David Cook
58893f4c0b
This patch changes the default SSLProtocol for the Let's Encrypt HTTPS template, so that it enables in use versions of TLS while disabling the deprecated versions of TLS. Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com> Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
64 lines
2.5 KiB
Text
64 lines
2.5 KiB
Text
# Koha instance __KOHASITE__ Apache config.
|
|
|
|
# redirect http to https
|
|
#<VirtualHost *:80> #nohttps
|
|
# ServerName __OPACSERVER__ #nohttps
|
|
# ServerAlias __INTRASERVER__ #nohttps
|
|
# RewriteEngine On #nohttps
|
|
# RewriteCond %{HTTPS} !=on #nohttps
|
|
# RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L] #nohttps
|
|
#</VirtualHost> #nohttps
|
|
|
|
# OPAC
|
|
<VirtualHost *:80> #https
|
|
# SSLEngine on
|
|
# SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
|
|
# SSLCompression off
|
|
# SSLHonorCipherOrder on
|
|
# SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-SA-
|
|
# SSLCertificateKeyFile /etc/letsencrypt/live/__OPACSERVER__/privkey.pem
|
|
# SSLCertificateFile /etc/letsencrypt/live/__OPACSERVER__/cert.pem
|
|
# SSLCertificateChainFile /etc/letsencrypt/live/__OPACSERVER__/chain.pem
|
|
|
|
<IfVersion >= 2.4>
|
|
Define instance "__KOHASITE__"
|
|
</IfVersion>
|
|
Include /etc/koha/apache-shared.conf
|
|
# Include /etc/koha/apache-shared-disable.conf
|
|
# Include /etc/koha/apache-shared-opac-plack.conf
|
|
Include /etc/koha/apache-shared-opac.conf
|
|
|
|
ServerName __OPACSERVER__
|
|
SetEnv KOHA_CONF "/etc/koha/sites/__KOHASITE__/koha-conf.xml"
|
|
AssignUserID __UNIXUSER__ __UNIXGROUP__
|
|
|
|
ErrorLog /var/log/koha/__KOHASITE__/opac-error.log
|
|
# TransferLog /var/log/koha/__KOHASITE__/opac-access.log
|
|
</VirtualHost>
|
|
|
|
# Intranet
|
|
<VirtualHost *:80> #https
|
|
# SSLEngine on
|
|
# SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
|
|
# SSLCompression off
|
|
# SSLHonorCipherOrder on
|
|
# SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES
|
|
# SSLCertificateKeyFile /etc/letsencrypt/live/__OPACSERVER__/privkey.pem
|
|
# SSLCertificateFile /etc/letsencrypt/live/__OPACSERVER__/cert.pem
|
|
# SSLCertificateChainFile /etc/letsencrypt/live/__OPACSERVER__/chain.pem
|
|
|
|
<IfVersion >= 2.4>
|
|
Define instance "__KOHASITE__"
|
|
</IfVersion>
|
|
Include /etc/koha/apache-shared.conf
|
|
# Include /etc/koha/apache-shared-disable.conf
|
|
# Include /etc/koha/apache-shared-intranet-plack.conf
|
|
Include /etc/koha/apache-shared-intranet.conf
|
|
|
|
ServerName __INTRASERVER__
|
|
SetEnv KOHA_CONF "/etc/koha/sites/__KOHASITE__/koha-conf.xml"
|
|
AssignUserID __UNIXUSER__ __UNIXGROUP__
|
|
|
|
ErrorLog /var/log/koha/__KOHASITE__/intranet-error.log
|
|
# TransferLog /var/log/koha/__KOHASITE__/intranet-access.log
|
|
</VirtualHost>
|