...
| Bloc de code |
|---|
<VirtualHost *:443 >
<Proxy balancer://entCluster>
BalancerMember ajp://localhost:8009 min=10 max=150 route=ent1 retry=1
Order deny,allow
</Proxy>
ProxyPass /balancer-manager !
ProxyPass / balancer://entCluster/ stickysession=JSESSIONID nofailover=Off
<Location /balancer-manager>
SetHandler balancer-manager
Order allow,deny
Allow from xxx.univ-xxx.fr
</Location>
ServerName entergo-unpidf.univ-paris1.fr
ServerAlias entergo-unpidf
ErrorLog /var/log/apache2/entergo-unpidf-ssl-error.log
CustomLog /var/log/apache2/entergo-unpidf-ssl-access.log combined
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
SSLCertificateFile /usr/local/etc/ssl/certs/entergo-unpidf.univ-paris1.fr.crt
SSLCertificateKeyFile /usr/local/etc/ssl/private/entergo-unpidf.univ-paris1.fr.key
SSLCertificateChainFile /usr/local/etc/ssl/certs/cachain.crt
# restreindre l'acces a certaines choses, notamment les web services
<Location ~ "/(EsupMonitor|private|problems|services)">
Order allow,deny
Allow from univ-paris1.fr
</Location>
# Interdit en mode non SSL
<Location /jkstatus>
Order allow,deny
</Location>
</VirtualHost>
|
...