Release 5.3 BETA1 ------------------ This is the first BETA release in the 5.3 release series. It features a re-designed classic (blocking) TLS session management and server-side request routing APIs. It is likely to be the last BETA release in the 5.3 release series. Notable changes and features included in the 5.3 series: * Improved conformance to RFC 9110 and RFC 9112. * UTF-8 encoding to be used by default for text where appropriate. * Compatibility with Java Virtual Threads and Java 21 Runtime. * Message parsing API improvements and performance optimization * TLS client endpoints to make use of JSSE Endpoint Identification by default. * Redesign of server-side request routing API. * Redesign of TLS session handling by classic (blocking) connections. Change Log ------------------- * Improved Javadoc. Contributed by Gary Gregory * HTTPCLIENT-2328: Blocking i/o connections to check if the opposite TLS endpoint has been closed by the opposite endpoint while writing out request body. Contributed by Oleg Kalnichevski * HTTPCLIENT-2328: Better control over the TLS layer of blocking connections. TLS layer no longer automatically closes the underlying network socket. Connections close the network socket manually after TLS session termination. Contributed by Oleg Kalnichevski * More flexible TLS layer initialization by the classic HTTP server bootstrap. Contributed by Oleg Kalnichevski * HTTPCORE-766: redesign of server-side request routing. Contributed by Oleg Kalnichevski * Bug fix: corrected exception type thrown in case of unexpected connection termination. Contributed by Oleg Kalnichevski * Made HttpCoreContext consistent with the behavior of HttpContext implementations in HttpClient. Contributed by Oleg Kalnichevski * Bug fix: HTTP/1.1 server-side stream handler to validate the request message before the request routing and handler resolution. Contributed by Oleg Kalnichevski * HPackDecoder incorrectly calculates required buffer length causing G1 Humongous Allocation and OOM (#465). Contributed by crazylulululu <42406448+crazylulululu at users.noreply.github.com> * Update the method parameter of InetAddressUtils from String to CharSequence. Contributed by wangkai Release 5.3 ALPHA2 ------------------ This is the second and likely the last ALPHA release in the 5.3 release series. It finalizes the API changes introduced in the previous ALPHA release and also improves Message Parsing APIs and client-side TLS defaults by making use of JSSE Endpoint Identification. Change Log ------------------- * HttpCoreContext to use instance variables for standard attributes. Contributed by Oleg Kalnichevski * TLS client endpoints to make use of JSSE Endpoint Identification by default. Contributed by Oleg Kalnichevski * Mention HttpStatus and StatusCode in JavaDoc in more places (#454). Contributed by Dmitrii Naumenko * Improved protocol version parsing. Contributed by Oleg Kalnichevski * Replaced token delimitation based on BitSet with a predicate function. Contributed by Oleg Kalnichevski * HTTPCORE-763: remove checks that assert a path does not start with "//". Contributed by Marco Bungart * Corrected declaration of generic Header iterators. Contributed by Oleg Kalnichevski Release 5.3 ALPHA1 ------------------ This is the first ALPHA release in the 5.3 release series that improves HTTP protocol support by ensuring conformance to the latest HTTP specification (RFC 9110 and RFC 9112) and also ensuring compatibility with Java Virtual Threads by replacing 'synchronized' keywords in critical sections with Java lock primitives. Change Log ------------------- * Removed AccessController checks (AccessController deprecated in Java 21). Contributed by Oleg Kalnichevski * Support for percent coding as defined in RFC 5987. Contributed by Arturo Bernal * HTTPCORE-756: Improved Transfer-Encoding handling and message frame validity verification per RFC 9112 section 6.1. Contributed by Oleg Kalnichevski * HTTPCORE-756: Stricter parsing of response status code per RFC 9112 section 3.2; less intermediate garbage while parsing response status lines. Contributed by Oleg Kalnichevski * HTTPCORE-756: Support for the effective HTTP/1.x protocol level config parameter; HTTP/1.1 endpoints to signal their actual supported protocol level (the minor version in HTTP/1.x) in the message control data as per RFC 9110 section 6.2. Contributed by Oleg Kalnichevski * HTTPCORE-756: Authority from an absolute request URI to take precedence over Host header per RFC 9112 section 3.2. Contributed by Oleg Kalnichevski * HTTPCORE-756: Client protocol handlers to try to send `Host` as the first header in the request header section per RFC 9110 section 7.2. Contributed by Oleg Kalnichevski * HTTPCORE-756: Updated response status codes as per RFC 9110 section 18.3. Contributed by Oleg Kalnichevski * HTTPCORE-756: Expect-Continue handshake improvements per RFC 9110 section 10.1.1. Contributed by Oleg Kalnichevski * Additional message support methods. Contributed by Oleg Kalnichevski * HTTPCORE-756: Support methods for handling hop-by-hop and connection specific headers. Contributed by Oleg Kalnichevski * HTTPCORE-756: Reject HTTPS requests received over insecure (non-TLS) connection per RFC 9110 section 7.4. Contributed by Oleg Kalnichevski * HTTPCORE-756: Replace CR, LF, NULL in header values with SP per RFC 9110 section 5.5. Contributed by Oleg Kalnichevski * HTTPCORE-759: Add Content-Length to POST, PUT and PATCH with null entity request content (#435). Contributed by Billy <10576351+chrysophylax at users.noreply.github.com> * Improved name/value parsing code. Contributed by Oleg Kalnichevski * ':path' pseudo-Header validation for HTTP/2 Requests (#428). Contributed by Arturo Bernal * HTTPCORE-756: Implement RFC9110 Content-Type validation for OPTIONS requests. Enforce the presence of a valid Content-Type header for OPTIONS requests containing content as per RFC9110 (#424). Contributed by Arturo Bernal * HTTPCORE-756: Enforced non-empty host identifier for http/https URIs. (#423) Contributed by Arturo Bernal * Async requesters to populate request URI authority based on the target host when not explicitly set by the caller. Contributed by Oleg Kalnichevski * Async requesters to support custom / resolved target endpoints Contributed by Oleg Kalnichevski * Replace 'synchronized' blocks with ReentrantLock. (#412) Contributed by Arturo Bernal * HTTPCORE-744: Removed references to URI normalization from URIBuilder. Contributed by Oleg Kalnichevski * Use Timeout#INFINITE instead of Timeout#DISABLED for network operations. Contributed by Oleg Kalnichevski * Add support for Internationalized Domain Names (IDN). Contributed by Arturo Bernal * Added a request interceptor to generate 'Forwarded' HTTP header. Contributed by Arturo Bernal * Use either US-ASCII or UTF-8 encoding for text where appropriate. Contributed by Michael Osipov * Fixed an issue with invalid scoped IPv6 addresses in InetAddressUtils. Contributed by Arturo Bernal * Added a request interceptor to generate 'Via' HTTP header. Contributed by Arturo Bernal Release 5.2.4 ------------------ This is a maintenance release that corrects a major defect discovered since release 5.2.3 that can lead to an H2 connection failing at runtime with the message "Frame size exceeds maximum" when executing requests with an enclosed message body and the remote endpoint having negotiated a maximum frame size larger than the protocol default (16KB). Change Log ------------------- * HTTPCORE-762: H2 protocol handler incorrectly determines the maximum frame size for outgoing frames in case the remote endpoint negotiated a max frame size larger than the protocol default. Contributed by Oleg Kalnichevski Release 5.2.3 ------------------ This is a maintenance release that corrects several defects discovered since release 5.2.2 including a major defect that can cause non-blocking character-based consumers to enter an invalid state and stop processing incoming data. Change Log ------------------- * HTTPCORE-757: AbstractCharDataConsumer fails to correctly handle incomplete UTF8 encoded data split across multiple data packets. Contributed by Oleg Kalnichevski * Support SOCKS5 with username/password authentication Contributed by yndu13 * Non-blocking protocol handler to filter out non-printable ASCII and non-ASCII characters from HTTP headers by default. This makes the behavior of the non-blocking transport consistent with that of the blocking one (#416). Contributed by vismayku <142537063+vismayku at users.noreply.github.com> * HTTPCORE-754: StrictConnPool fails to correctly handle infinite request timeout. Contributed by Oleg Kalnichevski * HTTPCORE-753: Fixed race condition in the IOSession#close method. Contributed by Oleg Kalnichevski Release 5.2.2 ------------------ This is a maintenance release that corrects several defects discovered since release 5.2.1 including a major defect that can cause HTTP/2 connections allocate excessive amount of memory for their output frame buffer if the opposite endpoint