[Solved] probem with http to https redirect (connection reset ...)
Added by danmcb over 2 years ago
Hi,
I have a lighty installation running on debian, everything is at latest version AFAIK. I try to setup http to https redirection as per the docs, but when I access any http site from Firefox I get "The connection was reset. The connection to the server was reset while the page was loading."
Full details:
Operating System: Debian GNU/Linux 11 (bullseye) Kernel: Linux 5.10.0-16-amd64
lighttpd/1.4.59 (ssl) - a light and fast webserver
lighttpd.conf :
server.modules = (
"mod_indexfile",
"mod_access",
"mod_alias",
"mod_accesslog",
"mod_ssi",
"mod_deflate",
"mod_fastcgi",
"mod_cgi",
"mod_rewrite",
"mod_redirect"
)
server.document-root = "/var/www"
server.upload-dirs = ( "/var/cache/lighttpd/uploads" )
server.errorlog = "/var/log/lighttpd/error.log"
server.pid-file = "/run/lighttpd.pid"
server.username = "www-data"
server.groupname = "www-data"
server.port = 80
dir-listing.encoding = "utf-8"
server.dir-listing = "disable"
#accesslog.filename = "/var/log/lighttpd/test-access.log"
fastcgi.server = ( ".php" => ((
"bin-path" => "/usr/bin/php-cgi",
"socket" => "/tmp/php.socket"
)))
# features
#https://redmine.lighttpd.net/projects/lighttpd/wiki/Server_feature-flagsDetails
server.feature-flags += ("server.h2proto" => "enable")
server.feature-flags += ("server.h2c" => "enable")
server.feature-flags += ("server.graceful-shutdown-timeout" => 5)
#server.feature-flags += ("server.graceful-restart-bg" => "enable")
# strict parsing and normalization of URL for consistency and security
# https://redmine.lighttpd.net/projects/lighttpd/wiki/Server_http-parseoptsDetails
# (might need to explicitly set "url-path-2f-decode" = "disable"
# if a specific application is encoding URLs inside url-path)
server.http-parseopts = (
"header-strict" => "enable",# default
"host-strict" => "enable",# default
"host-normalize" => "enable",# default
"url-normalize-unreserved"=> "enable",# recommended highly
"url-normalize-required" => "enable",# recommended
"url-ctrls-reject" => "enable",# recommended
"url-path-2f-decode" => "enable",# recommended highly (unless breaks app)
#"url-path-2f-reject" => "enable",
"url-path-dotseg-remove" => "enable",# recommended highly (unless breaks app)
#"url-path-dotseg-reject" => "enable",
#"url-query-20-plus" => "enable",# consistency in query string
)
index-file.names = ( "index.php", "index.html" )
url.access-deny = ( "~", ".inc", ".engine", ".install", ".module", ".sh", "sql", ".theme", ".tpl.php", ".xtmpl", "Entries", "Repository", "Root" )
static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" )
# default listening port for IPv6 falls back to the IPv4 port
include_shell "/usr/share/lighttpd/use-ipv6.pl " + server.port
include_shell "/usr/share/lighttpd/create-mime.conf.pl"
include "/etc/lighttpd/conf-enabled/*.conf"
deflate.cache-dir = "/var/cache/lighttpd/compress/"
deflate.mimetypes = ("text/plain", "text/html", "application/x-javascript", "text/css")
$HTTP["host"] =~ "my-site.com$" {
server.document-root = "/var/www/my-site.com"
index-file.names = ( "index.html", "index.php")
url.rewrite = (
"^/(.*)\.(.+)$" => "$0",
"^/(wp-admin|wp-includes|wp-content|gallery2)/(.*)" => "$0",
"^/(.+)/?$" => "/index.php/$1"
)
server.error-handler-404 = "/index.php"
# url.access-deny = ( ".zip" )
}
$HTTP["host"] =~ "my-other-site.com$" {
server.document-root = "/var/www/my-other-site.com"
index-file.names = ( "index.html", "index.php")
url.rewrite = (
"^/(.*)\.(.+)$" => "$0",
"^/(wp-admin|wp-includes|wp-content|gallery2)/(.*)" => "$0",
"^/(.+)/?$" => "/index.php/$1"
)
server.error-handler-404 = "/index.php"
# url.access-deny = ( ".zip" )
}
# redirects
$HTTP["host"] =~ "^some-other\.com" {
url.redirect = ( "^/(.*)" => "https://www.my-domain.com/" )
}
$HTTP["scheme"] == "http" {
url.redirect = ("" => "https://${url.authority}${url.path}${qsa}" )
url.redirect-code = 308
}
10-ssl.conf:
# /usr/share/doc/lighttpd/ssl.txt
server.modules += ( "mod_openssl" )
# ssl.* in global scope gets inherited by
# $SERVER["socket"] == "..." { ssl.engine = "enable" }
ssl.engine = "enable"
ssl.pemfile = "/etc/letsencrypt/live/www.my-site.com/fullchain.pem"
ssl.privkey = "/etc/letsencrypt/live/www.my-site.com/privkey.pem"
server.name = "my-site.com"
$HTTP["host"] =~ "my-site\.com$" {
ssl.pemfile = "/etc/letsencrypt/live/www.my-site.com/fullchain.pem"
ssl.privkey = "/etc/letsencrypt/live/www.my-site.com/privkey.pem"
server.name = "www.my-site.com"
}
$HTTP["host"] =~ "my-other-site\.com$" {
ssl.pemfile = "/etc/letsencrypt/live/www.my-other-site.com/fullchain.pem"
ssl.privkey = "/etc/letsencrypt/live/www.my-other-site.com/privkey.pem"
server.name = "www.my-other-site.com"
}
$SERVER["socket"] == "0.0.0.0:443" {
ssl.engine = "enable"
# Environment flag for HTTPS enabled
#setenv.add-environment = (
# "HTTPS" => "on"
#)
}
include_shell "/usr/share/lighttpd/use-ipv6.pl 443"
WHen I look at the error log and make the request to the http site, I see this about 10 times:
2022-11-01 14:09:35: mod_openssl.c.3095) SSL: 1 error:1408F09C:SSL routines:ssl3_get_record:http request
I don't see anything in access.log
All help much appreciated.
Replies (14)
RE: probem with http to https redirect (connection reset ...) - Added by gstrauss over 2 years ago
Verify that you have actually restarted lighttpd after making config changes.
(Stop lighttpd, check the process tree, start lighttpd.)
See the commands at How to get support for how to test your config and how to print your entire config.
I have a lighty installation running on debian, everything is at latest version AFAIK.
lighttpd/1.4.59 (ssl) - a light and fast webserver
FYI: You're running Debian. Debian is almost always out-of-date except occasionally on Debian Testing.
The current version of lighttpd is lighttpd 1.4.67. lighttpd 1.4.59 was released Feb 2021, over a year and a half ago.
RE: probem with http to https redirect (connection reset ...) - Added by danmcb over 2 years ago
I am quite certain that I did restart.
lighttpd -tt -f /etc/lighttpd/lighttpd.conf gives no output - I assume that this means no error.
Here is the output of lighttpd -p -f /etc/lighttpd/lighttpd.conf - it's long but OK:
config {
var.PID = 1081100
var.CWD = "/home/daniel"
mimetype.assign = (
".1905.1" => "application/vnd.ieee.1905",
".pcf.Z" => "application/x-font-pcf",
".tar.bz2" => "application/x-gtar-compressed",
".tar.gz" => "application/x-gtar-compressed",
".a2l" => "application/A2L",
# 5
".aml" => "application/AML",
".atf" => "application/ATF",
".atfx" => "application/ATFX",
".atxml" => "application/ATXML",
".cdfx" => "application/CDFX+XML",
# 10
".cea" => "application/CEA",
".dcd" => "application/DCD",
".dii" => "application/DII",
".dit" => "application/DIT",
".lxf" => "application/LXF",
# 15
".mf4" => "application/MF4",
".odx" => "application/ODX",
".pdx" => "application/PDX",
".ez" => "application/andrew-inset",
".anx" => "application/annodex",
# 20
".atom" => "application/atom+xml",
".atomcat" => "application/atomcat+xml",
".atomdeleted" => "application/atomdeleted+xml",
".atomsrv" => "application/atomserv+xml",
".atomsvc" => "application/atomsvc+xml",
# 25
".dwd" => "application/atsc-dwd+xml",
".held" => "application/atsc-held+xml",
".rsat" => "application/atsc-rsat+xml",
".apxml" => "application/auth-policy+xml",
".xdd" => "application/bacnet-xdd+zip",
# 30
".lin" => "application/bbolin",
".xcs" => "application/calendar+xml",
".cbor" => "application/cbor",
".c3ex" => "application/cccex",
".ccmp" => "application/ccmp+xml",
# 35
".ccxml" => "application/ccxml+xml",
".cdmia" => "application/cdmi-capability",
".cdmic" => "application/cdmi-container",
".cdmid" => "application/cdmi-domain",
".cdmio" => "application/cdmi-object",
# 40
".cdmiq" => "application/cdmi-queue",
".cellml" => "application/cellml+xml",
".cml" => "application/cellml+xml",
".cmsc" => "application/cms",
".cpl" => "application/cpl+xml",
# 45
".csrattrs" => "application/csrattrs",
".cu" => "application/cu-seeme",
".mpd" => "application/dash+xml",
".mpdd" => "application/dashdelta",
".davmount" => "application/davmount+xml",
# 50
".dcm" => "application/dicom",
".xmls" => "application/dskpp+xml",
".tsp" => "application/dsptype",
".dssc" => "application/dssc+der",
".xdssc" => "application/dssc+xml",
# 55
".dvc" => "application/dvcs",
".es" => "application/ecmascript",
".efi" => "application/efi",
".emma" => "application/emma+xml",
".emotionml" => "application/emotionml+xml",
# 60
".epub" => "application/epub+zip",
".exi" => "application/exi",
".finf" => "application/fastinfoset",
".fdt" => "application/fdt+xml",
".pfr" => "application/font-tdpfr",
# 65
".spl" => "application/futuresplash",
".geojson" => "application/geo+json",
".gpkg" => "application/geopackage+sqlite3",
".glbin" => "application/gltf-buffer",
".glbuf" => "application/gltf-buffer",
# 70
".gml" => "application/gml+xml",
".gz" => "application/gzip",
".hta" => "application/hta",
".stk" => "application/hyperstudio",
".ink" => "application/inkml+xml",
# 75
".inkml" => "application/inkml+xml",
".ipfix" => "application/ipfix",
".its" => "application/its+xml",
".jar" => "application/java-archive",
".ser" => "application/java-serialized-object",
# 80
".class" => "application/java-vm",
".js" => "application/javascript",
".mjs" => "application/javascript",
".jrd" => "application/jrd+json",
".json" => "application/json",
# 85
".json-patch" => "application/json-patch+json",
".jsonld" => "application/ld+json",
".lgr" => "application/lgr+xml",
".wlnk" => "application/link-format",
".lostxml" => "application/lost+xml",
# 90
".lostsyncxml" => "application/lostsync+xml",
".lpf" => "application/lpf+zip",
".m3g" => "application/m3g",
".hqx" => "application/mac-binhex40",
".cpt" => "application/mac-compactpro",
# 95
".mads" => "application/mads+xml",
