Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <VirtualHost _default_:80>
- ServerName <Jira URL>
- <Location /server-status>
- SetHandler server-status
- Order deny,allow
- Allow from 127.0.0.1/8
- </Location>
- RewriteEngine On
- RewriteCond %{HTTPS} off
- RewriteCond %{REQUEST_URI} !^/server-status
- RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R,L]
- </VirtualHost>
- <VirtualHost _default_:443>
- ServerName <Jira URL>
- #ErrorLog logs/ssl_error_log
- #TransferLog logs/ssl_access_log
- LogLevel warn
- SSLEngine on
- SSLProtocol TLSv1.2
- SSLHonorCipherOrder on
- SSLCipherSuite "!EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM !EECDH+ECDSA+SHA384 !EECDH+ECDSA+SHA256 !EECDH+aRSA+SHA384 !EECDH+aRSA+SHA256 !EECDH+aRSA+RC4 EECDH !EDH+aRSA !RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4"
- SSLCertificateFile /path/to/certs/<Cert File>.pem
- SSL CertificateChainFile /path/to/certs/<Chain 1>.pem
- SSLCertificateKeyFile /path/to/keys/<Private Key>.key
- <Files ~ "\.(cgi|shtml|phtml|php3?)$">
- SSLOptions +StdEnvVars
- </Files>
- <Directory "/var/www/cgi-bin">
- SSLOptions +StdEnvVars
- </Directory>
- ProxyRequests On
- <Proxy *>
- Require all granted
- </Proxy>
- <Location /server-status>
- SetHandler server-status
- Order deny,allow
- Allow from 127.0.0.1/8
- </Location>
- BrowserMatch "MSIE [2-5]" \
- nokeepalive ssl-unclean-shutdown \
- downgrade-1.0 force-response-1.0
- #CustomLog logs/ssl_request_log \
- # "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
- ProxyPass /server-status !
- ProxyPreserveHost On
- ProxyPass / http://<Jira_URL>:8080/
- ProxyPassReverse / http://<Jira_URL>:8080/
- </VirtualHost>
Advertisement
Add Comment
Please, Sign In to add comment