summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorTomas Babej <tbabej@redhat.com>2013-06-20 10:55:39 +0200
committerMartin Kosek <mkosek@redhat.com>2013-06-20 12:56:01 +0200
commit6118b73fab1bfbbbaf0ce10ebb48fb3864b90a5e (patch)
treea0783083810103c18f66906bb955ea0ca452e8c6
parentcaf40e76cdca806be1849f70a81363289a96d454 (diff)
downloadfreeipa-6118b73fab1bfbbbaf0ce10ebb48fb3864b90a5e.tar.gz
freeipa-6118b73fab1bfbbbaf0ce10ebb48fb3864b90a5e.tar.xz
freeipa-6118b73fab1bfbbbaf0ce10ebb48fb3864b90a5e.zip
Do not redirect ipa/crl to HTTPS
https://fedorahosted.org/freeipa/ticket/3713
-rw-r--r--install/conf/ipa-rewrite.conf4
1 files changed, 2 insertions, 2 deletions
diff --git a/install/conf/ipa-rewrite.conf b/install/conf/ipa-rewrite.conf
index b22caa1df..552682b05 100644
--- a/install/conf/ipa-rewrite.conf
+++ b/install/conf/ipa-rewrite.conf
@@ -1,4 +1,4 @@
-# VERSION 4 - DO NOT REMOVE THIS LINE
+# VERSION 5 - DO NOT REMOVE THIS LINE
RewriteEngine on
@@ -14,7 +14,7 @@ RewriteRule ^/ipa/(.*) http://$FQDN/ipa/$$1 [L,R=301]
# Redirect to the secure port if not displaying an error or retrieving
# configuration.
RewriteCond %{SERVER_PORT} !^443$$
-RewriteCond %{REQUEST_URI} !^/ipa/(errors|config)
+RewriteCond %{REQUEST_URI} !^/ipa/(errors|config|crl)
RewriteRule ^/ipa/(.*) https://$FQDN/ipa/$$1 [L,R=301,NC]
# Rewrite for plugin index, make it like it's a static file