From f479497d6c7ab44d3b34dc800bf583e46634dcf7 Mon Sep 17 00:00:00 2001 From: Dominic Cleal Date: Mon, 7 Dec 2015 10:53:15 +0000 Subject: [PATCH 1/2] Add failing test from ticket #1766 Augeas fails to parse the wordlist (args inside braces) in the SSLRequire directive. --- tests/apache-conf-files/failing/sslrequire-wordlist.conf | 1 + 1 file changed, 1 insertion(+) create mode 100644 tests/apache-conf-files/failing/sslrequire-wordlist.conf diff --git a/tests/apache-conf-files/failing/sslrequire-wordlist.conf b/tests/apache-conf-files/failing/sslrequire-wordlist.conf new file mode 100644 index 000000000..1c06d5497 --- /dev/null +++ b/tests/apache-conf-files/failing/sslrequire-wordlist.conf @@ -0,0 +1 @@ +SSLRequire %{SSL_CLIENT_S_DN_CN} in {"foo@bar.com", "bar@foo.com"} From d7616461676d145ed361588499f1b0c96739ed4a Mon Sep 17 00:00:00 2001 From: Dominic Cleal Date: Tue, 8 Dec 2015 08:04:10 +0000 Subject: [PATCH 2/2] Merge Augeas lens fix for SSLRequire wordlists From https://github.com/hercules-team/augeas/commit/f86a28d03a5c42a6c58293667a95d7794e30a42f Closes: #1766 --- .../letsencrypt_apache/augeas_lens/httpd.aug | 14 ++++++++++++-- .../{failing => passing}/sslrequire-wordlist.conf | 0 2 files changed, 12 insertions(+), 2 deletions(-) rename tests/apache-conf-files/{failing => passing}/sslrequire-wordlist.conf (100%) diff --git a/letsencrypt-apache/letsencrypt_apache/augeas_lens/httpd.aug b/letsencrypt-apache/letsencrypt_apache/augeas_lens/httpd.aug index 83d97f7a4..f54f9fbaa 100644 --- a/letsencrypt-apache/letsencrypt_apache/augeas_lens/httpd.aug +++ b/letsencrypt-apache/letsencrypt_apache/augeas_lens/httpd.aug @@ -59,8 +59,10 @@ let empty = Util.empty_dos let indent = Util.indent (* borrowed from shellvars.aug *) -let char_arg_dir = /([^\\ '"\t\r\n]|[^ '"\t\r\n]+[^\\ '"\t\r\n])|\\\\"|\\\\'/ +let char_arg_dir = /([^\\ '"{\t\r\n]|[^ '"{\t\r\n]+[^\\ '"\t\r\n])|\\\\"|\\\\'/ let char_arg_sec = /[^ '"\t\r\n>]|\\\\"|\\\\'/ +let char_arg_wl = /([^\\ '"},\t\r\n]|[^ '"},\t\r\n]+[^\\ '"},\t\r\n])/ + let cdot = /\\\\./ let cl = /\\\\\n/ let dquot = @@ -77,11 +79,19 @@ let comp = /[<>=]?=/ let arg_dir = [ label "arg" . store (char_arg_dir+|dquot|squot) ] let arg_sec = [ label "arg" . store (char_arg_sec+|comp|dquot|squot) ] +let arg_wl = [ label "arg" . store (char_arg_wl+|dquot|squot) ] + +(* comma-separated wordlist as permitted in the SSLRequire directive *) +let arg_wordlist = + let wl_start = Util.del_str "{" in + let wl_end = Util.del_str "}" in + let wl_sep = del /[ \t]*,[ \t]*/ ", " + in [ label "wordlist" . wl_start . arg_wl . (wl_sep . arg_wl)* . wl_end ] let argv (l:lens) = l . (sep_spc . l)* let directive = [ indent . label "directive" . store word . - (sep_spc . argv arg_dir)? . eol ] + (sep_spc . argv (arg_dir|arg_wordlist))? . eol ] let section (body:lens) = (* opt_eol includes empty lines *) diff --git a/tests/apache-conf-files/failing/sslrequire-wordlist.conf b/tests/apache-conf-files/passing/sslrequire-wordlist.conf similarity index 100% rename from tests/apache-conf-files/failing/sslrequire-wordlist.conf rename to tests/apache-conf-files/passing/sslrequire-wordlist.conf