diff -Nur --no-dereference smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts/28phpkiProxyPass smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts/28phpkiProxyPass
--- smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts/28phpkiProxyPass 2022-07-21 11:14:01.272000000 -0400
+++ smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts/28phpkiProxyPass 2022-07-21 11:16:34.643000000 -0400
@@ -27,9 +27,7 @@
SSLRequireSSL on
- order deny,allow
- deny from all
- allow from $localAccess $externalSSLAccess
+ Require ip $localAccess $externalSSLAccess
HERE
diff -Nur --no-dereference smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/20Modules smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/20Modules
--- smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/20Modules 2022-07-21 11:14:01.280000000 -0400
+++ smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/20Modules 2022-07-21 11:21:12.958000000 -0400
@@ -46,7 +46,6 @@
cgi
mpm_prefork
unixd
- access_compat
authn_core
authz_core
authz_user
diff -Nur --no-dereference smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/85DefaultAccess smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/85DefaultAccess
--- smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/85DefaultAccess 2008-08-15 12:32:53.000000000 -0400
+++ smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/85DefaultAccess 2022-07-21 11:18:14.953000000 -0400
@@ -5,9 +5,7 @@
Options None
AllowOverride None
- order deny,allow
- deny from all
- allow from none
+ Require all denied
diff -Nur --no-dereference smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/90phpki smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/90phpki
--- smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/90phpki 2022-07-21 11:14:01.281000000 -0400
+++ smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/90phpki 2022-07-21 11:19:34.780000000 -0400
@@ -14,17 +14,11 @@
SetHandler \"proxy:unix:/var/run/php-fpm/php${version}-${pool_name}.sock|fcgi://localhost\"
\n";
}
-# php_flag register_globals off
-# php_flag register_long_arrays on
-# php_admin_value session.save_path /var/lib/php/pki-session
-# php_admin_value openbase_dir /opt/phpki:/var/lib/php/pki-session
AddType application/x-x509-ca-cert .crt .pem
AddType application/pkix-crl .crl
AddType application/pkix-cert .cer .der
AllowOverride None
- order deny,allow
- deny from all
- allow from 127.0.0.1
+ Require ip 127.0.0.1
# /ca is only allowed for admin and explicitely authorized users
@@ -47,7 +41,6 @@
# Disable access to /admin, which is used to configure user/password
# via an htaccess file
- order deny,allow
- deny from all
+ Require all denied