Unterschiede zwischen den Revisionen 1 und 2
⇤ ← Revision 1 vom 2018-07-14 21:20:58 →
Größe: 1970
Autor: DanielHess
Kommentar:
← Revision 2 vom 2024-01-31 22:09:04 → ⇥
Größe: 0
Autor: DanielHess
Kommentar: :-O
Gelöschter Text ist auf diese Art markiert. Hinzugefügter Text ist auf diese Art markiert.
Zeile 1: Zeile 1:
= Lilly HTTP =
Auf Lilly wird vom Apache ein ModPerl-Modul genutzt, um verschiedene Aufgaben durchzuführen.

Das Modul wird in der httpd.conf über die Direktive {{{PerlTransHandler Apache::PingTrans}}} geladen.

== Umleitung auf SSL ==
Über die {{{RequireSSL}}}-Variable kann eingestellt werden, welche Anfragen verschlüsselt werden sollen:

{{{
# Conditionally redirect https to http

# Variables that control https redirection:
# RequireSSL
# never = https requests are unconditionally redirected to http
# no = https is allowed if the referer was required to be https
# dont_care = no redirection is performed
# external = redirect to https if the connection is from an external IP
# always = http requests are unconditionally redirected to https
# InternalIP = a perl regexp that matches internal IP addresses
# DontCareSSL = a perl regexp that matches URLs that may be accessed with
# either http or https.

# Note that these variables are only relevant at the server and
# location level. There is no point in changing them in <directory>
# or <file> sections. Also, RequireSSL is automatically forced to at
# least 'external' for access-methods other than GET/HEAD and POST.

PerlTransHandler Apache::PingTrans
PerlSetVar RequireSSL no
PerlSetVar InternalIP "^(127\.|83\.97\.4[0-7])"
PerlSetVar DontCareSSL "\.(css|gif|jpg)$"
PerlSetVar SecureHost "secure.ping.de"

# Select content based on internal or external IP
PerlHeaderParserHandler Apache::PingIntExtSelect
PerlSetVar IntExtSelect "/index.html => /index.html : /index-ssl.html, \
       /preview/index.html => /preview/index.html : /preview/index-ssl.html"

# Scripts that do their own password checking but need an SSL
# connection when accessed from outside PINGs IP range
<Location /perl/auth>
  PerlSetVar RequireSSL always
</Location>
<Location /cgi-bin/auth>
  PerlSetVar RequireSSL always
</Location>
}}}