ServerName mgr.cacert.localhost ServerAlias www.mgr.cacert.localhost DocumentRoot /var/www/manager/public SSLEngine on SSLStrictSNIVHostCheck on SSLProtocol all -SSLv2 -SSLv3 -TLSv1 SSLHonorCipherOrder on SSLCipherSuite kEECDH:kEDH:AESGCM:ALL:!3DES!RC4:!LOW:!EXP:!MD5:!aNULL:!eNULL SSLCertificateFile /etc/ssl/certs/mgr.cacert.localhost.crt.pem SSLCertificateKeyFile /etc/ssl/private/mgr.cacert.localhost.key.pem SSLCertificateChainFile /etc/ssl/certs/combined.crt SSLCACertificateFile /etc/ssl/certs/combined.crt SSLVerifyClient optional SSLVerifyDepth 2 SSLOptions +StdEnvVars Options Indexes FollowSymlinks MultiViews AllowOverride Options FileInfo Header always set Strict-Transport-Security "max-age=31536000"