".mrc" => "application/marc",
".mrcx" => "application/marcxml+xml",
".ma" => "application/mathematica",
".mb" => "application/mathematica",
# 100
".mml" => "application/mathml+xml",
".mbox" => "application/mbox",
".meta4" => "application/metalink4+xml",
".mets" => "application/mets+xml",
".maei" => "application/mmt-aei+xml",
# 105
".musd" => "application/mmt-usd+xml",
".mods" => "application/mods+xml",
".m21" => "application/mp21",
".mp21" => "application/mp21",
".mdb" => "application/msaccess",
# 110
".doc" => "application/msword",
".mxf" => "application/mxf",
".nq" => "application/n-quads",
".nt" => "application/n-triples",
".orq" => "application/ocsp-request",
# 115
".ors" => "application/ocsp-response",
".asn" => "application/octet-stream",
".bin" => "application/octet-stream",
".deploy" => "application/octet-stream",
".msp" => "application/octet-stream",
# 120
".msu" => "application/octet-stream",
".oda" => "application/oda",
".opf" => "application/oebps-package+xml",
".ogx" => "application/ogg",
".one" => "application/onenote",
# 125
".onepkg" => "application/onenote",
".onetmp" => "application/onenote",
".onetoc2" => "application/onenote",
".oxps" => "application/oxps",
".relo" => "application/p2p-overlay+xml",
# 130
".pdf" => "application/pdf",
".pem" => "application/pem-certificate-chain",
".pgp" => "application/pgp-encrypted",
".asc" => "application/pgp-keys",
".key" => "application/pgp-keys",
# 135
".sig" => "application/pgp-signature",
".prf" => "application/pics-rules",
".p10" => "application/pkcs10",
".p12" => "application/pkcs12",
".pfx" => "application/pkcs12",
# 140
".p7c" => "application/pkcs7-mime",
".p7m" => "application/pkcs7-mime",
".p7z" => "application/pkcs7-mime",
".p7s" => "application/pkcs7-signature",
".p8" => "application/pkcs8",
# 145
".p8e" => "application/pkcs8-encrypted",
".ac" => "application/pkix-attr-cert",
".cer" => "application/pkix-cert",
".crl" => "application/pkix-crl",
".pkipath" => "application/pkix-pkipath",
# 150
".pki" => "application/pkixcmp",
".ai" => "application/postscript",
".eps" => "application/postscript",
".eps2" => "application/postscript",
".eps3" => "application/postscript",
# 155
".epsf" => "application/postscript",
".epsi" => "application/postscript",
".ps" => "application/postscript",
".provx" => "application/provenance+xml",
".cw" => "application/prs.cww",
# 160
".cww" => "application/prs.cww",
".hpub" => "application/prs.hpub+zip",
".rct" => "application/prs.nprend",
".rnd" => "application/prs.nprend",
".rdf-crypt" => "application/prs.rdf-xml-crypt",
# 165
".xsf" => "application/prs.xsf+xml",
".pskcxml" => "application/pskc+xml",
".rdf" => "application/rdf+xml",
".rif" => "application/reginfo+xml",
".rnc" => "application/relax-ng-compact-syntax",
# 170
".rl" => "application/resource-lists+xml",
".rld" => "application/resource-lists-diff+xml",
".rfcxml" => "application/rfc+xml",
".rs" => "application/rls-services+xml",
".rapd" => "application/route-apd+xml",
# 175
".sls" => "application/route-s-tsid+xml",
".rusd" => "application/route-usd+xml",
".gbr" => "application/rpki-ghostbusters",
".mft" => "application/rpki-manifest",
".roa" => "application/rpki-roa",
# 180
".rtf" => "application/rtf",
".scim" => "application/scim+json",
".scq" => "application/scvp-cv-request",
".scs" => "application/scvp-cv-response",
".spq" => "application/scvp-vp-request",
# 185
".spp" => "application/scvp-vp-response",
".sdp" => "application/sdp",
".senmlc" => "application/senml+cbor",
".senml" => "application/senml+json",
".senmlx" => "application/senml+xml",
# 190
".senml-etchc" => "application/senml-etch+cbor",
".senml-etchj" => "application/senml-etch+json",
".senmle" => "application/senml-exi",
".sensmlc" => "application/sensml+cbor",
".sensml" => "application/sensml+json",
# 195
".sensmlx" => "application/sensml+xml",
".sensmle" => "application/sensml-exi",
".soc" => "application/sgml-open-catalog",
".shf" => "application/shf+xml",
".sieve" => "application/sieve",
# 200
".siv" => "application/sieve",
".cl" => "application/simple-filter+xml",
".smi" => "application/smil+xml",
".smil" => "application/smil+xml",
".sml" => "application/smil+xml",
# 205
".rq" => "application/sparql-query",
".srx" => "application/sparql-results+xml",
".sql" => "application/sql",
".gram" => "application/srgs",
".grxml" => "application/srgs+xml",
# 210
".sru" => "application/sru+xml",
".ssml" => "application/ssml+xml",
".stix" => "application/stix+json",
".swidtag" => "application/swid+xml",
".tau" => "application/tamp-apex-update",
# 215
".auc" => "application/tamp-apex-update-confirm",
".tcu" => "application/tamp-community-update",
".cuc" => "application/tamp-community-update-confirm",
".ter" => "application/tamp-error",
".tsa" => "application/tamp-sequence-adjust",
# 220
".sac" => "application/tamp-sequence-adjust-confirm",
".tur" => "application/tamp-update",
".tuc" => "application/tamp-update-confirm",
".jsontd" => "application/td+json",
".odd" => "application/tei+xml",
# 225
".tei" => "application/tei+xml",
".teiCorpus" => "application/tei+xml",
".tfi" => "application/thraud+xml",
".tsq" => "application/timestamp-query",
".tsr" => "application/timestamp-reply",
# 230
".tsd" => "application/timestamped-data",
".trig" => "application/trig",
".ttml" => "application/ttml+xml",
".gsheet" => "application/urc-grpsheet+xml",
".rsheet" => "application/urc-ressheet+xml",
# 235
".td" => "application/urc-targetdesc+xml",
".uis" => "application/urc-uisocketdesc+xml",
".vxml" => "application/voicexml+xml",
".vcj" => "application/voucher-cms+json",
".wasm" => "application/wasm",
# 240
".wif" => "application/watcherinfo+xml",
".wgt" => "application/widget",
".wsdl" => "application/wsdl+xml",
".wspolicy" => "application/wspolicy+xml",
".xav" => "application/xcap-att+xml",
# 245
".xca" => "application/xcap-caps+xml",
".xdf" => "application/xcap-diff+xml",
".xel" => "application/xcap-el+xml",
".xer" => "application/xcap-error+xml",
".xns" => "application/xcap-ns+xml",
# 250
".xht" => "application/xhtml+xml",
".xhtm" => "application/xhtml+xml",
".xhtml" => "application/xhtml+xml",
".xlf" => "application/xliff+xml",
".xml" => "application/xml",
# 255
".dtd" => "application/xml-dtd",
".mod" => "application/xml-dtd",
".ent" => "application/xml-external-parsed-entity",
".xop" => "application/xop+xml",
".xsl" => "application/xslt+xml",
# 260
".xslt" => "application/xslt+xml",
".xspf" => "application/xspf+xml",
".mxml" => "application/xv+xml",
".xhvml" => "application/xv+xml",
".xvm" => "application/xv+xml",
# 265
".xvml" => "application/xv+xml",
".yang" => "application/yang",
".yin" => "application/yin+xml",
".zip" => "application/zip",
".zst" => "application/zstd",
# 270
".1km" => "application/vnd.1000minds.decision-model+xml",
".pwn" => "application/vnd.3M.Post-it-Notes",
".plb" => "application/vnd.3gpp.pic-bw-large",
".psb" => "application/vnd.3gpp.pic-bw-small",
".pvb" => "application/vnd.3gpp.pic-bw-var",
# 275
".sms" => "application/vnd.3gpp2.sms",
".tcap" => "application/vnd.3gpp2.tcap",
".imgcal" => "application/vnd.3lightssoftware.imagescal",
".gph" => "application/vnd.FloGraphIt",
".zmm" => "application/vnd.HandHeld-Entertainment+xml",
# 280
".kne" => "application/vnd.Kinar",
".knp" => "application/vnd.Kinar",
".sdf" => "application/vnd.Kinar",
".mwf" => "application/vnd.MFER",
".daf" => "application/vnd.Mobius.DAF",
# 285
".dis" => "application/vnd.Mobius.DIS",
".mbk" => "application/vnd.Mobius.MBK",
".mqy" => "application/vnd.Mobius.MQY",
".msl" => "application/vnd.Mobius.MSL",
".plc" => "application/vnd.Mobius.PLC",
# 290
".txf" => "application/vnd.Mobius.TXF",
".qwd" => "application/vnd.Quark.QuarkXPress",
".qwt" => "application/vnd.Quark.QuarkXPress",
".qxb" => "application/vnd.Quark.QuarkXPress",
".qxd" => "application/vnd.Quark.QuarkXPress",
# 295
".qxl" => "application/vnd.Quark.QuarkXPress",
".qxt" => "application/vnd.Quark.QuarkXPress",
".twd" => "application/vnd.SimTech-MindMapper",
".twds" => "application/vnd.SimTech-MindMapper",
".aso" => "application/vnd.accpac.simply.aso",
# 300
".imp" => "application/vnd.accpac.simply.imp",
".acu" => "application/vnd.acucobol",
".acutc" => "application/vnd.acucorp",
".atc" => "application/vnd.acucorp",
".swf" => "application/vnd.adobe.flash.movie",
# 305
".fcdt" => "application/vnd.adobe.formscentral.fcdt",
".fxp" => "application/vnd.adobe.fxp",
".fxpl" => "application/vnd.adobe.fxp",
".xdp" => "application/vnd.adobe.xdp+xml",
".xfdf" => "application/vnd.adobe.xfdf",
# 310
".afp" => "application/vnd.afpc.modca",
".list3820" => "application/vnd.afpc.modca",
".listafp" => "application/vnd.afpc.modca",
".pseg3820" => "application/vnd.afpc.modca",
".ovl" => "application/vnd.afpc.modca-overlay",
# 315
".psg" => "application/vnd.afpc.modca-pagesegment",
".ahead" => "application/vnd.ahead.space",
".azf" => "application/vnd.airzip.filesecure.azf",
".azs" => "application/vnd.airzip.filesecure.azs",
".azw3" => "application/vnd.amazon.mobi8-ebook",
# 320
".acc" => "application/vnd.americandynamics.acc",
".ami" => "application/vnd.amiga.ami",
".ota" => "application/vnd.android.ota",
".apk" => "application/vnd.android.package-archive",
".apkg" => "application/vnd.anki",
# 325
".cii" => "application/vnd.anser-web-certificate-issue-initiation",
".fti" => "application/vnd.anser-web-funds-transfer-initiation",
".dist" => "application/vnd.apple.installer+xml",
".distz" => "application/vnd.apple.installer+xml",
".mpkg" => "application/vnd.apple.installer+xml",
# 330
".pkg" => "application/vnd.apple.installer+xml",
".keynote" => "application/vnd.apple.keynote",
".m3u8" => "application/vnd.apple.mpegurl",
".numbers" => "application/vnd.apple.numbers",
".pages" => "application/vnd.apple.pages",
# 335
".swi" => "application/vnd.aristanetworks.swi",
".artisan" => "application/vnd.artisan+json",
".iota" => "application/vnd.astraea-software.iota",
