version 1.45, 2018/11/01 18:12:56
|
version 1.49, 2020/01/06 15:36:49
|
Line 48 http://www.lon-capa.org/
|
Line 48 http://www.lon-capa.org/
|
<target dist='suse9.2 suse9.3 sles9'>/etc/httpd/httpd.conf</target> |
<target dist='suse9.2 suse9.3 sles9'>/etc/httpd/httpd.conf</target> |
<target dist='sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>/etc/apache2/default-server.conf</target> |
<target dist='sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>/etc/apache2/default-server.conf</target> |
<target dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12'>/etc/apache2/sites-available/loncapa</target> |
<target dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12'>/etc/apache2/sites-available/loncapa</target> |
<target dist='ubuntu14 ubuntu16 ubuntu18'>/etc/apache2/conf-available/loncapa</target> |
<target dist='ubuntu14 ubuntu16 ubuntu18 ubuntu20'>/etc/apache2/conf-available/loncapa</target> |
<note>This is for Apache 1.X for Red Hat 4ES, Fedora 2, 3 and 4, SusSE 9.2 and 9.3, and SLES 9 distributions. This is for Apache 2.X for Fedora 5, Red Hat 5, CentOS 5, Scientific Linux 5, SuSE 10.1, SLES 10, Debian 5, Ubuntu LTS 8 and later distributions</note> |
<note>This is for Apache 1.X for Red Hat 4ES, Fedora 2, 3 and 4, SusSE 9.2 and 9.3, and SLES 9 distributions. This is for Apache 2.X for Fedora 5, Red Hat 5, CentOS 5, Scientific Linux 5, Oracle Linux 5, SuSE 10.1, SLES 10, Debian 5, Ubuntu LTS 8 and later distributions</note> |
<dependencies dist='default'> |
<dependencies dist='default'> |
/etc/httpd/conf/httpd.conf |
/etc/httpd/conf/httpd.conf |
</dependencies> |
</dependencies> |
Line 59 http://www.lon-capa.org/
|
Line 59 http://www.lon-capa.org/
|
<dependencies dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12'> |
<dependencies dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12'> |
/etc/apache2/sites-available/loncapa |
/etc/apache2/sites-available/loncapa |
</dependencies> |
</dependencies> |
<dependencies dist='ubuntu14 ubuntu16 ubuntu18'> |
<dependencies dist='ubuntu14 ubuntu16 ubuntu18 ubuntu20'> |
/etc/apache2/conf-available/loncapa |
/etc/apache2/conf-available/loncapa |
</dependencies> |
</dependencies> |
<dependencies dist='sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'> |
<dependencies dist='sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'> |
Line 197 else {
|
Line 197 else {
|
'of requests for http:// to https:// '."\n".'or:'."\n".$rewrite_off. |
'of requests for http:// to https:// '."\n".'or:'."\n".$rewrite_off. |
' - the file used to disable such rewriting'."\n\n". |
' - the file used to disable such rewriting'."\n\n". |
'This may be because '. $curr_rewrite.' has been '. |
'This may be because '. $curr_rewrite.' has been '. |
'previously customized,'."\n".' or it may be because of a change '. |
'previously customized,'."\n".'or it may be because of a change '. |
'to the files in '.$rewrite_dir."\n"); |
'to the files in '.$rewrite_dir."\n"); |
if (open(my $fh,'<',$curr_rewrite)) { |
if (open(my $fh,'<',$curr_rewrite)) { |
while(<$fh>) { |
while(<$fh>) { |
Line 227 else {
|
Line 227 else {
|
} |
} |
my $hostname = Sys::Hostname::FQDN::fqdn(); |
my $hostname = Sys::Hostname::FQDN::fqdn(); |
my $hostip = Socket::inet_ntoa(scalar(gethostbyname($hostname)) || 'localhost'); |
my $hostip = Socket::inet_ntoa(scalar(gethostbyname($hostname)) || 'localhost'); |
my @expected = ('RewriteRule ^/adm/wrapper/ext/(?!https:\/\/) http://%{HTTP_HOST}%{REQUEST_URI} [R,L,NE]', |
my @expected = ('RewriteCond %{REQUEST_URI} ^/adm/wrapper/ext/(?!https:\/\/)', |
|
'RewriteCond %{QUERY_STRING} (^|&(|amp;))usehttp=1($|&)', |
|
'RewriteRule ^/adm/wrapper/ext/(?!https:\/\/) http://%{HTTP_HOST}%{REQUEST_URI} [R,L,NE]', |
'RewriteCond %{REMOTE_ADDR} 127.0.0.1', |
'RewriteCond %{REMOTE_ADDR} 127.0.0.1', |
'RewriteRule (.*) - [L]'); |
'RewriteRule (.*) - [L]'); |
if (($hostip ne '') && ($hostip ne '127.0.0.1')) { |
if (($hostip ne '') && ($hostip ne '127.0.0.1')) { |
Line 235 else {
|
Line 237 else {
|
'RewriteRule (.*) - [L]')); |
'RewriteRule (.*) - [L]')); |
} |
} |
push(@expected,('RewriteCond %{REQUEST_URI} ^/public/.*/syllabus$', |
push(@expected,('RewriteCond %{REQUEST_URI} ^/public/.*/syllabus$', |
'RewriteCond %{QUERY_STRING} (^|&)usehttp=1($|&)', |
'RewriteCond %{QUERY_STRING} (^|&(|amp;))usehttp=1($|&)', |
'RewriteRule ^/public/.*/syllabus$ http://%{HTTP_HOST}%{REQUEST_URI} [R,L,NE]')); |
'RewriteRule ^/public/.*/syllabus$ http://%{HTTP_HOST}%{REQUEST_URI} [R,L,NE]')); |
if (-d $ssldir) { |
if (-d $ssldir) { |
my @rewrites; |
my @rewrites; |
Line 297 else {
|
Line 299 else {
|
} |
} |
} |
} |
unless ($gotrules) { |
unless ($gotrules) { |
print('**** WARNING **** '.$curr_rewrite.' is currently set so rewrites '. |
print('**** WARNING **** '."\n".$curr_rewrite.' is currently set so rewrites '. |
'of http to https are enabled for most URLs.'."\n". |
'of http to https are enabled for most URLs.'."\n". |
'It is recommended to also set rewrites from https to http '. |
'Unless your Apache configuration includes Strict-Transport-Security '. |
'in a file in '.$ssldir.' by including the following:'."\n". |
'(with max-age > 0), it is recommended to also set rewrites from https to http '. |
|
'for specific URLs in a file in '.$ssldir.' by including the following:'."\n". |
"<IfModule mod_rewrite.c>\n".' '. |
"<IfModule mod_rewrite.c>\n".' '. |
join("\n ",@expected)."\n". |
join("\n ",@expected)."\n". |
"</IfModule>\n"); |
"</IfModule>\n"); |