URL: https://github.com/freeipa/freeipa/pull/1695 Author: rcritten Title: #1695: Redirect CRL requests to the http port, not the https port Action: opened
PR body: """ https://pagure.io/freeipa/issue/7433 Signed-off-by: Rob Crittenden <rcrit...@redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1695/head:pr1695 git checkout pr1695
From 74bf4057e7840993c402a0c43ea46a210ff55f83 Mon Sep 17 00:00:00 2001 From: Rob Crittenden <rcrit...@redhat.com> Date: Wed, 14 Mar 2018 18:08:59 -0400 Subject: [PATCH] Redirect CRL requests to the http port, not the https port https://pagure.io/freeipa/issue/7433 Signed-off-by: Rob Crittenden <rcrit...@redhat.com> --- install/share/ipa-pki-proxy.conf.template | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/install/share/ipa-pki-proxy.conf.template b/install/share/ipa-pki-proxy.conf.template index 4455e11eab..04460197ec 100644 --- a/install/share/ipa-pki-proxy.conf.template +++ b/install/share/ipa-pki-proxy.conf.template @@ -1,4 +1,4 @@ -# VERSION 12 - DO NOT REMOVE THIS LINE +# VERSION 13 - DO NOT REMOVE THIS LINE ProxyRequests Off @@ -43,4 +43,4 @@ ProxyRequests Off </LocationMatch> # Only enable this on servers that are not generating a CRL -${CLONE}RewriteRule ^/ipa/crl/MasterCRL.bin https://$FQDN/ca/ee/ca/getCRL?op=getCRL&crlIssuingPoint=MasterCRL [L,R=301,NC] +${CLONE}RewriteRule ^/ipa/crl/MasterCRL.bin http://$FQDN/ca/ee/ca/getCRL?op=getCRL&crlIssuingPoint=MasterCRL [L,R=301,NC]
_______________________________________________ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