".aep" => "application/vnd.audiograph",
".package" => "application/vnd.autopackage",
# 340
".bmml" => "application/vnd.balsamiq.bmml+xml",
".bmpr" => "application/vnd.balsamiq.bmpr",
".ac2" => "application/vnd.banana-accounting",
".mpm" => "application/vnd.blueice.multipass",
".ep" => "application/vnd.bluetooth.ep.oob",
# 345
".le" => "application/vnd.bluetooth.le.oob",
".bmi" => "application/vnd.bmi",
".rep" => "application/vnd.businessobjects",
".tlclient" => "application/vnd.cendio.thinlinc.clientconf",
".cdxml" => "application/vnd.chemdraw+xml",
# 350
".pgn" => "application/vnd.chess-pgn",
".mmd" => "application/vnd.chipnuts.karaoke-mmd",
".cdy" => "application/vnd.cinderella",
".csl" => "application/vnd.citationstyles.style+xml",
".cla" => "application/vnd.claymore",
# 355
".rp9" => "application/vnd.cloanto.rp9",
".c4d" => "application/vnd.clonk.c4group",
".c4f" => "application/vnd.clonk.c4group",
".c4g" => "application/vnd.clonk.c4group",
".c4p" => "application/vnd.clonk.c4group",
# 360
".c4u" => "application/vnd.clonk.c4group",
".c11amc" => "application/vnd.cluetrust.cartomobile-config",
".c11amz" => "application/vnd.cluetrust.cartomobile-config-pkg",
".coffee" => "application/vnd.coffeescript",
".xodt" => "application/vnd.collabio.xodocuments.document",
# 365
".xott" => "application/vnd.collabio.xodocuments.document-template",
".xodp" => "application/vnd.collabio.xodocuments.presentation",
".xotp" => "application/vnd.collabio.xodocuments.presentation-template",
".xods" => "application/vnd.collabio.xodocuments.spreadsheet",
".xots" => "application/vnd.collabio.xodocuments.spreadsheet-template",
# 370
".cbz" => "application/vnd.comicbook+zip",
".cbr" => "application/vnd.comicbook-rar",
".ic0" => "application/vnd.commerce-battelle",
".ic1" => "application/vnd.commerce-battelle",
".ic2" => "application/vnd.commerce-battelle",
# 375
".ic3" => "application/vnd.commerce-battelle",
".ic4" => "application/vnd.commerce-battelle",
".ic5" => "application/vnd.commerce-battelle",
".ic6" => "application/vnd.commerce-battelle",
".ic7" => "application/vnd.commerce-battelle",
# 380
".ic8" => "application/vnd.commerce-battelle",
".icd" => "application/vnd.commerce-battelle",
".icf" => "application/vnd.commerce-battelle",
".csp" => "application/vnd.commonspace",
".cst" => "application/vnd.commonspace",
# 385
".cdbcmsg" => "application/vnd.contact.cmsg",
".ign" => "application/vnd.coreos.ignition+json",
".ignition" => "application/vnd.coreos.ignition+json",
".cmc" => "application/vnd.cosmocaller",
".clkx" => "application/vnd.crick.clicker",
# 390
".clkk" => "application/vnd.crick.clicker.keyboard",
".clkp" => "application/vnd.crick.clicker.palette",
".clkt" => "application/vnd.crick.clicker.template",
".clkw" => "application/vnd.crick.clicker.wordbank",
".wbs" => "application/vnd.criticaltools.wbs+xml",
# 395
".ssvc" => "application/vnd.crypto-shade-file",
".pml" => "application/vnd.ctc-posml",
".ppd" => "application/vnd.cups-ppd",
".dart" => "application/vnd.dart",
".rdz" => "application/vnd.data-vision.rdz",
# 400
".dbf" => "application/vnd.dbf",
".ddeb" => "application/vnd.debian.binary-package",
".deb" => "application/vnd.debian.binary-package",
".udeb" => "application/vnd.debian.binary-package",
".uvd" => "application/vnd.dece.data",
# 405
".uvf" => "application/vnd.dece.data",
".uvvd" => "application/vnd.dece.data",
".uvvf" => "application/vnd.dece.data",
".uvt" => "application/vnd.dece.ttml+xml",
".uvvt" => "application/vnd.dece.ttml+xml",
# 410
".uvvx" => "application/vnd.dece.unspecified",
".uvx" => "application/vnd.dece.unspecified",
".uvvz" => "application/vnd.dece.zip",
".uvz" => "application/vnd.dece.zip",
".dsm" => "application/vnd.desmume.movie",
# 415
".dna" => "application/vnd.dna",
".docjson" => "application/vnd.document+json",
".scld" => "application/vnd.doremir.scorecloud-binary-document",
".dpg" => "application/vnd.dpgraph",
".dpgraph" => "application/vnd.dpgraph",
# 420
".mwc" => "application/vnd.dpgraph",
".dfac" => "application/vnd.dreamfactory",
".fla" => "application/vnd.dtg.local.flash",
".ait" => "application/vnd.dvb.ait",
".svc" => "application/vnd.dvb.service",
# 425
".geo" => "application/vnd.dynageo",
".dzr" => "application/vnd.dzr",
".mag" => "application/vnd.ecowin.chart",
".nml" => "application/vnd.enliven",
".esf" => "application/vnd.epson.esf",
# 430
".msf" => "application/vnd.epson.msf",
".qam" => "application/vnd.epson.quickanime",
".slt" => "application/vnd.epson.salt",
".ssf" => "application/vnd.epson.ssf",
".qca" => "application/vnd.ericsson.quickcall",
# 435
".qcall" => "application/vnd.ericsson.quickcall",
".espass" => "application/vnd.espass-espass+zip",
".es3" => "application/vnd.eszigno3+xml",
".et3" => "application/vnd.eszigno3+xml",
".asice" => "application/vnd.etsi.asic-e+zip",
# 440
".sce" => "application/vnd.etsi.asic-e+zip",
".asics" => "application/vnd.etsi.asic-s+zip",
".tst" => "application/vnd.etsi.timestamp-token",
".ecigprofile" => "application/vnd.evolv.ecig.profile",
".ecig" => "application/vnd.evolv.ecig.settings",
# 445
".ecigtheme" => "application/vnd.evolv.ecig.theme",
".mpw" => "application/vnd.exstream-empower+zip",
".pub" => "application/vnd.exstream-package",
".ez2" => "application/vnd.ezpix-album",
".ez3" => "application/vnd.ezpix-package",
# 450
".dim" => "application/vnd.fastcopy-disk-image",
".fdf" => "application/vnd.fdf",
".msd" => "application/vnd.fdsn.mseed",
".mseed" => "application/vnd.fdsn.mseed",
".dataless" => "application/vnd.fdsn.seed",
# 455
".seed" => "application/vnd.fdsn.seed",
".flb" => "application/vnd.ficlab.flb+zip",
".zfc" => "application/vnd.filmit.zfc",
".ftc" => "application/vnd.fluxtime.clip",
".sfd" => "application/vnd.font-fontforge-sfd",
# 460
".fm" => "application/vnd.framemaker",
".fsc" => "application/vnd.fsc.weblaunch",
".oas" => "application/vnd.fujitsu.oasys",
".oa2" => "application/vnd.fujitsu.oasys2",
".oa3" => "application/vnd.fujitsu.oasys3",
# 465
".fg5" => "application/vnd.fujitsu.oasysgp",
".bh2" => "application/vnd.fujitsu.oasysprs",
".ddd" => "application/vnd.fujixerox.ddd",
".xdw" => "application/vnd.fujixerox.docuworks",
".xbd" => "application/vnd.fujixerox.docuworks.binder",
# 470
".xct" => "application/vnd.fujixerox.docuworks.container",
".fzs" => "application/vnd.fuzzysheet",
".txd" => "application/vnd.genomatix.tuxedo",
".ggb" => "application/vnd.geogebra.file",
".ggt" => "application/vnd.geogebra.tool",
# 475
".gex" => "application/vnd.geometry-explorer",
".gre" => "application/vnd.geometry-explorer",
".gxt" => "application/vnd.geonext",
".g2w" => "application/vnd.geoplan",
".g3w" => "application/vnd.geospace",
# 480
".kml" => "application/vnd.google-earth.kml+xml",
".kmz" => "application/vnd.google-earth.kmz",
".gqf" => "application/vnd.grafeq",
".gqs" => "application/vnd.grafeq",
".gac" => "application/vnd.groove-account",
# 485
".ghf" => "application/vnd.groove-help",
".gim" => "application/vnd.groove-identity-message",
".grv" => "application/vnd.groove-injector",
".gtm" => "application/vnd.groove-tool-message",
".tpl" => "application/vnd.groove-tool-template",
# 490
".vcg" => "application/vnd.groove-vcard",
".hal" => "application/vnd.hal+xml",
".bpd" => "application/vnd.hbci",
".hbc" => "application/vnd.hbci",
".hbci" => "application/vnd.hbci",
# 495
".kom" => "application/vnd.hbci",
".pkd" => "application/vnd.hbci",
".upa" => "application/vnd.hbci",
".hdt" => "application/vnd.hdt",
".les" => "application/vnd.hhe.lesson-player",
# 500
".hpgl" => "application/vnd.hp-HPGL",
".pcl" => "application/vnd.hp-PCL",
".hpi" => "application/vnd.hp-hpid",
".hpid" => "application/vnd.hp-hpid",
".hps" => "application/vnd.hp-hps",
# 505
".jlt" => "application/vnd.hp-jlyt",
".sfd-hdstx" => "application/vnd.hydrostatix.sof-data",
".mpy" => "application/vnd.ibm.MiniPay",
".emm" => "application/vnd.ibm.electronic-media",
".irm" => "application/vnd.ibm.rights-management",
# 510
".sc" => "application/vnd.ibm.secure-container",
".icc" => "application/vnd.iccprofile",
".icm" => "application/vnd.iccprofile",
".igl" => "application/vnd.igloader",
".imf" => "application/vnd.imagemeter.folder+zip",
# 515
".imi" => "application/vnd.imagemeter.image+zip",
".ivp" => "application/vnd.immervision-ivp",
".ivu" => "application/vnd.immervision-ivu",
".imscc" => "application/vnd.ims.imsccv1p1",
".igm" => "application/vnd.insors.igm",
# 520
".xpw" => "application/vnd.intercon.formnet",
".xpx" => "application/vnd.intercon.formnet",
".i2g" => "application/vnd.intergeo",
".qbo" => "application/vnd.intu.qbo",
".qfx" => "application/vnd.intu.qfx",
# 525
".rcprofile" => "application/vnd.ipunplugged.rcprofile",
".irp" => "application/vnd.irepository.package+xml",
".xpr" => "application/vnd.is-xpr",
".fcs" => "application/vnd.isac.fcs",
".jam" => "application/vnd.jam",
# 530
".rms" => "application/vnd.jcp.javame.midlet-rms",
".jisp" => "application/vnd.jisp",
".joda" => "application/vnd.joost.joda-archive",
".ktr" => "application/vnd.kahootz",
".ktz" => "application/vnd.kahootz",
# 535
".karbon" => "application/vnd.kde.karbon",
".chrt" => "application/vnd.kde.kchart",
".kfo" => "application/vnd.kde.kformula",
".flw" => "application/vnd.kde.kivio",
".kon" => "application/vnd.kde.kontour",
# 540
".kpr" => "application/vnd.kde.kpresenter",
".kpt" => "application/vnd.kde.kpresenter",
".ksp" => "application/vnd.kde.kspread",
".kwd" => "application/vnd.kde.kword",
".kwt" => "application/vnd.kde.kword",
# 545
".htke" => "application/vnd.kenameaapp",
".kia" => "application/vnd.kidspiration",
".skd" => "application/vnd.koan",
".skm" => "application/vnd.koan",
".skp" => "application/vnd.koan",
# 550
".skt" => "application/vnd.koan",
".sse" => "application/vnd.kodak-descriptor",
".lasjson" => "application/vnd.las.las+json",
".lasxml" => "application/vnd.las.las+xml",
