#!/bin/sh
################################################################################
#                                                                              #
#   Copyright (C) 2008-2012 LABBE Corentin <corentin.labbe@geomatys.fr>
#
#    YASAT is free software: you can redistribute it and/or modify
#    it under the terms of the GNU General Public License as published by
#    the Free Software Foundation, either version 3 of the License, or
#    (at your option) any later version.
#
#    YASAT is distributed in the hope that it will be useful,
#    but WITHOUT ANY WARRANTY; without even the implied warranty of
#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#    GNU General Public License for more details.
#
#    You should have received a copy of the GNU General Public License
#    along with YASAT.  If not, see <http://www.gnu.org/licenses/>.
#                                                                              #
################################################################################



Title "Check apache Vhosts"

#TODO 404 personalized pages /usr/share/apache2/error/HTTP_NOT_FOUND.html.var
#TODO check passwd files within vhosts docroot security notes at http://httpd.apache.org/docs/2.0/mod/mod_auth.html#authuserfile
#TODO Dav on/svn
#TODO SVNPath
#TODO MOD JK jkmount
#TODO checks docroot for Thumbs.db, 'copy of filename', etc... files that dont have to be present
#.CVS
#TODO replace/add *:80 by servername when printing infos
#TODO mod_gzip mod_deflate http://httpd.apache.org/docs/2.0/mod/mod_deflate.html
# SetOutputFilter DEFLATE or AddOutputFilterByType DEFLATE text/html text/plain text/xml SetInputFilter 

#TODO find for php.old
#php_admin_value php_value php_admin_flag
#open_basedir http://www.php.net/manual/en/ini.core.php#ini.open-basedir

#TODO mod_expire

#TODO check mod itk
#TODO for known location phpmyadmin check config/install rights

Find_apache_conf_location

if [ ! -d $APACHE_CONF_REP ] ;then
	Display --indent 2 --text "No apache found" --result NOTFOUND --color BLUE
	return 1;
fi

prepare_apache_conf $APACHE_CONF_REP
APACHE_CONF_LOCATION_TO_TEST="${TEMPYASATDIR}/apache.conf"
if [ ! -e "$APACHE_CONF_LOCATION_TO_TEST" ]
then
	echo "Error no $APACHE_CONF_LOCATION_TO_TEST"
	return 1;
fi

FindValueOf $APACHE_CONF_LOCATION_TO_TEST "User"
Check_apache_user $APACHE_CONF_REP $RESULTAT
APACHE_USER="$RESULTAT"
FindValueOf $APACHE_CONF_LOCATION_TO_TEST "Group"
Check_apache_group $APACHE_CONF_REP $RESULTAT
APACHE_GROUP="$RESULTAT"
#sanity check, if it is empty then it is www-data
#it happen when check_apache_user found multiple declaration of user
#TODO correct the found of multiple declaration
if [ -z "$APACHE_USER" ]
then
	Display --indent 2 --text "Strange i dont found apache user, fall back to www-data" --result INFO --color BLUE
	APACHE_USER='www-data'
fi
if [ -z "$APACHE_GROUP" ]
then
	Display --indent 2 --text "Strange i dont found apache group, fall back to www-data" --result INFO --color BLUE
	APACHE_GROUP='www-data'
fi

OUTPUT_RESULT="${TEMPYASATDIR}/apache.result"
TMP_RESULT="${TEMPYASATDIR}/apache.tmpresult"
echo '' > $OUTPUT_RESULT

DIRECTORY=''
LOCATION=''
CONF_PROXY=''
VIRTUALHOST=''
ACCESSLOG=''
ERRORLOG=''
ORDER=0
DENY_IN_FIRST=0
DENY_FROM_ALL=0
REQUIRE_VALID_USER=0
OPTION_INDEX=0
OPTION_CGI=0
LIST_ALIAS=''
VHOST_SERVER_NAME=''
JKMOUNT_SRC=''
DOCROOT=''

#cat $APACHE_CONF_LOCATION_TO_TEST |
while read line
do
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*<Proxy'`" ] ; then
		get_path_from_apache_directives "$line"
		CONF_PROXY="$RESULTAT"
#		CONF_PROXY=`echo $line | sed 's/^[[:space:]]*<Proxy[[:space:]]*//gI' | sed 's/[[:space:]]*>.*//g' | sed 's/^"//'| sed 's/"$//'`
		echo "  Found Proxy $CONF_PROXY"
	fi
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*<Directory'`" ] ; then
		get_path_from_apache_directives "$line"
		DIRECTORY="$RESULTAT"
		AUTH_FILE=''
#		DIRECTORY=`echo $line | sed 's/^[[:space:]]*<Directory[[:space:]]*//gI' | sed 's/[[:space:]]*>.*//g' | sed 's/^"//'| sed 's/"$//'`
		echo "  Found Directory $DIRECTORY"
	fi
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*<Location'`" ] ; then
		get_path_from_apache_directives "$line"
		LOCATION="$RESULTAT"
#		LOCATION=`echo $line | sed 's/^[[:space:]]*<Location[[:space:]]*//gI' | sed 's/[[:space:]]*>.*//g'`
		echo "  Found Location $LOCATION"
	fi
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*<VirtualHost'`" ] ; then
		get_path_from_apache_directives "$line"
		VIRTUALHOST="$RESULTAT"
#		VIRTUALHOST=`echo $line | sed 's/^[[:space:]]*<VirtualHost[[:space:]]*//gI' | sed 's/[[:space:]]*>.*//g'`
		echo "  Found VirtualHost $VIRTUALHOST"
		echo "VHOST=$VIRTUALHOST" >> $OUTPUT_RESULT
	fi
	##### /Directory =======================
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*</Directory'`" ] ; then
		GOOD=''
		BAD=''
		echo "    Found End of Directory $DIRECTORY"
		if [ "$ORDER" -eq 0 ] ; then
			Display --indent 4 --text "No order clause" --result NOTFOUND --color RED --advice APACHE_VHOSTS_NO_ORDER_CLAUSE
			BAD="$BAD NOORDER"
		else
			if [ $DENY_IN_FIRST -eq 0 ] ; then
				Display --indent 4 --text "Order clause with allow in first" --result FOUND --color GREEN
				GOOD="$GOOD ALLOW FIRST"
				if [ $DENY_FROM_ALL -eq 1 ] ; then
					Display --indent 4 --text "Order clause with deny from all" --result FOUND --color GREEN
					GOOD="$GOOD DENYALL"
				fi

			else
				if [ $DENY_FROM_ALL -eq 1 ] ; then
				Display --indent 4 --text "Order clause with deny from all" --result FOUND --color GREEN
				GOOD="$GOOD DENYALL"
				else
				Display --indent 4 --text "Order clause with deny in first" --result WARNING --color RED
				BAD="$BAD denyfirst"
				fi
			fi
		fi
		if [ $OPTION_INDEX -eq 1 ] ; then
			BAD="$BAD INDEX"
		fi
		if [ $OPTION_CGI -eq 1 ] ; then
			BAD="$BAD CGI"
		fi
		if [ $REQUIRE_VALID_USER -eq 1 ] ; then
			Display --indent 4 --text "Protected by password" --result FOUND --color GREEN
			GOOD="$GOOD PASSWORD"
		fi

