summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorcommunity.cacert.org <community.cacert.org@d4452222-2f33-11de-9270-010000000000>2009-05-21 12:00:24 +0000
committercommunity.cacert.org <community.cacert.org@d4452222-2f33-11de-9270-010000000000>2009-05-21 12:00:24 +0000
commit5ed37d37792a727346a2221dd223b97b1fa6d626 (patch)
treeccbe84c1551e95c6847e0b423d77e8d16d43c963
parent4bc19afd1f561aeb60efd356a65cb5ae35c25232 (diff)
downloadcacert-boardvoting-5ed37d37792a727346a2221dd223b97b1fa6d626.tar.gz
cacert-boardvoting-5ed37d37792a727346a2221dd223b97b1fa6d626.tar.xz
cacert-boardvoting-5ed37d37792a727346a2221dd223b97b1fa6d626.zip
apache configuration file add
git-svn-id: http://svn.cacert.cl/Software/Voting/vote@36 d4452222-2f33-11de-9270-010000000000
-rw-r--r--.htaccess33
1 files changed, 33 insertions, 0 deletions
diff --git a/.htaccess b/.htaccess
new file mode 100644
index 0000000..a189cbe
--- /dev/null
+++ b/.htaccess
@@ -0,0 +1,33 @@
+<IfModule mod_php5.c>
+php_flag display_errors Off
+php_flag log_errors On
+php_value error_log syslog
+
+php_flag safe_mode On
+php_flag safe_mode_gid On
+php_value open_basedir /var/www/board
+php_value safe_mode_exec_dir /var/empty
+</IfModule>
+
+<FilesMatch "^database.*$">
+ Order Deny,Allow
+ Deny from all
+</FilesMatch>
+
+
+
+
+<FilesMatch "^(motion|vote|proxy)\.php$">
+ # these files require authentication
+ <IfModule mod_ssl.c>
+ SSLOptions +StdEnvVars +ExportCertData
+ SSLUserName SSL_CLIENT_S_DN_Email
+ SSLVerifyClient optional
+ <IfModule mod_rewrite.c>
+ RewriteEngine on
+ RewriteCond %{SSL:SSL_CLIENT_VERIFY} !=SUCCESS
+ RewriteRule .? - [F]
+ ErrorDocument 403 "You need a client side certificate issued by CAcert to access this url"
+ </IfModule>
+ </IfModule>
+</FilesMatch>