".lbd" => "application/vnd.llamagraphics.life-balance.desktop",
# 555
".lbe" => "application/vnd.llamagraphics.life-balance.exchange+xml",
".lca" => "application/vnd.logipipe.circuit+zip",
".lcs" => "application/vnd.logipipe.circuit+zip",
".loom" => "application/vnd.loom",
".123" => "application/vnd.lotus-1-2-3",
# 560
".wk1" => "application/vnd.lotus-1-2-3",
".wk3" => "application/vnd.lotus-1-2-3",
".wk4" => "application/vnd.lotus-1-2-3",
".apr" => "application/vnd.lotus-approach",
".vew" => "application/vnd.lotus-approach",
# 565
".pre" => "application/vnd.lotus-freelance",
".prz" => "application/vnd.lotus-freelance",
".ndl" => "application/vnd.lotus-notes",
".ns2" => "application/vnd.lotus-notes",
".ns3" => "application/vnd.lotus-notes",
# 570
".ns4" => "application/vnd.lotus-notes",
".nsf" => "application/vnd.lotus-notes",
".nsg" => "application/vnd.lotus-notes",
".nsh" => "application/vnd.lotus-notes",
".ntf" => "application/vnd.lotus-notes",
# 575
".or2" => "application/vnd.lotus-organizer",
".or3" => "application/vnd.lotus-organizer",
".org" => "application/vnd.lotus-organizer",
".scm" => "application/vnd.lotus-screencam",
".lwp" => "application/vnd.lotus-wordpro",
# 580
".sam" => "application/vnd.lotus-wordpro",
".portpkg" => "application/vnd.macports.portpkg",
".mvt" => "application/vnd.mapbox-vector-tile",
".mdc" => "application/vnd.marlin.drm.mdcf",
".mmdb" => "application/vnd.maxmind.maxmind-db",
# 585
".mcd" => "application/vnd.mcd",
".mc1" => "application/vnd.medcalcdata",
".cdkey" => "application/vnd.mediastation.cdkey",
".mfm" => "application/vnd.mfmp",
".flo" => "application/vnd.micrografx.flo",
# 590
".igx" => "application/vnd.micrografx.igx",
".mif" => "application/vnd.mif",
".mpn" => "application/vnd.mophun.application",
".mpc" => "application/vnd.mophun.certificate",
".xul" => "application/vnd.mozilla.xul+xml",
# 595
".3mf" => "application/vnd.ms-3mfdocument",
".cil" => "application/vnd.ms-artgalry",
".asf" => "application/vnd.ms-asf",
".cab" => "application/vnd.ms-cab-compressed",
".xla" => "application/vnd.ms-excel",
# 600
".xlc" => "application/vnd.ms-excel",
".xlm" => "application/vnd.ms-excel",
".xls" => "application/vnd.ms-excel",
".xlt" => "application/vnd.ms-excel",
".xlw" => "application/vnd.ms-excel",
# 605
".xlam" => "application/vnd.ms-excel.addin.macroEnabled.12",
".xlsb" => "application/vnd.ms-excel.sheet.binary.macroEnabled.12",
".xlsm" => "application/vnd.ms-excel.sheet.macroEnabled.12",
".xltm" => "application/vnd.ms-excel.template.macroEnabled.12",
".eot" => "application/vnd.ms-fontobject",
# 610
".chm" => "application/vnd.ms-htmlhelp",
".ims" => "application/vnd.ms-ims",
".lrm" => "application/vnd.ms-lrm",
".thmx" => "application/vnd.ms-officetheme",
".cat" => "application/vnd.ms-pki.seccat",
# 615
".pps" => "application/vnd.ms-powerpoint",
".ppt" => "application/vnd.ms-powerpoint",
".ppam" => "application/vnd.ms-powerpoint.addin.macroEnabled.12",
".pptm" => "application/vnd.ms-powerpoint.presentation.macroEnabled.12",
".sldm" => "application/vnd.ms-powerpoint.slide.macroEnabled.12",
# 620
".ppsm" => "application/vnd.ms-powerpoint.slideshow.macroEnabled.12",
".potm" => "application/vnd.ms-powerpoint.template.macroEnabled.12",
".mpp" => "application/vnd.ms-project",
".mpt" => "application/vnd.ms-project",
".tnef" => "application/vnd.ms-tnef",
# 625
".tnf" => "application/vnd.ms-tnef",
".docm" => "application/vnd.ms-word.document.macroEnabled.12",
".dotm" => "application/vnd.ms-word.template.macroEnabled.12",
".wcm" => "application/vnd.ms-works",
".wdb" => "application/vnd.ms-works",
# 630
".wks" => "application/vnd.ms-works",
".wps" => "application/vnd.ms-works",
".wpl" => "application/vnd.ms-wpl",
".xps" => "application/vnd.ms-xpsdocument",
".msa" => "application/vnd.msa-disk-image",
# 635
".mseq" => "application/vnd.mseq",
".crtr" => "application/vnd.multiad.creator",
".cif" => "application/vnd.multiad.creator.cif",
".mus" => "application/vnd.musician",
".msty" => "application/vnd.muvee.style",
# 640
".taglet" => "application/vnd.mynfc",
".bkm" => "application/vnd.nervana",
".entity" => "application/vnd.nervana",
".kcm" => "application/vnd.nervana",
".request" => "application/vnd.nervana",
# 645
".nlu" => "application/vnd.neurolanguage.nlu",
".nimn" => "application/vnd.nimn",
".nds" => "application/vnd.nintendo.nitro.rom",
".sfc" => "application/vnd.nintendo.snes.rom",
".smc" => "application/vnd.nintendo.snes.rom",
# 650
".nitf" => "application/vnd.nitf",
".nnd" => "application/vnd.noblenet-directory",
".nns" => "application/vnd.noblenet-sealer",
".nnw" => "application/vnd.noblenet-web",
".ngdat" => "application/vnd.nokia.n-gage.data",
# 655
".rpst" => "application/vnd.nokia.radio-preset",
".rpss" => "application/vnd.nokia.radio-presets",
".edm" => "application/vnd.novadigm.EDM",
".edx" => "application/vnd.novadigm.EDX",
".ext" => "application/vnd.novadigm.EXT",
# 660
".odc" => "application/vnd.oasis.opendocument.chart",
".otc" => "application/vnd.oasis.opendocument.chart-template",
".odb" => "application/vnd.oasis.opendocument.database",
".odf" => "application/vnd.oasis.opendocument.formula",
".odg" => "application/vnd.oasis.opendocument.graphics",
# 665
".otg" => "application/vnd.oasis.opendocument.graphics-template",
".odi" => "application/vnd.oasis.opendocument.image",
".oti" => "application/vnd.oasis.opendocument.image-template",
".odp" => "application/vnd.oasis.opendocument.presentation",
".otp" => "application/vnd.oasis.opendocument.presentation-template",
# 670
".ods" => "application/vnd.oasis.opendocument.spreadsheet",
".ots" => "application/vnd.oasis.opendocument.spreadsheet-template",
".odt" => "application/vnd.oasis.opendocument.text",
".odm" => "application/vnd.oasis.opendocument.text-master",
".ott" => "application/vnd.oasis.opendocument.text-template",
# 675
".oth" => "application/vnd.oasis.opendocument.text-web",
".xo" => "application/vnd.olpc-sugar",
".dd2" => "application/vnd.oma.dd2+xml",
".tam" => "application/vnd.onepager",
".tamp" => "application/vnd.onepagertamp",
# 680
".tamx" => "application/vnd.onepagertamx",
".tat" => "application/vnd.onepagertat",
".tatp" => "application/vnd.onepagertatp",
".tatx" => "application/vnd.onepagertatx",
".obgx" => "application/vnd.openblox.game+xml",
# 685
".obg" => "application/vnd.openblox.game-binary",
".oeb" => "application/vnd.openeye.oeb",
".oxt" => "application/vnd.openofficeorg.extension",
".osm" => "application/vnd.openstreetmap.data+xml",
".pptx" => "application/vnd.openxmlformats-officedocument.presentationml.presentation",
# 690
".sldx" => "application/vnd.openxmlformats-officedocument.presentationml.slide",
".ppsx" => "application/vnd.openxmlformats-officedocument.presentationml.slideshow",
".potx" => "application/vnd.openxmlformats-officedocument.presentationml.template",
".xlsx" => "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
".xltx" => "application/vnd.openxmlformats-officedocument.spreadsheetml.template",
# 695
".docx" => "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
".dotx" => "application/vnd.openxmlformats-officedocument.wordprocessingml.template",
".ndc" => "application/vnd.osa.netdeploy",
".mgp" => "application/vnd.osgeo.mapguide.package",
".dp" => "application/vnd.osgi.dp",
# 700
".esa" => "application/vnd.osgi.subsystem",
".oxlicg" => "application/vnd.oxli.countgraph",
".oprc" => "application/vnd.palm",
".pdb" => "application/vnd.palm",
".pqa" => "application/vnd.palm",
# 705
".prc" => "application/vnd.palm",
".plp" => "application/vnd.panoply",
".dive" => "application/vnd.patentdive",
".paw" => "application/vnd.pawaafile",
".str" => "application/vnd.pg.format",
# 710
".ei6" => "application/vnd.pg.osasli",
".pil" => "application/vnd.piaccess.application-license",
".efif" => "application/vnd.picsel",
".wg" => "application/vnd.pmi.widget",
".plf" => "application/vnd.pocketlearn",
# 715
".pbd" => "application/vnd.powerbuilder6",
".preminet" => "application/vnd.preminet",
".box" => "application/vnd.previewsystems.box",
".vbox" => "application/vnd.previewsystems.box",
".mgz" => "application/vnd.proteus.magazine",
# 720
".psfs" => "application/vnd.psfs",
".qps" => "application/vnd.publishare-delta-tree",
".ptid" => "application/vnd.pvi.ptid1",
".bar" => "application/vnd.qualcomm.brew-app-res",
".quiz" => "application/vnd.quobject-quoxdocument",
# 725
".quox" => "application/vnd.quobject-quoxdocument",
".tree" => "application/vnd.rainstor.data",
".rar" => "application/vnd.rar",
".bed" => "application/vnd.realvnc.bed",
".mxl" => "application/vnd.recordare.musicxml",
# 730
".cryptonote" => "application/vnd.rig.cryptonote",
".cod" => "application/vnd.rim.cod",
".link66" => "application/vnd.route66.link66+xml",
".st" => "application/vnd.sailingtracker.track",
".SAR" => "application/vnd.sar",
# 735
".scd" => "application/vnd.scribus",
".sla" => "application/vnd.scribus",
".slaz" => "application/vnd.scribus",
".s3df" => "application/vnd.sealed.3df",
".scsf" => "application/vnd.sealed.csf",
# 740
".s1w" => "application/vnd.sealed.doc",
".sdo" => "application/vnd.sealed.doc",
".sdoc" => "application/vnd.sealed.doc",
".sem" => "application/vnd.sealed.eml",
".seml" => "application/vnd.sealed.eml",
# 745
".smh" => "application/vnd.sealed.mht",
".smht" => "application/vnd.sealed.mht",
".s1p" => "application/vnd.sealed.ppt",
".sppt" => "application/vnd.sealed.ppt",
".stif" => "application/vnd.sealed.tiff",
# 750
".s1e" => "application/vnd.sealed.xls",
".sxl" => "application/vnd.sealed.xls",
".sxls" => "application/vnd.sealed.xls",
".s1h" => "application/vnd.sealedmedia.softseal.html",
".stml" => "application/vnd.sealedmedia.softseal.html",
# 755
".s1a" => "application/vnd.sealedmedia.softseal.pdf",
".spd" => "application/vnd.sealedmedia.softseal.pdf",
".spdf" => "application/vnd.sealedmedia.softseal.pdf",
".see" => "application/vnd.seemail",
".sema" => "application/vnd.sema",
# 760
".semd" => "application/vnd.semd",
".semf" => "application/vnd.semf",
".ssv" => "application/vnd.shade-save-file",
".ifm" => "application/vnd.shana.informed.formdata",
".itp" => "application/vnd.shana.informed.formtemplate",
# 765
".iif" => "application/vnd.shana.informed.interchange",
".ipk" => "application/vnd.shana.informed.package",
".shp" => "application/vnd.shp",
".shx" => "application/vnd.shx",
".sr" => "application/vnd.sigrok.session",
# 770
".mmf" => "application/vnd.smaf",
".notebook" => "application/vnd.smart.notebook",
".teacher" => "application/vnd.smart.teacher",
".pt" => "application/vnd.snesdev-page-table",
".ptrom" => "application/vnd.snesdev-page-table",
# 775
".fo" => "application/vnd.software602.filler.form+xml",
".zfo" => "application/vnd.software602.filler.form-xml-zip",
".sdkd" => "application/vnd.solent.sdkm+xml",
".sdkm" => "application/vnd.solent.sdkm+xml",
".dxp" => "application/vnd.spotfire.dxp",
# 780
".sfs" => "application/vnd.spotfire.sfs",
".sqlite" => "application/vnd.sqlite3",
".sqlite3" => "application/vnd.sqlite3",
".sdc" => "application/vnd.stardivision.calc",
".sds" => "application/vnd.stardivision.chart",
# 785
".sda" => "application/vnd.stardivision.draw",
".sdd" => "application/vnd.stardivision.impress",
".sdw" => "application/vnd.stardivision.writer",
".sgl" => "application/vnd.stardivision.writer-global",
".smzip" => "application/vnd.stepmania.package",
# 790
".sm" => "application/vnd.stepmania.stepchart",
".wadl" => "application/vnd.sun.wadl+xml",
".sxc" => "application/vnd.sun.xml.calc",
".stc" => "application/vnd.sun.xml.calc.template",
".sxd" => "application/vnd.sun.xml.draw",
# 795
".std" => "application/vnd.sun.xml.draw.template",
".sxi" => "application/vnd.sun.xml.impress",
".sti" => "application/vnd.sun.xml.impress.template",
".sxm" => "application/vnd.sun.xml.math",
".sxw" => "application/vnd.sun.xml.writer",
# 800
".sxg" => "application/vnd.sun.xml.writer.global",
".stw" => "application/vnd.sun.xml.writer.template",
".sus" => "application/vnd.sus-calendar",
".susp" => "application/vnd.sus-calendar",
".sis" => "application/vnd.symbian.install",
# 805
".xsm" => "application/vnd.syncml+xml",
".bdm" => "application/vnd.syncml.dm+wbxml",
".xdm" => "application/vnd.syncml.dm+xml",
".ddf" => "application/vnd.syncml.dmddf+xml",
".tao" => "application/vnd.tao.intent-module-archive",
# 810
".cap" => "application/vnd.tcpdump.pcap",
".dmp" => "application/vnd.tcpdump.pcap",
".pcap" => "application/vnd.tcpdump.pcap",
".qvd" => "application/vnd.theqvd",
".ppttc" => "application/vnd.think-cell.ppttc+json",
# 815
".vfr" => "application/vnd.tml",
".viaframe" => "application/vnd.tml",
".tmo" => "application/vnd.tmobile-livetv",
".tpt" => "application/vnd.trid.tpt",
".mxs" => "application/vnd.triscape.mxs",
# 820
".tra" => "application/vnd.trueapp",
".frm" => "application/vnd.ufdl",
".ufd" => "application/vnd.ufdl",
".ufdl" => "application/vnd.ufdl",
".utz" => "application/vnd.uiq.theme",
# 825
".umj" => "application/vnd.umajin",
".unityweb" => "application/vnd.unity",
".uo" => "application/vnd.uoml+xml",
".uoml" => "application/vnd.uoml+xml",
".urim" => "application/vnd.uri-map",
# 830
".urimap" => "application/vnd.uri-map",
".vmt" => "application/vnd.valve.source.material",
".vcx" => "application/vnd.vcx",
".model-inter" => "application/vnd.vd-study",
".mxi" => "application/vnd.vd-study",
# 835
".study-inter" => "application/vnd.vd-study",
".vwx" => "application/vnd.vectorworks",
".istc" => "application/vnd.veryant.thin",
".isws" => "application/vnd.veryant.thin",
".VES" => "application/vnd.ves.encrypted",
# 840
".vsc" => "application/vnd.vidsoft.vidconference",
".vsd" => "application/vnd.visio",
".vss" => "application/vnd.visio",
".vst" => "application/vnd.visio",
".vsw" => "application/vnd.visio",
# 845
".vis" => "application/vnd.visionary",
".vsf" => "application/vnd.vsf",
".sic" => "application/vnd.wap.sic",
".slc" => "application/vnd.wap.slc",
".wbxml" => "application/vnd.wap.wbxml",
# 850
".wmlc" => "application/vnd.wap.wmlc",
".wmlsc" => "application/vnd.wap.wmlscriptc",
".wtb" => "application/vnd.webturbo",
".p2p" => "application/vnd.wfa.p2p",
".wsc" => "application/vnd.wfa.wsc",
# 855
".wmc" => "application/vnd.wmc",
".nb" => "application/vnd.wolfram.mathematica",
".m" => "application/vnd.wolfram.mathematica.package",
".nbp" => "application/vnd.wolfram.player",
".wpd" => "application/vnd.wordperfect",
# 860
".wp5" => "application/vnd.wordperfect5.1",
".wqd" => "application/vnd.wqd",
".stf" => "application/vnd.wt.stf",
".wv" => "application/vnd.wv.csp+wbxml",
".xar" => "application/vnd.xara",
# 865
".xfd" => "application/vnd.xfdl",
".xfdl" => "application/vnd.xfdl",
".cpkg" => "application/vnd.xmpie.cpkg",
".dpkg" => "application/vnd.xmpie.dpkg",
".ppkg" => "application/vnd.xmpie.ppkg",
# 870
".xlim" => "application/vnd.xmpie.xlim",
".hvd" => "application/vnd.yamaha.hv-dic",
".hvs" => "application/vnd.yamaha.hv-script",
".hvp" => "application/vnd.yamaha.hv-voice",
".osf" => "application/vnd.yamaha.openscoreformat",
# 875
".saf" => "application/vnd.yamaha.smaf-audio",
".spf" => "application/vnd.yamaha.smaf-phrase",
".yme" => "application/vnd.yaoweme",
".cmp" => "application/vnd.yellowriver-custom-menu",
".zir" => "application/vnd.zul",
# 880
".zirz" => "application/vnd.zul",
".zaz" => "application/vnd.zzazz.deck+xml",
".wk" => "application/x-123",
".7z" => "application/x-7z-compressed",
".abw" => "application/x-abiword",
# 885
".dmg" => "application/x-apple-diskimage",
".bcpio" => "application/x-bcpio",
".torrent" => "application/x-bittorrent",
".bz2" => "application/x-bzip",
".cda" => "application/x-cdf",
# 890
".cdf" => "application/x-cdf",
".vcd" => "application/x-cdlink",
".mph" => "application/x-comsol",
".cpio" => "application/x-cpio",
".dcr" => "application/x-director",
# 895
".dir" => "application/x-director",
".dxr" => "application/x-director",
".wad" => "application/x-doom",
".dvi" => "application/x-dvi",
".gsf" => "application/x-font",
# 900
".pfa" => "application/x-font",
".pfb" => "application/x-font",
".pcf" => "application/x-font-pcf",
".mm" => "application/x-freemind",
".gan" => "application/x-ganttproject",
# 905
".gnumeric" => "application/x-gnumeric",
".sgf" => "application/x-go-sgf",
".gcf" => "application/x-graphing-calculator",
".gtar" => "application/x-gtar",
".taz" => "application/x-gtar-compressed",
# 910
".tbz" => "application/x-gtar-compressed",
".tgz" => "application/x-gtar-compressed",
".hdf" => "application/x-hdf",
".hwp" => "application/x-hwp",
".ica" => "application/x-ica",
# 915
".info" => "application/x-info",
".ins" => "application/x-internet-signup",
".isp" => "application/x-internet-signup",
".iii" => "application/x-iphone",
".iso" => "application/x-iso9660-image",
# 920
".jnlp" => "application/x-java-jnlp-file",
".jmz" => "application/x-jmol",
".kil" => "application/x-killustrator",
".latex" => "application/x-latex",
".lha" => "application/x-lha",
# 925
".lyx" => "application/x-lyx",
".lzh" => "application/x-lzh",
".lzx" => "application/x-lzx",
".book" => "application/x-maker",
".fb" => "application/x-maker",
# 930
".fbdoc" => "application/x-maker",
".frame" => "application/x-maker",
".maker" => "application/x-maker",
".application" => "application/x-ms-application",
".wmd" => "application/x-ms-wmd",
# 935
".wmz" => "application/x-ms-wmz",
".bat" => "application/x-msdos-program",
".com" => "application/x-msdos-program",
".dll" => "application/x-msdos-program",
".exe" => "application/x-msdos-program",
# 940
".msi" => "application/x-msi",
".nc" => "application/x-netcdf",
".pac" => "application/x-ns-proxy-autoconfig",
".nwc" => "application/x-nwc",
".o" => "application/x-object",
# 945
".oza" => "application/x-oz-application",
".p7r" => "application/x-pkcs7-certreqresp",
".pyc" => "application/x-python-code",
".pyo" => "application/x-python-code",
".qgs" => "application/x-qgis",
# 950
".qtl" => "application/x-quicktimeplayer",
".rdp" => "application/x-rdp",
".rpm" => "application/x-redhat-package-manager",
".rss" => "application/x-rss+xml",
".rb" => "application/x-ruby",
# 955
".sci" => "application/x-scilab",
".xcos" => "application/x-scilab-xcos",
".shar" => "application/x-shar",
".scr" => "application/x-silverlight",
".sit" => "application/x-stuffit",
# 960
".sitx" => "application/x-stuffit",
".sv4cpio" => "application/x-sv4cpio",
".sv4crc" => "application/x-sv4crc",
".tar" => "application/x-tar",
".gf" => "application/x-tex-gf",
# 965
".pk" => "application/x-tex-pk",
".texi" => "application/x-texinfo",
".texinfo" => "application/x-texinfo",
".man" => "application/x-troff-man",
".me" => "application/x-troff-me",
# 970
".ms" => "application/x-troff-ms",
".ustar" => "application/x-ustar",
".src" => "application/x-wais-source",
".wz" => "application/x-wingz",
".crt" => "application/x-x509-ca-cert",
# 975
".xcf" => "application/x-xcf",
".fig" => "application/x-xfig",
".xpi" => "application/x-xpinstall",
".xz" => "application/x-xz",
".726" => "audio/32kadpcm",
# 980
".amr" => "audio/AMR",
".awb" => "audio/AMR-WB",
".aal" => "audio/ATRAC-ADVANCED-LOSSLESS",
".atx" => "audio/ATRAC-X",
".aa3" => "audio/ATRAC3",
# 985
".at3" => "audio/ATRAC3",
".omg" => "audio/ATRAC3",
".evc" => "audio/EVRC",
".qcp" => "audio/EVRC-QCP",
".evb" => "audio/EVRCB",
# 990
".enw" => "audio/EVRCNW",
".evw" => "audio/EVRCWB",
".l16" => "audio/L16",
".smv" => "audio/SMV",
".aac" => "audio/aac",
# 995
".adts" => "audio/aac",
".ass" => "audio/aac",
".ac3" => "audio/ac3",
".axa" => "audio/annodex",
".acn" => "audio/asc",
# 1000
".au" => "audio/basic",
".snd" => "audio/basic",
".csd" => "audio/csound",
".orc" => "audio/csound",
".sco" => "audio/csound",
# 1005
".dls" => "audio/dls",
".flac" => "audio/flac",
".lbc" => "audio/iLBC",
".mhas" => "audio/mhas",
