ServerName was.hensler.net:80

LoadModule rewrite_module modules/mod_rewrite.so
RewriteEngine On
RewriteRule ^\/$ https://%{SERVER_NAME}/ [NE,L,R]

LoadModule ibm_ssl_module modules/mod_ibm_ssl.so
Keyfile /opt/IBM/HTTPServer/ssl/key.kdb
SSLStashfile /opt/IBM/HTTPServer/ssl/key.sth
<IfModule mod_ibm_ssl.c>
Listen 0.0.0.0:443
<VirtualHost *:443>
ServerName was.hensler.net:443

SSLEnable
SSLClientAuth none
SSLCompression off
SSLProtocolDisable SSLv2 SSLv3
SSLProtocolEnable TLSv1 TLSv11 TLSv12

SSLCipherSpec TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
SSLCipherSpec TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
SSLCipherSpec TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SSLCipherSpec TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
SSLCipherSpec TLS_RSA_WITH_AES_256_CBC_SHA
SSLCipherSpec TLS_RSA_WITH_AES_128_CBC_SHA
SSLCipherSpec SSL_RSA_WITH_3DES_EDE_CBC_SHA
SSLCipherSpec SSL_RSA_WITH_3DES_EDE_CBC_SHA

# Enable strict CBC padding
SSLAttributeSet 471 1
</VirtualHost>
</IfModule>

ErrorLog "|/opt/IBM/HTTPServer/bin/rotatelogs /opt/IBM/HTTPServer/logs/error.log.%Y-%m-%d-%H_%M_%S 86400"
CustomLog "|/opt/IBM/HTTPServer/bin/rotatelogs /opt/IBM/HTTPServer/logs/access.log.%Y-%m-%d-%H_%M_%S 86400" common

LoadModule was_ap24_module /opt/IBM/WebSphere/Plugins/bin/64bits/mod_was_ap24_http.so
WebSpherePluginConfig /opt/IBM/WebSphere/Plugins/config/webserver1/plugin-cfg.xml

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.