아파치 웹서버 SSL 설정관련 소스

Listen 443

 

AddType application/x-x509-ca-cert .crt

AddType application/x-pkcs7-crl    .crl

 

SSLPassPhraseDialog exec:/apache/jws-3.0/httpd/sbin/httpd-ssl-pass-dialog

SSLSessionCache         shmcb:/apache/jws-3.0/httpd/run/sslcache(512000)

SSLSessionCacheTimeout  300

 

Mutex default

 

SSLRandomSeed startup file:/dev/urandom  256

SSLRandomSeed connect builtin

SSLCryptoDevice builtin

 

 

<VirtualHost *:443>

Servername 도메인이름

ErrorLog "|/apache/jws-3.0/httpd/sbin/rotatelogs/apache/jws-3.0/httpd/logs/ssl_error_log.%y%m%d 86400"

CustomLog "|/apache/jws-3.0/httpd/sbin/rotatelogs  /apache/jws-3.0/httpd/logs/ssl_request_log.%y%m%d 86400"  \

                "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

Jkmount /HUB/* sdpwlb

Jkmount /IPT/* dmwlb

Jkmount /* sdowlb

 

LogLevel warn

 

SSLEngine on

SSLProtocol all -SSLv2 -SSLv3

 

SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5

 

SSLCertificateFile /etc/pki/tls/certs/localhost.crt (인증서 저장경로)

SSLCertificateKeyFile /etc/pki/tls/private/localhost.key (개인키 저장경로)

SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt (체인 인증서 저장경로)