Question

Can Ex Libris provide a SSL httpd config sample?

Answer

See Additional Information below. Note that Ex Libris does not provide SSL configuration support and the SSL httpd configuration example is for reference only.

Additional Information

########################################
###   VirtualHost for VWEBV xxxdb       ###
###########################################
<VirtualHost xxx.xxxx.xxxx.xxxx:80>
        ServerName voyxxxx.xx.xx
        ServerAlias library-x.xxx.xxx.xxx.xx
        
        ...........................................
        
        ...........................................
             
        Header Set Cache-Control "max-age=0, no-store"
        DocumentRoot "/m1/voyager/xxxdb/tomcat/vwebv/context/vwebv/htdocs/"
        RedirectMatch ^/vwebv/login.cgi.*                     https://library-
x.xxxx.xxxx.xxxx.xx/vwebv/login.cgi
        RewriteEngine on
        RewriteCond %{REMOTE_ADDR} ^(10\.233\.128\.5)$
        
        ...................................
        
</VirtualHost>

########################################
## SSL VHost                           ##
########################################
 
<VirtualHost xxxx.xxxx.xxx.xxx:443>
SSLEngine off

ServerName voyxxxx.xxxx.xxx:443
ServerAlias library-x.xxxx.xxxx.xxxx.xx:443
Header Set Cache-Control "max-age=0, no-store"
DocumentRoot "/m1/voyager/xxxdb/tomcat/vwebv/context/vwebv/htdocs/"

RewriteRule ^(/vwebv/login.cgi);jsessionid=(.*) $1 [NE,R]

ErrorLog logs/xxxddb/ssl.error_log
CustomLog logs/xxxddb/ssl.access_log combined

<IfModule mod_rewrite.c>
        RewriteEngine on
        RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
        RewriteRule .* - [F]
</IfModule>
        # Allow for execution of CGI scripts, such as:
        #  - external patron authentication adaptor
        #  - New Books List
        #  - ShelfLister, etc.
        AddHandler cgi-script .cgi
        <Directory "/m1/voyager/xxxddb/tomcat/vwebv/context/vwebv/htdocs/">
                Options MultiViews
                AllowOverride None
                Options ExecCGI
                Order allow,deny
                Allow from all
        </Directory>
        # JKMounts
          
        JkMount /vwebv/* ajp13_lb_xxxxdb_vwebv
        
        ErrorLog logs/xxxddb/error.log
        CustomLog logs/xxxddb/access.log combined
 
SSLEngine on

SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA
+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS

SSLCertificateFile /m1/shared/apache2/ssl.crt/llibrary-x.xxxx.xxxx.xxxx.xx.crt
SSLCertificateKeyFile /m1//shared/apache2/ssl.key/lilibrary-x.xxxx.xxxx.xxxx.xx.key
SSLCertificateChainFile /m1/shared/apache2/ssl.crt/terena-janet.chain.crt

<Files ~ "\.(cgi|shtml|phtml|php3?)$">
    SSLOptions +StdEnvVars
</Files>

</VirtualHost>

• Article last edited: 09-Apr-2018