From 5ed37d37792a727346a2221dd223b97b1fa6d626 Mon Sep 17 00:00:00 2001
From: "community.cacert.org"
 <community.cacert.org@d4452222-2f33-11de-9270-010000000000>
Date: Thu, 21 May 2009 12:00:24 +0000
Subject: [PATCH] apache configuration file add

git-svn-id: http://svn.cacert.cl/Software/Voting/vote@36 d4452222-2f33-11de-9270-010000000000
---
 .htaccess | 33 +++++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 .htaccess

diff --git a/.htaccess b/.htaccess
new file mode 100644
index 0000000..a189cbe
--- /dev/null
+++ b/.htaccess
@@ -0,0 +1,33 @@
+<IfModule mod_php5.c>
+php_flag        display_errors  Off
+php_flag        log_errors      On
+php_value       error_log       syslog
+
+php_flag        safe_mode      		On
+php_flag        safe_mode_gid  		On
+php_value 	open_basedir  		/var/www/board
+php_value 	safe_mode_exec_dir	/var/empty
+</IfModule>
+
+<FilesMatch "^database.*$">
+	Order Deny,Allow
+	Deny from all
+</FilesMatch>
+
+
+
+
+<FilesMatch "^(motion|vote|proxy)\.php$">
+	# these files require authentication
+	<IfModule mod_ssl.c>
+	SSLOptions +StdEnvVars +ExportCertData
+	SSLUserName SSL_CLIENT_S_DN_Email
+	SSLVerifyClient optional
+		<IfModule mod_rewrite.c>
+		RewriteEngine        on
+		RewriteCond     %{SSL:SSL_CLIENT_VERIFY} !=SUCCESS
+		RewriteRule     .? - [F]
+		ErrorDocument 403 "You need a client side certificate issued by CAcert to access this url"
+		</IfModule>
+	</IfModule>
+</FilesMatch>