2020-12-22 08:49:18 +01:00
|
|
|
<VirtualHost *:443>
|
|
|
|
|
ServerName mgr.cacert.localhost
|
|
|
|
|
ServerAlias www.mgr.cacert.localhost
|
|
|
|
|
DocumentRoot /var/www/manager/public
|
|
|
|
|
|
|
|
|
|
SSLEngine on
|
|
|
|
|
SSLStrictSNIVHostCheck on
|
|
|
|
|
SSLProtocol all -SSLv2 -SSLv3 -TLSv1
|
|
|
|
|
SSLHonorCipherOrder on
|
|
|
|
|
SSLCipherSuite kEECDH:kEDH:AESGCM:ALL:!3DES!RC4:!LOW:!EXP:!MD5:!aNULL:!eNULL
|
|
|
|
|
SSLCertificateFile /etc/ssl/certs/mgr.cacert.localhost.crt.pem
|
|
|
|
|
SSLCertificateKeyFile /etc/ssl/private/mgr.cacert.localhost.key.pem
|
|
|
|
|
SSLCertificateChainFile /etc/ssl/certs/combined.crt
|
|
|
|
|
|
|
|
|
|
SSLCACertificateFile /etc/ssl/certs/combined.crt
|
2020-12-22 14:19:31 +01:00
|
|
|
SSLVerifyClient optional
|
2020-12-22 08:49:18 +01:00
|
|
|
SSLVerifyDepth 2
|
|
|
|
|
SSLOptions +StdEnvVars
|
|
|
|
|
|
2020-12-22 14:19:31 +01:00
|
|
|
<Directory /var/www/manager/public>
|
|
|
|
|
Options Indexes FollowSymlinks MultiViews
|
|
|
|
|
AllowOverride Options FileInfo
|
|
|
|
|
</Directory>
|
|
|
|
|
|
2020-12-22 08:49:18 +01:00
|
|
|
Header always set Strict-Transport-Security "max-age=31536000"
|
|
|
|
|
</VirtualHost>
|
