Re: [mdk-re] Apache+SSL

[Dmitry Solovyev <sokrat@ngs.ru>]

[-- Attachment #1: Type: text/plain, Size: 225 bytes --]

Здравствуйте!

Я не забыл ;)) В аттаче то, что дописывается к httpd.conf для двух name-based 
virtual hosts (один с SSL). Больше в httpd.conf ничего не меняется (это на RH 
7.1 c apache & mod_ssl из дистрибутива).

WBR
Sokrat

[-- Attachment #2: httpd.include --]
[-- Type: text/plain, Size: 3406 bytes --]

NameVirtualHost 192.168.2.222:80
NameVirtualHost 192.168.2.222:443

ServerName server.name
ServerAdmin sokrat@ngs.ru

DocumentRoot /home/httpd/vhosts/default/htdocs

<Directory "/home/httpd/vhosts">
	AllowOverride All
	Options SymLinksIfOwnerMatch
	Order allow,deny
	Allow from all
	php_admin_flag engine off
</Directory>

<IfModule mod_userdir.c>
	UserDir disabled
</IfModule>
<VirtualHost 192.168.2.222:80>
	ServerName default
	UseCanonicalName Off
	DocumentRoot /home/httpd/vhosts/default/htdocs
	ScriptAlias /cgi-bin/ "/home/httpd/vhosts/default/cgi-bin/"
	<IfModule mod_ssl.c>
		SSLEngine off
	</IfModule>
	<Directory "/home/httpd/vhosts/default/cgi-bin/">
		AllowOverride None
		Options None
		Order allow,deny
		Allow from all
	</Directory>
</VirtualHost>

<IfModule mod_ssl.c>

<VirtualHost 192.168.2.222:443>
	ServerName default
	UseCanonicalName Off
	DocumentRoot /home/httpd/vhosts/default/httpsdocs
	ScriptAlias /cgi-bin/ "/home/httpd/vhosts/default/cgi-bin/"
	SSLEngine on
	SSLVerifyClient none
	SSLCertificateFile /etc/httpd/conf/httpd.pem
	<Directory "/home/httpd/vhosts/default/cgi-bin/">
		AllowOverride None
		Options None
		Order allow,deny
		Allow from all
	</Directory>
	<Directory /home/httpd/vhosts/default/httpsdocs>
		SSLRequireSSL
	</Directory>
</VirtualHost>

</IfModule>

<IfModule mod_ssl.c>

<VirtualHost _default_:443>
	DocumentRoot /home/httpd/vhosts/default/httpsdocs
	SSLEngine on
	SSLVerifyClient none
	SSLCertificateFile /etc/httpd/conf/httpd.pem
</VirtualHost>

</IfModule>



<IfModule mod_ssl.c>

<VirtualHost 192.168.2.222:443>
	ServerName   sslhost.chu
	User         ftpchu
	Group        psacln
	ServerAdmin  mail1@sslhost.chu
	DocumentRoot /home/httpd/vhosts/sslhost.chu/httpsdocs
	CustomLog  /home/httpd/vhosts/sslhost.chu/logs/access_ssl_log combined
	ErrorLog     /home/httpd/vhosts/sslhost.chu/logs/error_ssl_log
<IfModule mod_userdir.c>
	UserDir /home/httpd/vhosts/sslhost.chu/web_users
</IfModule>
	<Directory /home/httpd/vhosts/sslhost.chu/httpsdocs>
	<IfModule mod_php4.c>
		php_admin_flag engine off
	</IfModule>
		SSLRequireSSL
		Options -Includes -ExecCGI
	</Directory>
</VirtualHost>

</IfModule>

<VirtualHost 192.168.2.222:80>
	ServerName   sslhost.chu
	User         ftpchu
	Group        psacln
	ServerAdmin  "mail1@sslhost.chu"
	DocumentRoot /home/httpd/vhosts/sslhost.chu/httpdocs
	CustomLog  /home/httpd/vhosts/sslhost.chu/logs/access_log combined
	ErrorLog   /home/httpd/vhosts/sslhost.chu/logs/error_log
<IfModule mod_userdir.c>
	UserDir /home/httpd/vhosts/sslhost.chu/web_users
</IfModule>
	<IfModule mod_ssl.c>
		SSLEngine off
	</IfModule>
	<Directory /home/httpd/vhosts/sslhost.chu/httpdocs>
	<IfModule mod_php4.c>
		php_admin_flag engine off
	</IfModule>
		Options -Includes -ExecCGI
	</Directory>
</VirtualHost>

<VirtualHost 192.168.2.222:80>
	ServerName   non-ssl.chu
	User         ftpnon
	Group        psacln
	ServerAdmin  "mail1@sslhost.chu"
	DocumentRoot /home/httpd/vhosts/non-ssl.chu/httpdocs
	CustomLog  /home/httpd/vhosts/non-ssl.chu/logs/access_log combined
	ErrorLog   /home/httpd/vhosts/non-ssl.chu/logs/error_log
<IfModule mod_userdir.c>
	UserDir /home/httpd/vhosts/non-ssl.chu/web_users
</IfModule>
	<IfModule mod_ssl.c>
		SSLEngine off
	</IfModule>
	<Directory /home/httpd/vhosts/non-ssl.chu/httpdocs>
	<IfModule mod_php4.c>
		php_admin_flag engine off
	</IfModule>
		Options -Includes -ExecCGI
	</Directory>
</VirtualHost>