web-based cert management in Debian?

2012-04-08 Thread Daniel Pocock
Hi, I was just looking at package ssl-cert I'm packaging a SIP proxy that would benefit from SSL certs Has there been any discussion about doing something more than ssl-cert, e.g. a simple web interface to invoke `openssl req', let the admin cut-and-paste the req to their CA without ever

Thoughts about the default auth/access configuration

2012-04-08 Thread Stefan Fritsch
Hi, I have made some experiments and spent some thoughts on the default authorization configuration. I will outline some things that have to be taken into account, first. The basic requirements are A) allow access to /var/www B) allow access to /usr/lib/cgi-bin C) webapp packages will want to

Re: web-based cert management in Debian?

2012-04-08 Thread Stefan Fritsch
Hi Daniel, On Sunday 08 April 2012, Daniel Pocock wrote: I was just looking at package ssl-cert I'm packaging a SIP proxy that would benefit from SSL certs Has there been any discussion about doing something more than ssl-cert, e.g. a simple web interface to invoke `openssl req', let the

Passing LDFLAGS to Apache modules for hardened build flags

2012-04-08 Thread Moritz Muehlenhoff
Hi, I'm working on hardened build flags for Squeeze and I'm looking into how to pass hardened build flags to Apache modules. According to the apxs2 manpage the following should work: APACHE_CFLAGS = `dpkg-buildflags --get CFLAGS` APACHE_CFLAGS += `dpkg-buildflags --get CPPFLAGS` APACHE_LDFLAGS