forked from jan/cacert-devsetup
26 lines
882 B
Text
26 lines
882 B
Text
<VirtualHost *:443>
|
|
ServerName mgr.cacert.localhost
|
|
ServerAlias www.mgr.cacert.localhost
|
|
DocumentRoot /var/www/mgr/manager/public
|
|
|
|
SSLEngine on
|
|
SSLStrictSNIVHostCheck on
|
|
SSLProtocol all -SSLv2 -SSLv3 -TLSv1
|
|
SSLHonorCipherOrder on
|
|
SSLCipherSuite kEECDH:kEDH:AESGCM:ALL:!3DES!RC4:!LOW:!EXP:!MD5:!aNULL:!eNULL
|
|
SSLCertificateFile /etc/apache2/ssl/certs/mgr.cacert.localhost.crt.pem
|
|
SSLCertificateKeyFile /etc/apache2/ssl/private/mgr.cacert.localhost.key.pem
|
|
|
|
SSLCACertificateFile /etc/apache2/ssl/certs/combined.crt
|
|
SSLCADNRequestFile /etc/apache2/ssl/certs/clientca.crt
|
|
SSLVerifyClient optional
|
|
SSLVerifyDepth 2
|
|
SSLOptions +StdEnvVars
|
|
|
|
<Directory /var/www/mgr/manager/public>
|
|
Options Indexes FollowSymlinks MultiViews
|
|
AllowOverride Options FileInfo
|
|
</Directory>
|
|
|
|
Header always set Strict-Transport-Security "max-age=31536000"
|
|
</VirtualHost>
|