source: trunk/packages/sipb-xen-www/files/etc/apache2/sites-available/ssl @ 526

Last change on this file since 526 was 526, checked in by price, 17 years ago

make web hostname canonicalize as xvm, not sipb-xen-dev

File size: 2.0 KB
Line 
1<VirtualHost *:443>
2        ServerAdmin xvm@mit.edu
3        ServerName xvm.mit.edu:443
4       
5        DocumentRoot /var/www/sipb-xen-www
6        <Directory /var/www/sipb-xen-www>
7                Options Indexes FollowSymLinks MultiViews ExecCGI
8                AllowOverride None
9                Order allow,deny
10                allow from all
11        </Directory>
12        <Location />
13                Require valid-user
14                AuthType SSLCert
15                AuthSSLCertVar SSL_CLIENT_S_DN_Email
16                AuthSSLCertStripSuffix "@MIT.EDU"
17        </Location>
18
19        RewriteEngine On
20        RewriteRule ^/static(.*) - [L]
21        RewriteRule ^/trac.fcgi(.*) - [L]
22        RewriteRule ^/trac/chrome/common(.*) /usr/share/trac/htdocs$1 [L]
23        RewriteRule ^/trac(.*) /var/www/trac/trac.fcgi$1 [L]
24        RewriteRule ^/var(.*) - [L]
25        RewriteRule ^/wiki(.*) - [L]
26        RewriteRule ^/(.*) /var/www/sipb-xen-www/main.py/$1 [L]
27
28        RewriteLog /var/log/apache2/rewrite.log
29        RewriteLogLevel 0
30
31        ErrorLog /var/log/apache2/error.log
32
33        # Possible values include: debug, info, notice, warn, error, crit,
34        # alert, emerg.
35        LogLevel warn
36
37        CustomLog /var/log/apache2/ssl_access.log combined
38        ServerSignature On
39
40        SSLEngine on
41
42        SSLCertificateFile ssl/server.crt
43        SSLCertificateKeyFile ssl/server.key
44       
45        SSLCACertificateFile ssl/mitCAclient.pem
46        SSLVerifyClient optional
47        SSLVerifyDepth 10
48
49        SSLOptions +StdEnvVars
50       
51        SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
52
53
54        Redirect /wiki https://xvm.mit.edu/trac/wiki   
55</VirtualHost>
56
57<VirtualHost *:446>
58        ServerAdmin xvm@mit.edu
59        ServerName xvm.mit.edu:446
60       
61        DocumentRoot /var/www/sipb-xen-www
62        <Directory />
63                Options Indexes FollowSymLinks MultiViews ExecCGI
64                AllowOverride None
65                Order allow,deny
66                allow from all
67        </Directory>
68
69        ErrorLog /var/log/apache2/error.log
70
71        # Possible values include: debug, info, notice, warn, error, crit,
72        # alert, emerg.
73        LogLevel warn
74
75        CustomLog /var/log/apache2/ssl_nocert_access.log combined
76        ServerSignature On
77
78        SSLEngine on
79
80        SSLCertificateFile ssl/server.crt
81        SSLCertificateKeyFile ssl/server.key
82       
83        SSLVerifyClient none
84
85        SSLOptions +StdEnvVars
86       
87        SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0       
88</VirtualHost>
Note: See TracBrowser for help on using the repository browser.