Adding a new Check - test https and directory slash redirects

Set up a moodle with https Clone this patch and go to https://moodle.local/report/security/index.php?detail=core_httpwebserver There are 6 checks that happen on this page. I've outlined below how to fix/make each of them fail. For each check outlined below: Change your apache/nginx config Restart the web server to load in the new config Refresh the check page and check the resulting table. Any errors should show a red background in the results column. Passing tests will have a normal background. Make sure each test failed HTTP code does NOT match the expected HTTP code. Make sure the failed urls do NOT match the expected URLs. If the test passes, check that the HTTP code and URL do match the expected ones. urlthatdoesnotexist I don't know how to make this one fail, on http an invalid url is always giving me a 404. Maybe this test should be removed. dashboardnoslash to make this fail, add DirectorySlash Off to your /etc/apache2/apache2.conf <Directory /var/www/> DirectorySlash Off Options FollowSymLinks AllowOverride None Require all granted </Directory> directorylisting to make this fail, insert the Indexes option to the directory where your moodle is. eg. open the file /etc/apache2/apache2.conf and change   <Directory /var/www/> Options FollowSymLinks AllowOverride None Require all granted </Directory> to <Directory /var/www/> Options Indexes FollowSymLinks AllowOverride None Require all granted </Directory> httpdashboardnoslash & httpurlnoredirect & httpurlthatdoesnotexist Comment out the redirect in apache2 virtualhosts file for me on ubuntu located at: /etc/apache2/sites-available/000-default.conf <VirtualHost moodle.local: 80 > #Redirect "/" "https://moodle.local/" ErrorDocument 403 /var/www/moodle/error/index.php DocumentRoot /var/www/moodle </VirtualHost> These http -> https tests could also be done by disabling the rewrite module if using that to do the rewrites. sudo a2dismod rewrite     For a correctly configured moodle site and server, we should see the check return OK.