Warning, /iDDS/main/etc/idds/rest/ssl.conf is written in an unsupported language. File is not indexed.
0001 #
0002 # When we also provide SSL we have to listen to the
0003 # the HTTPS port in addition.
0004 #
0005 # Listen 443 https
0006
0007 ##
0008 ## SSL Global Context
0009 ##
0010 ## All SSL configuration in this context applies both to
0011 ## the main server and all SSL-enabled virtual hosts.
0012 ##
0013
0014 # Pass Phrase Dialog:
0015 # Configure the pass phrase gathering process.
0016 # The filtering dialog program (`builtin' is a internal
0017 # terminal dialog) has to provide the pass phrase on stdout.
0018 SSLPassPhraseDialog exec:/usr/libexec/httpd-ssl-pass-dialog
0019
0020 # Inter-Process Session Cache:
0021 # Configure the SSL Session Cache: First the mechanism
0022 # to use and second the expiring timeout (in seconds).
0023 SSLSessionCache shmcb:/run/httpd/sslcache(512000)
0024 SSLSessionCacheTimeout 300
0025
0026 # Pseudo Random Number Generator (PRNG):
0027 # Configure one or more sources to seed the PRNG of the
0028 # SSL library. The seed data should be of good random quality.
0029 # WARNING! On some platforms /dev/random blocks if not enough entropy
0030 # is available. This means you then cannot use the /dev/random device
0031 # because it would lead to very long connection times (as long as
0032 # it requires to make more entropy available). But usually those
0033 # platforms additionally provide a /dev/urandom device which doesn't
0034 # block. So, if available, use this one instead. Read the mod_ssl User
0035 # Manual for more details.
0036 SSLRandomSeed startup file:/dev/urandom 256
0037 SSLRandomSeed connect builtin
0038 #SSLRandomSeed startup file:/dev/random 512
0039 #SSLRandomSeed connect file:/dev/random 512
0040 #SSLRandomSeed connect file:/dev/urandom 512
0041
0042 #
0043 # Use "SSLCryptoDevice" to enable any supported hardware
0044 # accelerators. Use "openssl engine -v" to list supported
0045 # engine names. NOTE: If you enable an accelerator and the
0046 # server does not start, consult the error logs and ensure
0047 # your accelerator is functioning properly.
0048 #
0049 SSLCryptoDevice builtin
0050 #SSLCryptoDevice ubsec
0051
0052 ##
0053 ## SSL Virtual Host Context
0054 ##
0055
