>> Edit article
이름
제목
패스워드
############################################################ NameVirtualHost 211.36.58.212 <VirtualHost 211.36.58.212> DocumentRoot /var/www/html/ ServerName www.myhome.com </VirtualHost> <VirtualHost 211.36.58.212> ServerAdmin webmaster@aaa.com DocumentRoot /home/aaa/ ServerName aaa.com ServerAlias *.aaa.com ErrorLog logs/aaa.com-error_log CustomLog logs/aaa.com-access_log common </VirtualHost> ############################################################ 순서를 이렇게 바꾸고 다시 한번 해보세요 : : 아파치웹서버에서 virtualhost 설정에 관한 겁니다.. : : 도메인이 두개가 있습니다. : www.myhome.com : www.aaa.com : : IP 는 고정 아이피 1개 있습니다. : : document 디렉토리는 : : /home/mycom/www : /home/aaa/www : 입니다.. : : Dns 설정 제대로 한거같고 : httpd.conf 제대로 수정된거 같습니다.. : : 브라우저에서에서 www.myhome.com을 치면 메인 웹페이지가 나옴니다... : 그런데... www.aaa.com 을 치면해당 페이지가 나오지 않고 : www.myhome.com의 메인 페이지가 나옴니다... : : : 즉 각기도메인을 치면 루트의 index.hmtl을 보여줍니다.. : 루트 디렉토리==> /var/www/html : : 완전돌아버리고 있습니다..별짓을 다해봤습니다.. : 최후의 방법입니다.. : 고수님들 뭐가 틀렸나한번 봐주세요 : 성공하면 한잔 삽니다.. : : --------------------------------------------------------------------- : ====myhome 의 zone 파일======= : : $TTL 86400 : @ IN SOA diablo2.myhome.com. webmaster.diablo2.myhome.com. ( : 20020430 ; Serial : 10800 ; Refresh : 3600 ; Retry : 432000 ; Expire : 86400 ) ; Minimum (TTL) : @ IN NS diablo2.myhome.com. : @ IN MX 10 diablo2.myhome.com. : myhome.com. IN A 211.36.58.212 : www IN A 211.36.58.212 : home IN A 211.36.58.212 : webmail IN A 211.36.58.212 : mail IN CNAME myhome.com. : : ====aaa 의 zone 파일========== : : : $TTL 86400 : @ IN SOA diablo2.myhome.com. webmaster.diablo2.aaa.com. ( : 20020428 ; Serial : 10800 ; Refresh : 3600 ; Retry : 432000 ; Expire : 86400 ) ; Minimum (TTL) : @ IN NS diablo2.myhome.com. : @ IN MX 10 diablo2.myhome.com. : aaa.com. IN A 211.36.58.212 : www IN CNAME 211.36.58.212 : : =============httpd.conf 파일(좀 깁니다)=================== : : : : ### Section 1: Global Environment : # : # The directives in this section affect the overall operation of Apache, : # such as the number of concurrent requests it can handle or where it : # can find its configuration files. : # : : # : # ServerType is either inetd, or standalone. Inetd mode is only supported on : # Unix platforms. : # : ServerType standalone : : # : # ServerRoot: The top of the directory tree under which the server's : # configuration, error, and log files are kept. : # : # NOTE! If you intend to place this on an NFS (or otherwise network) : # mounted filesystem then please read the LockFile documentation : # (available at <URL:http://www.apache.org/docs/mod/core.html#lockfile>); : # you will save yourself a lot of trouble. : # : # Do NOT add a slash at the end of the directory path. : # : ServerRoot "/etc/httpd" : : # : # The LockFile directive sets the path to the lockfile used when Apache : # is compiled with either USE_FCNTL_SERIALIZED_ACCEPT or : # USE_FLOCK_SERIALIZED_ACCEPT. This directive should normally be left at : # its default value. The main reason for changing it is if the logs : # directory is NFS mounted, since the lockfile MUST BE STORED ON A LOCAL : # DISK. The PID of the main server process is automatically appended to : # the filename. : # : LockFile /var/lock/httpd.lock : : # : # PidFile: The file in which the server should record its process : # identification number when it starts. : # : PidFile /var/run/httpd.pid : : # : # ScoreBoardFile: File used to store internal server process information. : # Not all architectures require this. But if yours does (you'll know because : # this file will be created when you run Apache) then you *must* ensure that : # no two invocations of Apache share the same scoreboard file. : # : ScoreBoardFile /var/run/httpd.scoreboard : : # : # In the standard configuration, the server will process this file, : # srm.conf, and access.conf in that order. The latter two files are : # now distributed empty, as it is recommended that all directives : # be kept in a single file for simplicity. The commented-out values : # below are the built-in defaults. You can have the server ignore : # these files altogether by using "/dev/null" (for Unix) or : # "nul" (for Win32) for the arguments to the directives. : # : #ResourceConfig conf/srm.conf : #AccessConfig conf/access.conf : : # : # Timeout: The number of seconds before receives and sends time out. : # : Timeout 1200 : : # : # KeepAlive: Whether or not to allow persistent connections (more than : # one request per connection). Set to "Off" to deactivate. : # : KeepAlive On : : # : # MaxKeepAliveRequests: The maximum number of requests to allow : # during a persistent connection. Set to 0 to allow an unlimited amount. : # We recommend you leave this number high, for maximum performance. : # : MaxKeepAliveRequests 1000 : : # : # KeepAliveTimeout: Number of seconds to wait for the next request from the : # same client on the same connection. : # : KeepAliveTimeout 300 : : # : # Server-pool size regulation. Rather than making you guess how many : # server processes you need, Apache dynamically adapts to the load it : # sees --- that is, it tries to maintain enough server processes to : # handle the current load, plus a few spare servers to handle transient : # load spikes (e.g., multiple simultaneous requests from a single : # Netscape browser). : # : # It does this by periodically checking how many servers are waiting : # for a request. If there are fewer than MinSpareServers, it creates : # a new spare. If there are more than MaxSpareServers, some of the : # spares die off. The default values are probably OK for most sites. : # : MinSpareServers 5 : MaxSpareServers 20 : : # : # Number of servers to start initially --- should be a reasonable ballpark : # figure. : # : StartServers 8 : : # : # Limit on total number of servers running, i.e., limit on the number : # of clients who can simultaneously connect --- if this limit is ever : # reached, clients will be LOCKED OUT, so it should NOT BE SET TOO LOW. : # It is intended mainly as a brake to keep a runaway server from taking : # the system with it as it spirals down... : # : MaxClients 150 : : # : # MaxRequestsPerChild: the number of requests each child process is : # allowed to process before the child dies. The child will exit so : # as to avoid problems after prolonged use when Apache (and maybe the : # libraries it uses) leak memory or other resources. On most systems, this : # isn't really needed, but a few (such as Solaris) do have notable leaks : # in the libraries. For these platforms, set to something like 10000 : # or so; a setting of 0 means unlimited. : # : # NOTE: This value does not include keepalive requests after the initial : # request per connection. For example, if a child process handles : # an initial request and 10 subsequent "keptalive" requests, it : # would only count as 1 request towards this limit. : # : MaxRequestsPerChild 100 : : # : # Listen: Allows you to bind Apache to specific IP addresses and/or : # ports, in addition to the default. See also the <VirtualHost> : # directive. : # : #Listen 3000 : #Listen 12.34.56.78:80 : Listen 80 : : # : # BindAddress: You can support virtual hosts with this option. This directive : # is used to tell the server which IP address to listen to. It can either : # contain "*", an IP address, or a fully qualified Internet domain name. : # See also the <VirtualHost> and Listen directives. : # : BindAddress * : : # : # Dynamic Shared Object (DSO) Support : # : # To be able to use the functionality of a module which was built as a DSO you : # have to place corresponding `LoadModule' lines at this location so the : # directives contained in it are actually available _before_ they are used. : # Please read the file README.DSO in the Apache 1.3 distribution for more : # details about the DSO mechanism and run `httpd -l' for the list of already : # built-in (statically linked and thus always available) modules in your httpd : # binary. : # : # Note: The order is which modules are loaded is important. Don't change : # the order below without expert advice. : # : # Example: : # LoadModule foo_module modules/mod_foo.so : : 중략 : : # : # ExtendedStatus: controls whether Apache will generate "full" status : # information (ExtendedStatus On) or just basic information (ExtendedStatus : # Off) when the "server-status" handler is called. The default is Off. : # : #ExtendedStatus On : : ### Section 2: 'Main' server configuration : # : # The directives in this section set up the values used