files/etc/apache2/sites-available/ssl

   1 <VirtualHost *:443>
   2         ServerAdmin xvm@mit.edu
   3         ServerName xvm.mit.edu:443
   4
   5         DocumentRoot /var/www/sipb-xen-www
   6         <Directory /var/www/sipb-xen-www>
   7                 Options Indexes FollowSymLinks MultiViews ExecCGI
   8                 AllowOverride None
   9                 Order allow,deny
  10                 allow from all
  11         </Directory>
  12         <Location />
  13                 Require valid-user
  14                 AuthType SSLCert
  15                 AuthSSLCertVar SSL_CLIENT_S_DN_Email
  16                 AuthSSLCertStripSuffix "@MIT.EDU"
  17         </Location>
  18
  19         RewriteEngine On
  20         RewriteRule ^/favicon.ico - [L]
  21         RewriteRule ^/static(.*) - [L]
  22         RewriteRule ^/overlord/static(.*) /static/$1 [L]
  23         RewriteRule ^/admin/static(.*) /static/$1 [L]
  24         RewriteRule ^/trac.fcgi(.*) - [L]
  25         RewriteRule ^/trac/chrome/common(.*) /usr/share/trac/htdocs$1 [L]
  26         RewriteRule ^/trac(.*) /var/www/trac/trac.fcgi$1 [L]
  27         RewriteRule ^/var(.*) - [L]
  28         RewriteRule ^/wiki(.*) - [L]
  29         RewriteRule ^/kill.cgi - [L]
  30         RewriteRule ^/~ - [L]
  31         RewriteRule ^/(.*) /var/www/sipb-xen-www/main.fcgi/$1 [L]
  32
  33         RewriteLog /var/log/apache2/rewrite.log
  34         RewriteLogLevel 0
  35
  36         ErrorLog /var/log/apache2/error.log
  37
  38         # Possible values include: debug, info, notice, warn, error, crit,
  39         # alert, emerg.
  40         LogLevel warn
  41
  42         CustomLog /var/log/apache2/ssl_access.log combined
  43         ServerSignature On
  44
  45         SSLEngine on
  46
  47         SSLCertificateFile ssl/server.crt
  48         SSLCertificateKeyFile ssl/server.key
  49
  50         SSLCACertificateFile ssl/mitCAclient.pem
  51         SSLVerifyClient require
  52         SSLVerifyDepth 10
  53
  54         SSLOptions +StdEnvVars
  55
  56         SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
  57
  58
  59         Redirect /wiki https://xvm.mit.edu/trac/wiki
  60 </VirtualHost>
  61
  62 <VirtualHost *:446>
  63         ServerAdmin xvm@mit.edu
  64         ServerName xvm.mit.edu:446
  65
  66         DocumentRoot /var/www/sipb-xen-www
  67         <Directory />
  68                 Options Indexes FollowSymLinks MultiViews ExecCGI
  69                 AllowOverride None
  70                 Order allow,deny
  71                 allow from all
  72         </Directory>
  73
  74         ErrorLog /var/log/apache2/error.log
  75
  76         # Possible values include: debug, info, notice, warn, error, crit,
  77         # alert, emerg.
  78         LogLevel warn
  79
  80         CustomLog /var/log/apache2/ssl_nocert_access.log combined
  81         ServerSignature On
  82
  83         SSLEngine on
  84
  85         SSLCertificateFile ssl/server.crt
  86         SSLCertificateKeyFile ssl/server.key
  87
  88         SSLVerifyClient none
  89
  90         SSLOptions +StdEnvVars
  91
  92         SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
  93 </VirtualHost>