[CentOS] SSL and virtual hosts?
Tracy Phillips
tracy.phillips at gmail.com
Mon Sep 21 04:59:08 UTC 2009
This is how I do it. It is a vhost file configured for http (port 80) and
https (port 443).
Hope it helps
<VirtualHost 208.83.1.1:80>
ServerAdmin webmaster at domain.com
ServerName my.domain.com
DocumentRoot /var/www/domain.com/my/public/
<Directory /var/www/domain.com/my/public/>
Options Indexes FollowSymLinks MultiViews
AllowOverride All
Order allow,deny
allow from all
</Directory>
# Setup error documents directory outside docroot
Alias /error/ /var/www/error/
# Setup our aliased /error directory for SSI
<Directory /var/www/error/>
AllowOverride None
Options IncludesNoExec
AddOutputFilter Includes html
AddHandler type-map var
Order allow,deny
Allow from all
LanguagePriority en es de fr
ForceLanguagePriority Prefer Fallback
</Directory>
ErrorDocument 400 /error/HTTP_BAD_REQUEST.html.var
ErrorDocument 401 /error/HTTP_UNAUTHORIZED.html.var
ErrorDocument 403 /error/HTTP_FORBIDDEN.html.var
ErrorDocument 404 /error/HTTP_NOT_FOUND.html.var
ErrorDocument 405 /error/HTTP_METHOD_NOT_ALLOWED.html.var
ErrorDocument 408 /error/HTTP_REQUEST_TIME_OUT.html.var
ErrorDocument 410 /error/HTTP_GONE.html.var
ErrorDocument 411 /error/HTTP_LENGTH_REQUIRED.html.var
ErrorDocument 412 /error/HTTP_PRECONDITION_FAILED.html.var
ErrorDocument 413 /error/HTTP_REQUEST_ENTITY_TOO_LARGE.html.var
ErrorDocument 414 /error/HTTP_REQUEST_URI_TOO_LARGE.html.var
ErrorDocument 415 /error/HTTP_UNSUPPORTED_MEDIA_TYPE.html.var
ErrorDocument 500 /error/HTTP_INTERNAL_SERVER_ERROR.html.var
ErrorDocument 501 /error/HTTP_NOT_IMPLEMENTED.html.var
ErrorDocument 502 /error/HTTP_BAD_GATEWAY.html.var
ErrorDocument 503 /error/HTTP_SERVICE_UNAVAILABLE.html.var
ErrorDocument 506 /error/HTTP_VARIANT_ALSO_VARIES.html.var
# Set .htaccess to different name and explicitly deny access to it.
AccessFileName .htaccess
<Files ~ "^\.ht">
Order allow,deny
Deny from all
Satisfy All
</Files>
# Possible values include: debug, info, notice, warn, error, crit, alert,
emerg.
