X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=apache%2Fmyslice.conf;h=c994af369aff4f4d6285decc82bb3bdb799dbf66;hb=92db172eb967bdfec2f949a1a15592c0409a31ed;hp=4331bcc5514ac91a17a3069efe04b8bb358c769f;hpb=bc52c646eaf241e974004f88c63e164e8d33508c;p=myslice.git

diff --git a/apache/myslice.conf b/apache/myslice.conf
index 4331bcc5..c994af36 100644
--- a/apache/myslice.conf
+++ b/apache/myslice.conf
@@ -1,6 +1,8 @@
+# xxx it might be smarter to install wsgi.py in some other location 
+# so we don't have to hard-wire these paths here
 <VirtualHost *:80>
-        WSGIScriptAlias / /usr/share/unfold/myslice/wsgi.py
-        <Directory /usr/share/unfold/apache>
+        WSGIScriptAlias / /usr/lib/python2.7/dist-packages/myslice/wsgi.py
+        <Directory /usr/share/unfold/myslice>
         <Files wsgi.py>
         Order deny,allow
         Allow from all
@@ -12,3 +14,37 @@
         Allow from all
         </Directory>
 </VirtualHost>
+
+# This port (not necessarily well picked) is configured 
+# with client-certificate required
+# corresponding trusted roots (e.g. ple.gid and plc.gid) should be 
+# configured in /etc/unfold/trusted_roots
+# check Jordan's email and pointer to trac, although we do not want 
+# this to be optional on that port
+
+<VirtualHost *:443>
+        WSGIScriptAlias / /usr/lib/python2.7/dist-packages/myslice/wsgi.py
+        <Directory /usr/share/unfold/apache>
+        <Files myslice.wsgi>
+        Order deny,allow
+        Allow from all
+        </Files>
+        </Directory>
+        Alias /static/ /usr/share/unfold/static/
+        <Directory /usr/share/unfold/static>
+        Order deny,allow
+        Allow from all
+        </Directory>
+
+	SSLEngine on
+	SSLVerifyClient require
+	SSLVerifyDepth 5
+# make this a symlink to /etc/sfa/trusted_roots if that makes sense in your env.
+	SSLCACertificatePath /etc/unfold/trusted_roots
+# see init-ssl.sh for how to create self-signed stuff in here
+	SSLCertificateFile    /etc/unfold/myslice.cert
+	SSLCertificateKeyFile /etc/unfold/myslice.key
+
+#	SSLOptions +StdEnvVars +ExportCertData
+	SSLOptions +StdEnvVars
+</VirtualHost>