MESSAGE
| DATE | 2020-05-11 |
| FROM | Ruben Safir
|
| SUBJECT | Subject: [Hangout - NYLXS] Fwd: Re: turning authentication off in apache for
|
-------- Forwarded Message --------
Path:
reader2.panix.com!panix!goblin2!goblin.stu.neva.ru!aioe.org!eternal-september.org!feeder.eternal-september.org!reader01.eternal-september.org!.POSTED!not-for-mail
From: tom
Newsgroups: comp.infosystems.www.servers.unix
Subject: Re: turning authentication off in apache for a sub location
Date: Fri, 8 May 2020 15:41:26 -0700
Organization: none
Lines: 91
Message-ID: <20200508154126.480901dd-at-viridi>
References:
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Injection-Info: reader02.eternal-september.org;
posting-host="068269677fe3de3dd49566d4e2bfb3cb"; logging-data="534";
mail-complaints-to="abuse-at-eternal-september.org";
posting-account="U2FsdGVkX1/DlVNuAIIDG68fs1JeNKDz"
Cancel-Lock: sha1:XDWDF/028Hnig0U3LH+pXROOsZk=
X-Newsreader: Claws Mail 3.17.3 (GTK+ 2.24.32; x86_64-pc-linux-gnu)
Xref: panix comp.infosystems.www.servers.unix:123698
On Wed, 6 May 2020 09:58:48 -0400
Popping Mad wrote:
> I am trying to turn off the authentication for a subdirectory that is
> protected by authentication
>
> admin.bios-living.com
>
> is protected as a virtual domain
>
>
> ServerName admin.bios-living.com
> ServerAdmin ruben-at-mrbrklyn.com
> DocumentRoot "/usr/local/apache2/htdocs/admin"
> Alias "/.well-known/acme-challenge/"
> "/usr/local/apache2/htdocs/tokens/" # SSLEngine on
> # SSLOptions +StrictRequire
> #
> SSLCertificateFile /var/lib/ca-certificates/pem/bios-living.com.crt
> # SSLCertificateKeyFile /etc/ssl/private/bios-living.com.key
> Header set Cache-Control "no-store, must-revalidate" Header set
> Pragma "no-cache" Header set Expires "0"
>
> Options Indexes
>
> SetHandler perl-script
> PerlResponseHandler Embperl
>
>
> AuthType basic
> AuthName "admin"
> AuthBasicProvider file
> AuthUserFile "/usr/local/apache2/conf/admin.auth"
> Require valid-user
> Options +Indexes +FollowSymLinks
>
>
>
> Now I need to carve out a resource for letsencrypt without
> authentication and without ssl
>
> Nothing seems to work
>
> Alias "/.well-known/acme-challenge/"
> "/usr/local/apache2/htdocs/tokens/"
>
>
>
> Require all granted
>
>
>
>
> Require all granted
>
>
>
Generally what I do is map /.well-known/ to a common directory on the
system, such as /var/www/well-known that was the same well-known can be
used across many virtual hosts. Ounce you have that setup you can use a
very simple implementation of ACME such as dehydrated.sh
https://github.com/dehydrated-io/dehydrated tell it to put challenge
files in /var/www/well-known/ and setup a cron job for it (see
documentation).
That way you can even manage (at least with NGINX) the entire wellknown
directly with separate permissions and a simple include
snippers/acme.conf for sites. I'm sure you could re-implement similar
functionality in Apache.
Hope this helps
Tom
--
____________________________________ / An idea is not responsible for the \
\ people who believe in it. /
------------------------------------ \
\
/\ /\ //\\_//\\ ____
\_ _/ / /
/ * * \ /^^^]
\_\O/_/ [ ]
/ \_ [ /
\ \_ / /
[ [ / \/ _/
_[ [ \ /_/
_______________________________________________
Hangout mailing list
Hangout-at-nylxs.com
http://lists.mrbrklyn.com/mailman/listinfo/hangout
|
|