transmits a high value of MAX_FRAME_SIZE in its settings. Change Log ------------------- * HTTPCORE-752: I/O reactor fails to initialize socket timeout for TLS connections correctly resulting in infinite (no timeout) by default. Contributed by Oleg Kalnichevski * HTTPCORE-751: H2 protocol handler always resizes the output frame buffer to the remove MAX_FRAME_SIZE instead of doing so only then the remote MAX_FRAME_SIZE is lesser than the current MAX_FRAME_SIZE (partially reverts HTTPCORE-707). Contributed by Oleg Kalnichevski * HTTPCORE-750: Fixed a defect causing AbstractIOSessionPool to create multiple connections under high load at initialization time due to a race condition. Contributed by Oleg Kalnichevski * Handle UnsupportedOperationException in getApplicationProtocol. Contributed by Arturo Bernal * HTTPCORE-742: BasicHttpRequest#setUri does not correctly reset internal state. Contributed by Oleg Kalnichevski * HTTPCORE-733: BasicAsyncEntityProducer sends an extra trailing 0 with UTF-8 encoded content Contributed by Oleg Kalnichevski * Do not duplicate the HttpMessage instance variable slot in subclasses of AbstractMessageWrapper. Contributed by Gary Gregory Release 5.2.1 ------------------ This is a maintenance release that corrects several minor defects discovered since release 5.2 and fixes SOCKS proxy protocol support in the async transport. Change Log ------------------- * HTTPCLIENT-2248: Fixed broken TLS over SOCKS. Contributed by Oleg Kalnichevski * I/O reactor connect process redesign. Contributed by Oleg Kalnichevski * SOCKS protocol handling: Delegate resolution of unknown hostnames to the SOCKS proxy. Contributed by Oleg Kalnichevski * I/O reactor to validate remote endpoint address at the last moment immediately before connecting. Contributed by Oleg Kalnichevski * Bug fix: I/O reactor must handle all runtime exceptions when connecting to remote endpoints. Contributed by Oleg Kalnichevski * Added org.apache.hc.core5.http.protocol.HttpCoreContext#toString(). Contributed by Gary Gregory * Examples should log exceptions instead of swallowing them. Contributed by Gary Gregory * HTTPCORE-729: NPE in ServerHttp1IOEventHandlerFactory due to a missing null check Contributed by Oleg Kalnichevski Release 5.2 ------------------ This is the first GA release in the 5.2 release series. This release finalizes the 5.2 APIs and also corrects a number of defects discovered since the previous release. Please note that 5.2 upgrades the minimal JRE level to version 8 (8u251 is required). Notable changes and features included in the 5.2 series: * Upgrade to Java 8. * Improved support for TLS upgrade and HTTP protocol upgrade (async). * Improved HTTP protocol negotiation. * Improved customization of connection listeners (async). * Improved parsing and formatting of URI components. * Use of Java 8 date / time APIs Change Log ------------------- * Bug fix: HTTP/1.1 protocol handler must continue message processing as long as there is data in the session input buffer. Contributed by Oleg Kalnichevski * HTTPCORE-726: Improved capacity management in SharedInputBuffer. Contributed by John Leacox * Bug fix: Fixed incorrect calculation of the capacity increment in StringAsyncEntityConsumer. Contributed by Oleg Kalnichevski * Add and use TLS accessor methods to use lambdas from httpclient5 later. Contributed by Gary Gregory * Deprecate org.apache.hc.core5.util.LangUtils.equals(Object, Object) in favor or java.util.Objects.equals(Object, Object). Deprecate org.apache.hc.core5.util.LangUtils.equals(Object[], Object[]) in favor or java.util.Arrays.equals(Object[], Object[]). Contributed by Gary Gregory * URI Builder performance optimization (#355) Contributed by jkmcl Release 5.2 BETA2 ------------------ This BETA release corrects a major regression in the TLS handshake handling code introduced in the previous BETA release. This release also includes all fixes from the 5.1 (stable) branch. Please note that 5.2 upgrades the minimal JRE level to version 8 (8u251 is required). Change Log ------------------- * HTTPCORE-713: Optimize InetAddressUtils#isIPv6*Address; check input colon count before performing IPv6 regex validation. Contributed by David Schlosnagle * HTTPCORE-710: In case of some TLS handshake failures (protocol version mismatch) the local TLS engine quietly closes the stream instead of throwing a handshake exception. Contributed by Oleg Kalnichevski * Corrected TLS upgrade support in HttpAsyncRequester. Contributed by Oleg Kalnichevski * Bug fix: Non-blocking TLS sessions fail to update their event interest mask upon TLS handshake initiation. Contributed by Oleg Kalnichevski * Upgrade to RxJava3 Contributed by Ryan Schmitt Release 5.2 BETA1 ------------------ This is the first BETA release in the 5.2 release series that marks the completion of major API changes and starts the transition toward a GA phase. This release also includes all fixes from the 5.1 (stable) branch. Change Log ------------------- * Improved HTTP protocol negotiation. Contributed by Oleg Kalnichevski * Added #clone to BasicHeader. Contributed by Arturo Bernal * Use subclass of ConnectionClosedException to signal request execution failures due to the connection being closed. Requests failed with this exception should generally be safe to re-execute. Contributed by Oleg Kalnichevski * HTTPCORE-698: Migratation to Unit 5. Contributed by Arturo Bernal * HTTPCORE-697: Replaced SimpleDateFormat with Java 8 Time APIs. Contributed by Arturo Bernal * Fixed #format in Deadline; improved #hashCode; replaced SimpleDatteFormat with Java 8 Time APIs. Contributed by Oleg Kalnichevski * Singleton INSTANCE added to RequestConnControl, RequestContent, RequestData, RequestTargetHost and RequestUserAgent. Contributed by Arturo Bernal * HTTPCORE-692: added new rules for H2 header check as per rfc7540 section 8.1.2.2 and 8.1.2.3. Contributed by 风起 * HTTPCORE-691: HttpService and HttpRequestExecutor builders. Contributed by Arturo Bernal * Added URIAuthority and NamedEndpoint setters to URIBuilder (#308). Contributed by Gary Gregory Release 5.2 ALPHA2 ------------------ This is the second ALPHA release in the 5.2 release series that fixes a regression in the TLS layer introduced by the previous ALPHA and adds a number of incremental improvements. Change Log ------------------- * Add PathEntityProducer, an NIO entity provider (#302). Contributed by Gary Gregory * Add SSLContextBuilder NIO Path versions of IO File APIs and re-implement internals with NIO (#301). Contributed by Gary Gregory * Allow setting parameters to null arrays and lists to behave like empty (#300). Contributed by Gary Gregory * Bug fix, regression: TLS handshake result callback does not get called in case of a timeout. Contributed by Oleg Kalnichevski * HTTPCLIENT-2174: URUBuilder to return a new empty list instead of unmodifiable Collections#emptyList. Contributed by Oleg Kalnichevski Release 5.2 ALPHA1 ------------------ This is the first ALPHA release in the 5.2 release series that upgrades minimal JRE level to version 1.8 (8u251 is required) and includes several protocol level and API improvements. It also includes all bug fixes from the 5.1 branch. Change Log ------------------- * Improved Travis CI build Performance. Contributed by Chen Zhang <340355960 at qq.com> * HTTPCORE-682: Custom provider for key manager/trust manager initialization (#296) Contributed by Pawel Veselov * Bug fix: fix data race in StrictConnPool. Contributed by Carter Kozak * Added utility method to add name value pair for uri builder (#288). Contributed by Anurag Agarwal * Use jep244 (ALPN support) back-ported to java 8u251. Contributed by Oleg Kalnichevski * Bug fix: Don't change conn flow control window based on remote SETTINGS. Contributed by Ryan Schmitt * HTTPCLIENT-1916: Add URIBuilder.removeParameter (#283). Contributed by Peter Dettman * Improved parsing and formatting of URI components. Contributed by Oleg Kalnichevski * Let TimeValue/Timeout convert to and from Duration (#263). Contributed by Gary Gregory * Add URIBuilder#getFirstQueryParam(String) to query a parameter by name (#264). Contributed by Gary Gregory * Protocol upgrade APIs redesign. Contributed by Oleg Kalnichevski * TLS upgrade and TLS strategy APIs redesign. Contributed by Oleg Kalnichevski * Added default `ConnectionAcceptor#listen` method that takes an optional attachment as a parameter. Contributed by Oleg Kalnichevski * Upgrade to Java 1.8. Contributed by Oleg Kalnichevski Release 5.1.1 ------------------ This is a maintenance release that corrects a number of defects discovered since release 5.1 including a major defect that can cause a connection pool resource leak. Change Log ------------------- * HTTPCORE-676: Fixed incorrect handling of TLS renegotiation by non-blocking i/o sessions. Contributed by Oleg Kalnichevski * HTTPCORE-616: Make URI authority parsing IPv6 ready. Contributed by Carter Kozak * Improved parsing and formatting of URI components. Contributed by Oleg Kalnichevski * HTTPCORE-673: Fixed