From bfd11701188bb1d41bf0d15942b8bd2776cfa159 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Wed, 14 Mar 2018 18:08:59 -0400 Subject: [PATCH] Redirect CRL requests to the http port, not the https port https://pagure.io/freeipa/issue/7433 Signed-off-by: Rob Crittenden Reviewed-By: Christian Heimes --- install/share/ipa-pki-proxy.conf.template | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/install/share/ipa-pki-proxy.conf.template b/install/share/ipa-pki-proxy.conf.template index 4455e11ea..04460197e 100644 --- a/install/share/ipa-pki-proxy.conf.template +++ b/install/share/ipa-pki-proxy.conf.template @@ -1,4 +1,4 @@ -# VERSION 12 - DO NOT REMOVE THIS LINE +# VERSION 13 - DO NOT REMOVE THIS LINE ProxyRequests Off @@ -43,4 +43,4 @@ ProxyRequests Off # Only enable this on servers that are not generating a CRL -${CLONE}RewriteRule ^/ipa/crl/MasterCRL.bin https://$FQDN/ca/ee/ca/getCRL?op=getCRL&crlIssuingPoint=MasterCRL [L,R=301,NC] +${CLONE}RewriteRule ^/ipa/crl/MasterCRL.bin http://$FQDN/ca/ee/ca/getCRL?op=getCRL&crlIssuingPoint=MasterCRL [L,R=301,NC]