#
# OpenXPKI is a Certification Authority
#
# OpenXPKI-Client-HTML-Mason is a webinterface to said CA using mod_perl 
# and HTML::Mason to generate the HTML pages
#

PerlAddVar MasonDataDir  "/var/cache/mason"
PerlAddVar MasonCompRoot "/usr/share/openxpki/Client-HTML-Mason"
PerlAddVar MasonAllowGlobals "$context"
PerlAddVar MasonAllowGlobals "%session_cache"

# Alias OpenXPKI into the docroot - If you change this, change the 
# LocationMatch references below as well
Alias /openxpki /usr/share/openxpki/Client-HTML-Mason

# ACL - Only allow access from localhost
<Location /openxpki>
    Order deny,allow
    Deny from all
    Allow from 127.0.0.1
    Allow from ::1
</Location>


# Set the correct handler, please take care to change the path if you 
# should change the Alias definition above

# Serve these requests through Mason.
<LocationMatch "/openxpki/.*\.html$">
  SetHandler perl-script
  PerlHandler OpenXPKI::Client::HTML::Mason::ApacheHandler
</LocationMatch>

# this is necessary to make internet explorer happy because it do not 
# understand content types
	<LocationMatch "/openxpki/.*\.crt$">
  SetHandler perl-script
  PerlHandler OpenXPKI::Client::HTML::Mason::ApacheHandler
</LocationMatch>

# Hide private components from users.
<LocationMatch "/openxpki/.*(handler|mhtml)$">
  Order allow,deny
  Deny from all
</LocationMatch>

# you can set the locale prefix and the location of the socket file using
# environment variables
SetEnv OPENXPKI_SOCKET_FILE /var/lib/openxpki/openxpki.socket
SetEnv OPENXPKI_LOCALE_PREFIX /usr/share/locale