incorrect handling of unknown parameters in HTTP/2 SETTINGS frame. Contributed by Oleg Kalnichevski * HTTPCORE-671: URIBuilder does not precent-encode bracketed IPv6 addresses. Contributed by Carter Kozak * HTTPCORE-672: H2ConnPool incorrectly handles validation of closed sessions. Contributed by Oleg Kalnichevski * Fixed race condition when a connection request completes successfully and times out at the same time causing a pool entry leak. Contributed by Oleg Kalnichevski * Fixed TextUtils#toHexString producing incorrect result for negative values. Contributed by Marcono1234 Release 5.1 ----------- This is the first GA release in the 5.1 release series. Notable changes and features included in the 5.1 series: * Conditional conformance with RFC 3986 (Uniform Resource Identifier (URI): Generic Syntax). * Improved support for out of sequence response message handing by the the classic (blocking) HTTP transport. * Improved message builders. Change Log ------------------- * Bug fix: HTTP negotiator factories to accept null TlsStrategy. Contributed by Oleg Kalnichevski * RequestHandlerRegistry to resolve 127.0.0.1 as primary host. Contributed by Oleg Kalnichevski * HTTPCORE-667, HTTPCORE-668, HTTPCORE-670: Added content type and HTTP header constants. Contributed by Arturo Bernal * RFC 3986 conformance: BasicHttpRequest to reject requests whose path component begins with multiple slashes. Contributed by Oleg Kalnichevski * RFC 3986 conformance: BasicHttpRequest to support parsing of valid URI authority components not recognized by java.net.URI. Contributed by Oleg Kalnichevski * Improved message builder support. Contributed by Oleg Kalnichevski * HTTPCORE-666, regression: fixed NPE in ServerHttp1IOEventHandlerFactory. Contributed by Oleg Kalnichevski Release 5.1 BETA3 ------------------ This is likely the last BETA release in the 5.1 release series. The next release is expected to be 5.1 GA. This beta includes a number of new features as well as bug fixes from the stable 5.0.x branch. Notable changes and features included in the 5.1 series: * Conditional conformance with RFC 3986 (Uniform Resource Identifier (URI): Generic Syntax). * Improved support for out of sequence response message handing by the the classic (blocking) HTTP transport. Change Log ------------------- * RFC 3986 conformance: Added `#normalizeSyntax` method to URIBuilder. Contributed by Oleg Kalnichevski * HTTPCORE-663: Added http status code 425. Contributed by Arturo Bernal * HTTPCORE-661: Added http status code 426. Contributed by Arturo Bernal * HTTPCORE-659: Fixed race condition in IOSessionImpl when setting event. Contributed by Nicolas Capponi * HTTPCORE-658: Removed explicit inbound / outbound socket shutdown from the `#close` method of classic HTTP connections. Contributed by Oleg Kalnichevski * HTTPCORE-657: Added TrafficClass to IOReactorConfig (#243). Contributed by Desmond Yeung * Add filters before MAIN_HANDLER so they won't be ignored (#236). Contributed by Rob Spoor * Bug fix: Fixed broken result callback in ProtocolNegotiatorBase. Contributed by Oleg Kalnichevski * Fixed NPE and improve code centralization in URIBuilder (#235). Contributed by Lars Helge Øverland * Added `#appendPath` and `#appendPathSegments` methods to URIBuilder (#234). Contributed by Lars Helge Øverland * Removed connection acceptor API changes (moved to 5.2). Contributed by Oleg Kalnichevski * Removed protocol upgrade API changes (moved to 5.2). Contributed by Oleg Kalnichevski * Bug fix: Do not attempt to shut down non-blocking TLS session gracefully in case the TLS handshake has not been fully completed. Contributed by Oleg Kalnichevski Release 5.1 BETA2 ------------------ This is the second BETA release in the 5.1 release series that includes a number of new features as well as bug fixes from the stable 5.0.x branch. Change Log ------------------- * PR #232: Master try w res and more. - Use try-with-resources. - Use diamonds. - Add missing @Override. - Make better use of Map APIs. - Remove redundant modifiers. - Use Collections.addAll() API instead of loops. - Remote extra semicolons (;). Contributed by Gary Gregory * Bug fix: Fixed ignoring maxResultLength in toString method of EntityUtils. Contributed by Klaw * Bug fix: corrected handling of pushed stream refusal by the HTTP/2 protocol handler. Contributed by Oleg Kalnichevski * Improved connection re-use (keep-alive) tracking by the benchmark; disabled H2 push when running the benchmark with HTTP/2. Contributed by Oleg Kalnichevski * Improved detection of disconnected endpoints by HttpAsyncRequester. Contributed by Oleg Kalnichevski * HTTPCORE-626: in case of an unsuccessful `expect-continue` handshake do not make any attempts to keep the client connection in a consistent state if the server intends to close it on its end. Contributed by Oleg Kalnichevski * Move decision if the i/o session is to be terminated immediately to the protocol handler by default attempt to terminate the i/o session gracefully. Contributed by Oleg Kalnichevski * Optimized request termination by the non-blocking HTTP/1.1 protocol handler in case of a premature response or `expect-continue` handshake failure. Contributed by Oleg Kalnichevski * `AbstractAsyncResponseConsumer` to handle gracefully an inconsistent state caused by the caller signalling a response with no entity but subsequently calling methods to consume data. Contributed by Oleg Kalnichevski * Revised HTTP protocol negotiation for non-blocking I/O sessions Contributed by Oleg Kalnichevski * Revised TLS session initialization in I/O reactor code Contributed by Oleg Kalnichevski * HTTPCORE-653: CancelledKeyException triggers I/O reactor shutdown. Contributed by Oleg Kalnichevski * Make `ReactiveDataConsumer#failed` a no-op if it has already been marked as complete (#227). Contributed by Colin Weld * HTTPCORE-644: non-blocking TLSv1.3 connections can end up in an infinite event spin when closed concurrently by the local and the remote endpoints. Contributed by Oleg Kalnichevski * Calculate pendingOutputRequests before calling produceOutput to avoid race condition. Contributed by Colin Weld Release 5.1 BETA1 ------------------ This is the first BETA release in the 5.1 release series that includes a number of new features as well performance optimizations in the classic HTTP transport. Notable changes and features included in the 5.1 series: * Conditional conformance with RFC 3986 (Uniform Resource Identifier (URI): Generic Syntax). * Improved support for out of sequence response message handing by the the classic (blocking) HTTP transport. Change Log ------------------- * HTTPCORE-649: Implement ByteArrayBuffer.append(ByteBuffer) Contributed by Carter Kozak * Use decimal numbers for endpoint/execution IDs Contributed by Michael Osipov * HTTPCORE-645: Increase blocking default chunk size from 2 KiB to 8 KiB. Contributed by Carter Kozak * HTTPCORE-645: Chunked request streams reuse buffers between requests. Contributed by Carter Kozak * HTTPCORE-639: Add a configurable ResponseOutOfOrder strategy for DefaultBHttpClientConnection. Contributed by Carter Kozak * RFC 3986 conformance: Support percent-encoded reserved characters in the host component. Contributed by Oleg Kalnichevski * RFC 3986 conformance: Revised URI parsing and formatting. Contributed by Oleg Kalnichevski * Better parse and format methods for URIAuthority. Contributed by Oleg Kalnichevski * HTTPCORE-628: Do not encode blanks as + in URI query component. Contributed by Oleg Kalnichevski * Async connection listeners to support passing attachments to endpoints. Contributed by Oleg Kalnichevski Release 5.0.2 ------------------ This release reverts changes to early response handling logic introduced in 5.0.1 and fixes a number of minor defects. Improvement of the early response handling by the classic client protocol handler has been moved to 5.1. Please also note that as of this release HttpCore will use a 3 minute socket timeout by default. Change Log ------------------- * HTTP/1.1 protocol handlers fail to consistently set actual protocol version in the execution context. Contributed by Oleg Kalnichevski * HTTPCORE-648: Buffer array access respects the arrayOffset (#220). Contributed by Carter Kozak * HTTPCORE-646: ChunkedInputStream avoids creating unnecessary buffers. Contributed by Carter Kozak * Revert "Improved handling of early response messages by the classic client protocol handler". Contributed by Oleg Kalnichevski * HTTPCORE-638: SharedOutputBuffer must trigger DataStreamChannel#endStream() once (#204). Contributed by malaysf * Fixed integer overflow in IOWorkers selector (#203). Contributed by Pavel kaplin * HTTPCLIENT-2098: EntityUtils#toByteArray method fails to take into account `maxResultLength` parameter (#202). Contributed by Andriy * Add Automatic-Module-Name to the manifest. Contributed by Niels Basjes * HTTPCORE-636: Logging statements use slf4j interpolation over concatenation (#199). Contributed by Carter Kozak * HTTPCLIENT-2091: Use finite (3 minutes) socket