jan/cacert-devsetup
1
0
Fork 1
Code Issues Pull requests Releases Wiki Activity

Add README, move URLs to cacert.localhost

Browse source
This commit is contained in:
Jan Dittberner 2020-12-20 15:28:19 +01:00 • committed by Jan Dittberner
parent 279dbcffbf
commit c39be2c6c8
7 changed files with 85 additions and 46 deletions
Download patch file Download diff file Expand all files Collapse all files

33
docker/apache-virtualhost.conf
View file

@ -1,11 +1,11 @@
<VirtualHost *:80>
ServerName test.cacert.org
ServerAlias www.test.cacert.org
ServerName test.cacert.localhost
ServerAlias www.test.cacert.localhost
DocumentRoot /www/www
ScriptAlias /cgi-bin/ /www/cgi-bin/
Redirect permanent /revoke.crl http://crl.cacert.org/revoke.crl
Redirect permanent /class3-revoke.crl http://crl.cacert.org/class3-revoke.crl
Redirect permanent /revoke.crl http://crl.cacert.localhost/revoke.crl
Redirect permanent /class3-revoke.crl http://crl.cacert.localhost/class3-revoke.crl
RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
RewriteRule .* - [F]
@ -15,8 +15,8 @@
</VirtualHost>
<VirtualHost *:443>
ServerName test.cacert.org
ServerAlias www.test.cacert.org
ServerName test.cacert.localhost
ServerAlias www.test.cacert.localhost
DocumentRoot /www/www
SSLEngine on
@ -24,15 +24,15 @@
SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
SSLCipherSuite kEECDH:kEDH:AESGCM:ALL:!3DES!RC4:!LOW:!EXP:!MD5:!aNULL:!eNULL
SSLCertificateFile /etc/ssl/certs/test.cacert.org.crt
SSLCertificateKeyFile /etc/ssl/private/test.cacert.org.pem
SSLCertificateFile /etc/ssl/certs/test.cacert.localhost.crt.pem
SSLCertificateKeyFile /etc/ssl/private/test.cacert.localhost.key.pem
SSLCACertificateFile /etc/ssl/certs/combined.crt
Header always set Strict-Transport-Security "max-age=31536000"
ScriptAlias /cgi-bin/ /www/cgi-bin/
Redirect permanent /revoke.crl http://crl.cacert.org/revoke.crl
Redirect permanent /class3-revoke.crl http://crl.cacert.org/class3-revoke.crl
Redirect permanent /revoke.crl http://crl.cacert.localhost/revoke.crl
Redirect permanent /class3-revoke.crl http://crl.cacert.localhost/class3-revoke.crl
RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
RewriteRule .* - [F]
@ -42,8 +42,7 @@
</VirtualHost>
<VirtualHost *:443>
ServerName secure.test.cacert.org
ServerAlias secure.test.cacert.org
ServerName secure.test.cacert.localhost
DocumentRoot /www/www
SSLEngine on
@ -51,20 +50,20 @@
SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
SSLCipherSuite kEECDH:kEDH:AESGCM:ALL:!3DES!RC4:!LOW:!EXP:!MD5:!aNULL:!eNULL
SSLCertificateFile /etc/ssl/certs/secure.crt
SSLCertificateKeyFile /etc/ssl/private/secure_test_cacert_org.pem
SSLCertificateFile /etc/ssl/certs/secure.test.cacert.localhost.crt.pem
SSLCertificateKeyFile /etc/ssl/private/secure.test.cacert.localhost.key.pem
SSLVerifyClient require
SSLVerifyDepth 2
SSLCACertificateFile /etc/ssl/certs/combined.crt
#SSLCARevocationFile /etc/ssl/crls/cacert-combined.crl
#SSLOCSPEnable on
#SSLOCSPDefaultResponder http://ocsp.cacert.org/
#SSLOCSPDefaultResponder http://ocsp.cacert.localhost/
SSLOptions +StdEnvVars
Header always set Strict-Transport-Security "max-age=31536000"
Redirect permanent /revoke.crl http://crl.cacert.org/revoke.crl
Redirect permanent /class3-revoke.crl http://crl.cacert.org/class3-revoke.crl
Redirect permanent /revoke.crl http://crl.cacert.localhost/revoke.crl
Redirect permanent /class3-revoke.crl http://crl.cacert.localhost/class3-revoke.crl
RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
RewriteRule .* - [F]