The problem of apache Certification

my apache is configured with basic auth.
suppose my ip address is 111.111.111.111

/var/www/html/remote.html

it is a test

curl-u xxxx:xxxx-I http://111.111.111.111/remote.
gets such an output

HTTP/1.1 200 OK
Date: Fri, 07 Sep 2018 03:26:06 GMT
Server: Apache/2.4.6 (CentOS)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, PUT, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Authorization,DNT,User-Agent,Keep-Alive,Content-Type,accept,origin,X-Requested-With
Last-Modified: Fri, 07 Sep 2018 03:22:41 GMT
ETag: "b2-5753f8537e26c"
Accept-Ranges: bytes
Content-Length: 178
Content-Type: text/html; Charset=UTF-8

Why does typing http://111.111.111.111/remote.
in the browser not directly display remote.html
it will bring up the authentication window?

Jun.01,2021

because you did not pass a password, the xxx:xxx after the curl-u parameter is the user name and password. If you pass the user name and password directly, you can also go directly to the page.

you can type

in the browser like this.
http://xxx:xxx@111.111.111.111/remote.html

in this way, the browser will convert the user name and password to the HTTP header: although Authorization, has been changed, it is still regarded as plaintext transmission, which is not secure, which is why it is called Basic.

Menu