#
# $Header: ssl_conf_FMW.tmp 120.5.12020000.2 2013/01/08 13:54:18 mmanku ship $
#
# This template is used to seed the initial ssl.conf. After that, AutoConfig does not manage ssl.conf changes.
# It is advisable to perform OHS configuration changes through EM console.
# The default EM console URL is  http://slc04wbj.us.oracle.com:7010/em
#
###################################################################
# Oracle HTTP Server mod_ossl configuration file: ssl.conf        #
###################################################################

# OHS Listen Port
Listen 4444

<IfModule ossl_module>
        ##
        ##  SSL Global Context
        ##
        ##  All SSL configuration in this context applies both to
        ##  the main server and all SSL-enabled virtual hosts.
        ##
        
        #
        #   Some MIME-types for downloading Certificates and CRLs
        AddType application/x-x509-ca-cert .crt
        AddType application/x-pkcs7-crl    .crl
        
        #   Pass Phrase Dialog:
        #   Configure the pass phrase gathering process.
        #   The filtering dialog program (`builtin' is a internal
        #   terminal dialog) has to provide the pass phrase on stdout.
        SSLPassPhraseDialog  builtin
        
        #   Inter-Process Session Cache:
        #   Configure the SSL Session Cache: First the mechanism
        #   to use and second the expiring timeout (in seconds).
        SSLSessionCache "shmcb:${ORACLE_INSTANCE}/diagnostics/logs/${COMPONENT_TYPE}/${COMPONENT_NAME}/ssl_scache(512000)"
        SSLSessionCacheTimeout  300
        
        #   Semaphore:
        #   Configure the path to the mutual exclusion semaphore the
        #   SSL engine uses internally for inter-process synchronization.
        <IfModule mpm_winnt_module>
                SSLMutex "none"
        </IfModule>
        <IfModule !mpm_winnt_module>
                SSLMutex pthread
        </IfModule>
        
        
        ##
        ## SSL Virtual Host Context
        ##
        <VirtualHost _default_:4444>
                <IfModule ossl_module>
                        #  General setup for the virtual host
                        DocumentRoot "/u01/install/APPS/fs2/inst/apps/IKYSTEST_t1vstebsapp02/portal"
                        ServerName t1vstebsapp02.softtech.local
                        ServerAdmin ohs_admin@us.oracle.com
                        
                        LogLevel warn
                        ErrorLog "|${ORACLE_HOME}/ohs/bin/rotatelogs ${ORACLE_INSTANCE}/diagnostics/logs/${COMPONENT_TYPE}/${COMPONENT_NAME}/error_log 86400"
                        TransferLog "|${ORACLE_HOME}/ohs/bin/rotatelogs ${ORACLE_INSTANCE}/diagnostics/logs/${COMPONENT_TYPE}/${COMPONENT_NAME}/access_log 86400"
                        
                        
                        #  SSL Engine Switch:
                        #  Enable/Disable SSL for this virtual host.
                        SSLEngine on
                        
                        #  Client Authentication (Type):
                        #  Client certificate verification type and depth.  Types are
                        #  none, optional and require.
                        SSLVerifyClient none
                        
                        #  SSL Cipher Suite:
                        #  List the ciphers that the client is permitted to negotiate.
                        #SSLCipherSuite SSL_RSA_WITH_RC4_128_MD5,SSL_RSA_WITH_RC4_128_SHA,SSL_RSA_WITH_3DES_EDE_CBC_SHA,SSL_RSA_WITH_DES_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA
                        # Commenting off the default CipherSuite and added strong Cipher Suite as part of bug 9284427
                        SSLProtocol    -all +TLSv1 +SSLv3
                        SSLCipherSuite HIGH:MEDIUM:!aNULL:+SHA1:+MD5:+HIGH:+MEDIUM
                        
                        # SSL Certificate Revocation List Check
                        # Valid values are On and Off
                        SSLCRLCheck Off
                        
                        #Path to the wallet
                        SSLWallet  "${ORACLE_INSTANCE}/config/${COMPONENT_TYPE}/${COMPONENT_NAME}/keystores/default"
                        #SSLWallet file:/d1/V1223B5B/fs_ne/inst/V1223B5B_slc04wbj/certs/Apache
                        
                        <FilesMatch "\.(cgi|shtml|phtml|php)$">
                                SSLOptions +StdEnvVars
                        </FilesMatch>
                        
                        <Directory "${ORACLE_INSTANCE}/config/${COMPONENT_TYPE}/${COMPONENT_NAME}/cgi-bin">
                                SSLOptions +StdEnvVars
                        </Directory>
                        
                        BrowserMatch ".*MSIE.*" \
                        nokeepalive ssl-unclean-shutdown \
                        downgrade-1.0 force-response-1.0
                        
                        
                        #   Per-Server Logging:
                        #   The home of a custom SSL log file. Use this when you want a
                        #   compact non-error SSL logfile on a virtual host basis.
                        CustomLog "|${ORACLE_HOME}/ohs/bin/rotatelogs ${ORACLE_INSTANCE}/diagnostics/logs/${COMPONENT_TYPE}/${COMPONENT_NAME}/ssl_request_log 86400" \
                        "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
                        
                        #
                        # Turn on the rewrite engine
                        #
                        RewriteEngine ON
                        RewriteLog ${ORACLE_INSTANCE}/diagnostics/logs/${COMPONENT_TYPE}/${COMPONENT_NAME}/mod_rewrite.log
                        RewriteLogLevel 0
                        include ${ORACLE_INSTANCE}/config/${COMPONENT_TYPE}/${COMPONENT_NAME}/oracle_apache_ssl.conf
                        
                </IfModule>
        </VirtualHost>
        
</IfModule>

