diff options
| author | Rob Austein <sra@hactrn.net> | 2013-09-20 22:47:41 +0000 |
|---|---|---|
| committer | Rob Austein <sra@hactrn.net> | 2013-09-20 22:47:41 +0000 |
| commit | 6e449fbdf3fbf6c31a27c3ec3f95de61185b7f58 (patch) | |
| tree | 9ec878ec655dbe58a6ee58ba0397b80956786192 /rpkid/portal-gui/scripts | |
| parent | 69a5d95343ef0c07107e6ba0521eaf2988deb480 (diff) | |
Disable mod_deflate if it's enabled and we know how to do so. In
practice, this is Ubuntu-specific, because FreeBSD lacks Ubuntu's
`a2dismod` command. Closes #595.
svn path=/trunk/; revision=5509
Diffstat (limited to 'rpkid/portal-gui/scripts')
| -rwxr-xr-x | rpkid/portal-gui/scripts/rpkigui-apache-conf-gen | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/rpkid/portal-gui/scripts/rpkigui-apache-conf-gen b/rpkid/portal-gui/scripts/rpkigui-apache-conf-gen index f7d41cb3..1195108d 100755 --- a/rpkid/portal-gui/scripts/rpkigui-apache-conf-gen +++ b/rpkid/portal-gui/scripts/rpkigui-apache-conf-gen @@ -400,6 +400,10 @@ class Debian(Platform): def enable(self): self.run("a2enmod", "ssl") self.run("a2ensite", "rpki") + # + # In light of BREACH and CRIME attacks, mod_deflate is looking + # like a bad idea, so make sure it's off. + self.run("a2dismod", "deflate") def disable(self): self.run("a2dissite", "rpki") |