Line 1: |
Line 1: |
− | {{DISPLAYTITLE:Apache2.2.15-OSSL1.1.0}}
| |
− |
| |
| Below is an SSL Configuration for an Apache webserver (version 2.2.15) and OpenSSL (version 1.1.0). This configuration was made with the [https://ssl-config.mozilla.org/ Mozilla SSL Configuration Generator]. | | Below is an SSL Configuration for an Apache webserver (version 2.2.15) and OpenSSL (version 1.1.0). This configuration was made with the [https://ssl-config.mozilla.org/ Mozilla SSL Configuration Generator]. |
| <pre> | | <pre> |
Line 6: |
Line 4: |
| # requires mod_ssl, mod_socache_shmcb, mod_rewrite, and mod_headers | | # requires mod_ssl, mod_socache_shmcb, mod_rewrite, and mod_headers |
| <VirtualHost *:80> | | <VirtualHost *:80> |
− | RewriteEngine On | + | RewriteEngine On |
− | RewriteRule ^(.*)$ https://%{HTTP_HOST}$1[R=301,L] | + | RewriteRule ^(.*)$ https://%{HTTP_HOST}$1[R=301,L] |
| </VirtualHost> | | </VirtualHost> |
| + | |
| <VirtualHost *:443> | | <VirtualHost *:443> |
− | SSLEngine on | + | SSLEngine on |
− | SSLCertificateFile /path/to/signed_certificate | + | SSLCertificateFile /path/to/signed_certificate |
− | SSLCertificateChainFile /path/to/intermediate_certificate | + | SSLCertificateChainFile /path/to/intermediate_certificate |
− | SSLCertificateKeyFile /path/to/private_key | + | SSLCertificateKeyFile /path/to/private_key |
− | # HTTP Strict Transport Security (mod_headers is required) (63072000 seconds) | + | |
− | Header always set Strict-Transport-Security "max-age=63072000" | + | # HTTP Strict Transport Security (mod_headers is required) (63072000 seconds) |
| + | Header always set Strict-Transport-Security "max-age=63072000" |
| </VirtualHost> | | </VirtualHost> |
| + | |
| # intermediate configuration, tweak to your needs | | # intermediate configuration, tweak to your needs |
| SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 –TLSv1.2 | | SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 –TLSv1.2 |