質問編集履歴
1
ssl\.confを追加しました\(文字数制限があったのでコメント部分を一部削除しました\)
title
CHANGED
|
File without changes
|
body
CHANGED
|
@@ -77,4 +77,99 @@
|
|
|
77
77
|
|
|
78
78
|
|
|
79
79
|
アクセスできない要因が何であるか、ご回答いただけますと幸いです。
|
|
80
|
-
不足情報などありましたらご指摘ください。
|
|
80
|
+
不足情報などありましたらご指摘ください。
|
|
81
|
+
|
|
82
|
+
|
|
83
|
+
## 設定ファイル
|
|
84
|
+
|
|
85
|
+
/etc/httpd/conf.d/ssl.conf
|
|
86
|
+
```
|
|
87
|
+
|
|
88
|
+
LoadModule ssl_module modules/mod_ssl.so
|
|
89
|
+
|
|
90
|
+
|
|
91
|
+
Listen 443
|
|
92
|
+
|
|
93
|
+
|
|
94
|
+
|
|
95
|
+
|
|
96
|
+
SSLPassPhraseDialog builtin
|
|
97
|
+
|
|
98
|
+
SSLSessionCache shmcb:/var/cache/mod_ssl/scache(512000)
|
|
99
|
+
SSLSessionCacheTimeout 300
|
|
100
|
+
|
|
101
|
+
|
|
102
|
+
SSLMutex default
|
|
103
|
+
|
|
104
|
+
|
|
105
|
+
SSLRandomSeed startup file:/dev/urandom 256
|
|
106
|
+
SSLRandomSeed connect builtin
|
|
107
|
+
#SSLRandomSeed startup file:/dev/random 512
|
|
108
|
+
#SSLRandomSeed connect file:/dev/random 512
|
|
109
|
+
#SSLRandomSeed connect file:/dev/urandom 512
|
|
110
|
+
|
|
111
|
+
|
|
112
|
+
SSLCryptoDevice builtin
|
|
113
|
+
#SSLCryptoDevice ubsec
|
|
114
|
+
|
|
115
|
+
|
|
116
|
+
|
|
117
|
+
<VirtualHost _default_:443>
|
|
118
|
+
|
|
119
|
+
|
|
120
|
+
DocumentRoot "/home/user/public_html/"
|
|
121
|
+
ServerName xxxxx.net:443
|
|
122
|
+
|
|
123
|
+
|
|
124
|
+
ErrorLog logs/ssl_error_log
|
|
125
|
+
TransferLog logs/ssl_access_log
|
|
126
|
+
LogLevel warn
|
|
127
|
+
|
|
128
|
+
|
|
129
|
+
SSLEngine on
|
|
130
|
+
|
|
131
|
+
|
|
132
|
+
SSLProtocol all -SSLv2 -SSLv3
|
|
133
|
+
|
|
134
|
+
|
|
135
|
+
SSLCipherSuite DEFAULT:!EXP:!SSLv2:!DES:!IDEA:!SEED:+3DES
|
|
136
|
+
|
|
137
|
+
|
|
138
|
+
SSLCertificateFile /etc/httpd/conf/ssl/server.crt
|
|
139
|
+
|
|
140
|
+
|
|
141
|
+
SSLCertificateKeyFile /etc/httpd/conf/ssl/server.key
|
|
142
|
+
|
|
143
|
+
|
|
144
|
+
#SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt
|
|
145
|
+
|
|
146
|
+
|
|
147
|
+
#SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt
|
|
148
|
+
|
|
149
|
+
|
|
150
|
+
#SSLVerifyClient require
|
|
151
|
+
#SSLVerifyDepth 10
|
|
152
|
+
|
|
153
|
+
|
|
154
|
+
#</Location>
|
|
155
|
+
|
|
156
|
+
|
|
157
|
+
#SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire
|
|
158
|
+
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
|
|
159
|
+
SSLOptions +StdEnvVars
|
|
160
|
+
</Files>
|
|
161
|
+
<Directory "/var/www/cgi-bin">
|
|
162
|
+
SSLOptions +StdEnvVars
|
|
163
|
+
</Directory>
|
|
164
|
+
|
|
165
|
+
|
|
166
|
+
SetEnvIf User-Agent ".*MSIE.*" \
|
|
167
|
+
nokeepalive ssl-unclean-shutdown \
|
|
168
|
+
downgrade-1.0 force-response-1.0
|
|
169
|
+
|
|
170
|
+
|
|
171
|
+
CustomLog logs/ssl_request_log \
|
|
172
|
+
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
|
|
173
|
+
|
|
174
|
+
</VirtualHost>
|
|
175
|
+
```
|