by the 'main' : # server, which responds to any requests that aren't handled by a : # <VirtualHost> definition. These values also provide defaults for : # any <VirtualHost> containers you may define later in the file. : # : # All of these directives may appear inside <VirtualHost> containers, : # in which case these default settings will be overridden for the : # virtual host being defined. : # : : # : # If your ServerType directive (set earlier in the 'Global Environment' : # section) is set to "inetd", the next few directives don't have any : # effect since their settings are defined by the inetd configuration. : # Skip ahead to the ServerAdmin directive. : # : : # : # Port: The port to which the standalone server listens. For : # ports < 1023, you will need httpd to be run as root initially. : # : Port 80 : : # : # If you wish httpd to run as a different user or group, you must run : # httpd as root initially and it will switch. : # : # User/Group: The name (or #number) of the user/group to run httpd as. : # . On SCO (ODT 3) use "User nouser" and "Group nogroup". : # . On HPUX you may not be able to use shared memory as nobody, and the : # suggested workaround is to create a user www and use that user. : # NOTE that some kernels refuse to setgid(Group) or semctl(IPC_SET) : # when the value of (unsigned)Group is above 60000; : # don't use Group nobody on these systems! : # : User nobody : Group nobody : : # : # ServerAdmin: Your address, where problems with the server should be : # e-mailed. This address appears on some server-generated pages, such : # as error documents. : # : ServerAdmin webmaster@myhome.com : : # : # ServerName: allows you to set a host name which is sent back to clients for : # your server if it's different than the one the program would get (i.e., use : # "www" instead of the host's real name). : # : # Note: You cannot just invent host names and hope they work. The name you : # define here must be a valid DNS name for your host. If you don't understand : # this, ask your network administrator. : # If your host doesn't have a registered DNS name, enter its IP address here. : # You will have to access it by its address (e.g., http://123.45.67.89/) : # anyway, and this will make redirections work in a sensible way. : : ServerName www.myhome.com : : # : # DocumentRoot: The directory out of which you will serve your : # documents. By default, all requests are taken from this directory, but : # symbolic links and aliases may be used to point to other locations. : # : DocumentRoot "/var/www/html/" : : # : # Each directory to which Apache has access, can be configured with respect : # to which services and features are allowed and/or disabled in that : # directory (and its subdirectories). : # : # First, we configure the "default" to be a very restrictive set of : # permissions. : # : <Directory /> : Options FollowSymLinks : AllowOverride None : </Directory> : : # : # Note that from this point forward you must specifically allow : # particular features to be enabled - so if something's not working as : # you might expect, make sure that you have specifically enabled it : # below. : # : : # : # This should be changed to whatever you set DocumentRoot to. : # : <Directory "/var/www/html"> : : # : # This may also be "None", "All", or any combination of "Indexes", : # "Includes", "FollowSymLinks", "ExecCGI", or "MultiViews". : # : # Note that "MultiViews" must be named *explicitly* --- "Options All" : # doesn't give it to you. : # : Options Indexes Includes FollowSymLinks : : # : # This controls which options the .htaccess files in directories can : # override. Can also be "All", or any combination of "Options", "FileInfo", : # "AuthConfig", and "Limit" : # : AllowOverride None : : # : # Controls who can get stuff from this server. : # : Order allow,deny : Allow from all : </Directory> : : # : # UserDir: The name of the directory which is appended onto a user's home : # directory if a ~user request is received. : # : # The path to the end user account 'public_html' directory must be : # accessible to the webserver userid. This usually means that ~userid : # must have permissions of 711, ~userid/public_html must have permissions : # of 755, and documents contained