summaryrefslogtreecommitdiff
path: root/files/vhosts.d
diff options
context:
space:
mode:
Diffstat (limited to 'files/vhosts.d')
-rw-r--r--files/vhosts.d/CentOS/0-default_ssl.conf6
-rw-r--r--files/vhosts.d/Gentoo/0-default_ssl.conf3
2 files changed, 8 insertions, 1 deletions
diff --git a/files/vhosts.d/CentOS/0-default_ssl.conf b/files/vhosts.d/CentOS/0-default_ssl.conf
index 9f8c4b6..d018bcc 100644
--- a/files/vhosts.d/CentOS/0-default_ssl.conf
+++ b/files/vhosts.d/CentOS/0-default_ssl.conf
@@ -8,6 +8,12 @@
Include include.d/ssl_defaults.inc
DocumentRoot /var/www/html
+ # Use separate log files for the SSL virtual host; note that LogLevel
+ # is not inherited from httpd.conf.
+ ErrorLog logs/ssl_error_log
+ TransferLog logs/ssl_access_log
+ LogLevel warn
+
SSLCertificateFile /etc/pki/tls/certs/localhost.crt
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
</VirtualHost>
diff --git a/files/vhosts.d/Gentoo/0-default_ssl.conf b/files/vhosts.d/Gentoo/0-default_ssl.conf
index 7efe879..a123de8 100644
--- a/files/vhosts.d/Gentoo/0-default_ssl.conf
+++ b/files/vhosts.d/Gentoo/0-default_ssl.conf
@@ -31,7 +31,8 @@ UseCanonicalName On
# List the ciphers that the client is permitted to negotiate.
# See the mod_ssl documentation for a complete list.
#SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
- SSLCipherSuite HIGH:MEDIUM:!ADH:-SSLv2
+ #SSLCipherSuite HIGH:MEDIUM:!ADH:-SSLv2
+ SSLCipherSuite HIGH:MEDIUM:!aNULL:!SSLv2:@STRENGTH
SSLCertificateFile /e/certs/server.crt
SSLCertificateKeyFile /e/certs/server.key