summaryrefslogtreecommitdiff
path: root/apache2/conf.d/local-ssl.conf
blob: 40e6be36fc16a49df702865c134e461babe0b44c (plain)
  1. SSLEngine on
  2. SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
  3. SSLCertificateFile /etc/ssl/certs/apache2.pem
  4. SSLCertificateKeyFile /etc/ssl/private/apache2.pem
  5. SSLCACertificatePath /etc/ssl/certs
  6. #SSLCARevocationPath /etc/apache2/ssl.crl
  7. #SSLCARevocationFile /etc/apache2/ssl.crl/ca-bundle.crl
  8. #SSLVerifyClient require
  9. #SSLVerifyDepth 10
  10. <Files ~ "\.(cgi|shtml|phtml|php3?)$">
  11. SSLOptions +StdEnvVars
  12. </Files>
  13. <Directory "/usr/lib/cgi-bin">
  14. SSLOptions +StdEnvVars
  15. </Directory>
  16. SetEnvIf User-Agent ".*MSIE.*" \
  17. nokeepalive ssl-unclean-shutdown \
  18. downgrade-1.0 force-response-1.0
  19. CustomLog /var/log/apache2/ssl_request_log \
  20. "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"