		echo "DIRECTORY=$DIRECTORY ${GREEN}$GOOD ${RED}$BAD${NORMAL}" >> $OUTPUT_RESULT
		if [ ! -z $AUTH_FILE ] ; then
			echo "AUTHFILE=$AUTH_FILE" >> $OUTPUT_RESULT
		fi
		identify_web_tech_in_dir "$DIRECTORY" recursive
		if [ "$WEBTECH" = 'PHP' ] ; then
			Display --indent 2 --text "PHP technology" --result FOUND --color BLUE
		fi
		DIRECTORY=''
		ORDER=0
		DENY_IN_FIRST=0
		DENY_FROM_ALL=0
		REQUIRE_VALID_USER=0
		AUTH_FILE=''
		OPTION_INDEX=0
		OPTION_CGI=0
	fi
	##### /Location =======================
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*</Location'`" ] ; then
		GOOD=''
		BAD=''
		echo "    Found End of Location $LOCATION"
		if [ $ORDER -eq 0 ] ; then
			Display --indent 4 --text "No order clause" --result NOTFOUND --color RED --advice APACHE_VHOSTS_NO_ORDER_CLAUSE
			BAD="$BAD NOORDER"
		else
			if [ $DENY_IN_FIRST -eq 0 ] ; then
				Display --indent 4 --text "Order clause with allow in first" --result FOUND --color GREEN
				GOOD="$GOOD ALLOW FIRST"
				if [ $DENY_FROM_ALL -eq 1 ] ; then
					Display --indent 4 --text "Order clause with deny from all" --result FOUND --color GREEN
					GOOD="$GOOD DENYALL"
				fi
			else
				if [ $DENY_FROM_ALL -eq 1 ] ; then
				Display --indent 4 --text "Order clause with deny from all" --result FOUND --color GREEN
				GOOD="$GOOD DENYALL"
				else
				Display --indent 4 --text "Order clause with deny in first" --result WARNING --color RED
				BAD="$BAD denyfirst"
				fi
			fi
		fi
		if [ $OPTION_INDEX -eq 1 ] ; then
			BAD="$BAD INDEX"
		fi
		if [ $OPTION_CGI -eq 1 ] ; then
			BAD="$BAD CGI"
		fi
		if [ $REQUIRE_VALID_USER -eq 1 ] ; then
			Display --indent 4 --text "Protected by password" --result FOUND --color GREEN
			GOOD="$GOOD PASS"
		fi
		echo "LOCATION=$LOCATION ${GREEN}$GOOD ${RED}$BAD${NORMAL}" >> $OUTPUT_RESULT
		if [ ! -z "$AUTH_FILE" ] ; then
			echo "AUTHFILE=$AUTH_FILE" >> $OUTPUT_RESULT
		fi
		if [ -z "$DOCROOT" ] ; then
			Display --indent 4 --text "Strange no docroot yet" --result NOTFOUND --color ORANGE
			identify_web_tech_in_dir "${DEFAULT_APACHE_DOCROOT}/${LOCATION}"
		else
			identify_web_tech_in_dir "${DOCROOT}/${LOCATION}"
		fi
		if [ "$WEBTECH" = 'PHP' ] ; then
			Display --indent 2 --text "PHP technology" --result FOUND --color BLUE
		fi

		LOCATION=''
		ORDER=0
		DENY_IN_FIRST=0
		DENY_FROM_ALL=0
		REQUIRE_VALID_USER=0
		AUTH_FILE=''
		OPTION_INDEX=0
		OPTION_CGI=0
	fi
	##### /Virtualhost =======================
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*</VirtualHost'`" ] ; then
		echo "    Found End of Virtualhost $VIRTUALHOST"
		if [ -z "$ACCESSLOG" ] ; then
			Display --indent 4 --text "$VIRTUALHOST has no accesslog " --result NOTFOUND --color RED --advice APACHE_VHOSTS_NO_ACCESSLOG
		else
			Display --indent 4 --text "Accesslog $ACCESSLOG" --result FOUND --color GREEN
		fi
		if [ -z "$ERRORLOG" ] ; then
			Display --indent 4 --text "$VIRTUALHOST has no ErrorLog " --result NOTFOUND --color RED --advice APACHE_VHOSTS_NO_ERRORLOG
		else
			Display --indent 4 --text "ErrorLog $ERRORLOG" --result FOUND --color GREEN
		fi
		if [ ! -z "$LIST_ALIAS" ] ; then
			echo "ALIAS=$LIST_ALIAS" >> $OUTPUT_RESULT
		fi
		if [ -z "$DOCROOT" ] ; then
			Display --indent 4 --text "No DocumentRoot in this vhost" --result NOTFOUND --color RED --advice APACHE_VHOSTS_NO_DOCROOT
		fi
		echo "ENDHOST=$VIRTUALHOST" >> $OUTPUT_RESULT
		VIRTUALHOST=''
		ACCESSLOG=''
		ERRORLOG=''
		LIST_ALIAS=''
		JKMOUNT_SRC=''
		DOCROOT=''
	fi

