On Thu, Dec 15, 2016 at 11:51:40AM +0100, noc wrote: > dehydrated-apache2 comes with a conf-file that is supposed to make the > /.well-known/acme-challenge/ directory available in the webserver. > > Unfortunately it had no effect on my system: accessing > /.well-known/acme-challenge/ via my webserver would just give me a 404 page. > > Now, my webserver has the following characteristics > - multiple VirtualHosts > - use of mod_rewrite to do complex routing (in virtually all VirtualHosts).
umh. where do you configure the virtualhosts? If you have them on /etc/apache2/sites-enabled those should not conflict and the conf this package ships would be honored (I think?!). In my systems I have a lot of virtulhosts too (although I don't have that many rewrite rules) and everything works. > RewriteRule ^/\.well-known/acme-challenge/ - [L] > > Of course I would prefer a solution that would fix this in a central place > (/etc/apache2/conf-available/dehydrated.conf). > However, my feeble (and short-lived) attempts did not have any effect. Have you tried adding that line to /etc/apache2/conf-enabled/dehydrated.conf? > Also, the documentation for such issues is sub-optimal. > Even though dehydrated-apache2 is supposed to work without any configuration > (though - as this bug report shows, sometimes it is not), it should come with > some documentation (even if it is just saying that normally no configuration > is > needed, and that one should look at /usr/share/doc/dehydrated/docs for general > documentation and specifically at wellknown.md) Possibly. > Ah yes: as you may have noticed, the target machine is running on jessie (for > which not even a backport of this package exists). I haven't verified the > problem on a sid system. > I assume that problems might be similar, and that Yeah, that's fine. > dehydrated-apache2 will > eventually hit jessie-backports (and the backports package will not be much > different from the current package) It will once I can provide a working and tested upgrade path from letsencrypt.sh to dehydrated. -- regards, Mattia Rizzolo GPG Key: 66AE 2B4A FCCF 3F52 DA18 4D18 4B04 3FCD B944 4540 .''`. more about me: https://mapreri.org : :' : Launchpad user: https://launchpad.net/~mapreri `. `'` Debian QA page: https://qa.debian.org/developer.php?login=mattia `-
signature.asc
Description: PGP signature