aszlig 6fe989eaed nixos/tests/acme: Use exact match in TOS location ... Since the switch to check the nginx config with gixy in 59fac1a6d7, the ACME test doesn't build anymore, because gixy reports the following false-positive (reindented): >> Problem: [alias_traversal] Path traversal via misconfigured alias. Severity: MEDIUM Description: Using alias in a prefixed location that doesn't ends with directory separator could lead to path traversal vulnerability. Additional info: https://github.com/yandex/gixy/blob/master/docs/en/plugins/aliastraversal.md Pseudo config: server { server_name letsencrypt.org; location /documents/2017.11.15-LE-SA-v1.2.pdf { alias /nix/store/y4h5ryvnvxkajkmqxyxsk7qpv7bl3vq7-2017.11.15-LE-SA-v1.2.pdf; } } The reason this is a false-positive is because the destination is not a directory, so something like "/foo.pdf../other.txt" won't work here, because the resulting path would be ".../destfile.pdf../other.txt". Nevertheless it's a good idea to use the exact match operator (=), to not only shut up gixy but also gain a bit of performance in lookup (not that it would matter in our test). Signed-off-by: aszlig <aszlig@nix.build>		2019-04-06 12:51:56 +02:00
..
common.nix	nixos tests: move common configuration into separate file	2018-09-24 20:07:33 +01:00
default.nix	nixos/tests/acme: Use exact match in TOS location	2019-04-06 12:51:56 +02:00
mkcerts.nix	nixos/tests/letsencrypt: Hardcode certs and keys	2018-07-12 02:32:46 +02:00
mkcerts.sh	nixos/tests/letsencrypt: Hardcode certs and keys	2018-07-12 02:32:46 +02:00
snakeoil-certs.nix	nixos/tests/letsencrypt: Hardcode certs and keys	2018-07-12 02:32:46 +02:00