--- a/components/openstack/horizon/files/openstack-dashboard-tls.conf Tue Apr 07 15:49:29 2015 -0700
+++ b/components/openstack/horizon/files/openstack-dashboard-tls.conf Tue Apr 07 13:31:20 2015 -0700
@@ -1,14 +1,11 @@
-<IfDefine 64bit>
- LoadModule wsgi_module libexec/64/mod_wsgi-2.6.so
-</IfDefine>
-<IfDefine !64bit>
- LoadModule wsgi_module libexec/mod_wsgi-2.6.so
-</IfDefine>
+LoadModule ssl_module libexec/mod_ssl.so
+LoadModule wsgi_module libexec/mod_wsgi-2.6.so
#
# Enable Solaris Cryptographic Framework
+# (recommended for SPARC T1/T2/T3 based systems only)
#
-SSLCryptoDevice pkcs11
+#SSLCryptoDevice pkcs11
<VirtualHost *:80>
RedirectPermanent /horizon https://openstack.example.com/horizon
@@ -21,12 +18,12 @@
SSLEngine On
- # Disable the known insecure SSLv2 & SSLv3 protocols
- SSLProtocol all -SSLv2 -SSLv3
+ # Disable the known insecure SSLv3 protocol
+ SSLProtocol all -SSLv3
#
# For an overview on SSL with Apache see:
- # http://httpd.apache.org/docs/2.2/ssl/ssl_howto.html
+ # http://httpd.apache.org/docs/2.4/ssl/ssl_howto.html
# For examples on how to configure certificates and keys see:
# http://www.akadia.com/services/ssh_test_certificate.html
#
@@ -39,15 +36,28 @@
WSGIDaemonProcess horizon user=webservd group=webservd processes=3 \
threads=10
- Alias /static /var/lib/openstack_dashboard/static/
+ Alias /static /usr/lib/python2.6/vendor-packages/openstack_dashboard/static/
+
+ <Directory />
+ Options FollowSymLinks
+ AllowOverride None
+ </Directory>
+
+ <Directory /usr/lib/python2.6/vendor-packages/openstack_dashboard/static>
+ Options Indexes FollowSymLinks MultiViews
+ AllowOverride None
+ Require all granted
+ </Directory>
<Directory /usr/lib/python2.6/vendor-packages/openstack_dashboard/wsgi>
- Order allow,deny
- Allow from all
+ Options Indexes FollowSymLinks MultiViews
+ AllowOverride None
+ Require all granted
</Directory>
- <Directory /var/lib/openstack_dashboard/static>
- Order allow,deny
- Allow from all
- </Directory>
+ ErrorLog "|/usr/bin/rotatelogs -n 3 \
+ /var/lib/openstack_dashboard/horizon_error.log 50M"
+ LogLevel warn
+ CustomLog "|/usr/bin/rotatelogs -n 3 \
+ /var/lib/openstack_dashboard/horizon_access.log 50M" combined
</VirtualHost>