view release on metacpan or  search on metacpan

demo/httpdconf/startup.pl  view on Meta::CPAN

	minSessQOP => 128, minAuthQOP => 128,
	authRealm => 'Acme',
	cookieDomain => {
		0 => '.acme.com',
		40 => '.acme.com',
		128 => 'tom.acme.com'
	},
	authenURL => 'https://tom.acme.com/authen',
	defaultURL => 'https://tom.acme.com/protected',
	renewURL => 'https://tom.acme.com/renew',
	timeoutURL => 'https://tom.acme.com/signout/timeout.html',
	adminURL => 'https://tom.acme.com/changeid',
	errorURL => 'http://tom.acme.com/error.html'
);

## Two-factor auth (X.509 & PIN) issuing multiple cookies w/ secure wildcard
$Acme::twofact = Apache::SecSess::Cookie::X509PIN->new(
	dbo => Apache::SecSess::DBI->new(
		dbifile => '/usr/local/apache/conf/private/dbilogin.txt'
	),
	secretFile => '/usr/local/apache/conf/private/ckysec.txt',
	lifeTime => 1440, idleTime => 60, renewRate => 5,
	minSessQOP => 128, minAuthQOP => 128,
	authRealm => 'Acme',
	cookieDomain => {
		0 => '.acme.com',
		40 => '.acme.com',      # insecure wildcard domain
		'64,128' => '.sec.acme.com', # secure wildcard domain
		128 => 'john.sec.acme.com'
	},
	authenURL => 'https://john.sec.acme.com/authen',
	defaultURL => 'https://john.sec.acme.com/protected',
	renewURL => 'https://john.sec.acme.com/renew',
	timeoutURL => 'https://john.sec.acme.com/signout/timeout.html',
	adminURL => 'https://john.sec.acme.com/changeid',
	errorURL => 'http://john.sec.acme.com/error.html'
);

#
# multi-host Cookie/URL chaining
#

## stu.transacme.com standard cookies (strong auth: X.509 & PIN)
$Acme::stu = Apache::SecSess::Cookie::X509PIN->new(
	dbo => Apache::SecSess::DBI->new(
		dbifile => '/usr/local/apache/conf/private/dbilogin.txt'
	),
	secretFile => '/usr/local/apache/conf/private/ckysec.txt',
	lifeTime => 1440, idleTime => 60, renewRate => 5,
	minSessQOP => 128, minAuthQOP => 128,
	authRealm => 'Acme',
	cookieDomain => { 128 => 'stu.transacme.com' },
	authenURL => 'https://stu.transacme.com/authen',
	defaultURL => 'https://stu.transacme.com/chain',
	renewURL => 'https://stu.transacme.com/renew',
	timeoutURL => 'https://stu.transacme.com/signout/timeout.html',
	adminURL => 'https://stu.transacme.com/changeid',
	errorURL => 'http://stu.transacme.com/error.html'
);

## stu.transacme.com issue mangled-URL credentials based on stu cookies
$Acme::chain = Apache::SecSess::URL::Cookie->new(
	dbo => Apache::SecSess::DBI->new(
		dbifile => '/usr/local/apache/conf/private/dbilogin.txt'
	),
	secretFile => '/usr/local/apache/conf/private/ckysec.txt',
	lifeTime => 1440, idleTime => 60, renewRate => 5,
	sessQOP => 128, authQOP => 128,
	minSessQOP => 128, minAuthQOP => 128,
	authRealm => 'Acme',
	authenURL => 'https://stu.transacme.com/authen',
	chainURLS => [
		'https://milt.sec.acme.com/authen', 
		'https://noam.acme.org/authen'
	],
	issueURL => 'https://stu.transacme.com/chain',
	defaultURL => 'https://stu.transacme.com/protected',
	renewURL => 'https://stu.transacme.com/renew',
	timeoutURL => 'https://stu.transacme.com/signout/timeout.html',
	adminURL => 'https://stu.transacme.com/changeid',
	errorURL => 'http://stu.transacme.com/error.html'
);

## noam.acme.org cookies based on mangled-URL
$Acme::noam = Apache::SecSess::Cookie::URL->new(
	dbo => Apache::SecSess::DBI->new(
		dbifile => '/usr/local/apache/conf/private/dbilogin.txt'
	),
	secretFile => '/usr/local/apache/conf/private/ckysec.txt',
	lifeTime => 1440, idleTime => 60, renewRate => 5,
	minSessQOP => 128, minAuthQOP => 128,
	authRealm => 'Acme',
	cookieDomain => { 128 => 'noam.acme.org' },
	authenURL => 'https://stu.transacme.com/chain',
	defaultURL => 'https://noam.acme.org/protected',
	renewURL => 'https://noam.acme.org/renew',
	timeoutURL => 'https://noam.acme.org/signout/timeout.html',
	adminURL => 'https://noam.acme.org/changeid',
	errorURL => 'http://noam.acme.org/error.html'
);

## milt.sec.acme.com multi-cookies based on mangled-URL
$Acme::milt = Apache::SecSess::Cookie::URL->new(
	dbo => Apache::SecSess::DBI->new(
		dbifile => '/usr/local/apache/conf/private/dbilogin.txt'
	),
	secretFile => '/usr/local/apache/conf/private/ckysec.txt',
	lifeTime => 1440, idleTime => 60, renewRate => 5,
	minSessQOP => 128, minAuthQOP => 128,
	authRealm => 'Acme',
	cookieDomain => {
		0 => '.acme.com',
		40 => '.acme.com',           # insecure wildcard domain
		'64,128' => '.sec.acme.com', # secure wildcard domain
		128 => 'milt.sec.acme.com'
	},
	authenURL => 'https://stu.transacme.com/chain',
	defaultURL => 'https://milt.sec.acme.com/protected',
	renewURL => 'https://milt.sec.acme.com/renew',
	timeoutURL => 'https://milt.sec.acme.com/signout/timeout.html',
	adminURL => 'https://milt.sec.acme.com/changeid',