LogLevel warn
ErrorLog /var/www/domain.com/my/log/error.log
CustomLog /var/www/domain.com/my/log/access.log combined
ServerSignature Off
</VirtualHost>
<VirtualHost 208.83.1.1:443>
ServerAdmin webmaster at domain.com
ServerName my.domain.com
DocumentRoot /var/www/domain.com/my/public/
<Directory /var/www/domain.com/my/public/>
Options Indexes FollowSymLinks MultiViews
AllowOverride All
Order allow,deny
allow from all
</Directory>
SSLEngine on
SSLCertificateFile /var/www/domain.com/my/ssl/domain.com.my.crt
SSLCertificateKeyFile /var/www/domain.com/my/ssl/domain.com.my.key
SSLCACertificateFile /var/www/domain.com/my/ssl/domain.com.my.ca-bundle
SSLProtocol -ALL +SSLv3 +TLSv1
# SSLProtocol -ALL +TLSv1
SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
# Setup error documents
Alias /error/ "/usr/share/apache2/error/"
<Directory "/usr/share/apache2/error">
AllowOverride None
Options IncludesNoExec
AddOutputFilter Includes html
AddHandler type-map var
Order allow,deny
Allow from all
LanguagePriority en cs de es fr it nl sv pt-br ro
ForceLanguagePriority Prefer Fallback
</Directory>
ErrorDocument 400 /error/HTTP_BAD_REQUEST.html.var
ErrorDocument 401 /error/HTTP_UNAUTHORIZED.html.var
ErrorDocument 403 /error/HTTP_FORBIDDEN.html.var
ErrorDocument 404 /error/HTTP_NOT_FOUND.html.var
ErrorDocument 405 /error/HTTP_METHOD_NOT_ALLOWED.html.var
ErrorDocument 408 /error/HTTP_REQUEST_TIME_OUT.html.var
ErrorDocument 410 /error/HTTP_GONE.html.var
ErrorDocument 411 /error/HTTP_LENGTH_REQUIRED.html.var
ErrorDocument 412 /error/HTTP_PRECONDITION_FAILED.html.var
ErrorDocument 413 /error/HTTP_REQUEST_ENTITY_TOO_LARGE.html.var
ErrorDocument 414 /error/HTTP_REQUEST_URI_TOO_LARGE.html.var
ErrorDocument 415 /error/HTTP_UNSUPPORTED_MEDIA_TYPE.html.var
ErrorDocument 500 /error/HTTP_INTERNAL_SERVER_ERROR.html.var
ErrorDocument 501 /error/HTTP_NOT_IMPLEMENTED.html.var
ErrorDocument 502 /error/HTTP_BAD_GATEWAY.html.var
ErrorDocument 503 /error/HTTP_SERVICE_UNAVAILABLE.html.var
ErrorDocument 506 /error/HTTP_VARIANT_ALSO_VARIES.html.var
# Set .htaccess to different name and explicitly deny access to it.
AccessFileName .htaccess
<Files ~ "^\.ht">
Order allow,deny
Deny from all
Satisfy All
</Files>
# Possible values include: debug, info, notice, warn, error, crit, alert,
emerg.
LogLevel warn
ErrorLog /var/www/domain.com/my/log/ssl_error.log
CustomLog /var/www/domain.com/my/log/ssl_access.log combined
ServerSignature Off
</VirtualHost>
Tracy Phillips
On Sun, Sep 20, 2009 at 2:36 AM, Niki Kovacs <contact at kikinovak.net> wrote:
> Hi,
>
> I successfully managed to use SSL on a local webserver for testing
> purposes, following the section "Using SSL" in the Chapter "Using
> Apache" of the "Definitive Guide to CentOS". Now I wonder: how can I use
> SSL with virtual hosts?
>
> I have several virtual hosts defined. Let's say I want to use SSL with
> this one:
>
> <VirtualHost *:80>
> ServerAdmin info at microlinux.fr
> DocumentRoot /var/www/html/microlinux
> ServerName buildbox.presbytere.local
> ServerAlias microlinux.buildbox.presbytere.local
> ServerAlias microlinux.buildbox
> ErrorLog logs/microlinux-error_log
> CustomLog logs/microlinux-access_log common
> </VirtualHost>
>
> The key and certificate files are located in /etc/certs:
>
> # ls -lh /etc/certs
> total 12K
> -rw-r--r-- 1 root root 981 sep 20 11:06 microlinux.crt
> -rw-r--r-- 1 root root 716 sep 20 11:04 microlinux.csr
> -rw-r--r-- 1 root root 887 sep 20 11:11 microlinux.key
>
> I'm not sure about the correct syntax to use SSL on this one. Where do I
> configure SSLCertificateFile and SSLCertificateKeyFile? In the virtual
> host stanza? Before trying various haphazard configurations, I thought
> I'd better ask here.
>
> Niki
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.centos.org/pipermail/centos/attachments/20090920/5031b6d4/attachment.html>
More information about the CentOS
mailing list