summaryrefslogtreecommitdiff
path: root/apache2/conf-available/local-ssl.conf
blob: ae0d6fa124429ba7c8bc6313c5b9bcf39f1b3d9c (plain)
  1. SSLEngine on
  2. #SSLCertificateFile /etc/ssl/certs/apache2.pem
  3. #SSLCertificateKeyFile /etc/ssl/private/apache2.pem
  4. SSLCACertificatePath /etc/ssl/certs/
  5. #SSLCARevocationPath /etc/apache2/ssl.crl/
  6. #SSLCARevocationFile /etc/apache2/ssl.crl/ca-bundle.crl
  7. #SSLVerifyClient require
  8. #SSLVerifyDepth 10
  9. #SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire
  10. <FilesMatch "\.(cgi|shtml|phtml|php)$">
  11. SSLOptions +StdEnvVars
  12. </FilesMatch>
  13. <Directory /usr/lib/cgi-bin>
  14. SSLOptions +StdEnvVars
  15. </Directory>
  16. BrowserMatch "MSIE [2-6]" \
  17. nokeepalive ssl-unclean-shutdown \
  18. downgrade-1.0 force-response-1.0
  19. # MSIE 7 and newer should be able to use keepalive
  20. BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
  21. #CustomLog /var/log/apache2/ssl_request_log "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"