components/openstack/horizon/files/openstack-dashboard-tls.conf
branchs11-update
changeset 3028 5e73a3a3f66a
child 3409 53d60770c45d
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/components/openstack/horizon/files/openstack-dashboard-tls.conf	Mon Mar 31 16:44:02 2014 -0700
@@ -0,0 +1,49 @@
+<IfDefine 64bit>
+    LoadModule wsgi_module libexec/64/mod_wsgi-2.6.so
+</IfDefine>
+<IfDefine !64bit>
+    LoadModule wsgi_module libexec/mod_wsgi-2.6.so
+</IfDefine>
+
+#
+# Enable Solaris Cryptographic Framework
+#
+SSLCryptoDevice pkcs11
+
+<VirtualHost *:80>
+    RedirectPermanent /horizon https://openstack.example.com/horizon
+</VirtualHost>
+
+Listen 443
+
+<VirtualHost *:443>
+    ServerName openstack.example.com
+
+    SSLEngine On
+    #
+    # For an overview on SSL with Apache see:
+    #    http://httpd.apache.org/docs/2.2/ssl/ssl_howto.html
+    # For examples on how to configure certificates and keys see:
+    #    http://www.akadia.com/services/ssh_test_certificate.html
+    #
+    SSLCertificateFile /path/to/Server_PEM-encoded_X.509_Certificate_file
+    SSLCACertificateFile /path/to/Concatenated_PEM-encoded_CA_Certificates
+    SSLCertificateKeyFile /path/to/Server_PEM-encoded_Private_Key_file
+
+    WSGIScriptAlias /horizon \
+        /usr/lib/python2.6/vendor-packages/openstack_dashboard/wsgi/django.wsgi
+    WSGIDaemonProcess horizon user=webservd group=webservd processes=3 \
+        threads=10
+
+    Alias /static /var/lib/openstack_dashboard/static/
+
+    <Directory /usr/lib/python2.6/vendor-packages/openstack_dashboard/wsgi>
+        Order allow,deny
+        Allow from all
+    </Directory>
+
+    <Directory /var/lib/openstack_dashboard/static>
+        Order allow,deny
+        Allow from all
+    </Directory>
+</VirtualHost>