therein must be world-readable. : # Otherwise, the client will only receive a "403 Forbidden" message. : # : # See also: http://httpd.apache.org/docs/misc/FAQ.html#forbidden : # : UserDir www : : # : # Control access to UserDir directories. The following is an example : # for a site where these directories are restricted to read-only. : # : <Directory /home/*/www> : AllowOverride FileInfo AuthConfig Limit : Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec : <Limit GET POST OPTIONS PROPFIND> : Order allow,deny : Allow from all : </Limit> : <Limit PUT DELETE PATCH PROPPATCH MKCOL COPY MOVE LOCK UNLOCK> : Order deny,allow : Deny from all : </Limit> : </Directory> : : # : # DirectoryIndex: Name of the file or files to use as a pre-written HTML : # directory index. Separate multiple entries with spaces. : # : DirectoryIndex index.html index.htm index.shtml index.php index.php4 index.php3 index.cgi : : # : # AccessFileName: The name of the file to look for in each directory : # for access control information. : # : AccessFileName .htaccess : : # : # The following lines prevent .htaccess files from being viewed by : # Web clients. Since .htaccess files often contain authorization : # information, access is disallowed for security reasons. Comment : # these lines out if you want Web visitors to see the contents of : # .htaccess files. If you change the AccessFileName directive above, : # be sure to make the corresponding changes here. : # : # Also, folks tend to use names such as .htpasswd for password : # files, so this will protect those as well. : # : <Files ~ "^.ht"> : Order allow,deny : Deny from all : </Files> : : # : # CacheNegotiatedDocs: By default, Apache sends "Pragma: no-cache" with each : # document that was negotiated on the basis of content. This asks proxy : # servers not to cache the document. Uncommenting the following line disables : # this behavior, and proxies will be allowed to cache the documents. : # : #CacheNegotiatedDocs : : # : # UseCanonicalName: (new for 1.3) With this setting turned on, whenever : # Apache needs to construct a self-referencing URL (a URL that refers back : # to the server the response is coming from) it will use ServerName and : # Port to form a "canonical" name. With this setting off, Apache will : # use the hostname:port that the client supplied, when possible. This : # also affects SERVER_NAME and SERVER_PORT in CGI scripts. : # : UseCanonicalName On : : # : # TypesConfig describes where the mime.types file (or equivalent) is : # to be found. : # : TypesConfig /etc/mime.types : : # : # DefaultType is the default MIME type the server will use for a document : # if it cannot otherwise determine one, such as from filename extensions. : # If your server contains mostly text or HTML documents, "text/plain" is : # a good value. If most of your content is binary, such as applications : # or images, you may want to use "application/octet-stream" instead to : # keep browsers from trying to display binary files as though they are : # text. : # : DefaultType text/plain : : # : # The mod_mime_magic module allows the server to use various hints from the : # contents of the file itself to determine its type. The MIMEMagicFile : # directive tells the module where the hint definitions are located. : # mod_mime_magic is not part of the default server (you have to add : # it yourself with a LoadModule [see the DSO paragraph in the 'Global : # Environment' section], or recompile the server and include mod_mime_magic : # as part of the configuration), so it's enclosed in an <IfModule> container. : # This means that the MIMEMagicFile directive will only be processed if the : # module is part of the server. : # : <IfModule mod_mime_magic.c> : MIMEMagicFile conf/magic : </IfModule> : : # : # HostnameLookups: Log the names of clients or just their IP addresses : # e.g., www.apache.org (on) or 204.62.129.132 (off). : # The default is off because it'd be overall better for the net if people : # had to knowingly turn this feature on, since enabling it means that : # each client request will result in AT LEAST one lookup request to the : # nameserver. : # : HostnameLookups Off : : # : # ErrorLog: The location of the error log file. : # If you do