".mxmf" => "audio/mobile-xmf",
# 1010
".m4a" => "audio/mpeg",
".mp1" => "audio/mpeg",
".mp2" => "audio/mpeg",
".mp3" => "audio/mpeg",
".mpega" => "audio/mpeg",
# 1015
".mpga" => "audio/mpeg",
".m3u" => "audio/mpegurl",
".oga" => "audio/ogg",
".ogg" => "audio/ogg",
".opus" => "audio/ogg",
# 1020
".spx" => "audio/ogg",
".psid" => "audio/prs.sid",
".sid" => "audio/prs.sid",
".sofa" => "audio/sofa",
".mid" => "audio/sp-midi",
# 1025
".loas" => "audio/usac",
".xhe" => "audio/usac",
".koz" => "audio/vnd.audiokoz",
".uva" => "audio/vnd.dece.audio",
".uvva" => "audio/vnd.dece.audio",
# 1030
".eol" => "audio/vnd.digital-winds",
".mlp" => "audio/vnd.dolby.mlp",
".dts" => "audio/vnd.dts",
".dtshd" => "audio/vnd.dts.hd",
".plj" => "audio/vnd.everad.plj",
# 1035
".lvp" => "audio/vnd.lucent.voice",
".pya" => "audio/vnd.ms-playready.media.pya",
".vbk" => "audio/vnd.nortel.vbk",
".ecelp4800" => "audio/vnd.nuera.ecelp4800",
".ecelp7470" => "audio/vnd.nuera.ecelp7470",
# 1040
".ecelp9600" => "audio/vnd.nuera.ecelp9600",
".multitrack" => "audio/vnd.presonus.multitrack",
".rip" => "audio/vnd.rip",
".s1m" => "audio/vnd.sealedmedia.softseal.mpeg",
".smp" => "audio/vnd.sealedmedia.softseal.mpeg",
# 1045
".smp3" => "audio/vnd.sealedmedia.softseal.mpeg",
".aif" => "audio/x-aiff",
".aifc" => "audio/x-aiff",
".aiff" => "audio/x-aiff",
".wax" => "audio/x-ms-wax",
# 1050
".wma" => "audio/x-ms-wma",
".ra" => "audio/x-realaudio",
".ram" => "audio/x-realaudio",
".rm" => "audio/x-realaudio",
".pls" => "audio/x-scpls",
# 1055
".sd2" => "audio/x-sd2",
".wav" => "audio/x-wav",
".alc" => "chemical/x-alchemy",
".cac" => "chemical/x-cache",
".cache" => "chemical/x-cache",
# 1060
".csf" => "chemical/x-cache-csf",
".cascii" => "chemical/x-cactvs-binary",
".cbin" => "chemical/x-cactvs-binary",
".ctab" => "chemical/x-cactvs-binary",
".cdx" => "chemical/x-cdx",
# 1065
".c3d" => "chemical/x-chem3d",
".cmdf" => "chemical/x-cmdf",
".cpa" => "chemical/x-compass",
".bsd" => "chemical/x-crossfire",
".csm" => "chemical/x-csml",
# 1070
".csml" => "chemical/x-csml",
".ctx" => "chemical/x-ctx",
".cef" => "chemical/x-cxf",
".cxf" => "chemical/x-cxf",
".emb" => "chemical/x-embl-dl-nucleotide",
# 1075
".embl" => "chemical/x-embl-dl-nucleotide",
".spc" => "chemical/x-galactic-spc",
".gam" => "chemical/x-gamess-input",
".gamin" => "chemical/x-gamess-input",
".inp" => "chemical/x-gamess-input",
# 1080
".fch" => "chemical/x-gaussian-checkpoint",
".fchk" => "chemical/x-gaussian-checkpoint",
".cub" => "chemical/x-gaussian-cube",
".gau" => "chemical/x-gaussian-input",
".gjc" => "chemical/x-gaussian-input",
# 1085
".gjf" => "chemical/x-gaussian-input",
".gal" => "chemical/x-gaussian-log",
".gcg" => "chemical/x-gcg8-sequence",
".gen" => "chemical/x-genbank",
".hin" => "chemical/x-hin",
# 1090
".ist" => "chemical/x-isostar",
".istr" => "chemical/x-isostar",
".dx" => "chemical/x-jcamp-dx",
".jdx" => "chemical/x-jcamp-dx",
".kin" => "chemical/x-kinemage",
# 1095
".mcm" => "chemical/x-macmolecule",
".mmod" => "chemical/x-macromodel-input",
".mol" => "chemical/x-mdl-molfile",
".rd" => "chemical/x-mdl-rdfile",
".rxn" => "chemical/x-mdl-rxnfile",
# 1100
".sd" => "chemical/x-mdl-sdfile",
".tgf" => "chemical/x-mdl-tgf",
".mcif" => "chemical/x-mmcif",
".mol2" => "chemical/x-mol2",
".b" => "chemical/x-molconn-Z",
# 1105
".gpt" => "chemical/x-mopac-graph",
".mop" => "chemical/x-mopac-input",
".mopcrt" => "chemical/x-mopac-input",
".zmt" => "chemical/x-mopac-input",
".moo" => "chemical/x-mopac-out",
# 1110
".mvb" => "chemical/x-mopac-vib",
".prt" => "chemical/x-ncbi-asn1-ascii",
".val" => "chemical/x-ncbi-asn1-binary",
".ros" => "chemical/x-rosdal",
".sw" => "chemical/x-swissprot",
# 1115
".vms" => "chemical/x-vamas-iso14976",
".vmd" => "chemical/x-vmd",
".xtel" => "chemical/x-xtel",
".xyz" => "chemical/x-xyz",
".ttc" => "font/collection",
# 1120
".otf" => "font/otf",
".ttf" => "font/ttf",
".woff" => "font/woff",
".woff2" => "font/woff2",
".exr" => "image/aces",
# 1125
".avci" => "image/avci",
".avcs" => "image/avcs",
".bmp" => "image/bmp",
".cgm" => "image/cgm",
".drle" => "image/dicom-rle",
# 1130
".emf" => "image/emf",
".fit" => "image/fits",
".fits" => "image/fits",
".fts" => "image/fits",
".gif" => "image/gif",
# 1135
".heic" => "image/heic",
".heics" => "image/heic-sequence",
".heif" => "image/heif",
".heifs" => "image/heif-sequence",
".hej2" => "image/hej2k",
# 1140
".hsj2" => "image/hsj2",
".ief" => "image/ief",
".jls" => "image/jls",
".jp2" => "image/jp2",
".jpg2" => "image/jp2",
# 1145
".jfif" => "image/jpeg",
".jpe" => "image/jpeg",
".jpeg" => "image/jpeg",
".jpg" => "image/jpeg",
".jph" => "image/jph",
# 1150
".jhc" => "image/jphc",
".jphc" => "image/jphc",
".jpgm" => "image/jpm",
".jpm" => "image/jpm",
".jpf" => "image/jpx",
# 1155
".jpx" => "image/jpx",
".jxr" => "image/jxr",
".jxra" => "image/jxrA",
".jxrs" => "image/jxrS",
".jxs" => "image/jxs",
# 1160
".jxsc" => "image/jxsc",
".jxsi" => "image/jxsi",
".jxss" => "image/jxss",
".ktx" => "image/ktx",
".ktx2" => "image/ktx2",
# 1165
".png" => "image/png",
".btf" => "image/prs.btif",
".btif" => "image/prs.btif",
".pti" => "image/prs.pti",
".svg" => "image/svg+xml",
# 1170
".svgz" => "image/svg+xml",
".t38" => "image/t38",
".tif" => "image/tiff",
".tiff" => "image/tiff",
".tfx" => "image/tiff-fx",
# 1175
".wmf" => "image/wmf",
".psd" => "image/vnd.adobe.photoshop",
".azv" => "image/vnd.airzip.accelerator.azv",
".uvg" => "image/vnd.dece.graphic",
".uvi" => "image/vnd.dece.graphic",
# 1180
".uvvg" => "image/vnd.dece.graphic",
".uvvi" => "image/vnd.dece.graphic",
".djv" => "image/vnd.djvu",
".djvu" => "image/vnd.djvu",
".dwg" => "image/vnd.dwg",
# 1185
".dxf" => "image/vnd.dxf",
".fbs" => "image/vnd.fastbidsheet",
".fpx" => "image/vnd.fpx",
".fst" => "image/vnd.fst",
".mmr" => "image/vnd.fujixerox.edmics-mmr",
# 1190
".rlc" => "image/vnd.fujixerox.edmics-rlc",
".PGB" => "image/vnd.globalgraphics.pgb",
".ico" => "image/vnd.microsoft.icon",
".apng" => "image/vnd.mozilla.apng",
".mdi" => "image/vnd.ms-modi",
# 1195
".b16" => "image/vnd.pco.b16",
".hdr" => "image/vnd.radiance",
".rgbe" => "image/vnd.radiance",
".xyze" => "image/vnd.radiance",
".s1n" => "image/vnd.sealed.png",
# 1200
".spn" => "image/vnd.sealed.png",
".spng" => "image/vnd.sealed.png",
".s1g" => "image/vnd.sealedmedia.softseal.gif",
".sgi" => "image/vnd.sealedmedia.softseal.gif",
".sgif" => "image/vnd.sealedmedia.softseal.gif",
# 1205
".s1j" => "image/vnd.sealedmedia.softseal.jpg",
".sjp" => "image/vnd.sealedmedia.softseal.jpg",
".sjpg" => "image/vnd.sealedmedia.softseal.jpg",
".tap" => "image/vnd.tencent.tap",
".vtf" => "image/vnd.valve.source.texture",
# 1210
".wbmp" => "image/vnd.wap.wbmp",
".xif" => "image/vnd.xiff",
".pcx" => "image/vnd.zbrush.pcx",
".cr2" => "image/x-canon-cr2",
".crw" => "image/x-canon-crw",
# 1215
".ras" => "image/x-cmu-raster",
".cdr" => "image/x-coreldraw",
".pat" => "image/x-coreldrawpattern",
".cdt" => "image/x-coreldrawtemplate",
".erf" => "image/x-epson-erf",
# 1220
".jng" => "image/x-jng",
".nef" => "image/x-nikon-nef",
".orf" => "image/x-olympus-orf",
".pnm" => "image/x-portable-anymap",
".pbm" => "image/x-portable-bitmap",
# 1225
".pgm" => "image/x-portable-graymap",
".ppm" => "image/x-portable-pixmap",
".rgb" => "image/x-rgb",
".xbm" => "image/x-xbitmap",
".xpm" => "image/x-xpixmap",
# 1230
".xwd" => "image/x-xwindowdump",
".u8msg" => "message/global",
".u8dsn" => "message/global-delivery-status",
".u8mdn" => "message/global-disposition-notification",
".u8hdr" => "message/global-headers",
# 1235
".art" => "message/rfc822",
".eml" => "message/rfc822",
".mail" => "message/rfc822",
".gltf" => "model/gltf+json",
".glb" => "model/gltf-binary",
# 1240
".iges" => "model/iges",
".igs" => "model/iges",
".mesh" => "model/mesh",
".msh" => "model/mesh",
".silo" => "model/mesh",
# 1245
".mtl" => "model/mtl",
".obj" => "model/obj",
".stl" => "model/stl",
".vrml" => "model/vrml",
".wrl" => "model/vrml",
# 1250
".x3db" => "model/x3d+fastinfoset",
".x3dv" => "model/x3d+vrml",
".x3dvz" => "model/x3d+vrml",
".x3d" => "model/x3d+xml",
".dae" => "model/vnd.collada+xml",
# 1255
".dwf" => "model/vnd.dwf",
".dor" => "model/vnd.gdl",
".gdl" => "model/vnd.gdl",
".gsm" => "model/vnd.gdl",
".ism" => "model/vnd.gdl",
# 1260
".lmp" => "model/vnd.gdl",
".msm" => "model/vnd.gdl",
".rsm" => "model/vnd.gdl",
".win" => "model/vnd.gdl",
".gtw" => "model/vnd.gtw",
# 1265
".moml" => "model/vnd.moml+xml",
".mts" => "model/vnd.mts",
".ogex" => "model/vnd.opengex",
".usdz" => "model/vnd.usdz+zip",
".bsp" => "model/vnd.valve.source.compiled-map",
# 1270
".vtu" => "model/vnd.vtu",
".vpm" => "multipart/voice-message",
".bmed" => "multipart/vnd.bint.med-plus",
".appcache" => "text/cache-manifest",
".manifest" => "text/cache-manifest",
# 1275
".ics" => "text/calendar",
".ifb" => "text/calendar",
".css" => "text/css; charset=utf-8",
".csv" => "text/csv; charset=utf-8",
".csvs" => "text/csv-schema",
# 1280
".soa" => "text/dns",
".zone" => "text/dns",
".323" => "text/h323",
".htm" => "text/html",
".html" => "text/html",
# 1285
".shtml" => "text/html",
".uls" => "text/iuls",
".cnd" => "text/jcr-cnd",
".markdown" => "text/markdown; charset=utf-8",
".md" => "text/markdown; charset=utf-8",
# 1290
".miz" => "text/mizar",
".n3" => "text/n3",
".brf" => "text/plain; charset=utf-8",
".conf" => "text/plain; charset=utf-8",
".log" => "text/plain; charset=utf-8",
# 1295
".pot" => "text/plain; charset=utf-8",
".spec" => "text/plain; charset=utf-8",
".srt" => "text/plain; charset=utf-8",
".text" => "text/plain; charset=utf-8",
".txt" => "text/plain; charset=utf-8",
# 1300
".provn" => "text/provenance-notation",
".rst" => "text/prs.fallenstein.rst",
".dsc" => "text/prs.lines.tag",
".tag" => "text/prs.lines.tag",
".rtx" => "text/richtext",
# 1305
".sct" => "text/scriptlet",
".sgm" => "text/sgml",
".sgml" => "text/sgml",
".tsv" => "text/tab-separated-values",
