ServerName www.cacert.localhost DocumentRoot /www/www ScriptAlias /cgi-bin/ /www/cgi-bin/ Redirect permanent /revoke.crl http://crl.cacert.localhost/revoke.crl Redirect permanent /class3-revoke.crl http://crl.cacert.localhost/class3-revoke.crl RewriteEngine On RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) RewriteRule .* - [F] AddDefaultCharset utf-8 ServerName www.cacert.localhost DocumentRoot /www/www SSLEngine on SSLStrictSNIVHostCheck on SSLProtocol all -SSLv2 -SSLv3 SSLHonorCipherOrder on SSLCipherSuite kEECDH:kEDH:AESGCM:ALL:!3DES!RC4:!LOW:!EXP:!MD5:!aNULL:!eNULL SSLCertificateFile /etc/apache2/ssl/certs/www.cacert.localhost.crt.pem SSLCertificateKeyFile /etc/apache2/ssl/private/www.cacert.localhost.key.pem Header always set Strict-Transport-Security "max-age=31536000" ScriptAlias /cgi-bin/ /www/cgi-bin/ Redirect permanent /revoke.crl http://crl.cacert.localhost/revoke.crl Redirect permanent /class3-revoke.crl http://crl.cacert.localhost/class3-revoke.crl RewriteEngine On RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) RewriteRule .* - [F] AddDefaultCharset utf-8 ServerName secure.cacert.localhost DocumentRoot /www/www SSLEngine on SSLStrictSNIVHostCheck on SSLProtocol all -SSLv2 -SSLv3 SSLHonorCipherOrder on SSLCipherSuite kEECDH:kEDH:AESGCM:ALL:!3DES!RC4:!LOW:!EXP:!MD5:!aNULL:!eNULL SSLCertificateFile /etc/apache2/ssl/certs/www.cacert.localhost.crt.pem SSLCertificateKeyFile /etc/apache2/ssl/private/www.cacert.localhost.key.pem SSLVerifyClient require SSLVerifyDepth 2 SSLCACertificateFile /etc/ssl/apache2/certs/combined.crt #SSLCARevocationFile /etc/ssl/crls/cacert-combined.crl #SSLOCSPEnable on #SSLOCSPDefaultResponder http://ocsp.cacert.localhost/ SSLOptions +StdEnvVars Header always set Strict-Transport-Security "max-age=31536000" Redirect permanent /revoke.crl http://crl.cacert.localhost/revoke.crl Redirect permanent /class3-revoke.crl http://crl.cacert.localhost/class3-revoke.crl RewriteEngine On RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) RewriteRule .* - [F] AddDefaultCharset utf-8