amazon web services - S3 and apache mod_proxy with basic authentication -


i'd redirect s3 bucket in ssl basic authentication of files (apk files) apache mod_proxy. ssl , mod_proxy work, basic authentication ignored.

<virtualhost *:443>         servername resources.mydomain.jp          <filesmatch "\.apk$">           order deny,allow           setenvif user-agent ".*android.*" allow_ag           options followsymlinks           allow env=allow_ag           deny           authtype basic           authname "secret zone"           authuserfile /etc/httpd/.htpasswd           require user xxx_customer         </filesmatch>           sslengine on         sslproxyengine on         sslprotocol -all +sslv3 +tlsv1         sslciphersuite all:!adh:rc4+rsa:+high:+medium:-low:-sslv2:-exp         sslcertificatefile conf.d/xxx.cer         sslcertificatekeyfile conf.d/xxx.key         sslcacertificatefile conf.d/xxx.cer          proxypass / http://resources.mydomain.jp.s3-website-ap-zone-1.amazonaws.com/         proxypassreverse / http://resources.mydomain.jp.s3-website-ap-zone-1.amazonaws.com/      </virtualhost> 

by way, same "filematch" used virtualhost , works normally....

apache info :

$ httpd -v server version: apache/2.4.12 (amazon) server built:   mar 18 2015 20:24:15 

thank you

<filesmatch> matches files in physical filesystem, not last component of url might think of filename. since proxying, no url's mapped filesystem.

try <locationmatch>

some more cleanups needed:

  • explicitly set "satisfy any"
  • change "order deny,allow" "order allow,deny" (this means deny default)
  • remove "deny" (no longer necessary, simplifies ordering issues allow env=...)

Comments

  1. Moreover, handling troubleshooting is an important skill for a WoCommerce developer. When your WooCommerce website breaks and you don't know what’s wrong, then no quantity of your customization or integration capabilities will be useful here. For example, your practical information and experience to handle a disaster will be useful then.

    ReplyDelete

Post a Comment

Popular posts from this blog

c - Bitwise operation with (signed) enum value -

xslt - Unnest parent nodes by child node -

YouTubePlayerFragment cannot be cast to android.support.v4.app.Fragment -