forked from EFForg/https-everywhere
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathmakeconfig.sh
More file actions
executable file
·64 lines (56 loc) · 1.97 KB
/
Copy pathmakeconfig.sh
File metadata and controls
executable file
·64 lines (56 loc) · 1.97 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
#!/bin/bash -ex
#
# Generate a local Apache config that will listen with SSL on ports 3001-3100.
# The default behavior is to respond relatively promptly on /, while sleeping
# for 100 seconds before responding on /submit_cert.
cd $(dirname $0)
START=3001
END=3100
cat <<EOF >apache2.conf
ServerName https_everywhere_test
ServerRoot "."
DocumentRoot "."
PidFile ./apache2.pid
ErrorLog ./error.log
LoadModule python_module /usr/lib/apache2/modules/mod_python.so
LoadModule rewrite_module /usr/lib/apache2/modules/mod_rewrite.so
LoadModule mime_module /usr/lib/apache2/modules/mod_mime.so
LoadModule mpm_prefork_module /usr/lib/apache2/modules/mod_mpm_prefork.so
LoadModule ssl_module /usr/lib/apache2/modules/mod_ssl.so
LoadModule authz_core_module /usr/lib/apache2/modules/mod_authz_core.so
LoadModule cgi_module /usr/lib/apache2/modules/mod_cgi.so
LoadModule alias_module /usr/lib/apache2/modules/mod_alias.so
LoadModule dir_module /usr/lib/apache2/modules/mod_dir.so
SSLVerifyDepth 1
SSLOptions +StdEnvVars
SSLCipherSuite HIGH:MEDIUM:!aNULL:!eNULL:@STRENGTH:-DHE-RSA-AES128-SHA:-EDH-RSA-DES-CBC3-SHA:-DHE-RSA-AES256-SHA:-DHE-RSA-AES256-SHA
<Directory />
SetHandler mod_python
PythonHandler mod_python.publisher
PythonDebug On
Options +ExecCGI
DirectoryIndex index.py
</Directory>
EOF
for n in `seq $START $END` ; do cat >> apache2.conf <<EOF
Listen 127.0.0.1:$n
<VirtualHost *:$n>
SSLEngine on
SSLCertificateFile certificates/$n.crt
SSLCertificateKeyFile certificates/$n.key
</VirtualHost>
EOF
done
mkdir -p certificates
cd certificates
onecert() {
openssl genrsa -out $1.key 2048
openssl req -new -key $1.key -out $1.csr -subj /CN=localhost
openssl x509 -req -days 1826 -in $1.csr -CA ca.crt -CAkey ca.key -set_serial $RANDOM -out $1.crt
rm $1.csr
}
openssl genrsa -out ca.key 2048
openssl req -new -x509 -days 1826 -key ca.key -out ca.crt -subj /CN=https-everywhere-test-ca
for n in `seq $START $END` ; do
onecert $n
done