author | Danek Duvall <danek.duvall@oracle.com> |
Thu, 19 Mar 2015 14:41:20 -0700 | |
changeset 3998 | 5bd484384122 |
parent 2152 | 1cea7a430dd7 |
child 4049 | 150852e281c4 |
permissions | -rw-r--r-- |
3998
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
1 |
LoadModule ssl_module libexec/mod_ssl.so |
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
2 |
LoadModule wsgi_module libexec/mod_wsgi-2.6.so |
1760
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
3 |
|
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
4 |
# |
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
5 |
# Enable Solaris Cryptographic Framework |
3998
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
6 |
# (recommended for SPARC T1/T2/T3 based systems only) |
1760
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
7 |
# |
3998
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
8 |
#SSLCryptoDevice pkcs11 |
1760
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
9 |
|
1765
dabcbc66ca36
18419287 Horizon's Apache fragment causes svc:/network/http:apache22 to error
Drew Fisher <drew.fisher@oracle.com>
parents:
1760
diff
changeset
|
10 |
<VirtualHost *:80> |
dabcbc66ca36
18419287 Horizon's Apache fragment causes svc:/network/http:apache22 to error
Drew Fisher <drew.fisher@oracle.com>
parents:
1760
diff
changeset
|
11 |
RedirectPermanent /horizon https://openstack.example.com/horizon |
dabcbc66ca36
18419287 Horizon's Apache fragment causes svc:/network/http:apache22 to error
Drew Fisher <drew.fisher@oracle.com>
parents:
1760
diff
changeset
|
12 |
</VirtualHost> |
1760
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
13 |
|
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
14 |
Listen 443 |
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
15 |
|
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
16 |
<VirtualHost *:443> |
1765
dabcbc66ca36
18419287 Horizon's Apache fragment causes svc:/network/http:apache22 to error
Drew Fisher <drew.fisher@oracle.com>
parents:
1760
diff
changeset
|
17 |
ServerName openstack.example.com |
1760
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
18 |
|
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
19 |
SSLEngine On |
2152
1cea7a430dd7
19825273 horizon default config should disable SSL 2 & 3
Drew Fisher <drew.fisher@oracle.com>
parents:
1765
diff
changeset
|
20 |
|
3998
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
21 |
# Disable the known insecure SSLv3 protocol |
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
22 |
SSLProtocol all -SSLv3 |
2152
1cea7a430dd7
19825273 horizon default config should disable SSL 2 & 3
Drew Fisher <drew.fisher@oracle.com>
parents:
1765
diff
changeset
|
23 |
|
1760
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
24 |
# |
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
25 |
# For an overview on SSL with Apache see: |
3998
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
26 |
# http://httpd.apache.org/docs/2.4/ssl/ssl_howto.html |
1760
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
27 |
# For examples on how to configure certificates and keys see: |
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
28 |
# http://www.akadia.com/services/ssh_test_certificate.html |
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
29 |
# |
1765
dabcbc66ca36
18419287 Horizon's Apache fragment causes svc:/network/http:apache22 to error
Drew Fisher <drew.fisher@oracle.com>
parents:
1760
diff
changeset
|
30 |
SSLCertificateFile /path/to/Server_PEM-encoded_X.509_Certificate_file |
dabcbc66ca36
18419287 Horizon's Apache fragment causes svc:/network/http:apache22 to error
Drew Fisher <drew.fisher@oracle.com>
parents:
1760
diff
changeset
|
31 |
SSLCACertificateFile /path/to/Concatenated_PEM-encoded_CA_Certificates |
dabcbc66ca36
18419287 Horizon's Apache fragment causes svc:/network/http:apache22 to error
Drew Fisher <drew.fisher@oracle.com>
parents:
1760
diff
changeset
|
32 |
SSLCertificateKeyFile /path/to/Server_PEM-encoded_Private_Key_file |
1760
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
33 |
|
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
34 |
WSGIScriptAlias /horizon \ |
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
35 |
/usr/lib/python2.6/vendor-packages/openstack_dashboard/wsgi/django.wsgi |
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
36 |
WSGIDaemonProcess horizon user=webservd group=webservd processes=3 \ |
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
37 |
threads=10 |
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
38 |
|
3998
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
39 |
Alias /static /usr/lib/python2.6/vendor-packages/openstack_dashboard/static/ |
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
40 |
|
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
41 |
<Directory /> |
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
42 |
Options FollowSymLinks |
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
43 |
AllowOverride None |
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
44 |
</Directory> |
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
45 |
|
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
46 |
<Directory /usr/lib/python2.6/vendor-packages/openstack_dashboard/static> |
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
47 |
Options Indexes FollowSymLinks MultiViews |
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
48 |
AllowOverride None |
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
49 |
Require all granted |
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
50 |
</Directory> |
1760
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
51 |
|
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
52 |
<Directory /usr/lib/python2.6/vendor-packages/openstack_dashboard/wsgi> |
3998
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
53 |
Options Indexes FollowSymLinks MultiViews |
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
54 |
AllowOverride None |
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
55 |
Require all granted |
1760
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
56 |
</Directory> |
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
57 |
|
3998
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
58 |
ErrorLog "|/usr/bin/rotatelogs -n 3 \ |
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
59 |
/var/lib/openstack_dashboard/horizon_error.log 50M" |
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
60 |
LogLevel warn |
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
61 |
CustomLog "|/usr/bin/rotatelogs -n 3 \ |
5bd484384122
PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents:
2152
diff
changeset
|
62 |
/var/lib/openstack_dashboard/horizon_access.log 50M" combined |
1760
353323c7bdc1
PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff
changeset
|
63 |
</VirtualHost> |