gistfile1.txt

GLUU.root@gluu:/opt# cat /etc/apache2/sites-enabled/https_gluu.conf
<VirtualHost  100.73.151.78:80>
        ServerName gluu.example.com
        Redirect  / https://gluu.example.com/
        DocumentRoot "/var/www/html/"
</VirtualHost>

<VirtualHost 100.73.151.78:443>
        DocumentRoot "/var/www/html/"
        ServerName gluu.example.com:443

        LogLevel warn
        SSLEngine on
        SSLProtocol all -SSLv2 -SSLv3 +TLSv1.2 +TLSv1.1 +TLSv1
        SSLHonorCipherOrder On
        SSLCipherSuite ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-RSA-AES128-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK
        SSLCertificateFile /etc/certs/gluu.example.com.pem
        SSLCertificateKeyFile /etc/certs/gluu.example.com.key

        Header edit Set-Cookie ^((?!session_state).*)$ $1;HttpOnly
        SetEnvIf User-Agent ".*MSIE.*" \
                 nokeepalive ssl-unclean-shutdown \
                 downgrade-1.0 force-response-1.0
        ProxyRequests Off

        Header unset ETag
        FileETag None

        RedirectMatch ^(/)$ /identity/

        <Proxy ajp://localhost:8009>
                Order deny,allow
                Allow from all
        </Proxy>

        <Location /oxauth>
                ProxyPass ajp://localhost:8009/oxauth retry=5 disablereuse=On
                ProxyPassReverse ajp://localhost:8009/oxauth
                Header set Access-Control-Allow-Origin "*"
                Order allow,deny
                Allow from all
        </Location>

        <Location /idp>
                ProxyPass ajp://localhost:8009/idp retry=5 disablereuse=On
                ProxyPassReverse ajp://localhost:8009/idp
                Order allow,deny
                Allow from all
        </Location>

        <Location /identity>
                ProxyPass ajp://localhost:8009/identity retry=5
                ProxyPassReverse ajp://localhost:8009/identity
                Order allow,deny
                Allow from all
        </Location>

        <Location /cas>
                ProxyPass ajp://localhost:8009/cas retry=5 disablereuse=On
                ProxyPassReverse ajp://localhost:8009/cas
                Order allow,deny
                Allow from all
        </Location>

        <LocationMatch "/identity/rfRes/((.*)\.ecss*\.(.*)|(.*)\.png\.(.*))">
                Satisfy Any
                AuthType None
                Order deny,allow
                Allow from all
        </LocationMatch>

        <LocationMatch "/identity/(javax.faces.resource/((.*)\.(js|css|ecss)\.(.*))|(/img/(.*)\.png))">
                Satisfy Any
                AuthType None
                Order deny,allow
                Allow from all
        </LocationMatch>

        <LocationMatch "/identity/(stylesheet|servlet|a4j|js|img)">
                Satisfy Any
                AuthType None
                Order deny,allow
                Allow from all
        </LocationMatch>

        <LocationMatch  "/identity/(error|feedback|register|ssologin|federation/hosted/inventory|/federation/proposal/add)">
                Satisfy Any
                AuthType None
                Order deny,allow
                Allow from all
        </LocationMatch>

        <LocationMatch  "/identity/hostedFederation/*">
                Satisfy Any
                AuthType None
                Order deny,allow
                Allow from all
        </LocationMatch>

        <LocationMatch  "/identity/img/.*.(gif|jpg|png)">
                Satisfy Any
                AuthType None
                Order deny,allow
                Allow from all
        </LocationMatch>

        <Location /oxauth-rp>
                ProxyPass ajp://localhost:8009/oxauth-rp retry=5 disablereuse=On
                ProxyPassReverse ajp://localhost:8009/oxauth-rp
                Order allow,deny
                Allow from all
        </Location>

        <Location /asimba>
                ProxyPass ajp://localhost:8009/asimba retry=5 disablereuse=On
                ProxyPassReverse ajp://localhost:8009/asimba
                Order allow,deny
                Allow from all
        </Location>

        ProxyPass        /.well-known/openid-configuration ajp://localhost:8009/oxauth/.well-known/openid-configuration
        ProxyPassReverse /.well-known/openid-configuration ajp://localhost:8009/oxauth/.well-known/openid-configuration
        ProxyPass        /.well-known/simple-web-discovery ajp://localhost:8009/oxauth/.well-known/simple-web-discovery
        ProxyPassReverse /.well-known/simple-web-discovery ajp://localhost:8009/oxauth/.well-known/simple-web-discovery
        ProxyPass        /.well-known/webfinger ajp://localhost:8009/oxauth/.well-known/webfinger
        ProxyPassReverse /.well-known/webfinger ajp://localhost:8009/oxauth/.well-known/webfinger
        ProxyPass        /.well-known/uma-configuration ajp://localhost:8009/oxauth/seam/resource/restv1/oxauth/uma-configuration
        ProxyPassReverse /.well-known/uma-configuration ajp://localhost:8009/oxauth/seam/resource/restv1/oxauth/uma-configuration
        ProxyPass        /.well-known/fido-u2f-configuration ajp://localhost:8009/oxauth/seam/resource/restv1/oxauth/fido-u2f-configuration
        ProxyPassReverse /.well-known/fido-u2f-configuration ajp://localhost:8009/oxauth/seam/resource/restv1/oxauth/fido-u2f-configuration
        ProxyPass        /.well-known/scim-configuration ajp://localhost:8009/identity/seam/resource/restv1/oxtrust/scim-configuration
        ProxyPassReverse /.well-known/scim-configuration ajp://localhost:8009/identity/seam/resource/restv1/oxtrust/scim-configuration
</VirtualHost>