timeout by default. Contributed by Oleg Kalnichevski Release 5.0.1 ------------------ This release improves handling of early response messages by the classic client protocol handler and fixes a number of minor defects. Change Log ------------------- * Add handling of early response messages by the classic client protocol handler. Contributed by Oleg Kalnichevski * HTTPCORE-631: Revised i/o reactor shutdown sequence and resource de-allocation. Contributed by Oleg Kalnichevski * Fix CharArrayBuffer.subSequence(beganIndex,endIndex) to return right result. Contributed by Lee Ray * Added exception callback to async server implementations enabling logging of unexpected and fatal exceptions in the server-side protocol handlers. Contributed by Oleg Kalnichevski Release 5.0 ------------------ This is the first stable (GA) release of HttpCore 5.0. Notable changes and features included in the 5.0 series: * Support for HTTP/2 protocol and conformance to requirements and recommendations of the latest HTTP/2 protocol specification (RFC 7540, RFC 7541) Supported features: ** HPACK header compression ** stream multiplexing (client and server) ** flow control ** response push (client and server) ** message trailers ** expect-continue handshake ** connection validation (ping) ** application-layer protocol negotiation (ALPN) on Java 9+ ** TLS 1.2 security features Features out of scope for 5.0 release: ** padding of outgoing frames ** stream priority ** plain connection HTTP/1.1 upgrade ** CONNECT method * Improved conformance to requirements and recommendations of the latest HTTP/1.1 protocol specification (RFC 7230, RFC 7231) * New asynchronous HTTP transport APIs consistent for both HTTP/1.1 and HTTP/2 transport. * Redesigned I/O reactor APIs and improved NIO based reactor implementation for a greater performance and scalability. * Support for server-side request filters for classic and asynchronous server implementations. Request filters could be used to implement cross-cutting protocol aspects such as the 'expect-continue' handshaking and user authentication / authorization. * Support for Reactive Streams API [http://www.reactive-streams.org/] * Redesigned connection pool implementation with strict connection limit guarantees. The connection pool is expected to have a better performance under higher concurrency due to reduced global pool lock contention. * New connection pool implementation with lax connection limit guarantees and better performance under higher concurrency due to absence of a global pool lock. * Package name space changed to 'org.apache.hc.core5' * Maven group id changed to 'org.apache.httpcomponents.core5' HttpCore 5.0 releases can be co-located with earlier versions. Change Log ------------------- * GitHub #183: IO reactor status equality clean ups. Contributed by Gary Gregory * HTTPCORE-623 GitHub #185: Change org.apache.hc.core5.http.io.BHttpConnection.isDataAvailable() int input to Timeout. Contributed by Gary Gregory * GitHub #188: Add PathEntity, a Path based implementation of HttpEntity. (#188) Contributed by Gary Gregory * GitHub #191: Add org.apache.hc.core5.http.Method.normalizedValueOf(String). Contributed by Gary Gregory * GitHub #193: Reuse constants instead of magic strings. Contributed by Gary Gregory Release 5.0-BETA11 ------------------ This BETA improves handling of illegal or invalid requests on the server-side and fixes a number of defects in HTTP/2 protocol code found since the last release. IMPORTANT: This release is expected to be the last BETA version. If no major design flaws are found, the actual 5.0 API will be frozen and the next version will be promoted to GA. Change Log ------------------- * HTTPCORE-618: org.apache.hc.core5.http.HttpStatus should be a class, not an interface. Contributed by Gary Gregory * HTTPCORE-619: org.apache.hc.core5.reactor.EventMask should be a class, not an interface. Contributed by Gary Gregory * Normalize TimeUnit in TimeValue's #equals() and #hashCode(). Contributed by Michael Osipov * Support for status code 431 (Request Header Fields Too Large) by H2 server-side protocol handler Contributed by Oleg Kalnichevski * Enforce H2 SETTINGS_MAX_HEADER_LIST_SIZE limit for HTTP/2 messages. Contributed by Oleg Kalnichevski * Improved H2 connection window management logic. Contributed by Ryan Schmitt * Use UTF-8 encoding for XML-based content types. Contributed by Michael Osipov * Bug-fix: H2 protocol handler to reset all streams unconditionally in case of an unexpected exception and attempt to close the i/o session gracefully if possible. Contributed by Oleg Kalnichevski * Support for status code 431 (Request Header Fields Too Large). Contributed by Oleg Kalnichevski * Corrected handling of illegal or invalid request heads by async server-side protocol handler Contributed by Oleg Kalnichevski * Bug-fix: Fixed race condition in ReactiveDataConsumer. Contributed by Ryan Schmitt * Bug-fix: Fixed H2 SETTINGS_HEADER_TABLE_SIZE negotiation. Contributed by Ryan Schmitt * Bug-fix: Fixed empty response handling in ReactiveResponseConsumer. Contributed by Ryan Schmitt * Allow for timeout while acquiring lock in StrictConnPool. Contributed by Chris Wildman * Added H2 config option to disable Huffman compression Contributed by Oleg Kalnichevski * HTTPCORE-613: Now allowing 0 for validaterAfterInactivity. Contributed by Peter Frank * HTTPCLIENT-2029: URIBuilder to support parsing of non-UTF8 URIs. Contributed by Oleg Kalnichevski * HTTPCLIENT-2026: Fixed URIBuilder#isOpaque() logic. Contributed by Oleg Kalnichevski * HTTPCORE-611: Minor glitches with TimeValue. Contributed by Gary Gregory Release 5.0-BETA10 ------------------- This BETA fixes a number of defects found since the last release. IMPORTANT: This release is expected to be the last BETA version. If no major design flaws are found, the actual 5.0 API will be frozen and the next version will be promoted to GA. Change Log ------------------- * HTTPCORE-608: Fixes regression that can lead to performance degradation of asynchronous HTTP/1.1 protocol handlers. Contributed by Oleg Kalnichevski * HTTPCORE-606: HTTP/2 protocol handler incorrectly uses larger frame size prior to SETTING handshake completion; revision of SETTINGS handshake implementation. Contributed by Oleg Kalnichevski * Bug fix: HTTP/2 Protocol handler does not update global connection output window in some cases. Contributed by Oleg Kalnichevski * Upgraded Conscrypt dependency to version 2.2.1 Contributed by Oleg Kalnichevski Release 5.0-BETA9 ------------------- This BETA fixes a number of defects found since the last release, improves behavior of the lax (concurrent) connection pools (special thanks to Linton Miller), simplifies and improves input event handling of SSL/TLS sessions and the HTTP/1.1 protocol event handler. Please note that the following interfaces have marked as internal as of this release: IOSession, IOEventHandler, IOEventHandlerFactory. IMPORTANT: This release is expected to be the last BETA version. If no major design flaws are found, the actual 5.0 API will be frozen and the next version will be promoted to GA. Change Log ------------------- * HTTPCORE-604: async HTTP/1.1 protocol handler must close the i/o session if it cannot be kept alive before passing control to the message exchange hanlder. Contributed by Oleg Kalnichevski * Simplification of HTTP/1.1 read event handling logic. Contributed by Oleg Kalnichevski * Redesign of SSL/TLS async I/O event handling. Contributed by Oleg Kalnichevski * HTTPCLIENT-2016 (regression): Tab chars are replaced by question marks in header values. Contributed by Oleg Kalnichevski * Bug fix: Fixed capacity calculation in SessionInputBufferImpl#put. Contributed by Oleg Kalnichevski * Marked IOSession, IOEventHandler and IOEventHandlerFactory interfaces as internal. Contributed by Oleg Kalnichevski * Propagate BasicResponse{Consumer,Producer}#failed() to data{Consumer,Producer}. Contributed by Roy Hashimoto * Regression: Fixed regression in SingleCoreIOReactor leading to unhandled CancelledKeyException and causing abnormal I/O reactor termination. Contributed by Oleg Kalnichevski * HTTPCORE-601: Work-around for SSL session spin on outbound session closure with Conscrypt 2.2.1. Contributed by Oleg Kalnichevski * HTTPCORE-600: SSLIOSession incorrectly disables input interest when there is still decrypted data available in the session input buffer. Contributed by Oleg Kalnichevski * Added statusClass property to StatusLine. Contributed by Behrang <18451+behrangsa at users.noreply.github.com> * HTTPCORE-596: Connection pools to use an optional callback to close out disposed connections. Contributed by Oleg Kalnichevski * Connection pools to close connections gracefully in case of an ordinary connection disposal. Contributed by Oleg Kalnichevski * HTTPCORE-599: I/O sessions to stop reading from the underlying network channel of READ interest is disabled. Contributed by Oleg Kalnichevski * TimeValue to implement Comparable. Contributed by Oleg Kalnichevski * HTTPCORE-597: AsyncEntityProducers#createText always throws IllegalArgumentException. Contributed by Oleg Kalnichevski * HTTPCORE-595: Tolerate NPE thrown by com.android.org.conscrypt.NativeCrypto#SSL_get_shutdown in Android Conscrypt. Contributed by Oleg Kalnichevski * Set accessibility flag on reflected methods in ReflectionUtils. Contributed by Richard Hernandez * Restore original socket timeout after finishing SSL/TLS handshake. Contributed by Richard Hernandez * Add SOAP XML content type. Contributed by Raihaan Shouhell * HTTPCORE-593, HTTPCORE-592, HTTPCORE-590, HTTPCORE-589: LaxConnPool improvements. Contributed by Linton Miller * HTTPCORE-588: Race condition in ComplexCancellable that can lead to operational dependency not being correctly cancelled. Contributed by Oleg Kalnichevski * Execute Socket[Channel]#connect under doPrivileged. Contributed by Simon Willnauer * Fail request execution immediately after submission if the I/O session has already been closed. Contributed by Oleg Kalnichevski * Bug fix: Fixed regression in the HTTP protocol negotiators. Contributed by Oleg Kalnichevski * Bug fix: MessageSupport#formatTokens no longer modifies the array of tokens passed to it as a parameter. Contributed by Oleg Kalnichevski * HTTPCORE-586: Improve LaxConnPool max pool size management. Contributed by Linton Miller * HTTPCORE-585: Fix LaxConnPool#servicePendingRequest to avoid losing pending lease requests it can't fulfill. Contributed by Linton Miller * Possible fix for iteration thread-safety issue. Contributed by Linton Miller * SSL session verifier for classic HTTP requester. Contributed by Oleg Kalnichevski * Bug fix: non-blocking I/O event handler may be null in case of an unexpected exception. Contributed by Oleg Kalnichevski * Bug fix: Corrected immediate termination of non-blocking I/O sessions. Contributed by Oleg Kalnichevski * Bug fix: Ensure consistency of internal buffers in case of I/O or SSL exception. Contributed by Oleg Kalnichevski Release 5.0-BETA8 ------------------- This BETA fixes a number of defects found since the last release and adds several convenience factory and builder classes, mainly for TLS configuration and HTTP message construction. As of this version all server and requester implementations exclude weak TLS protocol versions and ciphers. Please note that the following interfaces have changed: ResponseChannel, AsyncRequestConsumer, AsyncResponseConsumer, HttpContentProducer, SSLServerSetupHandler. IMPORTANT: This release is expected to be the last BETA version. If no major design flaws are found the actual 5.0 API will be frozen and the next version will be promoted to GA. Change Log ------------------- * HTTPCORE-582: Fixed NPE in SingleCoreIOReactor#processEvents Contributed by Oleg Kalnichevski * Redesign of fatal exception handling by the I/O reactors Contributed by Oleg Kalnichevski * HTTPCORE-581: Wrong deadline calculation for non-blocking I/O operations Contributed by Oleg Kalnichevski * Better HttpVersion and ProtocolVersion. (#131) Contributed by Gary Gregory * Classic and async message builders. Contributed by Oleg Kalnichevski * Improved classic and async entity factory methods. Contributed by Oleg Kalnichevski * HTTPCORE-578: Incorrect serialization of HeaderGroup. Contributed by Gary Gregory * HTTPCORE-577: server-side HTTP protocol negotiator to propagate exceptions to the I/O event handler associated with the I/O session. Contributed by Oleg Kalnichevski * HTTPCLIENT-1986: URIBuilder#isPathEmpty method to verify if encodedPath is an empty string. Contributed by Oleg Kalnichevski * SSLIOSession: Improve connectTimeout implementation. Contributed by Ryan Schmitt * HTTPCLIENT-1981: Disallow TRACE requests with an enclosed entity. Contributed by Oleg Kalnichevski * HTTPCLIENT-1978: Filter characters before byte conversion. Contributed by Ryan Schmitt * HTTPCORE-573: FileContentDecoder don't always enforce the maximum number of bytes to transfer. Contributed by Julien Coloos * All server and requester implementation to exclude weak TLS protocol versions and ciphers. Contributed by Oleg Kalnichevski * Improved SSL setup handling for classic requester and server. Contributed by Oleg Kalnichevski * Common TLS support methods migrated from HttpClient. Contributed by Oleg Kalnichevski * Bug fix: non-blocking SSL I/O sessions fail to fire session disconnected event. Contributed by Oleg Kalnichevski * Bug fix: basic entity consumers to clear buffered content when releasing resources. Contributed by Oleg Kalnichevski * conscrypt-openjdk-uber 1.4.1 -> 1.4.2. Contributed by Gary Gregory * Provide more information when a BindException occurs. Contributed by Gary Gregory * Refactor ClassicHttpRequest and ClassicHttpResponse interfaces to extend a new interface HttpEntityContainer. Contributed by Gary Gregory * Update RxJava from 2.2.7 to 2.2.8. Contributed by Gary Gregory Release 5.0-BETA7 ------------------- This BETA release adds support for SOCKS version 5, improves support for TLS handshake timeout configuration, improves URI builder, and fixes various defects. Please note that the following interfaces have changed: TlsStrategy, IOSession, TransportSecurityLayer. Change Log ------------------- * Add a thread-safe capacity channel to AbstractHttp1StreamDuplexer Contributed by Richard Hernandez * HTTPCORE-568: Signal capacity in ReactiveDataConsumer whenever possible (fixes a race condition) Contributed by Richard Hernandez * Made standard HttpEntity implementations immutable / conditionally immutable Contributed by Oleg Kalnichevski * HTTPCLIENT-1968: URIBuilder to split path component into path segments when digesting a URI Contributed by Oleg Kalnichevski * HTTPCLIENT-1968: added utility methods to parse and format URI path segments Contributed by Oleg Kalnichevski * Added SOCKS proxy support to classic (blocking) HTTP requester Contributed by Oleg Kalnichevski * Made AbstractBinAsyncEntityProducer and AbstractCharAsyncEntityProducer conditionally threading-safe Contributed by Oleg Kalnichevski * Added convenience method to test if ContentType instances are of the same MIME type Contributed by Oleg Kalnichevski * Merge connect and handshake timeouts in AbstractIOSessionPool Contributed by Ryan Schmitt * HTTPCLIENT-1960: URIBuilder incorrect handling of multiple leading slashes in path component Contributed by Oleg Kalnichevski * HTTPCLIENT-1959: corrected argument validation in HttpHost constructors; removed deprecated methods Contributed by Oleg Kalnichevski * org.apache.hc.core5.reactor.IOSession: Deprecate lock() in favor of getLock(). Add missing @Override. Contributed by Gary Gregory * HTTPCORE-563: client support for SOCKS version 5 Contributed by David Maplesden * Delay I/O operations on non-blocking SSL sessions until fully initialized Contributed by Oleg Kalnichevski * Add `handshakeTimeout` support throughout Contributed by Ryan Schmitt * Updated the set of project report generated by Maven Contributed by Oleg Kalnichevski * SSLIOSession: Add `connectTimeout` constructor param Contributed by Ryan Schmitt * Update RxJava from 2.1.9 to 2.2.7. Contributed by Gary Gregory Release 5.0-BETA6 ------------------- This BETA release adds support for advanced TLS functions (such as ALPN protocol negotiation) on Java 1.7 and Java 1.8 through Conscrypt TLS library, and fixes a number of defects found since the previous release. Please note AsyncDataConsumer interface has been changed in order to make it simpler to implement. However existing AsyncDataConsumer might require minor modifications. Change Log ------------------- * Removed OSGi module. Contributed by Oleg Kalnichevski * Added support for advanced TLS functions (such as ALPN extension) on Java 1.7 and Java 1.8 through Conscrypt TLS library. Contributed by Oleg Kalnichevski * HTTP/1.1 and HTTP/2 async protocol handlers to use I/O session lock for output synchronization. Contributed by Oleg Kalnichevski * Bug fix: non-blocking HTTP/1.1 server-side streams incorrectly report their keep-alive status. Contributed by Oleg Kalnichevski * Bug fix: fixed a race condition in non-blocking HTTP/1.1 protocol handlers causing premature clearing of output interest. Contributed by Oleg Kalnichevski * Simplified AsyncDataConsumer interface contract Contributed by Oleg Kalnichevski * HTTPCORE-560: Fix LaxConnPool leasing incorrect PoolEntry when processing pending requests Contributed by Desmond Yeung * Deprecate and rename org.apache.hc.core5.util.Timeout.ofMillis(long) to ofMilliseconds(long). Contributed by Gary Gregory * Deprecate and rename org.apache.hc.core5.util.TimeValue.ofMillis(long) to ofMilliseconds(long). Contributed by Gary Gregory * Fix org.apache.hc.core5.util.TimeValue.convert(TimeUnit). Contributed by Gary Gregory * Add org.apache.hc.core5.util.TimeValue.divide(*). Contributed by Gary Gregory * org.apache.hc.core5.http.URIScheme.getId() Contributed by Gary Gregory * HTTPCORE-562: The reason phrase returned by org.apache.hc.core5.http.HttpResponse.getReasonPhrase() may be