Re: [Sks-devel] Apache setup for refusing to serve bad keys

2019-02-20 Thread John Zaitseff
Hi, echelon, You wrote: > Thank you, but looks like it does only works partly, e.g. from > webinterface. > > e.g.: > [20/Feb/2019:12:52:40 +0100] "GET /pks/lookup?search=0x69D2EAD9=vindex > HTTP/1.1" 410 602 "http://keys.i2p-projekt.de/; "Mozilla/5.0 (X11; Linux > x86_64) AppleWebKit/537.36

Re: [Sks-devel] Apache setup for refusing to serve bad keys

2019-02-20 Thread echelon
On 19.02.2019 04:11, John Zaitseff wrote: > Hi, all again, > > Slight bug fix: replace: > > RewriteCond "%{QUERY_STRING}" "search=([^&]+)&?" > > with: > > RewriteCond "%{QUERY_STRING}" "search=([^&]+)(&|$)" Thank you, but looks like it does only works partly, e.g. from

Re: [Sks-devel] Apache setup for refusing to serve bad keys

2019-02-18 Thread John Zaitseff
Hi, all again, Slight bug fix: replace: RewriteCond "%{QUERY_STRING}" "search=([^&]+)&?" with: RewriteCond "%{QUERY_STRING}" "search=([^&]+)(&|$)" John Zaitseff -- John Zaitseff ,--_|\The ZAP Group Telephone: +61 2 9643 7737 / \

Re: [Sks-devel] Apache setup for refusing to serve bad keys

2019-02-18 Thread John Zaitseff
Hi, all, I previously wrote: > [...] Here is my version for the Apache server. It allows you to > include the list of keys in a separate file that can be updated at > any time without restarting/reloading the server. I've since revised the Apache configuration file to contain: RewriteEngine

[Sks-devel] Apache setup for refusing to serve bad keys

2019-02-18 Thread John Zaitseff
Hi, everyone, There's been some discussion on this list about refusing to serve bad OpenPGP keys -- at least as a workaround for the time being. Andreas Puls has even supplied a configuration snippet for nginx. Here is my version for the Apache server. It allows you to include the list of keys