	##### ServerName ===========================================
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*ServerName'`" ]
	then
		VHOST_SERVER_NAME="`echo $line | sed 's/^[[:space:]]*[a-zA-Z0-9][a-zA-Z0-9]*[[:space:]]*//g' | cut -d\  -f1`"
		Display --indent 4 --text "$VIRTUALHOST has ServerName $VHOST_SERVER_NAME" --result FOUND --color GREEN
		echo "SERVERNAME=$VHOST_SERVER_NAME" >> $OUTPUT_RESULT
	fi

	##### /Proxy =======================
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*</Proxy'`" ] ;then
		GOOD=''
		BAD=''
		if [ $ORDER -eq 0 ] ;then
			Display --indent 4 --text "No order clause" --result NOTFOUND --color RED --advice APACHE_VHOSTS_NO_ORDER_CLAUSE
			BAD="$BAD NOORDER"
		else
			if [ $DENY_IN_FIRST -eq 0 ]
			then
				Display --indent 4 --text "Order clause with allow in first" --result FOUND --color GREEN
				GOOD="$GOOD ALLOW FIRST"
			else
				if [ $DENY_FROM_ALL -eq 1 ]
				then
				Display --indent 4 --text "Order clause with deny from all" --result FOUND --color GREEN
				GOOD="$GOOD DENYALL"
				else
				Display --indent 4 --text "Order clause with deny in first" --result WARNING --color RED
				BAD="$BAD denyfirst"
				fi
			fi
		fi
		echo "    Found End of Proxy $CONF_PROXY"
		echo "PROXY=$CONF_PROXY ${GREEN}$GOOD ${RED}$BAD${NORMAL}" >> $OUTPUT_RESULT
		CONF_PROXY=''
		ORDER=0
		DENY_IN_FIRST=0
		DENY_FROM_ALL=0
		REQUIRE_VALID_USER=0
		AUTH_FILE=''
	fi
	##### Logs =======================
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*configLog'`" ]
	then
		ACCESSLOG=`echo $line | sed 's/^[[:space:]]*[a-zA-Z][a-zA-Z]*[[:space:]]//g' | cut -d\  -f1`
	fi
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*CustomLog'`" ]
	then
		ACCESSLOG=`echo $line | sed 's/^[[:space:]]*[a-zA-Z][a-zA-Z]*[[:space:]]*//g' | cut -d\  -f1`
	fi

	if [ ! -z "`echo $line | grep -i '^[[:space:]]*ErrorLog'`" ]
	then
		ERRORLOG=`echo $line | sed 's/^[[:space:]]*[a-zA-Z][a-zA-Z]*[[:space:]]*//g' | cut -d\  -f1`
	fi


	##### /Order ======================================
	# Allow,Deny = good:)
	# Deny,Allow = bad
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*order'`" ] ;then
		ORDER=1
		if [ ! -z "`echo $line | grep -i '^[[:space:]]*order deny,allow'`" ]
		then
			DENY_IN_FIRST=1
		fi
	fi
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*deny from all'`" ]
	then
		DENY_FROM_ALL=1
	fi

	if [ ! -z "`echo $line | grep -i '^[[:space:]]*require valid-user'`" ]
	then
#		Display --indent 4 --text "DEBUGRequire valid user" --result FOUND --color GREEN
		REQUIRE_VALID_USER=1
	fi
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*require group'`" ]
	then
#		Display --indent 4 --text "DEBUGRequire valid user" --result FOUND --color GREEN
		REQUIRE_VALID_USER=1
	fi

	if [ ! -z "`echo $line | grep -i '^[[:space:]]*require user'`" ]
	then
#		Display --indent 4 --text "DEBUGRequire user" --result FOUND --color GREEN
		REQUIRE_VALID_USER=1
	fi

