74 lines
2.5 KiB
Plaintext
74 lines
2.5 KiB
Plaintext
<VirtualHost *:80>
|
|
ServerName test.cacert.localhost
|
|
ServerAlias www.test.cacert.localhost
|
|
DocumentRoot /www/www
|
|
|
|
ScriptAlias /cgi-bin/ /www/cgi-bin/
|
|
Redirect permanent /revoke.crl http://crl.cacert.localhost/revoke.crl
|
|
Redirect permanent /class3-revoke.crl http://crl.cacert.localhost/class3-revoke.crl
|
|
RewriteEngine On
|
|
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
|
|
RewriteRule .* - [F]
|
|
<Directory /www/www/policy>
|
|
AddDefaultCharset utf-8
|
|
</Directory>
|
|
</VirtualHost>
|
|
|
|
<VirtualHost *:443>
|
|
ServerName test.cacert.localhost
|
|
ServerAlias www.test.cacert.localhost
|
|
DocumentRoot /www/www
|
|
|
|
SSLEngine on
|
|
SSLStrictSNIVHostCheck on
|
|
SSLProtocol all -SSLv2 -SSLv3
|
|
SSLHonorCipherOrder on
|
|
SSLCipherSuite kEECDH:kEDH:AESGCM:ALL:!3DES!RC4:!LOW:!EXP:!MD5:!aNULL:!eNULL
|
|
SSLCertificateFile /etc/ssl/certs/test.cacert.localhost.crt.pem
|
|
SSLCertificateKeyFile /etc/ssl/private/test.cacert.localhost.key.pem
|
|
SSLCACertificateFile /etc/ssl/certs/combined.crt
|
|
|
|
Header always set Strict-Transport-Security "max-age=31536000"
|
|
|
|
ScriptAlias /cgi-bin/ /www/cgi-bin/
|
|
Redirect permanent /revoke.crl http://crl.cacert.localhost/revoke.crl
|
|
Redirect permanent /class3-revoke.crl http://crl.cacert.localhost/class3-revoke.crl
|
|
RewriteEngine On
|
|
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
|
|
RewriteRule .* - [F]
|
|
<Directory /www/www/policy>
|
|
AddDefaultCharset utf-8
|
|
</Directory>
|
|
</VirtualHost>
|
|
|
|
<VirtualHost *:443>
|
|
ServerName secure.test.cacert.localhost
|
|
DocumentRoot /www/www
|
|
|
|
SSLEngine on
|
|
SSLStrictSNIVHostCheck on
|
|
SSLProtocol all -SSLv2 -SSLv3
|
|
SSLHonorCipherOrder on
|
|
SSLCipherSuite kEECDH:kEDH:AESGCM:ALL:!3DES!RC4:!LOW:!EXP:!MD5:!aNULL:!eNULL
|
|
SSLCertificateFile /etc/ssl/certs/secure.test.cacert.localhost.crt.pem
|
|
SSLCertificateKeyFile /etc/ssl/private/secure.test.cacert.localhost.key.pem
|
|
SSLVerifyClient require
|
|
SSLVerifyDepth 2
|
|
SSLCACertificateFile /etc/ssl/certs/combined.crt
|
|
#SSLCARevocationFile /etc/ssl/crls/cacert-combined.crl
|
|
#SSLOCSPEnable on
|
|
#SSLOCSPDefaultResponder http://ocsp.cacert.localhost/
|
|
SSLOptions +StdEnvVars
|
|
|
|
Header always set Strict-Transport-Security "max-age=31536000"
|
|
|
|
Redirect permanent /revoke.crl http://crl.cacert.localhost/revoke.crl
|
|
Redirect permanent /class3-revoke.crl http://crl.cacert.localhost/class3-revoke.crl
|
|
RewriteEngine On
|
|
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
|
|
RewriteRule .* - [F]
|
|
<Directory /www/www/policy>
|
|
AddDefaultCharset utf-8
|
|
</Directory>
|
|
</VirtualHost>
|