From 7fcbedf3507e20e7b1f689524b00bf5f84f93582 Mon Sep 17 00:00:00 2001
From: Daniel Berteaud <daniel@firewall-services.com>
Date: Sat, 23 Jan 2016 15:08:38 +0100
Subject: [PATCH] Don't force SSL for acme challenges URI

---
 .../etc/httpd/conf/httpd.conf/WebAppVirtualHost/25SSLDirectives  | 1 +
 1 file changed, 1 insertion(+)

diff --git a/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/WebAppVirtualHost/25SSLDirectives b/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/WebAppVirtualHost/25SSLDirectives
index c2239d4..81074d7 100644
--- a/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/WebAppVirtualHost/25SSLDirectives
+++ b/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/WebAppVirtualHost/25SSLDirectives
@@ -8,6 +8,7 @@
     elsif (($ssl =~ m/^enabled|yes|on|1$/i) || ($auth =~ /^LemonLDAP/)){
         $OUT .=<<'EOF';
     RewriteEngine on
+    RewriteCond %{REQUEST_URI} !^/.well-known/acme-challenge/.*
     RewriteRule ^/(.*|$) https://%{HTTP_HOST}/$1 [L,R]
 
 EOF