	#TODO Dav on

	##### docroot ===========================================
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*documentroot'`" ] ; then
		DOCROOT=`echo $line  | sed 's/^[[:space:]]*[a-zA-Z][a-zA-Z]*[[:space:]]*//g' | sed 's/^\"//g' | sed 's/\"[[:space:]]*$//g'`
		Display --indent 4 --text "Docroot $DOCROOT" --result FOUND --color GREEN

		if [ $DOCROOT = '/var/www' -o $DOCROOT = '/var/www/' ] ; then
			Display --indent 4 --text "Docroot $DOCROOT" --result FOUND --color ORANGE --advice APACHE_VHOSTS_VAR_WWW
		fi

		check_directory_group $DOCROOT $APACHE_GROUP $TMP_RESULT 6 APACHE_VHOSTS_DOCROOT_BADGROUP
		check_directory_others $DOCROOT $TMP_RESULT 6 APACHE_VHOSTS_DOCROOT_OTHERRIGHTS
		check_directory_writable_by_group $DOCROOT $APACHE_GROUP $TMP_RESULT 6 APACHE_VHOSTS_DOCROOT_GROUPW

		if [ -e "${DOCROOT}/robots.txt" ] ; then
			Display --indent 6 --text "Found robots.txt" --result FOUND --color BLUE
		else
			Display --indent 6 --text "No robots.txt" --result NOTFOUND --color ORANGE --advice APACHE_VHOSTS_NO_ROBOTS_TXT
		fi

		#check for known location
		if [ -e "$PLUGINS_REP/apache_vhosts.data" ] ; then
			grep -v '^#' "$PLUGINS_REP/apache_vhosts.data" |
			while read LOC_LINE
			do
#				echo "      $LOC_LINE"
				LOC_LOC=`echo $LOC_LINE | cut -f1 -d\|`
				LOC_ADVICE=`echo $LOC_LINE | cut -f3 -d\|`
				if [ -e "${DOCROOT}${LOC_LOC}" ] ; then
					Display --indent 2 --text "=> ${DOCROOT}${LOC_LOC}" --result FOUND --color RED --advice $LOC_ADVICE
					echo "HLOC=${LOC_LOC}" >> $OUTPUT_RESULT
				fi
			done
		else
			Display --indent 2 --text "No apache_vhosts.data" --result NOTFOUND --color RED
		fi
		identify_web_tech_in_dir "$DOCROOT" recursive
		if [ "$WEBTECH" = 'PHP' ] ; then
			Display --indent 2 --text "PHP technology" --result FOUND --color BLUE
		fi

	fi
	#TODO better alias printing in apache tree (list_alias)
	##### alias ===========================================
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*Alias[[:space:]]'`" ]
	then
		ALIAS="`echo $line | sed 's/^[[:space:]]*[a-zA-Z][a-zA-Z]*[[:space:]]*//g' | cut -d\  -f1`"
		DEST_ALIAS="`echo $line | sed 's/^[[:space:]]*[a-zA-Z][a-zA-Z]*[[:space:]]*//g' | cut -d\  -f2 | sed 's/^"//' | sed 's/"$//'`"
		Display --indent 4 --text "$ALIAS -> $DEST_ALIAS" --result FOUND --color BLUE
		if [ -z "$VIRTUALHOST" ]
		then
			echo "ALIAS=$ALIAS" >> $OUTPUT_RESULT
		else
			if [ -z "$LIST_ALIAS" ]
			then
				LIST_ALIAS="$ALIAS"
			else
				LIST_ALIAS="$LIST_ALIAS $ALIAS"
			fi
		fi
	fi

