To do it add these lines within the VirtualHost directive after ServerName line:
- Code: Select all
<IfModule !mod_headers.c>
Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
</IfModule>
SSLEngine on
SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:MEDIUM:!aNULL:!MD5
SSLCertificateFile /rw_fs/etc/ssl/fvdwsl.crt
SSLCertificateKeyFile /rw_fs/etc/ssl/fvdwsl.key
SSLOptions +OptRenegotiate
<FilesMatch "\.(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars +OptRenegotiate
</FilesMatch>
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
As some other lines are also required (at the server level), you must enable https in the main setup menu (but it seems that you already did it)
Please to note you can no longer use http on this port after adding these lines.