files/etc/apache2/sites-available/ssl

   1 <VirtualHost *:443>
   2         ServerAdmin xvm@mit.edu
   3         ServerName xvm.mit.edu:443
   4
   5         DocumentRoot /var/www/sipb-xen-www
   6         <Directory /var/www/sipb-xen-www>
   7                 Options Indexes FollowSymLinks MultiViews ExecCGI
   8                 AllowOverride None
   9                 Order allow,deny
  10                 allow from all
  11         </Directory>
  12         <Location />
  13                 Require valid-user
  14                 AuthType SSLCert
  15                 AuthSSLCertVar SSL_CLIENT_S_DN_Email
  16                 AuthSSLCertStripSuffix "@MIT.EDU"
  17         </Location>
  18
  19         RewriteEngine On
  20         RewriteRule ^/static(.*) - [L]
  21         RewriteRule ^/trac.fcgi(.*) - [L]
  22         RewriteRule ^/trac/chrome/common(.*) /usr/share/trac/htdocs$1 [L]
  23         RewriteRule ^/trac(.*) /var/www/trac/trac.fcgi$1 [L]
  24         RewriteRule ^/var(.*) - [L]
  25         RewriteRule ^/wiki(.*) - [L]
  26         RewriteRule ^/(.*) /var/www/sipb-xen-www/main.fcgi/$1 [L]
  27
  28         RewriteLog /var/log/apache2/rewrite.log
  29         RewriteLogLevel 0
  30
  31         ErrorLog /var/log/apache2/error.log
  32
  33         # Possible values include: debug, info, notice, warn, error, crit,
  34         # alert, emerg.
  35         LogLevel warn
  36
  37         CustomLog /var/log/apache2/ssl_access.log combined
  38         ServerSignature On
  39
  40         SSLEngine on
  41
  42         SSLCertificateFile ssl/server.crt
  43         SSLCertificateKeyFile ssl/server.key
  44
  45         SSLCACertificateFile ssl/mitCAclient.pem
  46         SSLVerifyClient optional
  47         SSLVerifyDepth 10
  48
  49         SSLOptions +StdEnvVars
  50
  51         SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
  52
  53
  54         Redirect /wiki https://xvm.mit.edu/trac/wiki
  55 </VirtualHost>
  56
  57 <VirtualHost *:446>
  58         ServerAdmin xvm@mit.edu
  59         ServerName xvm.mit.edu:446
  60
  61         DocumentRoot /var/www/sipb-xen-www
  62         <Directory />
  63                 Options Indexes FollowSymLinks MultiViews ExecCGI
  64                 AllowOverride None
  65                 Order allow,deny
  66                 allow from all
  67         </Directory>
  68
  69         ErrorLog /var/log/apache2/error.log
  70
  71         # Possible values include: debug, info, notice, warn, error, crit,
  72         # alert, emerg.
  73         LogLevel warn
  74
  75         CustomLog /var/log/apache2/ssl_nocert_access.log combined
  76         ServerSignature On
  77
  78         SSLEngine on
  79
  80         SSLCertificateFile ssl/server.crt
  81         SSLCertificateKeyFile ssl/server.key
  82
  83         SSLVerifyClient none
  84
  85         SSLOptions +StdEnvVars
  86
  87         SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
  88 </VirtualHost>