66 lines
1.6 KiB
Plaintext
66 lines
1.6 KiB
Plaintext
Listen 443 https
|
|
<VirtualHost *:443>
|
|
ServerName 10.60.0.1
|
|
DocumentRoot /var/www/html
|
|
|
|
SSLEngine on
|
|
SSLCertificateFile /etc/httpd/ssl/apache.crt
|
|
SSLCertificateKeyFile /etc/httpd/ssl/apache.key
|
|
SSLCACertificateFile /etc/httpd/ssl/ca.crt
|
|
|
|
# mutual authentication
|
|
SSLVerifyClient require
|
|
SSLVerifyDepth 1
|
|
|
|
# ocsp validation
|
|
SSLOCSPEnable on
|
|
SSLOCSPDefaultResponder "http://10.60.0.1:8888"
|
|
SSLOCSPOverrideResponder on
|
|
SSLOCSPUseRequestNonce off
|
|
|
|
# session management
|
|
Session On
|
|
SessionCookieName session path=/;HttpOnly;Secure
|
|
|
|
# proteger
|
|
<Location "/">
|
|
AuthType Form
|
|
AuthName "Coimbra VPN"
|
|
AuthFormProvider PAM
|
|
AuthPAMService httpd-totp
|
|
AuthFormLoginRequiredLocation "/login.html"
|
|
Require valid-user
|
|
</Location>
|
|
|
|
# public login page
|
|
<Location "/login.html">
|
|
AuthType None
|
|
Require all granted
|
|
</Location>
|
|
|
|
# login handler
|
|
<Location "/dologin">
|
|
SetHandler form-login-handler
|
|
AuthType Form
|
|
AuthName "Coimbra VPN"
|
|
AuthFormProvider PAM
|
|
AuthPAMService httpd-totp
|
|
Require all granted
|
|
AuthFormLoginSuccessLocation "/index.html"
|
|
AuthFormLoginRequiredLocation "/login.html?error=1"
|
|
</Location>
|
|
|
|
# logout handler
|
|
<Location "/logout">
|
|
SetHandler form-logout-handler
|
|
AuthFormLogoutLocation "/login.html?loggedout=1"
|
|
</Location>
|
|
|
|
</VirtualHost>
|
|
|
|
# redirect para https
|
|
<VirtualHost *:80>
|
|
ServerName 10.60.0.1
|
|
Redirect permanent / https://10.60.0.1/
|
|
</VirtualHost>
|