Line 1: |
Line 1: |
− | {{DISPLAYTITLE:Apache2.2.15-OSSL1.1.0}}
| |
− |
| |
| Below is an SSL Configuration for an Apache webserver (version 2.2.15) and OpenSSL (version 1.1.0). This configuration was made with the [https://ssl-config.mozilla.org/ Mozilla SSL Configuration Generator]. | | Below is an SSL Configuration for an Apache webserver (version 2.2.15) and OpenSSL (version 1.1.0). This configuration was made with the [https://ssl-config.mozilla.org/ Mozilla SSL Configuration Generator]. |
− | <code>
| |
| <pre> | | <pre> |
| # generated 2019-09-09, https://ssl-config.mozilla.org/#server=apache&server-version=2.2.15&config=intermediate&openssl-version=1.1.0 | | # generated 2019-09-09, https://ssl-config.mozilla.org/#server=apache&server-version=2.2.15&config=intermediate&openssl-version=1.1.0 |
| # requires mod_ssl, mod_socache_shmcb, mod_rewrite, and mod_headers | | # requires mod_ssl, mod_socache_shmcb, mod_rewrite, and mod_headers |
| <VirtualHost *:80> | | <VirtualHost *:80> |
− | RewriteEngine On | + | RewriteEngine On |
− | RewriteRule ^(.*)$ https://%{HTTP_HOST}$1[R=301,L] | + | RewriteRule ^(.*)$ https://%{HTTP_HOST}$1[R=301,L] |
| </VirtualHost> | | </VirtualHost> |
| + | |
| <VirtualHost *:443> | | <VirtualHost *:443> |
− | SSLEngine on | + | SSLEngine on |
− | SSLCertificateFile /path/to/signed_certificate | + | SSLCertificateFile /path/to/signed_certificate |
− | SSLCertificateChainFile /path/to/intermediate_certificate | + | SSLCertificateChainFile /path/to/intermediate_certificate |
− | SSLCertificateKeyFile /path/to/private_key | + | SSLCertificateKeyFile /path/to/private_key |
− | # HTTP Strict Transport Security (mod_headers is required) (63072000 seconds) | + | |
− | Header always set Strict-Transport-Security "max-age=63072000" | + | # HTTP Strict Transport Security (mod_headers is required) (63072000 seconds) |
| + | Header always set Strict-Transport-Security "max-age=63072000" |
| </VirtualHost> | | </VirtualHost> |
| + | |
| # intermediate configuration, tweak to your needs | | # intermediate configuration, tweak to your needs |
| SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 –TLSv1.2 | | SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 –TLSv1.2 |
Line 23: |
Line 23: |
| SSLHonorCipherOrder off | | SSLHonorCipherOrder off |
| </pre> | | </pre> |
− | </code>
| |