From a37e1f8fc1aaed0c6311ebe4afbb1d7a6b2016bd Mon Sep 17 00:00:00 2001
From: Daniel Berteaud <daniel@firewall-services.com>
Date: Sat, 23 Jan 2016 16:12:09 +0100
Subject: [PATCH] Don't force SSL for acme challenges URI

---
 .../httpd/conf/httpd.conf/UserManagerVirtualHost/25SSLDirectives | 1 +
 1 file changed, 1 insertion(+)

diff --git a/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/UserManagerVirtualHost/25SSLDirectives b/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/UserManagerVirtualHost/25SSLDirectives
index 01d0a5f..19d3d49 100644
--- a/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/UserManagerVirtualHost/25SSLDirectives
+++ b/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/UserManagerVirtualHost/25SSLDirectives
@@ -7,6 +7,7 @@
     else {
         $OUT .=<<'EOF';
     RewriteEngine on
+    RewriteCond %{REQUEST_URI} !^/.well-known/acme-challenge/.*
     RewriteRule ^/(.*|$) https://%{HTTP_HOST}/$1 [L,R]
 
 EOF