Hello everyone,

Can anyone tell me the quickest way to get my Apache 2.2 server set up so that it serves SSL connections only?

this is how I configured apache:

./configure --prefix=/usr/local/apache2 \
--mandir=/usr/local/man \
--enable-so \
--enable-ssl=shared \
--enable-rewrite


What do I have to edit/change in httpd.conf to run an SSL ONLY server?

Thankyou.

I think I have figured it out.

I placed the following code at the bottom of httpd.conf.

I believe this method is secure, but if not - could someone tell me of a better way to do it?

Thankyou.


#### START CODE ####



Listen 443

<VirtualHost _default_:443>
DocumentRoot "/usr/local/apache2/htdocs"
ServerName my.domain.name:443
ServerAdmin blablabla
ErrorLog /usr/local/apache2/logs/error_log
TransferLog /usr/local/apache2/logs/access_log

SSLEngine on

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

SSLCertificateFile /usr/local/apache2/conf/ssl.crt/server.crt

SSLCertificateKeyFile /usr/local/apache2/conf/ssl.key/server.key


SSLCACertificatePath /usr/local/apache2/conf/ssl.crt
SSLCACertificateFile /usr/local/apache2/conf/ssl.crt/server.crt



<FilesMatch "\.(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<Directory "/usr/local/apache2/cgi-bin">
SSLOptions +StdEnvVars
</Directory>

<Directory "/usr/local/apache2/htdocs">
SSLRequireSSL
SSLCipherSuite HIGH:MEDIUM
SSLOptions +StdEnvVars
SSLOptions +OptRenegotiate
</Directory>

BrowserMatch ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0

CustomLog /usr/local/apache2/logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

</VirtualHost>

#
# The following Rewrite Rules makes sure that if someone requests a HTTP URI from this server
# that it is changed to HTTPS.
#

RewriteEngine on
RewriteCond %{SERVER_PORT} =80
RewriteRule ^(.*) https://%{SERVER_NAME}%{REQUEST_URI}

#### END CODE ####

uh... fyi, in conf/extra there's a file called httpd-ssl.conf that you can edit to set up SSL. in conf/httpd.conf you then uncomment the Include line for httpd-ssl.conf.