not specify an ErrorLog directive within a <VirtualHost> : # container, error messages relating to that virtual host will be : # logged here. If you *do* define an error logfile for a <VirtualHost> : # container, that host's errors will be logged there and not here. : # : ErrorLog /var/log/httpd/error_log : : # : # LogLevel: Control the number of messages logged to the error_log. : # Possible values include: debug, info, notice, warn, error, crit, : # alert, emerg. : # : LogLevel warn : : # : # The following directives define some format nicknames for use with : # a CustomLog directive (see below). : # : LogFormat "%h %l %u %t "%r" %>s %b "%{Referer}i" "%{User-Agent}i"" combined : LogFormat "%h %l %u %t "%r" %>s %b" common : LogFormat "%{Referer}i -> %U" referer : LogFormat "%{User-agent}i" agent : : # : # The location and format of the access logfile (Common Logfile Format). : # If you do not define any access logfiles within a <VirtualHost> : # container, they will be logged here. Contrariwise, if you *do* : # define per-<VirtualHost> access logfiles, transactions will be : # logged therein and *not* in this file. : # : # CustomLog /var/log/httpd/access_log common : CustomLog /var/log/httpd/access_log combined : : # : # If you would like to have agent and referer logfiles, uncomment the : # following directives. : # : #CustomLog /var/log/httpd/referer_log referer : #CustomLog /var/log/httpd/agent_log agent : : # : # If you prefer a single logfile with access, agent, and referer information : # (Combined Logfile Format) you can use the following directive. : # : #CustomLog /var/log/httpd/access_log combined : : # : # Optionally add a line containing the server version and virtual host : # name to server-generated pages (error documents, FTP directory listings, : # mod_status and mod_info output etc., but not CGI generated documents). : # Set to "EMail" to also include a mailto: link to the ServerAdmin. : # Set to one of: On | Off | EMail : # : ServerSignature On : : # : # Aliases: Add here as many aliases as you need (with no limit). The format is : # Alias fakename realname : # : # Note that if you include a trailing / on fakename then the server will : # require it to be present in the URL. So "/icons" isn't aliased in this : # example, only "/icons/".. : # : Alias /icons/ "/var/www/icons/" : : <Directory "/var/www/icons"> : Options Indexes MultiViews : AllowOverride None : Order allow,deny : Allow from all : </Directory> : : # : # ScriptAlias: This controls which directories contain server scripts. : # ScriptAliases are essentially the same as Aliases, except that : # documents in the realname directory are treated as applications and : # run by the server when requested rather than as documents sent to the client. : # The same rules about trailing "/" apply to ScriptAlias directives as to : # Alias. : # : ScriptAlias /cgi-bin/ "/var/www/cgi-bin/" : : # : # "/var/www/cgi-bin" should be changed to whatever your ScriptAliased : # CGI directory exists, if you have that configured. : # : <Directory "/var/www/cgi-bin"> : AllowOverride None : Options ExecCGI : Order allow,deny : Allow from all : </Directory> : : # : # Redirect allows you to tell clients about documents which used to exist in : # your server's namespace, but do not anymore. This allows you to tell the : # clients where to look for the relocated document. : # Format: Redirect old-URI new-URL : # : : # : # Directives controlling the display of server-generated directory listings. : # : : # : # FancyIndexing: whether you want fancy directory indexing or standard : # : IndexOptions FancyIndexing NameWidth=* : : # : # AddIcon* directives tell the server which icon to show for different : # files or filename extensions. These are only displayed for : # FancyIndexed directories. : # : AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip : 중략 : : : : # : # MetaDir: specifies the name of the directory in which Apache can find : # meta information files. These files contain additional HTTP headers : # to include when sending the document : # : #MetaDir .web : : # : # MetaSuffix: specifies the file name suffix for the file containing the : # meta information. : # : #MetaSuffix .meta : : # : # Customizable error