empty. Contributed by Gary Gregory * TimeValue can parse more leniently: Allow spaces and singular words for time units, for example " 1 SECOND ". Contributed by Gary Gregory * Add HttpStreamResetException.serialVersionUID Contributed by Gary Gregory * Add org.apache.hc.core5.http.HttpRequest.setUri(URI) Contributed by Gary Gregory * org.apache.hc.core5.net.URIBuilder.setHttpHost(HttpHost) Contributed by Gary Gregory * Deprecate constructors in org.apache.hc.core5.http.HttpHost that do not have the scheme argument first in favor of new constructors that do. Contributed by Gary Gregory * Add org.apache.hc.core5.http.HttpHost.create(URI) Contributed by Gary Gregory * Keep the entries in org.apache.hc.core5.http.protocol.UriPatternMatcher#map in insertion order. Contributed by Gary Gregory Release 5.0-BETA5 ------------------- This BETA release fixed a severe regression introduced in 5.0-BETA4. Release 5.0-BETA4 ------------------- This BETA release adds support for Reactive Streams API [http://www.reactive-streams.org/] and fixes compatibility issues with Java 11 new TLS engine as well as a number of defects found since the previous release. This release also includes a redesigned HTTP stress test tool loosely based on Apache Benchmark (AB) command interface with support for HTTP/2. Change Log ------------------- * Resolved compatibility issues with TLS 1.3 engine shipped with Java 11 Contributed by Oleg Kalnichevski * Bug fix: corrected handling of FORCE_HTTP2 version policy by the server-side protocol negotiator Contributed by Oleg Kalnichevski * Redesign of the internal HTTP benchmark loosely based on AB, added support for HTTP/2 stress testing. Contributed by Oleg Kalnichevski * Regression: fixed the response connection control interceptor incorrectly using 'Connection: keep-alive' directive with HTTP/1.0 requests that do not have an explicit 'Connection' request header. Contributed by Oleg Kalnichevski * HTTPCORE-552, HTTPCORE-553, HTTPCORE-554, HTTPCORE-555, HTTPCORE-556, HTTPCORE-557, HTTPCORE-558: added status codes 103, 208, 226, 308, 451, 506, 508, 510 Contributed by sparsick and Georg Berky * HTTPCLIENT-1942: Add support for Reactive Streams Contributed by Ryan Schmitt * Respect CloseMode when closing async TCP sockets Contributed by Ryan Schmitt * Fix typo in message generated by org.apache.hc.core5.io.SocketTimeoutExceptionFactory.toMessage(int). Contributed by Gary Gregory * Update the org.apache.hc.core5.http.protocol.HttpContext.setAttribute(String, Object) API to return the previous value. Contributed by Gary Gregory * Deprecate and rename org.apache.hc.core5.http.EndpointDetails.getSocketTimeout() to getSocketTimeoutMillis(). Contributed by Gary Gregory * Deprecate and rename org.apache.hc.core5.http.MessageHeaders.getAllHeaders() to getHeaders(). Contributed by Gary Gregory * Deprecate and rename org.apache.hc.core5.http.MessageHeaders.getSingleHeaders(String) to getHeader(String). Contributed by Gary Gregory Release 5.0-BETA3 ------------------- This BETA release fixes a number of defects found since the previous release, adds several incremental improvements and improves Javadoc documentation. Change Log ------------------- * Improved information responses (1xx) processing. Contributed by Kirill Usov * Bug fix: fixed AbstractAsyncResponseConsumer to handle null callback parameter Contributed by Oleg Kalnichevski * Bug fix: HTTP stream handlers no longer call #failed event of the associated exchange handler when the message exchange has already been completed. Contributed by Oleg Kalnichevski * Bug fix: fixed NPE caused by null timeout attribute of IOSessionRequest Contributed by Oleg Kalnichevski * Bug fix: fixed incorrect propagation of exception cause in case of an HTTP protocol violation during HTTP protocol version negotiation Contributed by Oleg Kalnichevski * Workaround for misbehaved servers that return HTTP 204 responses with a content Contributed by Alessandro Gherardi * HTTPCORE-510: Avoid an ArithmeticException in AbstractMultiworkerIOReactor by failing earlier by checking ioThreadCount in IOReactorConfig constructor. Contributed by Gary Gregory * HTTPCORE-511: Do not cache result of Runtime.getRuntime().availableProcessors() in IOReactorConfig. Contributed by Gary Gregory * HTTPCORE-509: AVAIL_PROCS is auto-configured based on core count. Contributed by Gary Gregory * HTTPCORE-514: Exceptions defined by HttpCore should clean message strings when built to replace non-printable characters with hex values. Contributed by Gary Gregory * HTTPCORE-517: Allow SecurityManager to stop socket connections. Contributed by Gary Gregory and Paul Thompson * HTTPCORE-537: org.apache.hc.core5.http.message.BasicHttpResponse.toString() prints its code twice and no protocol version. Contributed by Gary Gregory * HTTPCORE-539: Constructing a new FileEntityProducer for a file whose length is greater than 2GB throws an IllegalArgumentException. Contributed by Gary Gregory * HTTPCORE-540: EndpointDetails implements HttpConnectionMetrics. Contributed by Gary Gregory * HTTPCORE-541: Add HttpVersion.ALL for all HTTP versions known to HttpCore. Contributed by Gary Gregory * HTTPCORE-542: Add missing org.apache.hc.core5.http.message.BasicClassicHttpRequest.serialVersionUID Contributed by Gary Gregory * HTTPCORE-544: Add org.apache.hc.core5.http.EndpointDetails.getSocketTimeout() Contributed by Gary Gregory * HTTPCORE-545: Add org.apache.hc.core5.http.message.HeaderGroup.removeHeaders(Header) Contributed by Gary Gregory * HTTPCORE-546: Update org.apache.hc.core5.http.message.HeaderGroup.removeHeader(Header) to return a boolean Contributed by Gary Gregory * HTTPCORE-547: Update org.apache.hc.core5.http.message.HeaderGroup.removeHeaders(String) to return a boolean Contributed by Gary Gregory * HTTPCORE-548: Add missing HttpContext parameter to APIs. Contributed by Gary Gregory * Refactor duplicate messages into a new 0-arg constructor for StreamClosedException. Contributed by Gary Gregory * Refactor timeout APIs to include the actual timeout value. Contributed by Gary Gregory * Refactor timeout APIs to include the scale in the method name; for example 'int getSocketTimeout()' vs. int 'getSocketTimeoutMillis()'. Contributed by Gary Gregory * HTTPCORE-550: When a ParseException is caught and rethrown as an IOException in ChunkDecoder#processFooters(), the IOException does not chain the original ParseException. Contributed by Gary Gregory * Request specific push consumers Contributed by Oleg Kalnichevski * HTTPCLIENT-1927: URLEncodedUtils#parse breaks at double quotes when parsing unquoted values Contributed by Oleg Kalnichevski * HTTPCORE-528: SSL I/O session spins upon abnormal connection closure by the opposite endpoint. Contributed by Oleg Kalnichevski Release 5.0-BETA2 ------------------- This BETA release fixes a number of defects found since the previous release and adds several incremental improvements. Notable changes and features included in the 5.0 series: * Support for HTTP/2 protocol and conformance to requirements and recommendations of the latest HTTP/2 protocol specification (RFC 7540, RFC 7541) Supported features: ** HPACK header compression ** stream multiplexing (client and server) ** flow control ** response push (client and server) ** message trailers ** expect-continue handshake ** connection validation (ping) ** application-layer protocol negotiation (ALPN) on Java 9+ ** TLS 1.2 security features Features out of scope for 5.0 release: ** padding of outgoing frames ** stream priority ** plain connection HTTP/1.1 upgrade ** CONNECT method * Improved conformance to requirements and recommendations of the latest HTTP/1.1 protocol specification (RFC 7230, RFC 7231) * New asynchronous HTTP transport APIs consistent for both HTTP/1.1 and HTTP/2 transport. * Redesigned I/O reactor APIs and improved NIO based reactor implementation for a greater performance and scalability. * Support for server-side request filters for classic and asynchronous server implementations. Request filters could be used to implement cross-cutting protocol aspects such as the 'expect-continue' handshaking and user authentication / authorization. * Redesigned connection pool implementation with strict connection limit guarantees. The connection pool is expected to have a better performance under higher concurrency due to reduced global pool lock contention. * New connection pool implementation with lax connection limit guarantees and better performance under higher concurrency due to absence of a global pool lock. * Package name space changed to 'org.apache.hc.core5' * Maven group id changed to 'org.apache.httpcomponents.core5' HttpCore 5.0 releases can be co-located with earlier versions. The 5.0 APIs are considered feature complete and are not expected to undergo any major changes anymore. The focus of development is now shifting to API polish, code stabilisation and documentation improvements. Change Log ------------------- * HTTP/2 multiplexed requester to support cancellation of individual message exchanges without termination of the underlying I/O session. Contributed by Oleg Kalnichevski * Bug fix: corrected handling of GOAWAY frames by HTTP/2 stream multiplexer Contributed by Oleg Kalnichevski * Bug fix: prevent a tight loop in non-blocking SSL I/O sessions due to a HTTP/2 frame fragment in the SSL input buffer. Contributed by Oleg Kalnichevski * Bug fix: incorrect handing of premature I/O session termination by the server-side application protocol negotiator. Contributed by Oleg Kalnichevski * Strict / lax ALPN handshake mode for HTTP/2 multiplexing requester. Contributed by Oleg Kalnichevski * HTTPCORE-496: Add API org.apache.http.protocol.UriPatternMatcher.entrySet(). Contributed by Gary Gregory * HTTPCORE-499 Make interface Header extend NameValuePair Contributed by Gary Gregory * HTTPCORE-501 org.apache.http.client.utils.URLEncodedUtils.parse() should return a new ArrayList when there are no query parameters. Contributed by Gary Gregory Release 5.0-BETA1 ------------------- This is a major release that renders HttpCore API incompatible with the stable 4.x branch and upgrades HTTP/1.1 and HTTP/2 protocol conformance to the requirements and recommendations of the latest protocol specification. Notable new features in this release: * New HTTP/2 requester optimized for multiplexed execution of requests. Notable changes and features included in the 5.0 series: * Support for HTTP/2 protocol and conformance to requirements and recommendations of the latest HTTP/2 protocol specification (RFC 7540, RFC 7541) Supported features: ** HPACK header compression ** stream multiplexing (client and server) ** flow control ** response push (client and server) ** message trailers ** expect-continue handshake ** connection validation (ping) ** application-layer protocol negotiation (ALPN) on Java 9+ ** TLS 1.2 security features Features out of scope for 5.0 release: ** padding of outgoing frames ** stream priority ** plain connection HTTP/1.1 upgrade ** CONNECT method * Improved conformance to requirements and recommendations of the latest HTTP/1.1 protocol specification (RFC 7230, RFC 7231) * New asynchronous HTTP transport APIs consistent for both HTTP/1.1 and HTTP/2 transport. * Redesigned I/O reactor APIs and improved NIO based reactor implementation for a greater performance and scalability. * Support for server-side request filters for classic and asynchronous server implementations. Request filters could be used to implement cross-cutting protocol aspects such as the 'expect-continue' handshaking and user authentication / authorization. * Redesigned connection pool implementation with strict connection limit guarantees. The connection pool is expected to have a better performance under higher concurrency due to reduced global pool lock contention. * New connection pool implementation with lax connection limit guarantees and better performance under higher concurrency due to absence of a global pool lock. * Package name space changed to 'org.apache.hc.core5' * Maven group id changed to 'org.apache.httpcomponents.core5' HttpCore 5.0 releases can be co-located with earlier versions. The 5.0 APIs are considered feature complete and are not expected to undergo any major changes anymore. The focus of development is now shifting to API polish, code stabilisation and documentation improvements. Change Log ------------------- * HTTP/2 multiplexing requester. Contributed by Oleg Kalnichevski * Compatibility with Java 9 (tested with Oracle JDK 9.0.1). Contributed by Oleg Kalnichevski * Fixed handling of relative request paths in BasicHttpRequest. Contributed by Oleg Kalnichevski * HTTPCORE-494: Add image constants to ContentType. Contributed by Gary Gregory * HTTPCORE-486: set a time limit on processing of pending I/O events by I/O reactors. Contributed by xiaohu-zhang Release 5.0-ALPHA4 ------------------- This is a major release that renders HttpCore API incompatible with the stable 4.x branch and upgrades HTTP/1.1 and HTTP/2 protocol conformance to the requirements and recommendations of the latest protocol specification. Notable changes and features included in the 5.0 series are: * Support for HTTP/2 protocol and conformance to requirements and recommendations of the latest HTTP/2 protocol specification (RFC 7540, RFC 7541) Supported features: ** HPACK header compression ** stream multiplexing (client and server) ** flow control ** response push (client and server) ** message trailers ** expect-continue handshake ** connection validation (ping) ** application-layer protocol negotiation (ALPN) on Java 1.9+ ** TLS 1.2 security features Features out of scope for 5.0 release: ** padding of outgoing frames ** stream priority ** plain connection HTTP/1.1 upgrade ** CONNECT method * Improved conformance to requirements and recommendations of the latest HTTP/1.1 protocol specification (RFC 7230, RFC 7231) * New asynchronous HTTP transport APIs consistent for both HTTP/1.1 and HTTP/2 transport. * Redesigned I/O reactor APIs and improved NIO based reactor implementation for a greater performance and scalability. * Support for server-side request filters for classic and asynchronous server implementations. Request filters could be used to implement cross-cutting protocol aspects such as the 'expect-continue' handshaking and user authentication / authorization. * Redesigned connection pool implementation with strict connection limit guarantees. The connection pool is expected to have a better performance under higher concurrency due to reduced global pool lock contention. * New connection pool implementation with lax connection limit guarantees and better performance under higher concurrency due to absence of a global pool lock. * Package name space changed to 'org.apache.hc.core5' * Maven group id changed to 'org.apache.httpcomponents.core5' HttpCore 5.0 releases can be co-located with earlier versions. Please note that at this point 5.0 APIs are considered API experimental and unstable and are expected to change in the coming releases without providing a migration path. Change Log ------------------- * HTTPCORE-485: Reduced memory footprint of non-blocking SSL sessions by 25%. Contributed by Todor Bonchev <31352118+todorbonchev at users.noreply.github.com> * Fixed propagation of entity details of incoming HTTP/1.1 messages by non-blocking HTTP/1.1 stream duplexer Contributed by Oleg Kalnichevski * Configurable connection pool concurrency policy Contributed by Oleg Kalnichevski * HTTPCORE-390: Connection pool implementation with higher concurrency characteristics and lax total and per route max guarantees. Contributed by Oleg Kalnichevski * Request filters for classic and asynchronous server-side protocol handlers Contributed by Oleg Kalnichevski * Improved handling of 1xx status messages by the classic transport; server expectation (expect-continue) handshake can now be implemented as a cross-cutting aspect by both the classic and asynchronous transports Contributed by Oleg Kalnichevski * Fixed bug in the classic (blocking) HTTP requester causing incorrect release of connections in case a response message has no entity (such as 204) Contributed by Oleg Kalnichevski * HTTPCORE-454: use Timeout class to represent timeout values Contributed by Oleg Kalnichevski * Made HTTP/2 data window update precede sending of the DATA frame to the opposite endpoint. In some extreme circumstances the opposite endpoint can send back a WINDOW_UPDATE frame in-between of these two operation causing the data window value to exceed its maximum valid value Contributed by Oleg Kalnichevski * I/O interest flag in IOSessionImpl requires synchronization instead of atomic operation in order to avoid race condition Contributed by Oleg Kalnichevski * HTTPCORE-472: Fixed problem with blocking message parsers incorrectly throwing "Maximum line length limit exceeded" exception in some corner cases Contributed by Oleg Kalnichevski * Improved I/O reactor APIs with a smaller public API footprint Contributed by Oleg Kalnichevski * Rewrite of I/O reactor internal channel management; more efficient handling of outgoing connection requests Contributed by Oleg Kalnichevski * Fixed delineation of 200 status message in response to CONNECT method Contributed by Oleg Kalnichevski * HTTPCORE-468: Allow HttpAsyncService subclasses to customize the HTTP status code. Contributed by Gary Gregory * HTTPCORE-471: Add APIs URIBuilder.localhost() and setHost(InetAddress) Contributed by Gary Gregory * HTTPCORE-466: Round out the SslContextBuilder by adding missing APIs. Contributed by Gary Gregory Release 5.0-ALPHA3 ------------------- This is a major release that renders HttpCore API incompatible with the stable 4.x branch and upgrades HTTP/1.1 and HTTP/2 protocol conformance to the requirements and recommendations of the latest protocol specification. Notable changes and features included in the 5.0 series are: * Partial support for HTTP/2 protocol and conformance to requirements and recommendations of the latest HTTP/2 protocol