1
0
mirror of https://github.com/esp8266/Arduino.git synced 2025-09-02 09:41:44 +03:00
Files
esp8266/httpd/README
cameronrich 36ac01f46a finished authentication, implemented port/dir protection
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@60 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2007-02-10 05:31:17 +00:00

46 lines
1.4 KiB
Plaintext

axhttpd is a small embedded web server using the axTLS library.
It is based originally on the web server written by Doug Currie which is at:
http://www.hcsw.org/awhttpd.
Basic Authentication
====================
Basic Authentication uses a password file called ".htpasswd", in the
directory to be protected. This file is formatted as the familiar
colon-separated username/encrypted-password pair, records delimited by
newlines. The protection does not carry over to subdirectories. The
utility program htpasswd is included to help manually edit .htpasswd files.
The encryption of this password uses a proprietary algorithm due to the
dependency of many crypt libraries on DES.
An example is in /test_dir/prot (username 'abcd', password is '1234').
Note: This is an mconf configuration option.
HTTP Port Protection
====================
Directories/files can be accessed using the 'http' or 'https' uri prefix. If
normal http access for a directory needs to be disabled, then put
"SSLRequireSSL" into a '.htaccess' file in the directory to be protected.
An example is in /test_dir/prot.
CGI
===
chroot() is now used for added security. However this has the impact of
removing the regular filesystem, so any CGI applications no longer have the
usual access.
So any executables and libraries need to be copied into webroot (under /bin
and /lib).
Failure to do so will result in mystical blank screens (and probably hundreds
of axhttpd instances being created...).