setup copr-fe to use https

selfigned certs, not stored here.
It will be replaced in matter of days by properly signed certs, which we store in private repo
This commit is contained in:
Miroslav Suchý 2014-01-15 13:31:55 +00:00
parent b1dfce5353
commit 08b3569ed6
2 changed files with 26 additions and 0 deletions

View file

@ -18,3 +18,28 @@ WSGISocketPrefix /var/run/wsgi
Require all granted
</Directory>
</VirtualHost>
<VirtualHost *:443>
SSLEngine on
SSLProtocol all -SSLv2
#optimeize on speed
SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!aNULL:!MD5
SSLHonorCipherOrder on
SSLCertificateFile /etc/pki/tls/ca.crt
SSLCertificateKeyFile /etc/pki/tls/private/ca.key
ServerName copr-fe.cloud.fedoraproject.org:443
WSGIPassAuthorization On
#WSGIDaemonProcess 127.0.0.1 user=copr-fe group=copr-fe threads=5
WSGIScriptAlias / /usr/share/copr/coprs_frontend/application
WSGIProcessGroup 127.0.0.1
ErrorLog logs/error_coprs
CustomLog logs/access_coprs common
<Directory /usr/share/copr>
WSGIApplicationGroup %{GLOBAL}
Require all granted
</Directory>
</VirtualHost>