files/etc/apache2/sites-available/ssl

   1 <VirtualHost *:443>
   2         ServerAdmin xvm@mit.edu
   3         ServerName xvm.mit.edu:443
   4
   5         DocumentRoot /var/www/sipb-xen-www
   6         <Directory /var/www/sipb-xen-www>
   7                 Options Indexes FollowSymLinks MultiViews ExecCGI
   8                 AllowOverride None
   9                 Order allow,deny
  10                 allow from all
  11         </Directory>
  12         <Location />
  13                 Require valid-user
  14                 AuthType SSLCert
  15                 AuthSSLCertVar SSL_CLIENT_S_DN_Email
  16                 AuthSSLCertStripSuffix "@MIT.EDU"
  17         </Location>
  18
  19         RewriteEngine On
  20         RewriteRule ^/favicon.ico - [L]
  21         RewriteRule ^/static(.*) - [L]
  22         RewriteRule ^/overlord/static(.*) /static/$1 [L]
  23         RewriteRule ^/trac.fcgi(.*) - [L]
  24         RewriteRule ^/trac/chrome/common(.*) /usr/share/trac/htdocs$1 [L]
  25         RewriteRule ^/trac(.*) /var/www/trac/trac.fcgi$1 [L]
  26         RewriteRule ^/var(.*) - [L]
  27         RewriteRule ^/wiki(.*) - [L]
  28         RewriteRule ^/kill.cgi - [L]
  29         RewriteRule ^/~ - [L]
  30         RewriteRule ^/(.*) /var/www/sipb-xen-www/main.fcgi/$1 [L]
  31
  32         RewriteLog /var/log/apache2/rewrite.log
  33         RewriteLogLevel 0
  34
  35         ErrorLog /var/log/apache2/error.log
  36
  37         # Possible values include: debug, info, notice, warn, error, crit,
  38         # alert, emerg.
  39         LogLevel warn
  40
  41         CustomLog /var/log/apache2/ssl_access.log combined
  42         ServerSignature On
  43
  44         SSLEngine on
  45
  46         SSLCertificateFile ssl/server.crt
  47         SSLCertificateKeyFile ssl/server.key
  48
  49         SSLCACertificateFile ssl/mitCAclient.pem
  50         SSLVerifyClient require
  51         SSLVerifyDepth 10
  52
  53         SSLOptions +StdEnvVars
  54
  55         SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
  56
  57
  58         Redirect /wiki https://xvm.mit.edu/trac/wiki
  59 </VirtualHost>
  60
  61 <VirtualHost *:446>
  62         ServerAdmin xvm@mit.edu
  63         ServerName xvm.mit.edu:446
  64
  65         DocumentRoot /var/www/sipb-xen-www
  66         <Directory />
  67                 Options Indexes FollowSymLinks MultiViews ExecCGI
  68                 AllowOverride None
  69                 Order allow,deny
  70                 allow from all
  71         </Directory>
  72
  73         ErrorLog /var/log/apache2/error.log
  74
  75         # Possible values include: debug, info, notice, warn, error, crit,
  76         # alert, emerg.
  77         LogLevel warn
  78
  79         CustomLog /var/log/apache2/ssl_nocert_access.log combined
  80         ServerSignature On
  81
  82         SSLEngine on
  83
  84         SSLCertificateFile ssl/server.crt
  85         SSLCertificateKeyFile ssl/server.key
  86
  87         SSLVerifyClient none
  88
  89         SSLOptions +StdEnvVars
  90
  91         SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
  92 </VirtualHost>