response (Apache style) : # these come in three flavors : # : # 1) plain text : #ErrorDocument 500 "The server made a boo boo. : # n.b. the (") marks it as text, it does not get output : # : # 2) local redirects : #ErrorDocument 404 /missing.html : # to redirect to local URL /missing.html : #ErrorDocument 404 /cgi-bin/missing_handler.pl : # N.B.: You can redirect to a script or a document using server-side-includes. : # : # 3) external redirects : #ErrorDocument 402 http://some.other_server.com/subscription_info.html : # N.B.: Many of the environment variables associated with the original : # request will *not* be available to such a script. : : # : # The following directives modify normal HTTP response behavior. : # The first directive disables keepalive for Netscape 2.x and browsers that : # spoof it. There are known problems with these browser implementations. : # The second directive is for Microsoft Internet Explorer 4.0b2 : # which has a broken HTTP/1.1 implementation and does not properly : # support keepalive when it is used on 301 or 302 (redirect) responses. : # : BrowserMatch "Mozilla/2" nokeepalive : BrowserMatch "MSIE 4.0b2;" nokeepalive downgrade-1.0 force-response-1.0 : : # : # The following directive disables HTTP/1.1 responses to browsers which : # are in violation of the HTTP/1.0 spec by not being able to grok a : # basic 1.1 response. : # : BrowserMatch "RealPlayer 4.0" force-response-1.0 : BrowserMatch "Java/1.0" force-response-1.0 : BrowserMatch "JDK/1.0" force-response-1.0 : : : # If the perl module is installed, this will be enabled. : <IfModule mod_perl.c> : Alias /perl/ /var/www/perl/ : <Location /perl> : SetHandler perl-script : PerlHandler Apache::Registry : Options +ExecCGI : </Location> : </IfModule> : : # : # Allow http put (such as Netscape Gold's publish feature) : # Use htpasswd to generate /etc/httpd/conf/passwd. : # You must unremark these two lines at the top of this file as well: : #LoadModule put_module modules/mod_put.so : #AddModule mod_put.c : # : #Alias /upload /tmp : #<Location /upload> : # EnablePut On : # AuthType Basic : # AuthName Temporary : # AuthUserFile /etc/httpd/conf/passwd : # EnableDelete Off : # umask 007 : # <Limit PUT> : # require valid-user : # </Limit> : #</Location> : : # : # Allow server status reports, with the URL of http://servername/server-status : # Change the ".your_domain.com" to match your domain to enable. : # : #<Location /server-status> : # SetHandler server-status : # Order deny,allow : # Deny from all : # Allow from .your_domain.com : #</Location> : : # : # Allow remote server configuration reports, with the URL of : # http://servername/server-info (requires that mod_info.c be loaded). : # Change the ".your_domain.com" to match your domain to enable. : # : #<Location /server-info> : # SetHandler server-info : # Order deny,allow : # Deny from all : # Allow from .your_domain.com : #</Location> : : # Allow access to local system documentation from localhost : Alias /doc/ /usr/share/doc/ : <Location /doc> : order deny,allow : deny from all : allow from localhost .localdomain : Options Indexes FollowSymLinks : </Location> : : # : # There have been reports of people trying to abuse an old bug from pre-1.1 : # days. This bug involved a CGI script distributed as a part of Apache. : # By uncommenting these lines you can redirect these attacks to a logging : # script on phf.apache.org. Or, you can record them yourself, using the script : # support/phf_abuse_log.cgi. : # : #<Location /cgi-bin/phf*> : # Deny from all : # ErrorDocument 403 http://phf.apache.org/phf_abuse_log.cgi : #</Location> : : # : # Proxy Server directives. Uncomment the following lines to : # enable the proxy server: : # : #<IfModule mod_proxy.c> : #ProxyRequests On : # : #<Directory proxy:*> : # Order deny,allow : # Deny from all : # Allow from .your_domain.com : #</Directory> : : # : # Enable/disable the handling of HTTP/1.1 "Via:" headers. : # ("Full" adds the server version; "Block" removes all outgoing Via: headers) : # Set to one of: Off | On | Full | Block : # : #ProxyVia On : : # : # To enable the cache as well, edit and uncomment the following lines: : # (no cacheing without CacheRoot) : # : #CacheRoot "/var/cache/httpd" : #CacheSize 