You are viewing a plain text version of this content. The canonical link for it is here.

Posted to bugs@httpd.apache.org by bu...@apache.org on 2018/03/19 09:19:27 UTC

[Bug 62189] mod_md: allow md and other ACME clients to coexist when handling /.well-known path

https://bz.apache.org/bugzilla/show_bug.cgi?id=62189

Stefan Eissing <st...@eissing.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|NEW                         |RESOLVED

--- Comment #1 from Stefan Eissing <st...@eissing.org> ---
Implemented the requested behaviour in r1827175 in trunk. Will propose for
backport to 2.4.x soon.

The current behaviour is:
- if mod_md has a challenge answer, it will send it (as before)
- if mod_md does not have an answer and
  a) the hostname is configured as a ManagedDomain, the request will be
answered with a 404
  b) the hostname is not part of a MD, the request is left untouched and other
server parts, e.g. the filesystem, may answer it.

This should provide peaceful co-existance between different ACME clients, while
preserving the security that challenge answers to domains handled by mod_md
need to come from mod_md.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org