	##### override ===========================================
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*AllowOverride'`" ] ; then
		OVERRIDE=`echo $line | sed 's/^[[:space:]]*[a-zA-Z][a-zA-Z]*[[:space:]]*//g' | cut -d\  -f1`
		if [ "$OVERRIDE" != "None" ]
		then
			Display --indent 4 --text "$VIRTUALHOST has override $OVERRIDE" --result WARNING --color ORANGE
		fi
	fi
	##### php_admin_value ===========================================
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*php_admin_value'`" ] ; then
		PHP_ADMIN_VALUE=`echo $line | sed 's/^[[:space:]]*php_admin_value[[:space:]]*//g'`
		Display --indent 4 --text "$VIRTUALHOST has php_admin_value $PHP_ADMIN_VALUE" --result WARNING --color BLUE
		echo "PHP_ADMIN_VALUE=$PHP_ADMIN_VALUE" >> $OUTPUT_RESULT
	fi
	##### php_admin_flag ===========================================
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*php_admin_flag'`" ] ; then
		PHP_ADMIN_FLAG=`echo $line | sed 's/^[[:space:]]*php_admin_flag[[:space:]]*//g'`
		Display --indent 4 --text "$VIRTUALHOST has php_admin_flag $PHP_ADMIN_FLAG" --result WARNING --color BLUE
		#temp use same variable for flag and value
		echo "PHP_ADMIN_VALUE=$PHP_ADMIN_FLAG" >> $OUTPUT_RESULT
	fi


	##### authfile ===========================================
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*AuthUserFile'`" ]
	then
		AUTH_FILE="`echo $line | sed 's/^[[:space:]]*[a-zA-Z][a-zA-Z]*[[:space:]]*//g' | sed 's/^"//' | sed 's/"$//'`"
		if [ -e "$AUTH_FILE" ]
		then
			Display --indent 2 --text "Authfile $AUTH_FILE" --result FOUND --color GREEN
			if [ "`stat  $STAT_GROUP $AUTH_FILE`" !=  $APACHE_GROUP ]
			then
				Display --indent 2 --text "debug Authfile $AUTH_FILE incorrect permission" --result "`stat  $STAT_GROUP $AUTH_FILE`" --color RED
			fi
			if [ "`stat  $STAT_USER $AUTH_FILE`" =  $APACHE_USER ]
			then
				Display --indent 2 --text "debug Authfile $AUTH_FILE incorrect owner" --result "`stat $STAT_USER $AUTH_FILE`" --color RED
			fi
		else
			Display --indent 2 --text "Authfile $AUTH_FILE" --result NOTFOUND --color RED --advice APACHE_VHOSTS_AUTHFILE_NOTFOUND
		fi
	fi


	##### options ===========================================
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*options'`" ]
	then
		TOPRINT=''
		if [ ! -z "$VIRTUALHOST" ]
		then
			TOPRINT=$VIRTUALHOST
		fi
		if [ ! -z "$LOCATION" ]
		then
			TOPRINT=$LOCATION
		fi
		if [ ! -z "$DIRECTORY" ]
		then
			TOPRINT=$DIRECTORY
		fi
		#[[:space:]] is here for be sure that there not a - sign
		if [ ! -z "`echo $line | grep -i '[[:space:]]indexes'`" ]
		then
			Display --indent 4 --text "$TOPRINT has option indexes" --result FOUND --color ORANGE --advice APACHE_VHOSTS_OPTIONS_INDEXES
			OPTION_INDEX=1
		fi
		if [ ! -z "`echo $line | grep -i '[[:space:]]ExecCGI'`" ]
		then
			Display --indent 4 --text "$TOPRINT has option ExecCGI" --result FOUND --color ORANGE --advice APACHE_VHOSTS_OPTIONS_EXECCGI
			OPTION_CGI=1
		fi
	fi

