Skip to content

Instantly share code, notes, and snippets.

@duan-li
Created October 13, 2015 23:33
Show Gist options
  • Save duan-li/1d5cf77533a1c616ac56 to your computer and use it in GitHub Desktop.
Save duan-li/1d5cf77533a1c616ac56 to your computer and use it in GitHub Desktop.
setup apache2 SSL based on TLS 1.2
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerAdmin webmaster@localhost
ServerName domain.com.au
DocumentRoot /path-to-www
SuexecUserGroup web-data web-data
#LogLevel info ssl:warn
ErrorLog ${APACHE_LOG_DIR}/error-ssl-html.log
CustomLog ${APACHE_LOG_DIR}/access-ssl-html.log combined
SSLEngine on
SSLCertificateFile /path-to-ssl/sdfasdfa8c.crt
SSLCertificateKeyFile /path-to-ssl/website.key
SSLCertificateChainFile /path-to-ssl/gd_bundle.crt
#SSLVerifyClient require
#SSLVerifyDepth 10
<Directory /path-to-www>
Options FollowSymLinks
AllowOverride All
Require all granted
</Directory>
#SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire
<FilesMatch "\.(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<Directory /usr/lib/cgi-bin>
SSLOptions +StdEnvVars
</Directory>
SSLProtocol all -SSLv2 -SSLv3
BrowserMatch "MSIE [2-6]" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
</VirtualHost>
</IfModule>
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment