[Sysadmins] Настройка SSL в apache2

[Дмитрий Дегтярев]

  24.11.2010 13:39, Yury L.Olkov пишет:
> бята, кто может, напишите план дейст
то что для <VirtualHost *:80> переписать примерно так:
<IfModule mod_ssl.c>
<VirtualHost *:443>
         ServerName                              mydomain.ru
         ServerAlias                             www.mydomain.ru
         ServerAdmin                             user на mydomain.ru
         DocumentRoot                            
/var/www/vhosts/mydomain.ru/webspace
         ErrorLog                                
/var/log/httpd2/mydomain.ru-error.log
         TransferLog                             
/var/log/httpd2/mydomain.ru-access.log
         CustomLog                               
/var/log/httpd2/mydomain.ru-access.log combined

         SSLEngine On
         SSLProtocol -all +TLSv1 +SSLv3
         SSLCipherSuite HIGH:MEDIUM:!aNULL:+SHA1:+MD5:+HIGH:+MEDIUM

         SSLCertificateFile                      
/etc/httpd2/conf/ssl/mydomain.ru.crt
         SSLCertificateKeyFile                   
/etc/httpd2/conf/ssl/mydomain.ru.key
         SSLCertificateChainFile                 /etc/httpd2/conf/ssl/ca.crt

         SSLCACertificatePath                    /etc/httpd2/conf/ssl/
         SSLCACertificateFile                    /etc/httpd2/conf/ssl/ca.crt

<Location />
                 SSLRequireSSL

                 SSLVerifyClient none
                 SSLVerifyDepth 1

                 SSLOptions +StdEnvVars +StrictRequire +OptRenegotiate
</Location>
</VirtualHost>
</IfModule>