Skip to main content

Generate secure download urls with lighttp

with mod_secdownload, lighttp can generate secure download urls for a given time period.
Generated url's format is <uri-prefix>/<token>/<timestamp-in-hex>/<rel-path> and looks like
"videos1.testing.com/vd1/2c2456cb1fa665644938b59950ba8ea5/4ef09a53/somevideo.mpeg"
<token> is an MD5 of
1. a secret string (user supplied
2. <rel-path> (starts with /)
3. <timestamp-in-hex>
There are some options for mod_secdownload for each virtualhost:
secdownload.secret = <string>
secdownload.document-root = <string> (default: /)
secdownload.timeout = <short>
secdownload.uri-prefix = <string> (default: 60 seconds)
an example of lighttpd.conf as:
server.document-root = "/webroot/"
server.port = 80
server.username = "lighttpd"
server.groupname = "lighttpd"

## modules to load
# at least mod_access and mod_accesslog should be loaded
# all other module should only be loaded if really neccesary
# - saves some time
# - saves memory
server.modules              = (
#                               "mod_rewrite",
#                               "mod_redirect",
#                               "mod_cml",
#                               "mod_trigger_b4_dl",
#                               "mod_auth",
#                               "mod_status",
#                               "mod_setenv",
#                               "mod_fastcgi",
#                               "mod_proxy",
#                               "mod_simple_vhost",
#                               "mod_evhost",
#                               "mod_userdir",
#                               "mod_cgi",
#                               "mod_compress",
#                               "mod_ssi",
#                               "mod_usertrack",
#                               "mod_expire",
#                               "mod_rrdtool"
                                "mod_alias",
                                "mod_access",
                                "mod_accesslog",
                                "mod_secdownload" )

mimetype.assign = (
  ".html"       =>      "text/html",
  ".txt"        =>      "text/plain",
  ".gif"          =>      "image/gif",
  ".jpg"        =>      "image/jpeg",
  ".jpeg"         =>      "image/jpeg",
  ".png"        =>      "image/png",
  ".mp3"          =>      "audio/mpeg",
  ".wma"          =>      "audio/x-ms-wma",
  ".wav"          =>      "audio/x-wav",
  ".mpg"        =>      "video/mpeg",
  ".mp4"        =>      "video/mpeg",
  ".mpeg"       =>      "video/mpeg",
  ".m2p"        =>      "video/mpeg",
  ".mov"          =>      "video/quicktime",
  ".qt"           =>      "video/quicktime",
  ".avi"          =>      "video/x-msvideo",
  ".asf"          =>      "video/x-ms-asf",
  ".wmv"          =>      "video/x-ms-wmv",
  ".3gp"          =>      "video/3gpp",
  ""            =>      "application/octet-stream"
)

static-file.exclude-extensions = ( ".fcgi", ".php", ".rb", "~", ".inc" )
index-file.names               = ( "index.html" )
accesslog.filename             = "/var/log/lighttpd/access.log"

$HTTP["host"] =~ "videos1\.testing\.com" {
  server.document-root        = "/webroot/"
  server.errorlog             = "/var/log/lighttpd/videos1.log"

  secdownload.secret          = "secret1"
  secdownload.document-root   = "/webroot/videos1/"
  secdownload.uri-prefix      = "/vd1/"
  secdownload.timeout         = 300
}

$HTTP["host"] =~ "videos2\.testing\.com" {
  server.document-root        = "/webroot/"
  server.errorlog             = "/var/log/lighttpd/videos2.log"

  secdownload.secret          = "secret2"
  secdownload.document-root   = "/webroot/videos2/"
  secdownload.uri-prefix      = "/vd2/"
  secdownload.timeout         = 300
}

## where to send error-messages to
server.errorlog             = "/var/log/lighttpd/error.log"

## send a different Server: header
## be nice and keep it at lighttpd
server.tag                 = "VIDEOS"

For your application to ganerate same url with lighttp, you can use this php:
<?php
$secret = "secret1";
$uri_prefix = "/vd1/";

$f = "/somevideo.mpeg";

$t = time();
$t_hex = sprintf("%08x", $t);
$m = md5($secret.$f.$t_hex);

printf('http://videos1.testing.com'.$uri_prefix.$m.'/'.$t_hex.$f);
?>

Comments

Popular posts from this blog

Creating Multiple VLANs over Bonding Interfaces with Proper Routing on a Centos Linux Host

In this post, I am going to explain configuring multiple VLANs on a bond interface. First and foremost, I would like to describe the environment and give details of the infrastructure. The server has 4 Ethernet links to a layer 3 switch with names: enp3s0f0, enp3s0f1, enp4s0f0, enp4s0f1 There are two bond interfaces both configured as active-backup bond0, bond1 enp4s0f0 and enp4s0f1 interfaces are bonded as bond0. Bond0 is for making ssh connections and management only so corresponding switch ports are not configured in trunk mode. enp3s0f0 and enp3s0f1 interfaces are bonded as bond1. Bond1 is for data and corresponding switch ports are configured in trunk mode. Bond0 is the default gateway for the server and has IP address 10.1.10.11 Bond1 has three subinterfaces with VLAN 4, 36, 41. IP addresses are 10.1.3.11, 10.1.35.11, 10.1.40.11 respectively. Proper communication with other servers on the network we should use routing tables. There are three

PowerShell Script for Switching Between Multiple Windows

Windows PowerShell has strong capabilities. I have a separate computer with a big lcd screen in which I am watching regularly some web based monitoring applications. So I need those application windows switch between on a timely basis. Then I wrote this simple powershell script to achieve this. You can change it according to your needs.