5 : #CacheGcInterval 4 : #CacheMaxExpire 24 : #CacheLastModifiedFactor 0.1 : #CacheDefaultExpire 1 : #NoCache a_domain.com another_domain.edu joes.garage_sale.com : : #</IfModule> : # End of proxy directives. : : ### Section 3: Virtual Hosts : # : # VirtualHost: If you want to maintain multiple domains/hostnames on your : # machine you can setup VirtualHost containers for them. : # Please see the documentation at <URL:http://www.apache.org/docs/vhosts/> : # for further details before you try to setup virtual hosts. : # You may use the command line option '-S' to verify your virtual host : # configuration. : : # : # If you want to use name-based virtual hosts you need to define at : # least one IP address (and port number) for them. : # : #NameVirtualHost 211.36.58.212:80 : #NameVirtualHost 211.36.58.212 : : # : # VirtualHost example: : # Almost any Apache directive may go into a VirtualHost container. : # : #<VirtualHost ip.address.of.host.some_domain.com> : # ServerAdmin webmaster@host.some_domain.com : # DocumentRoot /www/docs/host.some_domain.com : # ServerName host.some_domain.com : # ErrorLog logs/host.some_domain.com-error_log : # CustomLog logs/host.some_domain.com-access_log common : #</VirtualHost> : : <VirtualHost 211.36.58.212> : DocumentRoot /var/www/html/ : ServerName www.myhome.com : </VirtualHost> : : NameVirtualHost 211.36.58.212 : : <VirtualHost 211.36.58.212> : ServerAdmin webmaster@aaa.com : DocumentRoot /home/aaa/ : ServerName aaa.com : ServerAlias *.aaa.com : ErrorLog logs/aaa.com-error_log : CustomLog logs/aaa.com-access_log common : </VirtualHost> : : #<VirtualHost _default_:*> : #</VirtualHost> : : #<IfDefine HAVE_SSL> : ## : ## SSL Virtual Host Context : ## : : # Apache will only listen on port 80 by default. Defining the virtual server : # (below) won't make it automatically listen on the virtual server's port. : #Listen 443 : : # SSL Session Cache: : # The cache speeds up processing of multiple parallel requests from : # the same client. : #SSLSessionCache shm:/var/cache/ssl_gcache_data(524288) : : #<VirtualHost 211.36.58.212> : : # General setup for the virtual host : ##DocumentRoot "/var/www/html" : : # SSL Engine Switch: : # Enable/Disable SSL for this virtual host. : ##SSLEngine on : : # SSL Cipher Suite: : # List the ciphers that the client is permitted to negotiate. : # See the mod_ssl documentation for a complete list. : #SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL : : # Server Certificate: : # Point SSLCertificateFile at a PEM encoded certificate. If : # the certificate is encrypted, then you will be prompted for a : # pass phrase. Note that a kill -HUP will prompt again. A test : # certificate can be generated with `make certificate' under : # built time. Keep in mind that if you've both a RSA and a DSA : # certificate you can configure both in parallel (to also allow : # the use of DSA ciphers, etc.) : ##SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt : #SSLCertificateFile /etc/httpd/conf/ssl.crt/server-dsa.crt : : # Server Private Key: : # If the key is not combined with the certificate, use this : # directive to point at the key file. Keep in mind that if : # you've both a RSA and a DSA private key you can configure : # both in parallel (to also allow the use of DSA ciphers, etc.) : ##SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key : #SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server-dsa.key : : # Server Certificate Chain: : # Point SSLCertificateChainFile at a file containing the : # concatenation of PEM encoded CA certificates which form the : # certificate chain for the server certificate. Alternatively : # the referenced file can be the same as SSLCertificateFile : # when the CA certificates are directly appended to the server : # certificate for convinience. : #SSLCertificateChainFile /etc/httpd/conf/ssl.crt/ca.crt : : # Certificate Authority (CA): : # Set the CA certificate verification path where to find CA : # certificates for client authentication or alternatively one : # huge file containing all of them (file must be PEM encoded) : # Note: Inside SSLCACertificatePath you need hash symlinks : # to point to the certificate files. Use the provided : # Makefile to update the hash