forked from jan/cacert-devsetup
26 lines
801 B
Text
26 lines
801 B
Text
|
<VirtualHost *:443>
|
||
|
|
ServerName cats.cacert.localhost
|
||
|
|
ServerAlias www.cats.cacert.localhost
|
||
|
|
DocumentRoot /var/www/cats
|
||
|
|
|
||
|
|
SSLEngine on
|
||
|
|
SSLStrictSNIVHostCheck on
|
||
|
|
SSLProtocol all -SSLv2 -SSLv3 -TLSv1
|
||
|
|
SSLHonorCipherOrder on
|
||
|
|
SSLCipherSuite kEECDH:kEDH:AESGCM:ALL:!3DES!RC4:!LOW:!EXP:!MD5:!aNULL:!eNULL
|
||
|
|
SSLCertificateFile /etc/apache2/ssl/certs/cats.cacert.localhost.crt.pem
|
||
|
|
SSLCertificateKeyFile /etc/apache2/ssl/private/cats.cacert.localhost.key.pem
|
||
|
|
|
||
|
|
SSLCACertificateFile /etc/apache2/ssl/certs/combined.crt
|
||
|
|
SSLVerifyClient optional
|
||
|
|
SSLVerifyDepth 2
|
||
|
|
SSLOptions +StdEnvVars
|
||
|
|
|
||
|
|
<Directory /var/www/cats>
|
||
|
|
Options Indexes FollowSymlinks MultiViews
|
||
|
|
AllowOverride Options FileInfo
|
||
|
|
</Directory>
|
||
|
|
|
||
|
|
Header always set Strict-Transport-Security "max-age=31536000"
|
||
|
|
</VirtualHost>
|