Apache2-Kurs/2024-10
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

Kapitel 10: SSL/TLS

Browse source
This commit is contained in:
Sven Velt 2024-10-17 12:04:15 +02:00
parent 245687aa9e
commit ab8bd17668
1 changed files with 62 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

62
conf/kapitel/kapitel_10.conf Normal file
View file

@ -0,0 +1,62 @@
##### Kapitel 10 - SSL
LoadModule ssl_module modules/mod_ssl.so
Include conf/extra/httpd-ssl.conf
# Für dehydrated, aus Debian-Package "dehydrated-apache2"
Include /etc/apache2/conf-available/dehydrated.conf
### SSL-Protokoll/-Cipher Log-File-Format
LogFormat "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" ssl_info
LogFormat "%t %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%{User-Agent}i\" %h \"%r\" %b" ssl_agentinfo
LogFormat "%{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%{User-Agent}i\"" ssl_browser
### IP-based SSL-VHost
<VirtualHost 172.31.31.101:443>
SSLEngine On
SSLCertificateFile "/usr/local/apache2/conf/ssl/ipbased.sv.crt"
SSLCertificateKeyFile "/usr/local/apache2/conf/ssl/ipbased.sv.key"
# SSLCertificateChainFile "/usr/local/apache2/conf/ssl/interm.crt"
DocumentRoot /usr/local/apache2/htdocs-ipbased.sv
ServerName ipbased.sv
CustomLog logs/SSL_ipbased-access.log combined
ErrorLog logs/SSL_ipbased-error.log
CustomLog logs/ipbased.sv_ssl.log ssl_browser
CustomLog logs/ipbased.sv_ssl_agent.log ssl_agentinfo
SSLCACertificateFile CA/cacert.pem
<Location /sslclient/>
SSLVerifyClient require
SSLVerifyDepth 1
</Location>
</VirtualHost>
### Name-based SSL-VHosts
<VirtualHost 172.31.31.102:443>
SSLEngine On
SSLCertificateFile /usr/local/apache2/conf/ssl/firma1.sv.crt
SSLCertificateKeyFile /usr/local/apache2/conf/ssl/firma1.sv.key
DocumentRoot /usr/local/apache2/htdocs-firma1.sv
ServerName firma1.sv
ServerAlias *.firma1.sv
CustomLog logs/firma1-access.log combined
ErrorLog logs/firma1-error.log
</VirtualHost>
<VirtualHost 172.31.31.102:443>
SSLEngine On
SSLCertificateFile /usr/local/apache2/conf/ssl/firma2.sv.crt
SSLCertificateKeyFile /usr/local/apache2/conf/ssl/firma2.sv.key
DocumentRoot /usr/local/apache2/htdocs-firma2.sv
ServerName firma2.sv
ServerAlias *.firma2.sv
CustomLog logs/firma2-access.log combined
ErrorLog logs/firma2-error.log
</VirtualHost>