Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #180593
| From | <tomas@tuxteam.de> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: converting my local site to be https only access |
| Date | 2017-05-02 13:30 +0200 |
| Message-ID | <tCEae-64n-17@gated-at.bofh.it> (permalink) |
| References | <tBroJ-AM-1@gated-at.bofh.it> <tCDnP-5nt-7@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Tue, May 02, 2017 at 11:35:19AM +0100, Jonathan Dowland wrote:
[...]
> one of the instruction sets you were following was suggesting to use
> mod_rewrite. Personally, I think that's overkill [...]
Good advice. Debugging Apache's mod_rewrite turns out to be a black
art in itself [1].
[elided, agree]
> This is all from memory as I haven't used apache2 myself for many years (and
> looking back, having since used things like lighttpd and more recently nginx,
> the configuration language is much worse; stockholm syndrome whilst I was a
> user perhaps?)
I don't understand that: do you find Apache's config worse, or
lighttpd's or nginx's?
Personally I *strongly* prefer lighttpd (I don't know nginx enough
to bother anyone with my opinion). Apache config's "looks-like-XML-
but-really-isn't" is downright ugly, but one can cope with that
(perhaps holding one's nose while editing. But the semantics ("looks-
like-declarative-but-really-isnt" -- see a pattern?) is horribly
error prone, and you've got to internalize that seven-phase model
and the hooks each module gets a stab at to understand the somewhat
counter-intuitive interaction of different configuration directives.
The result is that most end up cargo-culting some random snippets
off the Tubes, mixing them into their distro's default config and
beating on the resulting mess until it seems to work. Maintainability
and security... less good.
At work, Apache (they want it badly and it's not mine anyway). At
home, lighttpd (it's mine, after all).
Regards
[1] Written about an older mod_rewrite (Apache 1.3), but mod_rewrite has
*grown* since then:
``The great thing about mod_rewrite is it gives you all the
configurability and flexibility of Sendmail. The downside
to mod_rewrite is that it gives you all the configurability
and flexibility of Sendmail.''
-- Brian Behlendorf
Apache Group
`` Despite the tons of examples and docs, mod_rewrite is voodoo.
Damned cool voodoo, but still voodoo. ''
-- Brian Moore
bem@news.cmc.net
in http://mx.demos.su/manual/mod/mod_rewrite.html. I'd keep that
reference around anyway, since it helps a lot to wrap one's head
around Apache's "phases", without which config will stay a mystery
forever.
- -- tomás
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iEYEARECAAYFAlkIbHoACgkQBcgs9XrR2kZsnQCfcsfSNnV+QLy3FB5NR7aTx+gp
188An05nuNZWwBDgR1ZgaQQ8jQ/II6JU
=YIX4
-----END PGP SIGNATURE-----
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-04-29 05:40 +0200
Re: converting my local site to be https only access Felix Dietrich <felix.dietrich@sperrhaken.name> - 2017-04-29 10:30 +0200
Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-04-29 15:10 +0200
Re: converting my local site to be https only access Jochen Spieker <ml@well-adjusted.de> - 2017-04-29 20:30 +0200
Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-04-29 20:50 +0200
Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-04-30 23:10 +0200
Re: converting my local site to be https only access Dejan Jocic <jodejka@gmail.com> - 2017-04-30 23:50 +0200
Re: converting my local site to be https only access Eike Lantzsch <zp6cge@gmx.net> - 2017-05-01 00:00 +0200
Re: converting my local site to be https only access davidson@freevolt.org - 2017-05-01 02:20 +0200
Re: converting my local site to be https only access Lisi Reisz <lisi.reisz@gmail.com> - 2017-05-01 03:00 +0200
Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-05-01 03:40 +0200
Re: converting my local site to be https only access davidson@freevolt.org - 2017-05-01 21:50 +0200
Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-05-01 03:40 +0200
Re: converting my local site to be https only access Greg Wooledge <wooledg@eeg.ccf.org> - 2017-05-01 15:30 +0200
Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-05-01 16:10 +0200
Re: converting my local site to be https only access rhkramer@gmail.com - 2017-05-01 17:20 +0200
Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-05-01 19:00 +0200
Re: converting my local site to be https only access rhkramer@gmail.com - 2017-05-01 21:00 +0200
Re: converting my local site to be https only access rhkramer@gmail.com - 2017-05-01 21:00 +0200
Re: converting my local site to be https only access davidson@freevolt.org - 2017-05-02 01:40 +0200
Re: converting my local site to be https only access Ric Moore <wayward4now@gmail.com> - 2017-05-03 18:40 +0200
Re: converting my local site to be https only access Jonathan Dowland <jmtd@debian.org> - 2017-05-02 12:40 +0200
Re: converting my local site to be https only access <tomas@tuxteam.de> - 2017-05-02 13:30 +0200
Re: converting my local site to be https only access Jonathan Dowland <jmtd@debian.org> - 2017-05-02 23:20 +0200
Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-05-02 23:40 +0200
Re: converting my local site to be https only access <tomas@tuxteam.de> - 2017-05-03 11:30 +0200
Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-05-03 14:40 +0200
Re: converting my local site to be https only access <tomas@tuxteam.de> - 2017-05-03 15:30 +0200
Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-05-02 22:50 +0200
Re: converting my local site to be https only access Jonathan Dowland <jmtd@debian.org> - 2017-05-02 23:20 +0200
Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-05-02 23:50 +0200
csiph-web