Apache#
Configurazione#
apache2.conf aggiungere/modificare :
# forbid access to the entire filesystem by default
<Directory />
Options None
AllowOverride None
Order deny,allow
Deny from all
</Directory>
# List of resources to look for when the client requests a directory
DirectoryIndex index.htm index.html index.jsp Index.jsp home.jsp Home.jsp index.php Index.php Wiki.jsp wiki.jsp
accesso sicuro SSL#
abilitare modulo ssl con il comando# a2enmod ssl
NameVirtualHost qui:80 NameVirtualHost qui:443
Virtualhost#
i file virtualhost devono includere le chiamate al servizio ssl esempio 1 : sito intermanete SSL
<VirtualHost qui:80>
ServerAdmin log@telnext.it
ServerName www.nostrosito.it
DocumentRoot /home/www/www.nostrosito.it/htdocs
# Per tomcat
JkMount /*.jsp wrkr
JkMount /servlet/* wrkr
JkMount /manager/* wrkr
ErrorLog /home/www/www.nostrosito.it/logs/error_log
CustomLog /home/www/www.nostrosito.it/logs/access_log combined
HostnameLookups Off
UseCanonicalName Off
ServerSignature On
<Directory "/home/www/www.vaol.it/htdocs/protected">
#SSLEngine on
#SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
#SSLCertificateFile /root/sec/selfsigned-cert.pem
#SSLCertificateKeyFile /root/sec/rsa-private-key.pem
# Force clients from the Internet to use HTTPS
RewriteEngine on
RewriteRule ^/$ https://www.vaol.it/ [R]
#RewriteEngine on
#RewriteCond %{REMOTE_ADDR} !^192\.168\.1\.[0-9]+$
#RewriteCond %{HTTPS} !=on
#RewriteRule .* - [F]
#Order deny,allow
#Allow from all
</Directory>
<Directory "/home/www/www.vaol.it/htdocs/">
Options Indexes FollowSymLinks
AllowOverride All
Order allow,deny
Allow from all
</Directory>
</VirtualHost>
<VirtualHost qui:443>
ServerAdmin log@telnext.it
ServerName www.vaol.it
# DocumentRoot: The directory out of which you will serve your
# documents. By default, all requests are taken from this directory, but
# symbolic links and aliases may be used to point to other locations.
DocumentRoot /home/www/www.vaol.it/htdocs/protected
# Per tomcat
JkMount /*.jsp wrkr
JkMount /servlet/* wrkr
JkMount /manager/* wrkr
ErrorLog /home/www/www.vaol.it/logs/error_log
CustomLog /home/www/www.vaol.it/logs/access_log combined
Add new attachment
Only authorized users are allowed to upload new attachments.
«
This particular version was published on 14-Apr-2010 14:30 by Raschetti.