diff -Nur --no-dereference smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts/28phpkiProxyPass smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts/28phpkiProxyPass --- smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts/28phpkiProxyPass 2022-07-21 11:14:01.272000000 -0400 +++ smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts/28phpkiProxyPass 2022-07-21 11:16:34.643000000 -0400 @@ -27,9 +27,7 @@ SSLRequireSSL on - order deny,allow - deny from all - allow from $localAccess $externalSSLAccess + Require ip $localAccess $externalSSLAccess HERE diff -Nur --no-dereference smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/20Modules smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/20Modules --- smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/20Modules 2022-07-21 11:14:01.280000000 -0400 +++ smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/20Modules 2022-07-21 11:21:12.958000000 -0400 @@ -46,7 +46,6 @@ cgi mpm_prefork unixd - access_compat authn_core authz_core authz_user diff -Nur --no-dereference smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/85DefaultAccess smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/85DefaultAccess --- smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/85DefaultAccess 2008-08-15 12:32:53.000000000 -0400 +++ smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/85DefaultAccess 2022-07-21 11:18:14.953000000 -0400 @@ -5,9 +5,7 @@ Options None AllowOverride None - order deny,allow - deny from all - allow from none + Require all denied diff -Nur --no-dereference smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/90phpki smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/90phpki --- smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/90phpki 2022-07-21 11:14:01.281000000 -0400 +++ smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/90phpki 2022-07-21 11:19:34.780000000 -0400 @@ -14,17 +14,11 @@ SetHandler \"proxy:unix:/var/run/php-fpm/php${version}-${pool_name}.sock|fcgi://localhost\" \n"; } -# php_flag register_globals off -# php_flag register_long_arrays on -# php_admin_value session.save_path /var/lib/php/pki-session -# php_admin_value openbase_dir /opt/phpki:/var/lib/php/pki-session AddType application/x-x509-ca-cert .crt .pem AddType application/pkix-crl .crl AddType application/pkix-cert .cer .der AllowOverride None - order deny,allow - deny from all - allow from 127.0.0.1 + Require ip 127.0.0.1 # /ca is only allowed for admin and explicitely authorized users @@ -47,7 +41,6 @@ # Disable access to /admin, which is used to configure user/password # via an htaccess file - order deny,allow - deny from all + Require all denied