows 64bit/32bit, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7/8 on Power PC (ppc64, ppc64le), Oracle Linux 6/7, older Ubuntu and Debian distro's, Oracle HTTP Server 11.1/12.1/12.2, IBM HTTP Server 8/9, Solaris 11.4, IBM AIX 7.2 and Mac OS X are available under a commercial agreement via sales@zmartzone.eu
• support for Redis over TLS, Redis (TLS) Sentinel, and Redis (TLS) Cluster is available under a commercial license via sales@zmartzone.eu