./categories/server
Apache SSL VirtualHost
도메인·인증서 경로는 플레이스홀더.
Listen 443
<VirtualHost www.example.com:443>
ServerAdmin webmaster@example.com
DocumentRoot "/home/app/www"
ServerName www.example.com
ServerAlias en.example.com
DirectoryIndex index.do index.jsp index.html
AddDefaultCharset UTF-8
JkMount /WEB-INF/* worker1
JkMount /*.do worker1
JkMount /*.jsp worker1
ErrorLog "|/usr/local/apache2/bin/rotatelogs /usr/local/apache2/logs/www-error_log_%Y%m%d 86400"
CustomLog "|/usr/local/apache2/bin/rotatelogs /usr/local/apache2/logs/www-access_log_%Y%m%d 86400" combined
SSLEngine on
SSLProtocol all -SSLv2 -SSLv3
SSLCipherSuite ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:AES128-SHA:AES256-SHA:!RC4:HIGH:!MD5:!aNULL:!EDH
SSLCertificateFile "/usr/local/apache2/conf/ssl/www.example.com.crt"
SSLCertificateKeyFile "/usr/local/apache2/conf/ssl/www.example.com.key"
SSLCertificateChainFile "/usr/local/apache2/conf/ssl/chainca.crt"
</VirtualHost>
관련: SSLPassPhraseDialog는 Apache SSLPassPhraseDialog 자동 입력 참고.
관련 링크: https://httpd.apache.org/docs/current/mod/mod_ssl.html
./comments