diff options
author | Jonas Smedegaard <dr@jones.dk> | 2006-04-02 16:01:51 +0000 |
---|---|---|
committer | Jonas Smedegaard <dr@jones.dk> | 2006-04-02 16:01:51 +0000 |
commit | 67f3fa100fb12ec2216345006c51717929dffeb3 (patch) | |
tree | be6c18ad2a25e25d42ec2b7ea730a75f831e9a6e /apache2/conf.d/local-ssl.conf | |
parent | f2d69c225dd64ba27813cb08b39b512bceaf1368 (diff) |
Add new sample apache2 config snippets.
Diffstat (limited to 'apache2/conf.d/local-ssl.conf')
-rw-r--r-- | apache2/conf.d/local-ssl.conf | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/apache2/conf.d/local-ssl.conf b/apache2/conf.d/local-ssl.conf new file mode 100644 index 0000000..40e6be3 --- /dev/null +++ b/apache2/conf.d/local-ssl.conf @@ -0,0 +1,23 @@ +SSLEngine on +SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL +SSLCertificateFile /etc/ssl/certs/apache2.pem +SSLCertificateKeyFile /etc/ssl/private/apache2.pem +SSLCACertificatePath /etc/ssl/certs +#SSLCARevocationPath /etc/apache2/ssl.crl +#SSLCARevocationFile /etc/apache2/ssl.crl/ca-bundle.crl +#SSLVerifyClient require +#SSLVerifyDepth 10 + +<Files ~ "\.(cgi|shtml|phtml|php3?)$"> + SSLOptions +StdEnvVars +</Files> +<Directory "/usr/lib/cgi-bin"> + SSLOptions +StdEnvVars +</Directory> + +SetEnvIf User-Agent ".*MSIE.*" \ + nokeepalive ssl-unclean-shutdown \ + downgrade-1.0 force-response-1.0 + +CustomLog /var/log/apache2/ssl_request_log \ + "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" |