From cc4c86985dfd130a7bd6b31a93a3655c268cb4c6 Mon Sep 17 00:00:00 2001 From: Chris Koeritz Date: Sun, 17 Dec 2017 11:36:43 +0000 Subject: [PATCH] fixed pattern replace for hsts --- scripts/site_avenger/revamp_cakelampvm.sh | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/scripts/site_avenger/revamp_cakelampvm.sh b/scripts/site_avenger/revamp_cakelampvm.sh index 53464faf..a646a85e 100644 --- a/scripts/site_avenger/revamp_cakelampvm.sh +++ b/scripts/site_avenger/revamp_cakelampvm.sh @@ -140,7 +140,8 @@ fi # https site once the domain name switch has occurred. # we operate only on our own specialized tls conf file. hopefully no one has messed with it besides revamp. -search_replace "^[ ]*Header always set Strict-Transport-Security.*" "# not good for cakelampvm.com -- Header always set Strict-Transport-Security \"max-age=63072000; includeSubdomains;\"" /etc/apache2/conf-library/tls-enabling.conf +# note the use of the character class :blank: below to match spaces or tabs. +search_replace "^[[:blank:]]*Header always set Strict-Transport-Security.*" "# not good for cakelampvm.com -- Header always set Strict-Transport-Security \"max-age=63072000; includeSubdomains;\"" /etc/apache2/conf-library/tls-enabling.conf if [ $? -ne 0 ]; then echo the apache tls-enabling.conf file seems to have already been patched to disable strict transport security. good. else -- 2.34.1