<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Apache SSL in htaccess examples</title>
	<atom:link href="http://www.askapache.com/htaccess/apache-ssl-in-htaccess-examples.html/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.askapache.com/htaccess/apache-ssl-in-htaccess-examples.html</link>
	<description>Web Development</description>
	<pubDate>Tue, 19 Aug 2008 22:32:13 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.1</generator>
		<item>
		<title>By: George Payne</title>
		<link>http://www.askapache.com/htaccess/apache-ssl-in-htaccess-examples.html#comment-42291</link>
		<dc:creator>George Payne</dc:creator>
		<pubDate>Wed, 11 Jun 2008 16:15:58 +0000</pubDate>
		<guid isPermaLink="false">http://www.askapache.com.com/htaccess/apache-ssl-in-htaccess-examples.html#comment-42291</guid>
		<description>I was trying to do something I thought was simple,but have so far been unable to figure out.

I wanted set up a temp server just to host a "we are down for the moment" web page.  It's pretty easy to set it up so it responds to all http requests with a single page.  But I can't figure out how to set it up to answer all HTTPS requests with the same page without actually setting up SSL with a valid cert on my temporary server, which I don't want to do.


Any suggestions?  A wiser way of going about this?</description>
		<content:encoded><![CDATA[<p>I was trying to do something I thought was simple,but have so far been unable to figure out.</p>
<p>I wanted set up a temp server just to host a &#8220;we are down for the moment&#8221; web page.  It&#8217;s pretty easy to set it up so it responds to all http requests with a single page.  But I can&#8217;t figure out how to set it up to answer all HTTPS requests with the same page without actually setting up SSL with a valid cert on my temporary server, which I don&#8217;t want to do.</p>
<p>Any suggestions?  A wiser way of going about this?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Pete</title>
		<link>http://www.askapache.com/htaccess/apache-ssl-in-htaccess-examples.html#comment-5137</link>
		<dc:creator>Pete</dc:creator>
		<pubDate>Thu, 19 Apr 2007 18:46:50 +0000</pubDate>
		<guid isPermaLink="false">http://www.askapache.com.com/htaccess/apache-ssl-in-htaccess-examples.html#comment-5137</guid>
		<description>On an Apache 1.3x system, "and" &#38; "or" isn't valid inside an .htaccess file.  The use of "&#38;&#38;" and "&#124;&#124;" are required instead.

So where you list:
SSLRequire (    %{SSL_CIPHER} !~ m/^(EXP&#124;NULL)-/ 
            and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." 
            and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"} 
            and %{TIME_WDAY} &#62;= 1 and %{TIME_WDAY} &#60;= 5 
            and %{TIME_HOUR} &#62;= 8 and %{TIME_HOUR} &#60;= 20       ) 
           or %{REMOTE_ADDR} =~ m/^192.76.162.[0-9]+$/

It would have to be written as:

SSLRequire (    %{SSL_CIPHER} !~ m/^(EXP&#124;NULL)-/ &#38;&#38; \
     %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." &#38;&#38; \
     %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"} &#38;&#38; \
     %{TIME_WDAY} &#62;= 1 and %{TIME_WDAY} &#60;= 5 &#38;&#38; \
     %{TIME_HOUR} &#62;= 8 and %{TIME_HOUR} &#60;= 20) &#124;&#124; \
     %{REMOTE_ADDR} =~ m/^192.76.162.[0-9]+$/</description>
		<content:encoded><![CDATA[<p>On an Apache 1.3x system, &#8220;and&#8221; &amp; &#8220;or&#8221; isn&#8217;t valid inside an .htaccess file.  The use of &#8220;&amp;&amp;&#8221; and &#8220;||&#8221; are required instead.</p>
<p>So where you list:<br />
SSLRequire (    %{SSL_CIPHER} !~ m/^(EXP|NULL)-/<br />
            and %{SSL_CLIENT_S_DN_O} eq &#8220;Snake Oil, Ltd.&#8221;<br />
            and %{SSL_CLIENT_S_DN_OU} in {&#8221;Staff&#8221;, &#8220;CA&#8221;, &#8220;Dev&#8221;}<br />
            and %{TIME_WDAY} &gt;= 1 and %{TIME_WDAY} &lt;= 5<br />
            and %{TIME_HOUR} &gt;= 8 and %{TIME_HOUR} &lt;= 20       )<br />
           or %{REMOTE_ADDR} =~ m/^192.76.162.[0-9]+$/</p>
<p>It would have to be written as:</p>
<p>SSLRequire (    %{SSL_CIPHER} !~ m/^(EXP|NULL)-/ &amp;&amp; \<br />
     %{SSL_CLIENT_S_DN_O} eq &#8220;Snake Oil, Ltd.&#8221; &amp;&amp; \<br />
     %{SSL_CLIENT_S_DN_OU} in {&#8221;Staff&#8221;, &#8220;CA&#8221;, &#8220;Dev&#8221;} &amp;&amp; \<br />
     %{TIME_WDAY} &gt;= 1 and %{TIME_WDAY} &lt;= 5 &amp;&amp; \<br />
     %{TIME_HOUR} &gt;= 8 and %{TIME_HOUR} &lt;= 20) || \<br />
     %{REMOTE_ADDR} =~ m/^192.76.162.[0-9]+$/</p>
]]></content:encoded>
	</item>
</channel>
</rss>
