summaryrefslogtreecommitdiffstats
path: root/install/conf
diff options
context:
space:
mode:
authorPetr Vobornik <pvoborni@redhat.com>2013-06-24 17:44:15 +0200
committerMartin Kosek <mkosek@redhat.com>2013-06-26 15:02:47 +0200
commit418185e8a02f25a6c08a91682af18629d91f9844 (patch)
treed2872943601d24a238a7492d890f7cd9ff31d53e /install/conf
parent41501cd167640d71203f1d8f432c513143ec10c9 (diff)
downloadfreeipa.git-418185e8a02f25a6c08a91682af18629d91f9844.tar.gz
freeipa.git-418185e8a02f25a6c08a91682af18629d91f9844.tar.xz
freeipa.git-418185e8a02f25a6c08a91682af18629d91f9844.zip
Do not redirect to https in /ipa/ui on non-HTML files
Those resources are needed by page which has to use http(browser config) prior to acceptance of CA cert. https://fedorahosted.org/freeipa/ticket/3748
Diffstat (limited to 'install/conf')
-rw-r--r--install/conf/ipa-rewrite.conf3
1 files changed, 2 insertions, 1 deletions
diff --git a/install/conf/ipa-rewrite.conf b/install/conf/ipa-rewrite.conf
index 552682b0..37661b82 100644
--- a/install/conf/ipa-rewrite.conf
+++ b/install/conf/ipa-rewrite.conf
@@ -1,4 +1,4 @@
-# VERSION 5 - DO NOT REMOVE THIS LINE
+# VERSION 6 - DO NOT REMOVE THIS LINE
RewriteEngine on
@@ -15,6 +15,7 @@ RewriteRule ^/ipa/(.*) http://$FQDN/ipa/$$1 [L,R=301]
# configuration.
RewriteCond %{SERVER_PORT} !^443$$
RewriteCond %{REQUEST_URI} !^/ipa/(errors|config|crl)
+RewriteCond %{REQUEST_URI} !^/ipa/[^\?]+(\.js|\.css|\.png|\.gif|\.ico|\.woff|\.svg|\.ttf|\.eot)$$
RewriteRule ^/ipa/(.*) https://$FQDN/ipa/$$1 [L,R=301,NC]
# Rewrite for plugin index, make it like it's a static file