From 21bb177b899d96f26817897b62e1f6de204099fc Mon Sep 17 00:00:00 2001
From: zhouwuqing <zhouwuqing@cmhi.chinamobile.com>
Date: Thu, 22 Aug 2019 01:11:06 -0700
Subject: [PATCH] =?UTF-8?q?Mod=20aaa-12=20add=20lighttpd=20RCA:=20SOL:=20?=
 =?UTF-8?q?=E4=BF=AE=E6=94=B9=E4=BA=BA:zhouwuqing=20=E6=A3=80=E8=A7=86?=
 =?UTF-8?q?=E4=BA=BA:zhouwuqing?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 libs/files/lighttpd/config/lighttpd.conf | 148 -----------------------
 1 file changed, 148 deletions(-)
 delete mode 100644 libs/files/lighttpd/config/lighttpd.conf

diff --git a/libs/files/lighttpd/config/lighttpd.conf b/libs/files/lighttpd/config/lighttpd.conf
deleted file mode 100644
index ccd995c23..000000000
--- a/libs/files/lighttpd/config/lighttpd.conf
+++ /dev/null
@@ -1,148 +0,0 @@
-var.log_root    = "/home/cmhi/secogateway/libs/files/lighttpd/log"
-var.server_root = "/home/cmhi/secogateway/libs/files/lighttpd"
-var.state_dir   = "/home/cmhi/secogateway/libs/files/lighttpd"
-var.home_dir    = "/home/cmhi/secogateway/libs/files/lighttpd"
-var.conf_dir    = "/home/cmhi/secogateway/libs/files/lighttpd/config"
-
-var.vhosts_dir  = server_root + "/vhosts"
-
-var.cache_dir   = server_root + "/cache"
-
-var.socket_dir  = home_dir + "/sockets"
-
-include "modules.conf"
-
-server.port = 8080
-
-server.use-ipv6 = "disable"
-
-#server.username  = "lighttpd"
-#server.groupname = "lighttpd"
-
-server.document-root = server_root + "/webpages"
-
-server.pid-file = state_dir + "/lighttpd.pid"
-
-server.errorlog             = log_root + "/error.log"
-
-include "conf.d/access_log.conf"
-
-include "conf.d/debug.conf"
-
-server.event-handler = "linux-sysepoll"
-
-##
-## The basic network interface for all platforms at the syscalls read()
-## and write(). Every modern OS provides its own syscall to help network
-## servers transfer files as fast as possible 
-##
-## sendfile       - is recommended for small files.
-## writev         - is recommended for sending many large files
-##
-server.network-backend = "sendfile"
-
-
-server.max-fds = 2048
-
-server.stat-cache-engine = "simple"
-
-server.max-connections = 1024
-
-index-file.names += (
-  "index.xhtml", "index.html", "index.htm", "default.htm", "index.php"
-)
-
-url.access-deny             = ( "~", ".inc" )
-
-
-static-file.exclude-extensions = ( ".php", ".pl", ".fcgi", ".scgi" )
-
-
-
-include "conf.d/mime.conf"
-
-include "conf.d/dirlisting.conf"
-
-server.follow-symlink = "enable"
-
-
-server.upload-dirs = ( "/home/cmhi/secogateway/libs/files/lighttpd/upload" )
-
-
-
-#######################################################################
-##
-##  SSL Support
-## ------------- 
-##
-## To enable SSL for the whole server you have to provide a valid
-## certificate and have to enable the SSL engine.::
-##
-##   ssl.engine = "enable"
-##   ssl.pemfile = "/path/to/server.pem"
-##
-## The HTTPS protocol does not allow you to use name-based virtual
-## hosting with SSL. If you want to run multiple SSL servers with
-## one lighttpd instance you must use IP-based virtual hosting: ::
-##
-## Mitigate CVE-2009-3555 by disabling client triggered renegotation
-## This is enabled by default.
-##
-## IMPORTANT: this setting can only be used in the global scope.
-## It does *not* work inside conditionals
-##
-#   ssl.disable-client-renegotiation = "enable"
-##
-##   $SERVER["socket"] == "10.0.0.1:443" {
-##     ssl.engine                  = "enable"
-##     ssl.pemfile                 = "/etc/ssl/private/www.example.com.pem"
-##     #
-##     # (Following SSL/TLS Deployment Best Practices 1.3 / 17 September 2013 from:
-##     # https://www.ssllabs.com/projects/best-practices/index.html)
-##     # - BEAST is considered mitigaed on client side now, and new weaknesses have been found in RC4,
-##     #   so it is strongly advised to disable RC4 ciphers (HIGH doesn't include RC4)
-##     # - It is recommended to disable 3DES too (although disabling RC4 and 3DES breaks IE6+8 on Windows XP,
-##     #   so you might want to support 3DES for now - just remove the '!3DES' parts below).
-##     # - The examples below prefer ciphersuites with "Forward Secrecy" (and ECDHE over DHE (alias EDH)), remove '+kEDH +kRSA'
-##     #   if you don't want that.
-##     # - SRP and PSK are not supported anyway, excluding those ('!kSRP !kPSK') just keeps the list smaller (easier to review)
-##     # Check your cipher list with: openssl ciphers -v '...' (use single quotes as your shell won't like ! in double quotes)
-##     #
-##     # If you know you have RSA keys (standard), you can use:
-##     ssl.cipher-list             = "aRSA+HIGH !3DES +kEDH +kRSA !kSRP !kPSK"
-##     # The more generic version (without the restriction to RSA keys) is
-##     # ssl.cipher-list           = "HIGH !aNULL !3DES +kEDH +kRSA !kSRP !kPSK"
-##     #
-##     # Make the server prefer the order of the server side cipher suite instead of the client suite.
-##     # This option is enabled by default, but only used if ssl.cipher-list is set.
-##     #
-##     # ssl.honor-cipher-order = "enable"
-##     #
-##     server.name                 = "www.example.com"
-##
-##     server.document-root        = "/srv/www/vhosts/example.com/www/"
-##   }
-##
-
-## If you have a .crt and a .key file, cat them together into a
-## single PEM file:
-## $ cat /etc/ssl/private/lighttpd.key /etc/ssl/certs/lighttpd.crt \
-##   > /etc/ssl/private/lighttpd.pem
-##
-#ssl.pemfile = "/etc/ssl/private/lighttpd.pem"
-
-##
-## optionally pass the CA certificate here.
-##
-##
-#ssl.ca-file = ""
-
-##
-## and the CRL revocation list here.
-##
-##
-#ssl.ca-crl-file = ""
-
-##
-#######################################################################
-