Página Principal Explorar Ajuda
Iniciar Sessão
velt.biz
/
apache-config-devel
2
0
Fork 0
Ficheiros Problemas 0 Pull Requests 0 Wiki
Árvore: 92eda1e5ba
Ramos Etiquetas
apache-confi...
/
sites-available
/
002-default-ssl.conf

002-default-ssl.conf 1.4 KB
Histórico Em bruto

12345678910111213141516171819202122232425262728293031323334353637383940414243444546 
  1. <VirtualHost _default_:443>
    2. 

  2. 

  3. 	DocumentRoot "/srv/www/apache"
    4. 

  4. 	#ServerName www.example.com:443
    5. 

  5. 	ServerAdmin webmaster@localhost
    6. 

  6. 	ErrorLog ${APACHE_LOG_DIR}/002-default-ssl.error.log
    7. 

  7. 	CustomLog ${APACHE_LOG_DIR}/002-default-ssl.access.log combined
    8. 

  8. 

  9. 	SSLEngine on
    10. 

  10. 	SSLCertificateFile "/etc/apache/server.crt"
    11. 

  11. 	SSLCertificateKeyFile "/etc/apache/server.key"
    12. 

  12. 	#SSLCertificateChainFile "/etc/apache/server-ca.crt"
    13. 

  13. 

  14. 	#SSLProtocol		All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
    15. 

  15. 	SSLProtocol		All -SSLv2 -SSLv3
    16. 

  16. 	SSLCipherSuite		EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
    17. 

  17. 	SSLHonorCipherOrder	On
    18. 

  18. 

  19. 	SSLCompression		off 
    20. 

  20. 	SSLUseStapling		on 
    21. 

  21. 	
    22. 

  22. 	SSLStaplingCache	"shmcb:logs/stapling-cache(150000)" 
    23. 

  23. 	# Requires Apache >= 2.4.11
    24. 

  24. 	SSLSessionTickets	Off
    25. 

  25.             
    26. 

  26. 	#Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
    27. 

  27. 	#Header always set X-Frame-Options DENY
    28. 

  28. 	#Header always set X-Content-Type-Options nosniff
    29. 

  29. 

  30. 	<FilesMatch "\.(cgi|shtml|phtml|php)$">
    31. 

  31. 	    SSLOptions +StdEnvVars
    32. 

  32. 	</FilesMatch>
    33. 

  33. 	<Directory "/srv/www/apache/cgi-bin">
    34. 

  34. 	    SSLOptions +StdEnvVars
    35. 

  35. 	</Directory>
    36. 

  36. 

  37. 	BrowserMatch "MSIE [2-5]" \
    38. 

  38. 		 nokeepalive ssl-unclean-shutdown \
    39. 

  39. 		 downgrade-1.0 force-response-1.0
    40. 

  40. 

  41. 	CustomLog ${APACHE_LOG_DIR}/002-default-ssl.ssl_request.log ssl_info
    42. 

  42. 	CustomLog ${APACHE_LOG_DIR}/002-default-ssl.ssl_browser.log ssl_info_browser
    43. 

  43. 

  44. </VirtualHost>                                  
    45. 

  45. 

  46. # vim: syntax=apache ts=4 sw=4 sts=4 sr noet
    47.