	##### jkmount ===========================================
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*JKmount'`" ] ; then
		JKMOUNT_SRC="`echo \"$line\" | sed 's/^[[:space:]]*JKmount[[:space:]]*//gI' | cut -d\  -f1`"
		Display --indent 4 --text "$VIRTUALHOST has JKmount $JKMOUNT_SRC" --result FOUND --color BLUE
		echo "JKMOUNT=$JKMOUNT_SRC" >> $OUTPUT_RESULT
	fi
	##### ProxyPASS ===========================================
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*ProxyPASS'`" ]
	then
#		ProxyPASS_SRC="`echo \"$line\" | sed 's/^[[:space:]]*ProxyPASS[[:space:]]*//gI' | cut -d\  -f1`"
		get_value_in_string ProxyPASS "$line"
		ProxyPASS_SRC="$RESULTAT"
		Display --indent 4 --text "$VIRTUALHOST has ProxyPASS_SRC $ProxyPASS_SRC" --result FOUND --color BLUE
	fi
	##### mod_deflate ===========================================
	#AddOutputFilterByType
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*SetOutputFilter'`" ]
	then
		OUTPUT_FILTER_TYPE="`echo \"$line\" | sed 's/^[[:space:]]*SetOutputFilter[[:space:]]*//gI' | cut -d\  -f1`"
		Display --indent 4 --text "$VIRTUALHOST has SetOutputFilter" --result FOUND --color BLUE
		echo "DEFLATE=$OUTPUT_FILTER_TYPE" >> $OUTPUT_RESULT
	fi
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*AddOutputFilterByType'`" ]
	then
		TMP_GZIP_RESULT="${TEMPYASATDIR}/apache_gzip.tmpresult"
		if [ -e "${TMP_GZIP_RESULT}" ] ; then
			rm "${TMP_GZIP_RESULT}"
		fi
		OUTPUT_FILTER_TYPE="`echo \"$line\" | sed 's/^[[:space:]]*AddOutputFilterByType[[:space:]]*//gI' | cut -d\  -f1`"
		OUTPUT_FILTER_AFFECTED="`echo \"$line\" | sed 's/^[[:space:]]*AddOutputFilterByType[[:space:]]*//gI' | cut -d\  -f2-`"
		Display --indent 4 --text "$VIRTUALHOST has AddOutputFilterByType $OUTPUT_FILTER_TYPE" --result FOUND --color BLUE
		for mimetype in $OUTPUT_FILTER_AFFECTED
		do
			echo $mimetype >> ${TMP_GZIP_RESULT}
		done
		grep -iv -f ${TMP_GZIP_RESULT} $PLUGINS_REP/apache_mod_deflate.data |
		while read missing
		do
			Display --indent 6 --text "You can add also $missing" --result NOTFOUND --color BLUE
		done

		echo "DEFLATE=$OUTPUT_FILTER_TYPE $OUTPUT_FILTER_AFFECTED" >> $OUTPUT_RESULT
	fi
	##### SSL options =========================================== http://httpd.apache.org/docs/2.2/ssl/ssl_faq.html
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*SSLCertificateKeyFile'`" ] ; then
#		SSLCertKeyFile="`echo \"$line\" | sed 's/^[[:space:]]*SSLCertificateKeyFile[[:space:]]*//gI' | cut -d\  -f1`"
		get_value_in_string SSLCertificateKeyFile "$line"
		SSLCertKeyFile="$RESULTAT"
		Display --indent 4 --text "$VIRTUALHOST has SSL Key $SSLCertKeyFile" --result FOUND --color BLUE
		check_file $SSLCertKeyFile 6 PRIVKEY
	fi
	if [ ! -z "`echo $line | grep -i '^[[:space:]]*SSLCertificateFile'`" ] ; then
#		SSLCertFile="`echo \"$line\" | sed 's/^[[:space:]]*SSLCertificateFile[[:space:]]*//gI' | cut -d\  -f1`"
		get_value_in_string SSLCertificateFile "$line"
		SSLCertFile="$RESULTAT"
		Display --indent 4 --text "$VIRTUALHOST has SSL Cert $SSLCertFile" --result FOUND --color BLUE
		check_file $SSLCertFile 6 CERT
	fi
	#TODO SSLInsecureRenegotiation http://httpd.apache.org/docs/2.0/mod/mod_ssl.html#sslinsecurerenegotiation

done < $APACHE_CONF_LOCATION_TO_TEST

draw_apache_tree $OUTPUT_RESULT


return 1;