Re: [Sks-devel] Apache setup for refusing to serve bad keys

[John Zaitseff]

Hi, all,

I previously wrote:

> [...] Here is my version for the Apache server.  It allows you to
> include the list of keys in a separate file that can be updated at
> any time without restarting/reloading the server.

I've since revised the Apache configuration file to contain:

  RewriteEngine on

  RewriteMap  badkeys     "txt:/etc/sks/apache-badkeys"
  RewriteMap  lc          int:tolower

  RewriteCond "%{REQUEST_URI}"            "^/pks/lookup"
  RewriteCond "%{QUERY_STRING}"           "op=(get|index|search|vindex)"
  RewriteCond "%{QUERY_STRING}"           "search=([^&]+)&?"
  RewriteCond "${badkeys:${lc:%1}|ok}"    "!=ok"
  RewriteRule ^/pks/lookup                - [L,G]

Yours truly,

John Zaitseff

--
John Zaitseff                   ,--_|\    The ZAP Group
Telephone: +61 2 9643 7737     /      \   Sydney, Australia
Email: address@hidden   \_,--._*   https://www.zap.org.au/
                                     v