".tm" => "text/texmacs",
# 1310
".roff" => "text/troff",
".t" => "text/troff",
".tr" => "text/troff",
".ttl" => "text/turtle",
".uri" => "text/uri-list",
# 1315
".uris" => "text/uri-list",
".vcard" => "text/vcard",
".vcf" => "text/vcard",
".vtt" => "text/vtt",
".dms" => "text/vnd.DMClientScript",
# 1320
".a" => "text/vnd.a",
".abc" => "text/vnd.abc",
".ascii" => "text/vnd.ascii-art",
".curl" => "text/vnd.curl",
".copyright" => "text/vnd.debian.copyright",
# 1325
".jtd" => "text/vnd.esmertec.theme-descriptor",
".flt" => "text/vnd.ficlab.flt",
".fly" => "text/vnd.fly",
".flx" => "text/vnd.fmi.flexstor",
".dot" => "text/vnd.graphviz",
# 1330
".gv" => "text/vnd.graphviz",
".hgl" => "text/vnd.hgl",
".3dm" => "text/vnd.in3d.3dml",
".3dml" => "text/vnd.in3d.3dml",
".spo" => "text/vnd.in3d.spot",
# 1335
".spot" => "text/vnd.in3d.spot",
".mpf" => "text/vnd.ms-mediapackage",
".ccc" => "text/vnd.net2phone.commcenter.command",
".mc2" => "text/vnd.senx.warpscript",
".sos" => "text/vnd.sosi",
# 1340
".jad" => "text/vnd.sun.j2me.app-descriptor",
".ts" => "text/vnd.trolltech.linguist",
".si" => "text/vnd.wap.si",
".sl" => "text/vnd.wap.sl",
".wml" => "text/vnd.wap.wml",
# 1345
".wmls" => "text/vnd.wap.wmlscript",
".bib" => "text/x-bibtex; charset=utf-8",
".boo" => "text/x-boo; charset=utf-8",
".h++" => "text/x-c++hdr; charset=utf-8",
".hh" => "text/x-c++hdr; charset=utf-8",
# 1350
".hpp" => "text/x-c++hdr; charset=utf-8",
".hxx" => "text/x-c++hdr; charset=utf-8",
".c++" => "text/x-c++src; charset=utf-8",
".cc" => "text/x-c++src; charset=utf-8",
".cpp" => "text/x-c++src; charset=utf-8",
# 1355
".cxx" => "text/x-c++src; charset=utf-8",
".h" => "text/x-chdr; charset=utf-8",
".htc" => "text/x-component",
".csh" => "text/x-csh; charset=utf-8",
".c" => "text/x-csrc; charset=utf-8",
# 1360
".diff" => "text/x-diff; charset=utf-8",
".patch" => "text/x-diff; charset=utf-8",
".d" => "text/x-dsrc; charset=utf-8",
".hs" => "text/x-haskell; charset=utf-8",
".java" => "text/x-java; charset=utf-8",
# 1365
".ly" => "text/x-lilypond; charset=utf-8",
".lhs" => "text/x-literate-haskell; charset=utf-8",
".moc" => "text/x-moc; charset=utf-8",
".p" => "text/x-pascal; charset=utf-8",
".pas" => "text/x-pascal; charset=utf-8",
# 1370
".gcd" => "text/x-pcs-gcd",
".pl" => "text/x-perl; charset=utf-8",
".pm" => "text/x-perl; charset=utf-8",
".py" => "text/x-python; charset=utf-8",
".scala" => "text/x-scala; charset=utf-8",
# 1375
".etx" => "text/x-setext",
".sfv" => "text/x-sfv",
".sh" => "text/x-sh; charset=utf-8",
".tcl" => "text/x-tcl; charset=utf-8",
".tk" => "text/x-tcl; charset=utf-8",
# 1380
".cls" => "text/x-tex; charset=utf-8",
".ltx" => "text/x-tex; charset=utf-8",
".sty" => "text/x-tex; charset=utf-8",
".tex" => "text/x-tex; charset=utf-8",
".vcs" => "text/x-vcalendar",
# 1385
".axv" => "video/annodex",
".dl" => "video/dl",
".dif" => "video/dv",
".dv" => "video/dv",
".fli" => "video/fli",
# 1390
".gl" => "video/gl",
".m4s" => "video/iso.segment",
".mj2" => "video/mj2",
".mjp2" => "video/mj2",
".m4v" => "video/mp4",
# 1395
".mp4" => "video/mp4",
".mpg4" => "video/mp4",
".m1v" => "video/mpeg",
".m2v" => "video/mpeg",
".mpe" => "video/mpeg",
# 1400
".mpeg" => "video/mpeg",
".mpg" => "video/mpeg",
".ogv" => "video/ogg",
".mov" => "video/quicktime",
".qt" => "video/quicktime",
# 1405
".webm" => "video/webm",
".uvh" => "video/vnd.dece.hd",
".uvvh" => "video/vnd.dece.hd",
".uvm" => "video/vnd.dece.mobile",
".uvvm" => "video/vnd.dece.mobile",
# 1410
".uvu" => "video/vnd.dece.mp4",
".uvvu" => "video/vnd.dece.mp4",
".uvp" => "video/vnd.dece.pd",
".uvvp" => "video/vnd.dece.pd",
".uvs" => "video/vnd.dece.sd",
# 1415
".uvvs" => "video/vnd.dece.sd",
".uvv" => "video/vnd.dece.video",
".uvvv" => "video/vnd.dece.video",
".dvb" => "video/vnd.dvb.file",
".fvt" => "video/vnd.fvt",
# 1420
".m4u" => "video/vnd.mpegurl",
".mxu" => "video/vnd.mpegurl",
".pyv" => "video/vnd.ms-playready.media.pyv",
".nim" => "video/vnd.nokia.interleaved-multimedia",
".bik" => "video/vnd.radgamettools.bink",
# 1425
".bk2" => "video/vnd.radgamettools.bink",
".smk" => "video/vnd.radgamettools.smacker",
".s11" => "video/vnd.sealed.mpeg1",
".smpg" => "video/vnd.sealed.mpeg1",
".s14" => "video/vnd.sealed.mpeg4",
# 1430
".ssw" => "video/vnd.sealed.swf",
".sswf" => "video/vnd.sealed.swf",
".s1q" => "video/vnd.sealedmedia.softseal.mov",
".smo" => "video/vnd.sealedmedia.softseal.mov",
".smov" => "video/vnd.sealedmedia.softseal.mov",
# 1435
".viv" => "video/vnd.vivo",
".yt" => "video/vnd.youtube.yt",
".flv" => "video/x-flv",
".lsf" => "video/x-la-asf",
".lsx" => "video/x-la-asf",
# 1440
".mkv" => "video/x-matroska",
".mpv" => "video/x-matroska",
".mng" => "video/x-mng",
".wm" => "video/x-ms-wm",
".wmv" => "video/x-ms-wmv",
# 1445
".wmx" => "video/x-ms-wmx",
".wvx" => "video/x-ms-wvx",
".avi" => "video/x-msvideo",
".movie" => "video/x-sgi-movie",
".ice" => "x-conference/x-cooltalk",
# 1450
".sisx" => "x-epoc/x-sisx-app",
".vrm" => "x-world/x-vrml",
"README" => "text/plain; charset=utf-8",
"Makefile" => "text/x-makefile; charset=utf-8",
"" => "application/octet-stream",
# 1455
)
server.document-root = "/var/www"
server.upload-dirs = ("/var/cache/lighttpd/uploads")
server.errorlog = "/var/log/lighttpd/error.log"
server.pid-file = "/run/lighttpd.pid"
server.username = "www-data"
server.groupname = "www-data"
server.port = 80
dir-listing.encoding = "utf-8"
server.dir-listing = "disable"
fastcgi.server = (
".php" => (
(
"bin-path" => "/usr/bin/php-cgi",
"socket" => "/tmp/php.socket",
# 2
),
),
)
server.feature-flags = (
"server.h2proto" => "enable",
"server.h2c" => "enable",
"server.graceful-shutdown-timeout" => 5,
# 3
)
server.http-parseopts = (
"header-strict" => "enable",
"host-strict" => "enable",
"host-normalize" => "enable",
"url-normalize-unreserved" => "enable",
"url-normalize-required" => "enable",
# 5
"url-ctrls-reject" => "enable",
"url-path-2f-decode" => "enable",
"url-path-dotseg-remove" => "enable",
# 8
)
index-file.names = ("index.php", "index.html")
url.access-deny = (
"~",
".inc",
".engine",
".install",
".module",
".sh",
"sql",
".theme",
".tpl.php",
".xtmpl",
"Entries",
"Repository",
"Root",
# 13
)
static-file.exclude-extensions = (".php", ".pl", ".fcgi")
server.modules = (
"mod_indexfile",
"mod_access",
"mod_alias",
"mod_accesslog",
"mod_ssi",
"mod_deflate",
"mod_fastcgi",
"mod_cgi",
"mod_rewrite",
"mod_redirect",
"mod_openssl",
# 11
)
ssl.engine = "enable"
ssl.pemfile = "/etc/letsencrypt/live/www.danmcb.com/fullchain.pem"
ssl.privkey = "/etc/letsencrypt/live/www.danmcb.com/privkey.pem"
server.name = "danmcb.com"
alias.url = (
"/javascript" => "/usr/share/javascript",
)
deflate.cache-dir = "/var/cache/lighttpd/compress/"
deflate.mimetypes = ("text/plain", "text/html", "application/x-javascript", "text/css")
$SERVER["socket"] == "[::]:80" {
# block 1
} # end of $SERVER["socket"] == "[::]:80"
$HTTP["host"] =~ "danmcb\.com$" {
# block 2
ssl.pemfile = "/etc/letsencrypt/live/www.danmcb.com/fullchain.pem"
ssl.privkey = "/etc/letsencrypt/live/www.danmcb.com/privkey.pem"
server.name = "www.danmcb.com"
} # end of $HTTP["host"] =~ "danmcb\.com$"
$HTTP["host"] =~ "mcbeetech\.com$" {
# block 3
ssl.pemfile = "/etc/letsencrypt/live/www.mcbeetech.com/fullchain.pem"
ssl.privkey = "/etc/letsencrypt/live/www.mcbeetech.com/privkey.pem"
server.name = "www.mcbeetech.com"
} # end of $HTTP["host"] =~ "mcbeetech\.com$"
$SERVER["socket"] == "0.0.0.0:443" {
# block 4
ssl.engine = "enable"
} # end of $SERVER["socket"] == "0.0.0.0:443"
$SERVER["socket"] == "[::]:443" {
# block 5
ssl.engine = "enable"
} # end of $SERVER["socket"] == "[::]:443"
$HTTP["host"] =~ "danmcb.com$" {
# block 6
server.document-root = "/var/www/danmcb.com"
index-file.names = ("index.html", "index.php")
url.rewrite = (
"^/(.*)\.(.+)$" => "$0",
"^/(wp-admin|wp-includes|wp-content|gallery2)/(.*)" => "$0",
"^/(.+)/?$" => "/index.php/$1",
# 3
)
server.error-handler-404 = "/index.php"
} # end of $HTTP["host"] =~ "danmcb.com$"
$HTTP["host"] =~ "mcbeetech.com$" {
# block 7
server.document-root = "/var/www/mcbeetech.com"
index-file.names = ("index.html", "index.php")
url.rewrite = (
"^/(.*)\.(.+)$" => "$0",
"^/(wp-admin|wp-includes|wp-content|gallery2)/(.*)" => "$0",
"^/(.+)/?$" => "/index.php/$1",
# 3
)
server.error-handler-404 = "/index.php"
} # end of $HTTP["host"] =~ "mcbeetech.com$"
$HTTP["host"] =~ "^camrosenorthjazz\.com" {
# block 8
url.redirect = (
"^/(.*)" => "https://www.danmcb.com/",
)
} # end of $HTTP["host"] =~ "^camrosenorthjazz\.com"
$HTTP["host"] =~ "^www\.camrosenorthjazz\.com" {
# block 9
url.redirect = (
"^/(.*)" => "https://www.danmcb.com/",
)
} # end of $HTTP["host"] =~ "^www\.camrosenorthjazz\.com"
$HTTP["host"] =~ "^mcbeeaudio\.com" {
# block 10
url.redirect = (
"^/(.*)" => "https://www.danmcb.com/",
)
} # end of $HTTP["host"] =~ "^mcbeeaudio\.com"
$HTTP["host"] =~ "^www\.mcbeeaudio\.com" {
# block 11
url.redirect = (
"^/(.*)" => "https://www.danmcb.com/",
)
} # end of $HTTP["host"] =~ "^www\.mcbeeaudio\.com"
$HTTP["host"] =~ "^danielmcbrearty\.com" {
# block 12
url.redirect = (
"^/(.*)" => "https://www.danmcb.com/",
)
} # end of $HTTP["host"] =~ "^danielmcbrearty\.com"
$HTTP["host"] =~ "^www\.danielmcbrearty\.com" {
# block 13
url.redirect = (
"^/(.*)" => "https://www.danmcb.com/",
)
} # end of $HTTP["host"] =~ "^www\.danielmcbrearty\.com"
$HTTP["scheme"] == "http" {
# block 14
url.redirect = (
"" => "https://${url.authority}${url.path}${qsa}",
)
url.redirect-code = 308
} # end of $HTTP["scheme"] == "http"
}
RE: probem with http to https redirect (connection reset ...) - Added by danmcb over 2 years ago
Re my choice of Debian - OK, they are not so quick to update. The version I am using is their latest. Other than building from source, it will be hard for me to do much about that. But do you think that is the root of this issue? I doubt it personally.
