Hello

Is Apache module headers active?
What is in /etc/letsencrypt/options-ssl-apache.conf ?


Kind regards,
Christian Mack

Am 20.02.19 um 09:10 schrieb Dmytro Lysytsyn ([email protected]):
> On 19.02.19 22:05, Andrey Cherepanov ([email protected]) wrote:
>> From mail from Julian Kippels at 21.09.2018 in [email protected]:
>> I found the problem. It wasn't anything in the /etc/sogo/sogo.conf at
>> all. The problem was with the Apache configuration. When I comment out
>> this line RequestHeader set "x-webobjects-server-url"
>> "https://%{HTTP_HOST}e"env=HTTP_HOST
>>
>> from /etc/httpd/conf.d/SOGo.conf everything works as it should. See
>> also fix in package:
>> http://git.altlinux.org/people/cas/packages/sogo.git?p=sogo.git;a=commit;h=6003f42429088b092ace1944d8d9b92fc48a7507
>>
> 
> Hello Andrey,
> 
> Thank you for your answer!
> 
> I tried to comment out line you've mentioned but that doesn't change
> SOGO's behavior at all.
> And of course I did restart Apache after config changes.
> And also cleared browser's cache just in case.
> 
> Here is my whole Apache configuration for SOGo and FD site:
> --- 8< -----------------------------------------------------
> <VirtualHost *:80>
>     ServerName kntest3.ldvtest.org.ua
>     ServerAdmin [email protected]
>     ErrorLog ${APACHE_LOG_DIR}/kntest3.ldvtest.org.ua_http_error.log
>     CustomLog ${APACHE_LOG_DIR}/kntest3.ldvtest.org.ua_http_access.log
> combined
>     Redirect "/" "https://kntest3.ldvtest.org.ua";
> </VirtualHost>
> 
> <IfModule mod_ssl.c>
>     <VirtualHost *:443>
>         ServerName kntest3.ldvtest.org.ua
>         DocumentRoot /var/www/html/kntest3.ldvtest.org.ua
>         ServerAdmin [email protected]
>         ErrorLog ${APACHE_LOG_DIR}/kntest3.ldvtest.org.ua_https_error.log
>         CustomLog
> ${APACHE_LOG_DIR}/kntest3.ldvtest.org.ua_https_access.log combined
>         SSLEngine on
>         SSLCertificateFile
> /etc/letsencrypt/live/kntest3.ldvtest.org.ua/cert.pem
>         SSLCertificateKeyFile
> /etc/letsencrypt/live/kntest3.ldvtest.org.ua/privkey.pem
>         Include /etc/letsencrypt/options-ssl-apache.conf
>         <Directory /var/www/html/kntest3.ldvtest.org.ua>
>             Options Indexes FollowSymLinks
>             AllowOverride None
>             Require all granted
>         </Directory>
>         Alias /fusiondirectory /usr/share/fusiondirectory/html
>         <FilesMatch "\.(cgi|shtml|phtml|php)$">
>             SSLOptions +StdEnvVars
>         </FilesMatch>
>         <Directory /usr/lib/cgi-bin>
>             SSLOptions +StdEnvVars
>         </Directory>
>         BrowserMatch "MSIE [2-6]" nokeepalive ssl-unclean-shutdown
> downgrade-1.0 force-response-1.0
>         BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
>         <IfModule mod_php5.c>
>             <Location /fusiondirectory>
>                 php_admin_flag engine on
>                 php_admin_flag register_globals off
>                 php_admin_flag allow_call_time_pass_reference off
>                 php_admin_flag expose_php off
>                 php_admin_flag zend.ze1_compatibility_mode off
>                 php_admin_flag register_long_arrays off
>                 php_admin_value upload_tmp_dir /var/spool/fusiondirectory/
>                 php_admin_value session.cookie_lifetime 0
>             </Location>
>         </IfModule>
>         <Directory /usr/share/fusiondirectory/html/>
>             Order Allow,Deny
>             # Changed IP here
>             Allow from 1.2.3.4
>         </Directory>
>         Alias /SOGo.woa/WebServerResources/
> /usr/lib/GNUstep/SOGo/WebServerResources/
>         Alias /SOGo/WebServerResources/
> /usr/lib/GNUstep/SOGo/WebServerResources/
>         <Directory /usr/lib/GNUstep/SOGo/>
>             AllowOverride None
>             <IfVersion < 2.4>
>             Order deny,allow
>             Allow from all
>             </IfVersion>
>             <IfVersion >= 2.4>
>             Require all granted
>             </IfVersion>
>             <IfModule expires_module>
>                 ExpiresActive On
>                 ExpiresDefault "access plus 1 year"
>             </IfModule>
>         </Directory>
>         ProxyRequests Off
>         SetEnv proxy-nokeepalive 1
>         ProxyPreserveHost On
>         ProxyPass /SOGo http://127.0.0.1:20000/SOGo retry=0
>         <Proxy http://127.0.0.1:20000/SOGo>
>             <IfModule headers_module>
>                 RequestHeader set "x-webobjects-server-port" "443"
>                 SetEnvIf Host (.*) HTTP_HOST=$1
>                 RequestHeader set "x-webobjects-server-name"
> "%{HTTP_HOST}e" env=HTTP_HOST
>                 RequestHeader unset "x-webobjects-remote-user"
>                 RequestHeader set "x-webobjects-server-protocol" "HTTP/1.0"
>             </IfModule>
>             AddDefaultCharset UTF-8
>             Order allow,deny
>             Allow from all
>         </Proxy>
>         <IfModule rewrite_module>
>             RewriteEngine On
>             RewriteRule ^/.well-known/caldav/?$ /SOGo/dav [R=301]
>             RewriteRule ^/.well-known/carddav/?$ /SOGo/dav [R=301]
>         </IfModule>
>     </VirtualHost>
> </IfModule>
> --- 8< -----------------------------------------------------
> 
> 


-- 
Christian Mack
Universität Konstanz
Kommunikations-, Informations-, Medienzentrum (KIM)
Abteilung Basisdienste
78457 Konstanz
+49 7531 88-4416

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to