symlinks after changes. : #SSLCACertificatePath /etc/httpd/conf/ssl.crt : #SSLCACertificateFile /etc/httpd/conf/ssl.crt/ca-bundle.crt : : # Certificate Revocation Lists (CRL): : # Set the CA revocation path where to find CA CRLs for client : # authentication or alternatively one huge file containing all : # of them (file must be PEM encoded) : # Note: Inside SSLCARevocationPath you need hash symlinks : # to point to the certificate files. Use the provided : # Makefile to update the hash symlinks after changes. : #SSLCARevocationPath /etc/httpd/conf/ssl.crl : #SSLCARevocationFile /etc/httpd/conf/ssl.crl/ca-bundle.crl : # Client Authentication (Type): : # Client certificate verification type and depth. Types are : # none, optional, require and optional_no_ca. Depth is a : # number which specifies how deeply to verify the certificate : # issuer chain before deciding the certificate is not valid. : #SSLVerifyClient require : #SSLVerifyDepth 10 : : # Access Control: : # With SSLRequire you can do per-directory access control based : # on arbitrary complex boolean expressions containing server : # variable checks and other lookup directives. The syntax is a : # mixture between C and Perl. See the mod_ssl documentation : # for more details. : #<Location /> : #SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)-/ : # and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." : # and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"} : # and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 : # and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20 ) : # or %{REMOTE_ADDR} =~ m/^192.76.162.[0-9]+$/ : #</Location> : # SSL Engine Options: : # Set various options for the SSL engine. : # o FakeBasicAuth: : # Translate the client X.509 into a Basic Authorisation. This means that : # the standard Auth/DBMAuth methods can be used for access control. The : # user name is the `one line' version of the client's X.509 certificate. : # Note that no password is obtained from the user. Every entry in the user : # file needs this password: `xxj31ZMTZzkVA'. : # o ExportCertData: : # This exports two additional environment variables: SSL_CLIENT_CERT and : # SSL_SERVER_CERT. These contain the PEM-encoded certificates of the : # server (always existing) and the client (only existing when client : # authentication is used). This can be used to import the certificates : # into CGI scripts. : # o StdEnvVars: : # This exports the standard SSL/TLS related `SSL_*' environment variables. : # Per default this exportation is switched off for performance reasons, : # because the extraction step is an expensive operation and is usually : # useless for serving static content. So one usually enables the : # exportation for CGI and SSI requests only. : # o CompatEnvVars: : # This exports obsolete environment variables for backward compatibility : # to Apache-SSL 1.x, mod_ssl 2.0.x, Sioux 1.0 and Stronghold 2.x. Use this : # to provide compatibility to existing CGI scripts. : # o StrictRequire: : # This denies access when "SSLRequireSSL" or "SSLRequire" applied even : # under a "Satisfy any" situation, i.e. when it applies access is denied : # and no other module can change it. : # o OptRenegotiate: : # This enables optimized SSL connection renegotiation handling when SSL : # directives are used in per-directory context. : #SSLOptions +FakeBasicAuth +ExportCertData +CompatEnvVars +StrictRequire : ##<Files ~ ".(cgi|shtml)$"> : ## SSLOptions +StdEnvVars : ##</Files> : ##<Directory "/var/www/cgi-bin"> : ## SSLOptions +StdEnvVars : ##</Directory> : : # Notice: Most problems of broken clients are also related to the HTTP : # keep-alive facility, so you usually additionally want to disable : # keep-alive for those clients, too. Use variable "nokeepalive" for this. : ##SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown : : # Per-Server Logging: : # The home of a custom SSL log file. Use this when you want a : # compact non-error SSL logfile on a virtual host basis. : ##CustomLog /var/log/httpd/ssl_request_log : ## "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x "%r" %b" : : ##</VirtualHost> : : ##</IfDefine>
Copyleft
1999-2026 by
JSBoard Open Project
Theme Designed by
IDOO
All right reserved