virtualhost-ssl.conf

<VirtualHost *:443>
  ServerName centos.installer


  DocumentRoot "/var/www"

  ## Directories, there should at least be a declaration for /var/www

  <Directory "/var/www">
    Options SymLinksIfOwnerMatch
    AllowOverride None
    Order allow,deny
    Allow from all
  </Directory>

  ## Logging
  ErrorLog "/var/log/httpd/katello-ssl_error_ssl.log"
  ServerSignature Off
  CustomLog "/var/log/httpd/katello-ssl_access_ssl.log" combined

  ## Server aliases
  ServerAlias katello

  ## SSL directives
  SSLEngine on
  SSLCertificateFile      "/etc/pki/katello/certs/katello-ca.crt"
  SSLCertificateKeyFile   "/etc/pki/katello/private/katello-ca.key"
  SSLCACertificatePath    "/etc/pki/tls/certs"
  SSLCACertificateFile    "/etc/pki/katello/certs/katello-ca.crt"
  SSLVerifyClient         optional
  SSLVerifyDepth          3
  SSLOptions +StdEnvVars

Alias /pub /var/www/html/pub
<Location /pub>

  Options +FollowSymLinks +Indexes
</Location>

<Location /subscription>
    RequestHeader set SSL_CLIENT_CERT "%{SSL_CLIENT_CERT}s"
    SSLVerifyClient optional
    SSLRenegBufferSize 16777216
    SSLVerifyDepth 2
</Location>

SSLOptions +StdEnvVars +ExportCertData +FakeBasicAuth
RewriteEngine On
  ProxyPass / http://localhost:3000/
  ProxyPassReverse / http://localhost:3000/
  RewriteRule ^/$ http://localhost:3000/$1 [P,L]


</VirtualHost>