New answers tagged

0

Some of the comments above got me thinking about this the right way. The approach I went with was to run separate http & https servers on different ports within my Node web service, update the port numbers in mydomain.ca.conf and mydomain.ca-le-ssl.conf to correspond to the right port numbers, and update mydomain.ca.conf to only respond to requests from ...


0

You have configured both HTTP and HTTPS to connect to the same port on the backend server. It is highly unlikely that your backend server supports both protocols on the same port. Either use HTTP in both VirtualHosts, or use the correct port for HTTPS if your backend server supports both.


4

A certificate is valid for only the subjects it contains. Your certificate contains the DNS name "ccie.pl", but not the IP address "188.68.255.142", so it is invalid for the latter. To my knowledge, Let's Encrypt will not issue certificates for IP addresses. Not that it is a big deal IMO, as users probably use the domain name anyway (no ...


0

The only solution that was working for me, is: AddOutputFilterByType INFLATE;SUBSTITUTE;DEFLATE text/html Source: https://phabricator.wikimedia.org/T282613 https://gitpull.it/T776


0

Generating You can use a small extension file (utf-8) to preset the entries you want and generate a CSR more easily. DNS entries must be punycode if not ASCII. (https://www.rfc-editor.org/rfc/rfc3492) [req] default_bits = 2048 prompt = no default_md = sha256 distinguished_name = dn req_extensions = ext [ ext ] subjectKeyIdentifier=hash keyUsage=...


0

Let's follow the boolean logic of the rules as they would stand: <RequireAll> ### First, and foremost, users need to be Apache users. Require ldap-attribute companyMemberOf="ALL_APACHE_USERS" ### AND <RequireAny> ##### Users need to be either valid Require valid-user ##### Or have the appropiate claim. Require ...


1

This is really not possible. Unless you define volumes in docker-compose, the container can not write anything into the host's filesystem. Prove that with > docker inspect apache2-php-container | jq .[].Mounts > docker inspect apache2-php-container | jq .[].Volumes You also can reverse-prove that by creating a file in your ominous Host's log folder ...


2

I'm not sure what HostEurope mean by 'global', but a certificate binds a name to a public key. Those names, along with the public key, are embedded within the certificate, which the CA then signs as a true statement. Names within certificates are expected to be in the Subject Alternate Name (SAN) extension. It used to be expected in the Subject field, but ...


3

SSL certs are issued on either a single-domain, wildcard, or multi-domain basis. We can't see the details of your certificate but it probably is single-domain, or the second domain is not listed in the "Subject Alternative Name" field. Check Stack Exchange's cert. It is a wildcard multi-domain certificate, that's issued to CN = *.stackexchange.com, ...


0

For some reason those are symlinks to the device files for stdout and stderr. To make Apache write to actual files, you simply need to remove the symlinks and restart Apache: sudo rm /var/log/apache2/{access,error,other_vhosts_access}.log sudo systemctl restart apache2


0

RewriteCond %{HTTPS} !=on will match on HTTP-Connections. You have accidentally put the 'HTTP -> HTTPS'-Rule in the HTTPS-Part of the Server. Just move the three Lines in the upper VirtualHost.


0

You have to change two things. First, you need to configure the base URL of the kafka-ui container, you can do that using the SERVER_SERVLET_CONTEXT_PATH environment variable. # ... kafka-ui: image: 'provectuslabs/kafka-ui:latest' environment: - KAFKA_CLUSTERS_0_NAME=local - KAFKA_CLUSTERS_0_BOOTSTRAPSERVERS=kafka:9092 - ...


0

If by "escape", you mean "remove" (as in your example) then you can do something like the following in your Apache config (or .htaccess) file: RedirectMatch 301 ^(?!/site_url/course/).+/([^/.]+)$ /site_url/course/$1 The negative lookahead (ie. (?!/site_url/course/)) ensures that the redirected request is not also redirected (which would ...


Top 50 recent answers are included