63 lines
1.9 KiB
Plaintext
63 lines
1.9 KiB
Plaintext
##### Kapitel 10 - SSL
|
|
|
|
LoadModule ssl_module modules/mod_ssl.so
|
|
Include conf/extra/httpd-ssl.conf
|
|
|
|
# Für dehydrated, aus Debian-Package "dehydrated-apache2"
|
|
Include /etc/apache2/conf-available/dehydrated.conf
|
|
|
|
### SSL-Protokoll/-Cipher Log-File-Format
|
|
LogFormat "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" ssl_info
|
|
LogFormat "%t %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%{User-Agent}i\" %h \"%r\" %b" ssl_agentinfo
|
|
LogFormat "%{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%{User-Agent}i\"" ssl_browser
|
|
|
|
### IP-based SSL-VHost
|
|
|
|
<VirtualHost 172.31.31.101:443>
|
|
SSLEngine On
|
|
SSLCertificateFile "/usr/local/apache2/conf/ssl/ipbased.sv.crt"
|
|
SSLCertificateKeyFile "/usr/local/apache2/conf/ssl/ipbased.sv.key"
|
|
# SSLCertificateChainFile "/usr/local/apache2/conf/ssl/interm.crt"
|
|
|
|
DocumentRoot /usr/local/apache2/htdocs-ipbased.sv
|
|
ServerName ipbased.sv
|
|
CustomLog logs/SSL_ipbased-access.log combined
|
|
ErrorLog logs/SSL_ipbased-error.log
|
|
|
|
CustomLog logs/ipbased.sv_ssl.log ssl_browser
|
|
CustomLog logs/ipbased.sv_ssl_agent.log ssl_agentinfo
|
|
|
|
SSLCACertificateFile CA/cacert.pem
|
|
<Location /sslclient/>
|
|
SSLVerifyClient require
|
|
SSLVerifyDepth 1
|
|
</Location>
|
|
</VirtualHost>
|
|
|
|
### Name-based SSL-VHosts
|
|
|
|
<VirtualHost 172.31.31.102:443>
|
|
SSLEngine On
|
|
SSLCertificateFile /usr/local/apache2/conf/ssl/firma1.sv.crt
|
|
SSLCertificateKeyFile /usr/local/apache2/conf/ssl/firma1.sv.key
|
|
|
|
DocumentRoot /usr/local/apache2/htdocs-firma1.sv
|
|
ServerName firma1.sv
|
|
ServerAlias *.firma1.sv
|
|
CustomLog logs/firma1-access.log combined
|
|
ErrorLog logs/firma1-error.log
|
|
</VirtualHost>
|
|
|
|
<VirtualHost 172.31.31.102:443>
|
|
SSLEngine On
|
|
SSLCertificateFile /usr/local/apache2/conf/ssl/firma2.sv.crt
|
|
SSLCertificateKeyFile /usr/local/apache2/conf/ssl/firma2.sv.key
|
|
|
|
DocumentRoot /usr/local/apache2/htdocs-firma2.sv
|
|
ServerName firma2.sv
|
|
ServerAlias *.firma2.sv
|
|
CustomLog logs/firma2-access.log combined
|
|
ErrorLog logs/firma2-error.log
|
|
</VirtualHost>
|
|
|