RE: probem with http to https redirect (connection reset ...) - Added by gstrauss over 2 years ago
Re my choice of Debian - OK, they are not so quick to update. The version I am using is their latest. Other than building from source, it will be hard for me to do much about that. But do you think that is the root of this issue? I doubt it personally.
I highlighted that only because you described your system with "everything is at latest version AFAIK" and I wanted you to understand that might be the "latest" available in the stable version of Debian, but that the stable version of Debian is not updated (and so "not maintained") other than for serious security bugs.
If there was an issue in lighttpd, it is likely fixed in a later version of lighttpd. There are no outstanding known bugs in lighttpd.
lighttpd -tt -f /etc/lighttpd/lighttpd.conf gives no output - I assume that this means no error.
To be precise, an exit value of 0 is no error. Still, if there was a non-zero exit value, then lighttpd would also have issue trace, too, so the config preflight with -tt was successful.
With the config you shared, nothing jumps out at me as a problem relating to redirection, so I would suggest testing with smaller portions of the config enabled. Try temporarily disabling mod_deflate to see if that has an effect. Try a simpler config with the http to https redirect to see piece is working.
You can also enable some Config: Debug Variables in your lighttpd.conf, e.g. debug.log-request-header = "enable" and debug.log-response-header = "enable" and then review the lighttpd error log (where the debug trace goes) when you make a request from Firefox.
RE: probem with http to https redirect (connection reset ...) - Added by danmcb over 2 years ago
ok, thank you for your response. I take your point about debian.
I've tried disabling various parts of the config, without being able to resolve the issue.
WHat I did discover when I enabled some debugging was this (when an error occurs):
2022-11-02 01:02:06: server.c.1513) server started (lighttpd/1.4.59) 2022-11-02 01:02:23: configfile-glue.c.646) === start of condition block === 2022-11-02 01:02:23: configfile-glue.c.491) 3 global / $HTTP["host"] =~ "danmcb\.com$" not available yet 2022-11-02 01:02:23: configfile-glue.c.350) 2 (uncached) result: unset (cond: global / $HTTP["host"] =~ "danmcb\.com$") 2022-11-02 01:02:23: configfile-glue.c.646) === start of condition block === 2022-11-02 01:02:23: configfile-glue.c.491) 3 global / $HTTP["host"] =~ "mcbeetech\.com$" not available yet 2022-11-02 01:02:23: configfile-glue.c.350) 3 (uncached) result: unset (cond: global / $HTTP["host"] =~ "mcbeetech\.com$") 2022-11-02 01:02:23: mod_openssl.c.3095) SSL: 1 error:1408F09C:SSL routines:ssl3_get_record:http request
It looks a bit as if (and I don't know your code but I do write embedded software for a living) - for some reason - the tests against the incoming request are happening too early in the whole request/response process - only with the http request. Also I wondered if the redirect needs to be sooner, so I moved the import of 10-ssl.conf to the end of the main config, and also moved the http=>https redirect so that it happens before any other tests. But no luck.
What I also find odd is that on a "bad" request I don't even SEE the test for $HTTP["scheme"] == "http" get evaulated, even when the test is moved up the file (I have no idea if the tests are sensitive to the order in whoch they are declared - just trying to fix the issue here).
Contrast this with a "good" request for an https page:
2022-11-02 01:40:21: configfile-glue.c.646) === start of condition block === 2022-11-02 01:40:21: configfile-glue.c.491) 3 global / $HTTP["host"] =~ "danmcb\.com$" not available yet 2022-11-02 01:40:21: configfile-glue.c.350) 6 (uncached) result: unset (cond: global / $HTTP["host"] =~ "danmcb\.com$") 2022-11-02 01:40:21: configfile-glue.c.646) === start of condition block === 2022-11-02 01:40:21: configfile-glue.c.491) 3 global / $HTTP["host"] =~ "mcbeetech\.com$" not available yet 2022-11-02 01:40:21: configfile-glue.c.350) 7 (uncached) result: unset (cond: global / $HTTP["host"] =~ "mcbeetech\.com$") 2022-11-02 01:40:21: configfile-glue.c.646) === start of condition block === 2022-11-02 01:40:21: configfile-glue.c.611) $HTTP["host"] =~ "danmcb\.com$" compare to www.danmcb.com 2022-11-02 01:40:21: configfile-glue.c.350) 6 (uncached) result: true (cond: global / $HTTP["host"] =~ "danmcb\.com$") 2022-11-02 01:40:21: configfile-glue.c.646) === start of condition block === 2022-11-02 01:40:21: configfile-glue.c.611) $HTTP["host"] =~ "mcbeetech\.com$" compare to www.danmcb.com 2022-11-02 01:40:21: configfile-glue.c.350) 7 (uncached) result: false (cond: global / $HTTP["host"] =~ "mcbeetech\.com$") 2022-11-02 01:40:22: response.c.339) run condition 2022-11-02 01:40:22: configfile-glue.c.646) === start of condition block === 2022-11-02 01:40:22: configfile-glue.c.611) $HTTP["host"] =~ "danmcb.com$" compare to www.danmcb.com 2022-11-02 01:40:22: configfile-glue.c.350) 4 (uncached) result: true (cond: global / $HTTP["host"] =~ "danmcb.com$") 2022-11-02 01:40:22: configfile-glue.c.646) === start of condition block === 2022-11-02 01:40:22: configfile-glue.c.611) $HTTP["host"] =~ "mcbeetech.com$" compare to www.danmcb.com 2022-11-02 01:40:22: configfile-glue.c.350) 5 (uncached) result: false (cond: global / $HTTP["host"] =~ "mcbeetech.com$") 2022-11-02 01:40:22: configfile-glue.c.646) === start of condition block === 2022-11-02 01:40:22: configfile-glue.c.611) $HTTP["host"] =~ "danmcb\.com$" compare to www.danmcb.com 2022-11-02 01:40:22: configfile-glue.c.350) 6 (uncached) result: true (cond: global / $HTTP["host"] =~ "danmcb\.com$") 2022-11-02 01:40:22: configfile-glue.c.646) === start of condition block === 2022-11-02 01:40:22: configfile-glue.c.611) $HTTP["host"] =~ "mcbeetech\.com$" compare to www.danmcb.com 2022-11-02 01:40:22: configfile-glue.c.350) 7 (uncached) result: false (cond: global / $HTTP["host"] =~ "mcbeetech\.com$") 2022-11-02 01:40:22: response.c.398) -- parsed Request-URI 2022-11-02 01:40:22: response.c.400) Request-URI : / 2022-11-02 01:40:22: response.c.402) URI-scheme : https 2022-11-02 01:40:22: response.c.404) URI-authority : www.danmcb.com 2022-11-02 01:40:22: response.c.406) URI-path (clean): / 2022-11-02 01:40:22: response.c.408) URI-query : 2022-11-02 01:40:22: mod_access.c.139) -- mod_access_uri_handler called 2022-11-02 01:40:22: configfile-glue.c.646) === start of condition block === 2022-11-02 01:40:22: configfile-glue.c.448) go parent global / $HTTP["scheme"] == "http" 2022-11-02 01:40:22: configfile-glue.c.611) $HTTP["scheme"] == "http" compare to https 2022-11-02 01:40:22: configfile-glue.c.350) 2 (uncached) result: false (cond: global / $HTTP["scheme"] == "http") 2022-11-02 01:40:22: configfile-glue.c.350) 3 (uncached) result: skipped (cond: global / $HTTP["scheme"] == "http" / $HTTP["host"] =~ ".*") 2022-11-02 01:40:22: response.c.519) -- before doc_root
Here we start with the same "not available yet" stuff, but the ssl handler does not trip up at line 3095 of mod_openssl.c ... whatever happens there ...
I don't know enough about the internals of your server but it does look to me as if something is amiss here. I don't unfortunately, have time or resources to dig in and find out what.
RE: probem with http to https redirect (connection reset ...) - Added by gstrauss over 2 years ago
Please use the debug directives I provided earlier and share your test request and response headers.
What commands are you using on your client? To which port are you connecting?
Newer versions of lighttpd report more clearly the error in the error log when an HTTP (clear-text) request is made to an HTTPS (encrypted) port. Is that what you're trying to do? Or are you trying to have connections to port 80 (conventional HTTP clear-text) redirected to port 443 (conventional HTTPS encrypted)? The second works. The first is an error and TLS negotiation fails with the clear-text request which is an invalid TLS ClientHello.
BTW, if your client provides the TLS SNI (server name indication) extension in the TLS ClientHello, then some of those config conditions are resolvable during mod_openssl processing. If not, then those are not available yet.
RE: probem with http to https redirect (connection reset ...) - Added by danmcb over 2 years ago
I am simply testing by asking for
http://www.danmcb.com
in Firefox. I am not manipulating or trying to do anything odd with ports. I haven't checked but I would be very surprised of Firefox is doing an http req on port 443!
(My .conf file has server.port = 80, I suppose that the ssl module is smart enough to listen on 443 - must be as I have no issue at all with https requests.)
RE: probem with http to https redirect (connection reset ...) - Added by danmcb over 2 years ago
In the case that I make an http request as described in my last post - no info about request or response headers is output. The request seeems to fail on the line:
2022-11-02 01:02:23: mod_openssl.c.3095) SSL: 1 error:1408F09C:SSL routines:ssl3_get_record:http request
the 8 line snippet I posted above which ends in this error repeats a number of times (probably the browser retrying) and that is it.
RE: probem with http to https redirect (connection reset ...) - Added by gstrauss over 2 years ago
ssl3_get_record:http request is an openssl error message and looks to me like an HTTP request was made on an HTTPS port.
The following was added to lighttpd 1.4.60, released Oct 2021, over a year ago. Again, the latest version of lighttpd is lighttpd 1.4.67.
https://git.lighttpd.net/lighttpd/lighttpd1.4/commit/75e9b2857a07fae38ac8f0686faa6785e35d9672
It is often a waste of everyone's time to troubleshoot things over and over which have been fixed or improved many months or years ago. In this case, the error message was improved over a year ago for behavior that has always been a client mistake: sending clear-text is invalid on an encrypted port expecting TLS ClientHello for TLS negotiation.
RE: probem with http to https redirect (connection reset ...) - Added by gstrauss over 2 years ago
You have ssl.engine = "enable" in the global scope in your config, which enables TLS in the global scope. If that global scope is your default listening port, e.g. server.port = 80, then you have enabled TLS on port 80.
RE: [Solved] probem with http to https redirect (connection reset ...) - Added by gstrauss over 2 years ago
I think you might want something like the following, which works in lighttpd 1.4.67, but I have not tested with lighttpd 1.4.59.
ssl.engine = "enable"
server.port = 443
$SERVER["socket"] == ":80" { ssl.engine = "disable" }
$SERVER["socket"] == "[::]:80" { ssl.engine = "disable" }
I think you would have tracked down the issue sooner if you were running lighttpd 1.4.60 or later with the error message added by lighttpd (instead of the more opaque openssl error string).
RE: [Solved] probem with http to https redirect (connection reset ...) - Added by danmcb over 2 years ago
Thank you! Had to be something stupid. I wonder where I got that.
In fact just deleting that line solves the issue, as the "enable" is repeated inside the ssl block a few lines later. The redirect woerks now.
Thanks again for your time.
RE: [Solved] probem with http to https redirect (connection reset ...) - Added by danmcb over 2 years ago
"I think you would have tracked down the issue sooner if you were running lighttpd 1.4.60 or later with the error message added by lighttpd (instead of the more opaque openssl error string)."
That might well be so. But the reality is I use the distro provided version. I didn't realise that debian was that far behind, I could use "testing" I suppose. But the real issue was my basic error in the file ... not lighty at all.
RE: [Solved] probem with http to https redirect (connection reset ...) - Added by danmcb over 2 years ago
thanks again for your time in helping me to get this fixed. I made a small donation by way of a thank you.