Revision 1 vom 2018-07-14 21:20:58

Nachricht löschen

Lilly HTTP

Auf Lilly wird vom Apache ein ModPerl-Modul genutzt, um verschiedene Aufgaben durchzuführen.

Das Modul wird in der httpd.conf über die Direktive PerlTransHandler Apache::PingTrans geladen.

Umleitung auf SSL

Über die RequireSSL-Variable kann eingestellt werden, welche Anfragen verschlüsselt werden sollen:

# Conditionally redirect https to http

# Variables that control https redirection:
# RequireSSL
#   never     = https requests are unconditionally redirected to http
#   no        = https is allowed if the referer was required to be https
#   dont_care = no redirection is performed
#   external  = redirect to https if the connection is from an external IP
#   always    = http requests are unconditionally redirected to https
# InternalIP  = a perl regexp that matches internal IP addresses
# DontCareSSL = a perl regexp that matches URLs that may be accessed with
#               either http or https.

# Note that these variables are only relevant at the server and
# location level.  There is no point in changing them in <directory>
# or <file> sections.  Also, RequireSSL is automatically forced to at
# least 'external' for access-methods other than GET/HEAD and POST.

PerlTransHandler Apache::PingTrans
PerlSetVar RequireSSL no
PerlSetVar InternalIP "^(127\.|83\.97\.4[0-7])"
PerlSetVar DontCareSSL "\.(css|gif|jpg)$"
PerlSetVar SecureHost "secure.ping.de"

# Select content based on internal or external IP
PerlHeaderParserHandler Apache::PingIntExtSelect
PerlSetVar IntExtSelect "/index.html => /index.html : /index-ssl.html, \
       /preview/index.html => /preview/index.html : /preview/index-ssl.html"

# Scripts that do their own password checking but need an SSL
# connection when accessed from outside PINGs IP range
<Location /perl/auth>
  PerlSetVar RequireSSL always
</Location>
<Location /cgi-bin/auth>
  PerlSetVar RequireSSL always
</Location>