CARVIEW |
Select Language
HTTP/2 200
date: Wed, 23 Jul 2025 23:16:06 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With,Accept-Encoding, Accept, X-Requested-With
x-robots-tag: none
etag: W/"988967b475e2fc1d97988c8c69f8514d"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/
server: github.com
content-encoding: gzip
accept-ranges: bytes
set-cookie: _gh_sess=RreIRdT29Kcng7fiN4ygJWHyrVn6WwIvaeoQ%2FVKLKkP2m%2FTmsn9mOKKAF%2B5tuEU4eXBt%2B9w6cHinIJ8cCHFpCn0rxMvMsTKDgDSpKJ%2FOJL%2BJSSbsaxelYoXYYGSWZc7TrDkiHizE%2FhbbQrEH%2FPx%2FH1EQRzr%2FhSgnv1shR8E%2B8dabtLQPGc2lyCRFFfemAWgvZV6niniWsTtK51Bo8QZgBqmyaHezxf0na%2FYn45uQJ9aXVBj2w%2BMrNKS9rmXvlsn7YyJKb5MX25kkNcUOeS2ejw%3D%3D--FCu9Q0XDqYcNsWLO--v43xmaVaxnlSmOHVcAFfgA%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
set-cookie: _octo=GH1.1.121952308.1753312565; Path=/; Domain=github.com; Expires=Thu, 23 Jul 2026 23:16:05 GMT; Secure; SameSite=Lax
set-cookie: logged_in=no; Path=/; Domain=github.com; Expires=Thu, 23 Jul 2026 23:16:05 GMT; HttpOnly; Secure; SameSite=Lax
x-github-request-id: C634:12F48D:11674F5:14DEC75:68816D35
Proxy http 01 validation · rekby/lets-proxy Wiki · GitHub
Skip to content
Navigation Menu
{{ message }}
This repository was archived by the owner on Oct 27, 2019. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 18
Proxy http 01 validation
Timofey Koolin edited this page Mar 20, 2018
·
4 revisions
In the solutions base server (apache, nginx and etc) have to:
- listen port 80 for handle usual traffic (from internet and from local lets-proxy).
- Proxy requests /.well-known/acme-challenge/ to lets-proxy: https://127.0.0.1:4443/.well-known/acme-challenge/
- Free port 443 (lets-proxy will listen port 443).
Add to global httpd.conf lines:
# Lets encrypt proxy http-01 validation
ProxyPass /.well-known/acme-challenge/ https://127.0.0.1:4443/.well-known/acme-challenge/
Add to every server:
location ^~ /.well-known/acme-challenge/ {
proxy_pass https://127.0.0.1:4443;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
}
Install: Application Request Routing and URL Rewrite modules.
<configuration>
<!-- ... -->
<system.webServer>
<!-- ... -->
<rewrite>
<rules>
<rule name="lets encrypt http-01 validation" patternSyntax="Wildcard" stopProcessing="carview.php?tsp=true">
<match url=".well-known/acme-challenge/*" />
<action type="Rewrite" url="https://127.0.0.1:4443{REQUEST_URI}" appendQueryString="false" />
</rule>
</rules>
</rewrite>
<!-- ... -->
</system.webServer>
<!-- ... -->
</configuration>
In IIS management console:
- Enter in Application Request Routing Cache
- Link "Server Proxy Settings" at right.
- Check "Enable proxy"
- Apply
Next: URL rewriter settings (global for server):
- Add rule(s) at right
- Create "blank rule"
- Set name "lets encrypt http-01 validation" (or something good understand for you, you can't change name of rule in feature).
- Match url: using Wildcards.
- Match url: pattern: .well-known/acme-challenge/*
- Action: Rewrite
- Rewrite URL: https://127.0.0.1:4443{REQUEST_URI}
- Uncheck "Append query string".
- Checl "Stop processing of subsequent rules".
- Apply
В консоли настройки IIS (глобальной - для всего сервера):
- Зайти в Application Request Routing Cache
- Справа в разделе Proxy ссылка Server Proxy Settings
- Поставить вверху галочку "Enable proxy", применить.
Дальше в настройках "Переопределение URL-адресов" (так же глобально для всего сервера):
- Справа "Добавить правила"
- Название: "lets encrypt http-01 validation" (имя само по себе роли не играет, но изменить его потом нельзя и лучше делать понятным).
- Соответствует url-адресу: использование - подстановочные знаки
- Соответствует url-адресу: шаблон .well-known/acme-challenge/*
- Действие: Переопределение
- URL-адрес переопределение: https://127.0.0.1:4443{REQUEST_URI}
- Снять галочку "Добавить строку запроса"
- Поставить галочку "Остановить обработку последующих правил".
- Применить
Clone this wiki locally
You can’t perform that action at this time.