Contents | Previous | Next
icon

Apache Per-host SSL Directives

##
## SSL Virtual Host Context
##
<VirtualHost _default_:443>
# General setup for the virtual host
DocumentRoot "/Users/csnyder/Sites/https"
ServerName localhost
ServerAdmin csnyder@chxo.com
ErrorLog logs/sslerror.log

# SSL Configuration
SSLEngine on
SSLCipherSuite HIGH:MEDIUM
SSLCertificateFile /etc/httpd/ssl/localhost.cert
SSLCertificateKeyFile /etc/httpd/ssl/localhost.key
SSLCertificateChainFile /etc/httpd/ssl/ca.cert
SSLCARevocationFile /etc/httpd/ssl/ca.crl

# Client Authentication (Type):
#SSLVerifyClient require
#SSLVerifyDepth 10

# SSL Engine Options:
<Files ~ "\.(cgi|shtml|phtml|php?)$">
SSLOptions +StdEnvVars
</Files>

# SSL Protocol Adjustments:
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0

# Per-Server Logging:
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>