From: Chris Koeritz Date: Sun, 17 Dec 2017 11:36:43 +0000 (+0000) Subject: fixed pattern replace for hsts X-Git-Tag: 2.140.106^2~9^2~5 X-Git-Url: https://feistymeow.org/gitweb/?p=feisty_meow.git;a=commitdiff_plain;h=cc4c86985dfd130a7bd6b31a93a3655c268cb4c6 fixed pattern replace for hsts --- diff --git a/scripts/site_avenger/revamp_cakelampvm.sh b/scripts/site_avenger/revamp_cakelampvm.sh index 53464faf..a646a85e 100644 --- a/scripts/site_avenger/revamp_cakelampvm.sh +++ b/scripts/site_avenger/revamp_cakelampvm.sh @@ -140,7 +140,8 @@ fi # https site once the domain name switch has occurred. # we operate only on our own specialized tls conf file. hopefully no one has messed with it besides revamp. -search_replace "^[ ]*Header always set Strict-Transport-Security.*" "# not good for cakelampvm.com -- Header always set Strict-Transport-Security \"max-age=63072000; includeSubdomains;\"" /etc/apache2/conf-library/tls-enabling.conf +# note the use of the character class :blank: below to match spaces or tabs. +search_replace "^[[:blank:]]*Header always set Strict-Transport-Security.*" "# not good for cakelampvm.com -- Header always set Strict-Transport-Security \"max-age=63072000; includeSubdomains;\"" /etc/apache2/conf-library/tls-enabling.conf if [ $? -ne 0 ]; then echo the apache tls-enabling.conf file seems to have already been patched to disable strict transport security. good. else