specification (RFC 7540, RFC 7541) Supported features: ** HPACK header compression ** stream multiplexing (client and server) ** flow control ** response push (client and server) ** message trailers ** expect-continue handshake ** connection validation (ping) ** application-layer protocol negotiation (ALPN) on Java 1.9+ ** TLS 1.2 security features Unsupported features: ** padding of outgoing frames ** stream priority ** plain connection HTTP/1.1 upgrade ** CONNECT method * Improved conformance to requirements and recommendations of the latest HTTP/1.1 protocol specification (RFC 7230, RFC 7231) * New asynchronous HTTP transport APIs consistent for both HTTP/1.1 and HTTP/2 transport. * Improved HTTP/1.1 and HTTP/2 requester and server implementations. * Redesigned connection pool implementation with reduced pool lock contention. * Plug-in mechanism for HTTP/1.1 protocol switch / upgrade. * Package name space changed to 'org.apache.hc.core5' * Maven group id changed to 'org.apache.httpcomponents.core5' HttpCore 5.0 releases can be co-located with earlier versions. Please note that as of 5.0 HttpCore requires Java 1.7 or newer. Please note that at this point 5.0 APIs are considered API experimental and unstable and are expected to change in the coming releases without providing a migration path. Change Log ------------------- * Support for HTTP protocol version negotiation. Contributed by Oleg Kalnichevski * Support TLS ALPN and disable TLS renegotiation via reflection on Java 1.9+. Contributed by Oleg Kalnichevski * HTTPCORE-452: Add a UriRegexMatcher. Contributed by Gary Gregory * HTTPCORE-453: ServerBootstrap should traverse handler map in insertion order. Contributed by Gary Gregory * HTTPCORE-451: Add a TimeValue class to wrap a long and a TimeUnit. Contributed by Gary Gregory * Fixed HTTP/2 server-side response message delineation when replying to HEAD requests. Contributed by Oleg Kalnichevski * Rewrite of non-blocking HTTP/1.1 connection persistence and re-use code. Contributed by Oleg Kalnichevski * API for graceful shutdown of processes or endpoints Contributed by Oleg Kalnichevski * HTTPCORE-450: Add a Provider parameter in SSLContextBuilder. Contributed by lujianbo <387852424 at qq dot com>, Gary Gregory * Improved handling of premature HTTP/1.1 stream termination by non-blocking protocol handlers. Contributed by Oleg Kalnichevski * Non-blocking connection initializer to support multi-homed remote endpoints. Contributed by Oleg Kalnichevski * HTTPCORE-458: Validate port values Contributed by Gary Gregory Release 5.0-ALPHA2 ------------------- This is a major release that renders HttpCore API incompatible with the stable 4.x branch and upgrades HTTP/1.1 and HTTP/2 protocol conformance to the requirements and recommendations of the latest protocol specification. Notable changes and features included in the 5.0 series are: * Partial support for HTTP/2 protocol and partial conformance to requirements and recommendations of the latest HTTP/2 protocol specification (RFC 7540, RFC 7541) Supported features: ** HPACK header compression ** stream multiplexing (client and server) ** flow control ** response push (client and server) ** message trailers ** expect-continue handshake ** connection validation (ping) ** TLS 1.2 features Unsupported features: ** application-layer protocol negotiation (ALPN) ** padding of outgoing frames ** stream priority ** plain connection HTTP/1.1 upgrade ** CONNECT method ** TLS renegotiation and compression cannot be disabled with Java 1.7 JSSE APIs * Improved conformance to requirements and recommendations of the latest HTTP/1.1 protocol specification (RFC 7230, RFC 7231) * New asynchronous HTTP transport APIs consistent for both HTTP/1.1 and HTTP/2 transport. * Improved HTTP/1.1 and HTTP/2 requester and server implementations. * Redesigned connection pool implementation with reduced pool lock contention. * Support for HTTP/1.1 protocol switch / upgrade. * Package name space changed to 'org.apache.hc.core5' * Maven group id changed to 'org.apache.httpcomponents.core5' HttpCore 5.0 releases can be co-located with earlier versions. Please note that as of 5.0 HttpCore requires Java 1.7 or newer. Please note that at this point 5.0 APIs are considered API experimental and unstable and are expected to change in the coming releases without providing a migration path. Change Log ------------------- * HTTPCORE-424: added ConnPool policy parameter to control connection re-use policy. Contributed by Oleg Kalnichevski * HTTPCORE-413: Minimal chunk size can now be specified as H1Config#chunkSizeHint. The value is treated as a hint. Both classic and NIO attempt to apply it when sending / receiving messages without providing a strict guarantee. Contributed by Oleg Kalnichevski * HTTPCORE-429: NIO connection pool incorrectly reports the number of pending connections per individual route. Contributed by Oleg Kalnichevski * HTTPCORE-432: HTTP/2 support. Contributed by Oleg Kalnichevski * HTTPCORE-418: Add a HttpHost constructor for hostname and scheme. Based on contribution by Joshua Hendrickson * HTTPCORE-436: Port tests from Apache Commons Logging to Apache Log4j 2. Contributed by Gary Gregory * HTTPCORE-434: Corrected handling of HEAD responses without payload headers. Contributed by Oleg Kalnichevski * HTTPCORE-427: SSL I/O sessions to use a finite timeout for SSL shutdown handshake when closing. Contributed by Oleg Kalnichevski * HTTPCORE-422: HttpAsyncResponseConsumer#onEntityEnclosed is triggered for HEAD responses. Contributed by Oleg Kalnichevski * HTTPCORE-420: Blocking HttpServer does not close out persistent connection when shut down. Contributed by Oleg Kalnichevski * HTTPCORE-417: SSLIOSession#writePlain incorrectly handles closed channel condition leading to an infinite loop. Contributed by Oleg Kalnichevski * HTTPCORE-416: DefaultConnectingIOReactor to treat failure to open a channel for a new outgoing connection as a recoverable request failure. Contributed by Oleg Kalnichevski Release 5.0-ALPHA1 ------------------- This is a major release that renders HttpCore API incompatible with the stable 4.x branch and upgrades HTTP/1.1 protocol conformance to the requirements and recommendations of the latest protocol specification. This release lays the foundation for transition to HTTP/2 as the primary transport protocol in the future releases. Notable changes and features included in the 5.0 series are: * Improved conformance to requirements and recommendations of the latest HTTP/1.1 protocol specification (RFC 7230, RFC 7231) * Blocking I/O and NIO HTTP transport implementation has been folded into one module * Package name space changed to 'org.apache.hc.core5' * Maven group id changed to 'org.apache.httpcomponents.core5' HttpCore 5.0 releases can be co-located with earlier versions. Please note that as of 5.0 HttpCore requires Java 1.7 or newer. Please note that at this point 5.0 APIs are considered API experimental and unstable and are expected to change in the coming releases without providing a migration path. Change Log ------------------- * PATCH method support Contributed by Ömer Özkan * HTTPCORE-412: Support for trailing headers in outgoing HTTP messages Based on contribution by Daneel Yaitskov * HTTPCORE-411, RFC 7320, RFC 7321: Made Expect-Continue handshake compliant with the spec Contributed by Oleg Kalnichevski * Fixed handling of pipelined HEAD requests Contributed by Oleg Kalnichevski * HTTPCORE-409: NIO HttpServer does not shutdown listener ExecutorService Contributed by Hiranya Jayathilaka * HTTPCORE-406: PAX-EXAM tests with an embedded HTTP server Contributed by Benson Margulies * RFC 7230: increased the default max number of concurrent connection for the same route from 2 to 5 Contributed by Oleg Kalnichevski * RFC 7230: improved compliance of the default connection re-use strategy Contributed by Oleg Kalnichevski * RFC 7230: reject HTTP/1.1 requests with absent Host header or multiple Host headers Contributed by Oleg Kalnichevski * RFC 7230: permit some empty lines before message head Contributed by Oleg Kalnichevski * RFC 7230: disallow multiple Content-Length headers / header elements Contributed by Oleg Kalnichevski * RFC 7230: reject headers containing whitespaces between the header field name and colon in strict mode (when parsing request messages on the server-side) Contributed by Oleg Kalnichevski * RFC 7230: reject messages with incompatible major protocol version Contributed by Oleg Kalnichevski * HTTP/2: added immutable MessageHead interface common for both HTTP/1.1 and HTTP/2 messages Contributed by Oleg Kalnichevski * HTTPCORE-396: PrivateKeyStrategy does not work with NIO SSL Contributed by Oleg Kalnichevski * RFC 7230: it is legal for any request method to enclose an entity; revised message delineation logic; removed HttpEntityEnclosingRequest interface; fixes HTTPCORE-318, HTTPCORE-380 Contributed by Oleg Kalnichevski * Use CharSequence instead of CharArrayBuffer for header element parsing Contributed by Oleg Kalnichevski