Merge branch 'onelab' of ssh://git.onelab.eu/git/myslice into fibre
[unfold.git] / apache / sp-fibre / myslice-django
1 NameVirtualHost *:443
2 <IfModule mod_ssl.c>
3 <VirtualHost *:443>
4     ServerAdmin support-myslice@myslice.info
5     ServerName portal.fibre.br
6
7     DocumentRoot /var/www/myslice
8     WSGIScriptAlias / /var/www/myslice/apache/unfold.wsgi 
9
10     <Directory /var/www/myslice>
11         Options Indexes FollowSymLinks MultiViews
12         AllowOverride All
13         Order allow,deny
14         allow from all
15     </Directory>
16
17     Alias /static/ /var/www/myslice/static/
18     <Directory /var/www/myslice/static>
19         Order deny,allow
20         Allow from all
21     </Directory>
22
23     #Alias /certificates/ /var/certificates-f4f/
24     ErrorLog ${APACHE_LOG_DIR}/error.log
25
26     LogLevel warn
27
28     CustomLog ${APACHE_LOG_DIR}/ssl_access.log combined
29
30     # SSL
31     SSLEngine on
32     SSLProtocol all -SSLv2
33     SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
34     SSLCertificateKeyFile   /etc/ssl/private/fibre.key
35     SSLCertificateFile      /etc/ssl/certs/fibre.crt
36     SSLOptions +StdEnvVars +ExportCertData
37     SSLCACertificatePath /etc/sfa/trusted_roots
38     SSLVerifyClient optional_no_ca
39     #SSLVerifyClient require
40     SSLVerifyDepth 5
41     ServerSignature On
42
43     <FilesMatch "\.(cgi|shtml|phtml|php)$">
44         SSLOptions +StdEnvVars
45     </FilesMatch>
46     <Directory /usr/lib/cgi-bin>
47         SSLOptions +StdEnvVars
48     </Directory>
49
50     BrowserMatch "MSIE [2-6]" \
51         nokeepalive ssl-unclean-shutdown \
52         downgrade-1.0 force-response-1.0
53     BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
54
55 </VirtualHost>
56 </IfModule>