Bugzilla – Attachment 45397 Details for
Bug 15303
Letsencrypt option for Debian package installations
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 15303 Letsencrypt option for Debian package installations
Bug-15303-Letsencrypt-option-for-Debian-package-in.patch (text/plain), 3.82 KB, created by
Mirko Tietgen
on 2015-12-04 00:14:18 UTC
(
hide
)
Description:
Bug 15303 Letsencrypt option for Debian package installations
Filename:
MIME Type:
Creator:
Mirko Tietgen
Created:
2015-12-04 00:14:18 UTC
Size:
3.82 KB
patch
obsolete
>From b0b242bc0faa84fa38955c35c3f897f308b6946c Mon Sep 17 00:00:00 2001 >From: Mirko Tietgen <mirko@abunchofthings.net> >Date: Fri, 4 Dec 2015 01:11:17 +0100 >Subject: [PATCH] Bug 15303 Letsencrypt option for Debian package > installations > >Apache file for https only setups with automatic certificate >generation via letsencrypt. We need a workiung web server for >the letsencrypt magic, but we can't start on 443 without certs. >So we start on 80, get the certs, switch to 443 and restart >apache. 80 gets forwarded to https. >--- > debian/templates/apache-site-https.conf.in | 68 ++++++++++++++++++++++++++++ > 1 file changed, 68 insertions(+) > create mode 100644 debian/templates/apache-site-https.conf.in > >diff --git a/debian/templates/apache-site-https.conf.in b/debian/templates/apache-site-https.conf.in >new file mode 100644 >index 0000000..3932060 >--- /dev/null >+++ b/debian/templates/apache-site-https.conf.in >@@ -0,0 +1,68 @@ >+# Koha instance __KOHASITE__ Apache config. >+ >+#<VirtualHost *:80> #nohttps >+# RewriteEngine On >+# RewriteCond %{HTTPS} !=on >+# RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L] >+#</VirtualHost> >+ >+ >+# OPAC >+<VirtualHost *:80> #https >+# SSLEngine on >+# SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1 >+# SSLCompression off >+# SSLHonorCipherOrder on >+# SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-SA-AES128-SHA256:ECDHE-RSA-AES256-SHA" >+# SSLCertificateKeyFile /etc/letsencrypt/live/__KOHASITE__.meinkoha.de/privkey.pem >+# SSLCertificateFile /etc/letsencrypt/live/__KOHASITE__.meinkoha.de/cert.pem >+# SSLCertificateChainFile /etc/letsencrypt/live/__KOHASITE__.meinkoha.de/chain.pem >+ >+ <IfVersion >= 2.4> >+ Define instance "__KOHASITE__" >+ </IfVersion> >+ Include /etc/koha/apache-shared.conf >+# Include /etc/koha/apache-shared-disable.conf >+# Include /etc/koha/apache-shared-opac-plack.conf >+ Include /etc/koha/apache-shared-opac.conf >+ >+ ServerName __OPACSERVER__ >+ SetEnv KOHA_CONF "/etc/koha/sites/__KOHASITE__/koha-conf.xml" >+ SetEnv MEMCACHED_SERVERS "__MEMCACHED_SERVERS__" >+ SetEnv MEMCACHED_NAMESPACE "__MEMCACHED_NAMESPACE__" >+ AssignUserID __UNIXUSER__ __UNIXGROUP__ >+ >+ ErrorLog /var/log/koha/__KOHASITE__/opac-error.log >+# TransferLog /var/log/koha/__KOHASITE__/opac-access.log >+# RewriteLog /var/log/koha/__KOHASITE__/opac-rewrite.log >+</VirtualHost> >+ >+# Intranet >+<VirtualHost *:80> #https >+# SSLEngine on >+# SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1 >+# SSLCompression off >+# SSLHonorCipherOrder on >+# SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA" >+# SSLCertificateKeyFile /etc/letsencrypt/live/__KOHASITE__.meinkoha.de/privkey.pem >+# SSLCertificateFile /etc/letsencrypt/live/__KOHASITE__.meinkoha.de/cert.pem >+# SSLCertificateChainFile /etc/letsencrypt/live/__KOHASITE__.meinkoha.de/chain.pem >+ >+ <IfVersion >= 2.4> >+ Define instance "__KOHASITE__" >+ </IfVersion> >+ Include /etc/koha/apache-shared.conf >+# Include /etc/koha/apache-shared-disable.conf >+# Include /etc/koha/apache-shared-intranet-plack.conf >+ Include /etc/koha/apache-shared-intranet.conf >+ >+ ServerName __INTRASERVER__ >+ SetEnv KOHA_CONF "/etc/koha/sites/__KOHASITE__/koha-conf.xml" >+ SetEnv MEMCACHED_SERVERS "__MEMCACHED_SERVERS__" >+ SetEnv MEMCACHED_NAMESPACE "__MEMCACHED_NAMESPACE__" >+ AssignUserID __UNIXUSER__ __UNIXGROUP__ >+ >+ ErrorLog /var/log/koha/__KOHASITE__/intranet-error.log >+# TransferLog /var/log/koha/__KOHASITE__/intranet-access.log >+# RewriteLog /var/log/koha/__KOHASITE__/intranet-rewrite.log >+</VirtualHost> >-- >1.7.10.4
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 15303
:
45397
|
45399
|
45400
|
45402
|
45404
|
45408
|
45409
|
45414
|
45415
|
46116
|
46117
|
46118
|
46617
|
46742
|
46745
|
46746
|
46747
|
46748
|
46749
|
46750
|
46751
|
46752
|
49470
|
49471
|
50215
|
50216
|
50271
|
50283
|
50287
|
50307
|
50308
|
50309
|
50310
|
50311
|
50312
|
50313
|
50324