diff options
| author | Robert Scheck <robert@fedoraproject.org> | 2018-02-05 15:33:42 +0100 |
|---|---|---|
| committer | Robert Scheck <robert@fedoraproject.org> | 2018-02-05 15:33:42 +0100 |
| commit | 7583615babc19711eb5f2865b81706d383b5649b (patch) | |
| tree | 3b15a4b693b02b3abe1e6df2019a417a79ffb747 /lib | |
| parent | 847bd0cf74ce183e03accf1603a1f8e5d25394b6 (diff) | |
| download | nextcloud-server-7583615babc19711eb5f2865b81706d383b5649b.tar.gz nextcloud-server-7583615babc19711eb5f2865b81706d383b5649b.zip | |
Handle SSL certificate verifications for others than Let's Encrypt
Do no longer (wrongly) rewrite URLs like
* http://example.net/.well-known/pki-validation/file.txt (Comodo)
* http://example.net/.well-known/pki-validation/fileauth.txt (DigiCert, Thawte, GeoTrust)
* http://example.net/.well-known/pki-validation/gsdv.txt (GlobalSign)
* http://example.net/.well-known/pki-validation/starfield.htm (Starfield, GoDaddy)
* http://example.net/.well-known/pki-validation/swisssign-check.txt (SwissSign)
for automated SSL certificate verifications. All (common commercial)
certificate authorities (CA) except Let's Encrypt (via ACME) seem to
use "pki-validation" rather "acme-challenge" for their domain control
validation (DCV).
Signed-off-by: Robert Scheck <robert@fedoraproject.org>
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/private/Setup.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/private/Setup.php b/lib/private/Setup.php index 43fa6c4a117..c0246a83e46 100644 --- a/lib/private/Setup.php +++ b/lib/private/Setup.php @@ -485,7 +485,7 @@ class Setup { $content .= "\n RewriteCond %{REQUEST_FILENAME} !/robots.txt"; $content .= "\n RewriteCond %{REQUEST_FILENAME} !/updater/"; $content .= "\n RewriteCond %{REQUEST_FILENAME} !/ocs-provider/"; - $content .= "\n RewriteCond %{REQUEST_URI} !^/.well-known/acme-challenge/.*"; + $content .= "\n RewriteCond %{REQUEST_URI} !^/.well-known/(acme-challenge|pki-validation)/.*"; $content .= "\n RewriteRule . index.php [PT,E=PATH_INFO:$1]"; $content .= "\n RewriteBase " . $rewriteBase; $content .= "\n <IfModule mod_env.c>"; |