Inicio Explorar Axuda
Iniciar sesión
velt.biz
/
apache-config-devel
2
0
Fork 0
Ficheiros Incidencias 0 Pull Requests 0 Wiki
Árbore: 2d383176f7
Ramas Etiquetas
apache-confi...
/
sites-available
/
002-default-ssl.conf

002-default-ssl.conf 1.6 KB
Histórico Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657 
  1. <VirtualHost _default_:443>
    2. 

  2. 

  3. 	#ServerName www.example.com:443
    4. 

  4. 	ServerAdmin webmaster@localhost
    5. 

  5. 

  6. 	DocumentRoot "/srv/www/apache"
    7. 

  7. 	<Directory "/srv/www/apache">
    8. 

  8. 		Options Indexes FollowSymLinks
    9. 

  9. 		AllowOverride None
    10. 

  10. 		Require all granted
    11. 

  11. 	</Directory>
    12. 

  12. 

  13. 	ErrorLog ${APACHE_LOG_DIR}/002-default-ssl.error.log
    14. 

  14. 	CustomLog ${APACHE_LOG_DIR}/002-default-ssl.access.log combined
    15. 

  15. 

  16. 	<IfModule http2_module>
    17. 

  17. 		Protocols h2 http/1.1
    18. 

  18. 	</IfModule>
    19. 

  19. 

  20. 	SSLEngine on
    21. 

  21. 	SSLCertificateFile "/etc/apache/server.crt"
    22. 

  22. 	SSLCertificateKeyFile "/etc/apache/server.key"
    23. 

  23. 	#SSLCertificateChainFile "/etc/apache/server-ca.crt"
    24. 

  24. 

  25. 	#SSLProtocol		All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
    26. 

  26. 	SSLProtocol		All -SSLv2 -SSLv3
    27. 

  27. 	SSLCipherSuite		EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
    28. 

  28. 	SSLHonorCipherOrder	On
    29. 

  29. 

  30. 	SSLCompression		off 
    31. 

  31. 	SSLUseStapling		on 
    32. 

  32. 	
    33. 

  33. 	SSLStaplingCache	"shmcb:logs/stapling-cache(150000)" 
    34. 

  34. 	# Requires Apache >= 2.4.11
    35. 

  35. 	SSLSessionTickets	Off
    36. 

  36.             
    37. 

  37. 	#Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
    38. 

  38. 	#Header always set X-Frame-Options DENY
    39. 

  39. 	#Header always set X-Content-Type-Options nosniff
    40. 

  40. 

  41. 	<FilesMatch "\.(cgi|shtml|phtml|php)$">
    42. 

  42. 	    SSLOptions +StdEnvVars
    43. 

  43. 	</FilesMatch>
    44. 

  44. 	<Directory "/srv/www/apache/cgi-bin">
    45. 

  45. 	    SSLOptions +StdEnvVars
    46. 

  46. 	</Directory>
    47. 

  47. 

  48. 	BrowserMatch "MSIE [2-5]" \
    49. 

  49. 		 nokeepalive ssl-unclean-shutdown \
    50. 

  50. 		 downgrade-1.0 force-response-1.0
    51. 

  51. 

  52. 	CustomLog ${APACHE_LOG_DIR}/002-default-ssl.ssl_request.log ssl_info
    53. 

  53. 	CustomLog ${APACHE_LOG_DIR}/002-default-ssl.ssl_browser.log ssl_info_browser
    54. 

  54. 

  55. </VirtualHost>                                  
    56. 

  56. 

  57. # vim: syntax=apache ts=4 sw=4 sts=4 sr noet
    58.