Skip to content

Instantly share code, notes, and snippets.

@Lewiscowles1986
Created February 12, 2017 21:19
Show Gist options
  • Save Lewiscowles1986/dda7382e21a7ec66089730f7945842f0 to your computer and use it in GitHub Desktop.
Save Lewiscowles1986/dda7382e21a7ec66089730f7945842f0 to your computer and use it in GitHub Desktop.
Apache2.2 LetsEncrypt For SOSLUG
<VirtualHost _default_:443>
DocumentRoot /var/www/vhosts/soslug.org
ServerName www.soslug.org:443
ServerAlias soslug.org:443
SSLEngine on
SSLProtocol all -SSLv3 -SSLv2
SSLHonorCipherOrder on
SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-GCM-SHA256:AES256+EDH:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4
SSLCertificateFile /etc/letsencrypt/live/soslug.org/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/soslug.org/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/soslug.org/chain.pem
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars
</Files>
<Directory "/var/www/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog /var/log/httpd/vhosts/soslug.org.log combined
<Directory /var/www/vhosts/soslug.org>
allow from all
Options +Indexes
AllowOverride all
</Directory>
</VirtualHost>
@Lewiscowles1986
Copy link
Author

After looking at Apache Docs it seems that this might work with 2.4.x https://httpd.apache.org/docs/2.4/upgrading.html should be used if in doubt

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment