Changes

Jump to navigation Jump to search
no edit summary
Line 6: Line 6:  
# requires mod_ssl, mod_socache_shmcb, mod_rewrite, and mod_headers
 
# requires mod_ssl, mod_socache_shmcb, mod_rewrite, and mod_headers
 
<VirtualHost *:80>
 
<VirtualHost *:80>
RewriteEngine On
+
  RewriteEngine On
RewriteRule ^(.*)$ https://%{HTTP_HOST}$1[R=301,L]
+
  RewriteRule ^(.*)$ https://%{HTTP_HOST}$1[R=301,L]
 
</VirtualHost>
 
</VirtualHost>
 +
 
<VirtualHost *:443>
 
<VirtualHost *:443>
SSLEngine on
+
  SSLEngine on
SSLCertificateFile      /path/to/signed_certificate
+
  SSLCertificateFile      /path/to/signed_certificate
SSLCertificateChainFile /path/to/intermediate_certificate
+
  SSLCertificateChainFile /path/to/intermediate_certificate
SSLCertificateKeyFile  /path/to/private_key
+
  SSLCertificateKeyFile  /path/to/private_key
# HTTP Strict Transport Security (mod_headers is required) (63072000 seconds)
+
 
Header always set Strict-Transport-Security "max-age=63072000"
+
  # HTTP Strict Transport Security (mod_headers is required) (63072000 seconds)
 +
  Header always set Strict-Transport-Security "max-age=63072000"
 
</VirtualHost>
 
</VirtualHost>
 +
 
# intermediate configuration, tweak to your needs
 
# intermediate configuration, tweak to your needs
 
SSLProtocol            all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 –TLSv1.2
 
SSLProtocol            all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 –TLSv1.2

Navigation menu

GCwiki