components/openstack/horizon/files/openstack-dashboard-tls.conf
author Devjani Ray <devjani.ray@oracle.com>
Fri, 05 Feb 2016 17:54:17 -0500
changeset 5405 66fd59fecd68
parent 4049 150852e281c4
permissions -rw-r--r--
PSARC 2015/535 OpenStack service updates for Kilo PSARC 2015/458 aioeventlet - asyncio event loop scheduling callbacks in eventlet PSARC 2015/460 msgpack - C/Python bindings for MessagePack (de)serializer data PSARC 2015/466 openstackclient - OpenStack Command-line Client PSARC 2015/467 oslo.versionedobjects - Oslo Versioned Objects library PSARC 2015/468 pint - A physical quantities module PSARC 2015/469 pysaml2 - A pure Python implementation of SAML2 PSARC 2015/471 semantic_version - A library implementing the 'SemVer' scheme PSARC 2015/472 testresources - PyUnit extension for managing expensive test resources PSARC 2015/473 testscenarios - Extensions to Python unittest to support scenarios PSARC 2015/474 trollius - Port of the Tulip project (asyncio module, PEP 3156) on Python 2 PSARC 2015/475 urllib3 - HTTP library with thread-safe connection pooling, file post, and more PSARC 2015/520 oslo.concurrency - Oslo Concurrency library PSARC 2015/521 oslo.log - Oslo Logging Configuration library PSARC 2015/529 oslo.policy - Oslo Policy library PSARC 2015/530 psutil - Python system and process utilities PSARC 2015/538 fixtures - Python module to support reusable state for writing clean tests PSARC 2015/539 sqlparse - An SQL parser module for Python PSARC 2016/017 extras - Useful extra utilities for Python PSARC 2016/018 linecache2 - Port of the standard linecache module PSARC 2016/019 python-mimeparse - Basic functions for parsing mime-types PSARC 2016/020 testtools - Extensions to the Python unit testing framework PSARC 2016/021 traceback2 - Port of the standard traceback module PSARC 2016/014 OpenStack Cinder NFS driver for Solaris 22384068 OpenStack service updates for Kilo (Umbrella) 21974208 The Python module msgpack should be added to Userland 22010630 The Python trollius module should be added to Userland 22011755 The Python module pint should be added to Userland 22012256 The Python aioeventlet module should be added to Userland 22012282 The Python oslo.versionedobjects module should be added to Userland 22012317 The Python semantic_version module should be added to Userland 22012321 The Python testresources module should be added to Userland 22012329 The Python testscenarios module should be added to Userland 22012336 The Python urllib3 module should be added to Userland 22012343 The Python openstackclient module should be added to Userland 22299389 The Python oslo.concurrency module should be added to Userland 22299409 The Python oslo.log module should be added to Userland 22299418 The Python oslo.policy module should be added to Userland 22299469 The Python psutil module should be added to Userland 22337793 The Python sqlparse module should be added to Userland 22338325 The Python fixtures module should be added to Userland 22535728 The Python testtools module should be added to Userland 22535739 The Python extras module should be added to Userland 22535748 The Python linecache2 module should be added to Userland 22535753 The Python traceback2 module should be added to Userland 22535760 The Python python-mimeparse module should be added to Userland 18961001 Image filtering does not function as expected 21678935 NFS for Cinder in Solaris OpenStack 22548630 derived manifest should not enforce presence of global when installing from UAR 22629795 problem in SERVICE/KEYSTONE

LoadModule ssl_module	libexec/mod_ssl.so
LoadModule wsgi_module	libexec/mod_wsgi-2.7.so

#
# Enable Solaris Cryptographic Framework
# (recommended for SPARC T1/T2/T3 based systems only)
#
#SSLCryptoDevice pkcs11

<VirtualHost *:80>
    RedirectPermanent /horizon https://openstack.example.com/horizon
</VirtualHost>

Listen 443

<VirtualHost *:443>
    ServerName openstack.example.com

    SSLEngine On

    # Disable the known insecure SSLv3 protocol
    SSLProtocol all -SSLv3

    #
    # For an overview on SSL with Apache see:
    #    http://httpd.apache.org/docs/2.4/ssl/ssl_howto.html
    # For examples on how to configure certificates and keys see:
    #    http://www.akadia.com/services/ssh_test_certificate.html
    #
    SSLCertificateFile /path/to/Server_PEM-encoded_X.509_Certificate_file
    SSLCACertificateFile /path/to/Concatenated_PEM-encoded_CA_Certificates
    SSLCertificateKeyFile /path/to/Server_PEM-encoded_Private_Key_file

    WSGIScriptAlias /horizon \
        /usr/lib/python2.7/vendor-packages/openstack_dashboard/wsgi/django.wsgi
    WSGIDaemonProcess horizon user=webservd group=webservd processes=3 \
        threads=10

    Alias /horizon/static /usr/lib/python2.7/vendor-packages/openstack_dashboard/static/

    <Directory />
        Options FollowSymLinks
        AllowOverride None
    </Directory>

    <Directory /usr/lib/python2.7/vendor-packages/openstack_dashboard/static>
        Options Indexes FollowSymLinks MultiViews
        AllowOverride None
        Require all granted
    </Directory>

    <Directory /usr/lib/python2.7/vendor-packages/openstack_dashboard/wsgi>
        Options Indexes FollowSymLinks MultiViews
        AllowOverride None
        Require all granted
    </Directory>

    ErrorLog "|/usr/bin/rotatelogs -n 3 \
        /var/log/openstack_dashboard/horizon_error.log 50M"
    LogLevel warn
    CustomLog "|/usr/bin/rotatelogs -n 3 \
        /var/log/openstack_dashboard/horizon_access.log 50M" combined
</VirtualHost>