diff options
Diffstat (limited to 'files/modules.d/gentoo/40_mod_ssl.conf')
-rw-r--r-- | files/modules.d/gentoo/40_mod_ssl.conf | 65 |
1 files changed, 0 insertions, 65 deletions
diff --git a/files/modules.d/gentoo/40_mod_ssl.conf b/files/modules.d/gentoo/40_mod_ssl.conf deleted file mode 100644 index 331783a..0000000 --- a/files/modules.d/gentoo/40_mod_ssl.conf +++ /dev/null @@ -1,65 +0,0 @@ -# Note: The following must must be present to support -# starting without SSL on platforms with no /dev/random equivalent -# but a statically compiled-in mod_ssl. -<IfModule ssl_module> -SSLRandomSeed startup builtin -SSLRandomSeed connect builtin -</IfModule> - -<IfDefine SSL> -<IfModule ssl_module> -# This is the Apache server configuration file providing SSL support. -# It contains the configuration directives to instruct the server how to -# serve pages over an https connection. For detailing information about these -# directives see <URL:http://httpd.apache.org/docs/2.2/mod/mod_ssl.html> - -# Do NOT simply read the instructions in here without understanding -# what they do. They're here only as hints or reminders. If you are unsure -# consult the online docs. You have been warned. - -## Pseudo Random Number Generator (PRNG): -# Configure one or more sources to seed the PRNG of the SSL library. -# The seed data should be of good random quality. -# WARNING! On some platforms /dev/random blocks if not enough entropy -# is available. This means you then cannot use the /dev/random device -# because it would lead to very long connection times (as long as -# it requires to make more entropy available). But usually those -# platforms additionally provide a /dev/urandom device which doesn't -# block. So, if available, use this one instead. Read the mod_ssl User -# Manual for more details. -#SSLRandomSeed startup file:/dev/random 512 -#SSLRandomSeed startup file:/dev/urandom 512 -#SSLRandomSeed connect file:/dev/random 512 -#SSLRandomSeed connect file:/dev/urandom 512 - -## SSL Global Context: -# All SSL configuration in this context applies both to the main server and -# all SSL-enabled virtual hosts. - -# Some MIME-types for downloading Certificates and CRLs -<IfModule mime_module> - AddType application/x-x509-ca-cert .crt - AddType application/x-pkcs7-crl .crl -</IfModule> - -## Pass Phrase Dialog: -# Configure the pass phrase gathering process. The filtering dialog program -# (`builtin' is a internal terminal dialog) has to provide the pass phrase on -# stdout. -SSLPassPhraseDialog builtin - -## Inter-Process Session Cache: -# Configure the SSL Session Cache: First the mechanism to use and second the -# expiring timeout (in seconds). -#SSLSessionCache dbm:/var/run/ssl_scache -SSLSessionCache shmcb:/var/run/ssl_scache(512000) -SSLSessionCacheTimeout 300 - -## Semaphore: -# Configure the path to the mutual exclusion semaphore the SSL engine uses -# internally for inter-process synchronization. -SSLMutex file:/var/run/ssl_mutex -</IfModule> -</IfDefine> - -# vim: ts=4 filetype=apache |