CAcert Code Development list.

[Bernhard "Ted" Fröhlich <bernhard AT cacert.org>]

Hi Brian,

the document root on the testserver is cacert-devel/www.

I have added the testserver's apache configuration file, maybe it helps. 
Note that the repository is cloned to /www in the chroot environment, so 
/www/www should be equivalent to cacert-devel/www

Hope it helps,
Ted


Am 17.08.2021 um 15:35 schrieb Brian McCullough:
> Jan and Ted,
>
> I finally gave up trying to make my regular Dev machines fit our needs,
> and built a VM, based on Debian 9 ( I tried for 8, but the installer
> broke ).  I then installed PHP 5.6, instead of the 7.0 that Debian 9
> wanted, and tried to start our code.
>
> For quite a while I got just a blank screen, with various "missing
> required files" errors in the logs.  I moved the "pre-load file"
> statement from .htaccess to the Apache Site configuration file, and that
> helped.
>
> My Document Root at present is "cacert-devel/www."  Should it be
> cacert-devel, and the include of includes/general.php gets it to the
> index.php in www?
>
>
> In any case, I am working my way through.
>
>
> Brian
<VirtualHost *:80>
  ServerName test.cacert.org
  ServerAlias www.test.cacert.org
  DocumentRoot /www/www

  ScriptAlias /cgi-bin/ /www/cgi-bin/
  Redirect permanent /revoke.crl        http://crl.cacert.org/revoke.crl
  Redirect permanent /class3-revoke.crl 
http://crl.cacert.org/class3-revoke.crl
  RewriteEngine On
  RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
  RewriteRule .* - [F]
  <Directory /www/www/policy>
    AddDefaultCharset utf-8
  </Directory>
</VirtualHost>

<VirtualHost *:443>
  ServerName test.cacert.org
  ServerAlias www.test.cacert.org
  DocumentRoot /www/www

  SSLEngine on
  SSLStrictSNIVHostCheck on
  SSLProtocol all -SSLv2 -SSLv3
  SSLHonorCipherOrder on
  SSLCipherSuite kEECDH:kEDH:AESGCM:ALL:!3DES!RC4:!LOW:!EXP:!MD5:!aNULL:!eNULL
  SSLCertificateFile /etc/ssl/certs/normal.crt
  SSLCertificateKeyFile /etc/ssl/private/test_cacert_org.pem
  SSLCACertificateFile /etc/ssl/certs/combined.crt

  Header always set Strict-Transport-Security "max-age=31536000"

  ScriptAlias /cgi-bin/ /www/cgi-bin/
  Redirect permanent /revoke.crl        http://crl.cacert.org/revoke.crl
  Redirect permanent /class3-revoke.crl 
http://crl.cacert.org/class3-revoke.crl
  RewriteEngine On
  RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
  RewriteRule .* - [F]
  <Directory /www/www/policy>
    AddDefaultCharset utf-8
  </Directory>
</VirtualHost>

<VirtualHost *:443>
  ServerName secure.test.cacert.org
  ServerAlias secure.test.cacert.org
  DocumentRoot /www/www

  SSLEngine on
  SSLStrictSNIVHostCheck on
  SSLProtocol all -SSLv2 -SSLv3
  SSLHonorCipherOrder on
  SSLCipherSuite kEECDH:kEDH:AESGCM:ALL:!3DES!RC4:!LOW:!EXP:!MD5:!aNULL:!eNULL
  SSLCertificateFile /etc/ssl/certs/secure.crt
  SSLCertificateKeyFile /etc/ssl/private/secure_test_cacert_org.pem
  SSLVerifyClient require
  SSLVerifyDepth 2
  SSLCACertificateFile /etc/ssl/certs/combined.crt
  #SSLCARevocationFile /etc/ssl/crls/cacert-combined.crl
  #SSLOCSPEnable on
  #SSLOCSPDefaultResponder http://ocsp.cacert.org/
  SSLOptions +StdEnvVars

  Header always set Strict-Transport-Security "max-age=31536000"

  Redirect permanent /revoke.crl        http://crl.cacert.org/revoke.crl
  Redirect permanent /class3-revoke.crl 
http://crl.cacert.org/class3-revoke.crl
  RewriteEngine On
  RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
  RewriteRule .* - [F]
  <Directory /www/www/policy>
    AddDefaultCharset utf-8
  </Directory>
</VirtualHost>

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature