Changes

Jump to navigation Jump to search
m
Line 4: Line 4:  
# requires mod_ssl, mod_socache_shmcb, mod_rewrite, and mod_headers
 
# requires mod_ssl, mod_socache_shmcb, mod_rewrite, and mod_headers
 
<VirtualHost *:80>
 
<VirtualHost *:80>
    RewriteEngine On
+
  RewriteEngine On
    RewriteRule ^(.*)$ https://%{HTTP_HOST}$1 [R=301,L]
+
  RewriteRule ^(.*)$ https://%{HTTP_HOST}$1[R=301,L]
 
</VirtualHost>
 
</VirtualHost>
 +
 
<VirtualHost *:443>
 
<VirtualHost *:443>
    SSLEngine on
+
  SSLEngine on
    SSLCertificateFile      /path/to/signed_certificate
+
  SSLCertificateFile      /path/to/signed_certificate
    SSLCertificateChainFile /path/to/intermediate_certificate
+
  SSLCertificateChainFile /path/to/intermediate_certificate
    SSLCertificateKeyFile  /path/to/private_key
+
  SSLCertificateKeyFile  /path/to/private_key
    # HTTP Strict Transport Security (mod_headers is required) (63072000 seconds)
+
 
    Header always set Strict-Transport-Security "max-age=63072000"
+
  # HTTP Strict Transport Security (mod_headers is required) (63072000 seconds)
 +
  Header always set Strict-Transport-Security "max-age=63072000"
 
</VirtualHost>
 
</VirtualHost>
 +
 
# intermediate configuration, tweak to your needs
 
# intermediate configuration, tweak to your needs
 
SSLProtocol            all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 –TLSv1.2
 
SSLProtocol            all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 –TLSv1.2

Navigation menu

GCwiki