SSL configuration file for Passenger and Apache 2.2 on OS X

apache-include-ssl.conf

# OMFG! I want to f*ck Github's brains out!!

Listen 443

AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl

SSLPassPhraseDialog  builtin

SSLSessionCache        "shmcb:/private/var/run/ssl_scache(512000)"
SSLSessionCacheTimeout  300

SSLMutex  "file:/private/var/run/ssl_mutex"

<VirtualHost *:443>

ServerAdmin james@localhost
ServerName localhost:443
DocumentRoot "/Users/james/Sites/rails/ssl/public"
ErrorLog "/private/var/log/apache2/rails-error_log"
CustomLog "/private/var/log/apache2/rails-access_log" common

<Directory "/Library/WebServer/rails/public">
AllowOverride All
Allow from all
</Directory>

SSLEngine on


SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

SSLCertificateFile "/private/etc/apache2/certs/newcert.pem"

SSLCertificateKeyFile "/private/etc/apache2/certs/server.nopass.key"

SSLCACertificateFile "/private/etc/apache2/certs/demoCA/cacert.pem"

SSLCARevocationPath "/private/etc/apache2/certs/demoCA/crl"

<FilesMatch "\.(cgi|shtml|phtml|php)$">
    SSLOptions +StdEnvVars
</FilesMatch>
<Directory "/Library/WebServer/CGI-Executables">
    SSLOptions +StdEnvVars
</Directory>

BrowserMatch ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

CustomLog "/private/var/log/apache2/ssl_request_log" \
          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>