files/etc/apache2/sites-available/ssl

   1 <VirtualHost *:443>
   2         ServerAdmin xvm@mit.edu
   3         ServerName xvm.mit.edu:443
   4
   5         DocumentRoot /var/www/sipb-xen-www
   6         <Directory /var/www/sipb-xen-www>
   7                 Options Indexes FollowSymLinks MultiViews ExecCGI
   8                 AllowOverride None
   9                 Order allow,deny
  10                 allow from all
  11         </Directory>
  12         <Location />
  13                 Require valid-user
  14                 AuthType SSLCert
  15                 AuthSSLCertVar SSL_CLIENT_S_DN_Email
  16                 AuthSSLCertStripSuffix "@MIT.EDU"
  17         </Location>
  18
  19         RewriteEngine On
  20         RewriteRule ^/favicon.ico - [L]
  21         RewriteRule ^/static(.*) - [L]
  22         RewriteRule ^/trac.fcgi(.*) - [L]
  23         RewriteRule ^/trac/chrome/common(.*) /usr/share/trac/htdocs$1 [L]
  24         RewriteRule ^/trac(.*) /var/www/trac/trac.fcgi$1 [L]
  25         RewriteRule ^/var(.*) - [L]
  26         RewriteRule ^/wiki(.*) - [L]
  27         RewriteRule ^/kill.cgi - [L]
  28         RewriteRule ^/(.*) /var/www/sipb-xen-www/main.fcgi/$1 [L]
  29
  30         RewriteLog /var/log/apache2/rewrite.log
  31         RewriteLogLevel 0
  32
  33         ErrorLog /var/log/apache2/error.log
  34
  35         # Possible values include: debug, info, notice, warn, error, crit,
  36         # alert, emerg.
  37         LogLevel warn
  38
  39         CustomLog /var/log/apache2/ssl_access.log combined
  40         ServerSignature On
  41
  42         SSLEngine on
  43
  44         SSLCertificateFile ssl/server.crt
  45         SSLCertificateKeyFile ssl/server.key
  46
  47         SSLCACertificateFile ssl/mitCAclient.pem
  48         SSLVerifyClient require
  49         SSLVerifyDepth 10
  50
  51         SSLOptions +StdEnvVars
  52
  53         SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
  54
  55
  56         Redirect /wiki https://xvm.mit.edu/trac/wiki
  57 </VirtualHost>
  58
  59 <VirtualHost *:446>
  60         ServerAdmin xvm@mit.edu
  61         ServerName xvm.mit.edu:446
  62
  63         DocumentRoot /var/www/sipb-xen-www
  64         <Directory />
  65                 Options Indexes FollowSymLinks MultiViews ExecCGI
  66                 AllowOverride None
  67                 Order allow,deny
  68                 allow from all
  69         </Directory>
  70
  71         ErrorLog /var/log/apache2/error.log
  72
  73         # Possible values include: debug, info, notice, warn, error, crit,
  74         # alert, emerg.
  75         LogLevel warn
  76
  77         CustomLog /var/log/apache2/ssl_nocert_access.log combined
  78         ServerSignature On
  79
  80         SSLEngine on
  81
  82         SSLCertificateFile ssl/server.crt
  83         SSLCertificateKeyFile ssl/server.key
  84
  85         SSLVerifyClient none
  86
  87         SSLOptions +StdEnvVars
  88
  89         SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
  90 </VirtualHost>