public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Redirect CRL requests to the http port, not the https port

Browse Source 
https://pagure.io/freeipa/issue/7433

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
This commit is contained in:
Rob Crittenden authored and Christian Heimes committed 2018-03-16 07:42:07 +01:00
1 parent 7a03a4e9a4
commit bfd1170118
1 file changed
+2 -2
Download Patch File Download Diff File Expand all files Collapse all files
install/share/ipa-pki-proxy.conf.template
+2 -2
View File
@@ -1,4 +1,4 @@
# VERSION 12 - DO NOT REMOVE THIS LINE
# VERSION 13 - DO NOT REMOVE THIS LINE
ProxyRequests Off
@@ -43,4 +43,4 @@ ProxyRequests Off
</LocationMatch>
# Only enable this on servers that are not generating a CRL
${CLONE}RewriteRule ^/ipa/crl/MasterCRL.bin https://$FQDN/ca/ee/ca/getCRL?op=getCRL&crlIssuingPoint=MasterCRL [L,R=301,NC]
${CLONE}RewriteRule ^/ipa/crl/MasterCRL.bin http://$FQDN/ca/ee/ca/getCRL?op=getCRL&crlIssuingPoint=MasterCRL [L,R=301,NC]