webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-27 19:23:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

also force TLS when requiring user authentication in WebUI

Browse Source 
Force TLS _and_ a valid login when accessing protected directories.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Peter Müller
2017-10-11 18:30:50 +02:00
committed by Michael Tremer
parent 78fa47700d
commit 50846453cb
1 changed files with 12 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
config/httpd/vhosts.d/ipfire-interface-ssl.conf
View File

@@ -25,7 +25,10 @@
AuthName "IPFire - Restricted" AuthName "IPFire - Restricted"
AuthType Basic AuthType Basic
AuthUserFile /var/ipfire/auth/users AuthUserFile /var/ipfire/auth/users
Require user admin <RequireAll>
Require user admin
Require ssl
</RequireAll>
</DirectoryMatch> </DirectoryMatch>
ScriptAlias /cgi-bin/ /srv/web/ipfire/cgi-bin/ ScriptAlias /cgi-bin/ /srv/web/ipfire/cgi-bin/
<Directory /srv/web/ipfire/cgi-bin> <Directory /srv/web/ipfire/cgi-bin>
@@ -34,7 +37,10 @@
AuthName "IPFire - Restricted" AuthName "IPFire - Restricted"
AuthType Basic AuthType Basic
AuthUserFile /var/ipfire/auth/users AuthUserFile /var/ipfire/auth/users
Require user admin <RequireAll>
Require user admin
Require ssl
</RequireAll>
<Files chpasswd.cgi> <Files chpasswd.cgi>
Require all granted Require all granted
</Files> </Files>
@@ -76,6 +82,9 @@
AuthName "IPFire - Restricted" AuthName "IPFire - Restricted"
AuthType Basic AuthType Basic
AuthUserFile /var/ipfire/auth/users AuthUserFile /var/ipfire/auth/users
Require user admin <RequireAll>
Require user admin
Require ssl
</RequireAll>
</Directory> </Directory>
</VirtualHost> </VirtualHost>