AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl

#SSLPassPhraseDialog  exec:${SRVROOT}/ssl_pass
SSLPassPhraseDialog  builtin

SSLSessionCache         shmcb:${SRVROOT}/logs/scache(512000)
SSLSessionCacheTimeout  300

#SSLMutex default
SSLRandomSeed startup file:/dev/urandom  256
SSLRandomSeed connect builtin
SSLCryptoDevice builtin

SSLCertificateFile          ${SRVROOT}/conf/cert/sample.crt.server.pem
SSLCertificateKeyFile       ${SRVROOT}/conf/cert/sample.nokey.server.pem
SSLCACertificateFile        ${SRVROOT}/conf/cert/osc-solution-rootca.crt

Listen _SSL_LISTEN_PORT_
LogLevel warn

#SSLProtocol -all -SSLv2 +TLSv1.2 +TLSv1.3
SSLProtocol -all -SSLv2 +TLSv1.2

#SSLCipherSuite      ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:!LOW
#SSLCipherSuite      TLSv1.3:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384
SSLCipherSuite       "EECDH+AES128:EECDH+AES256:+SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:RSA+3DES:!DSS"

<Files ~ "\.(cgi|shtml|phtml|php3?)$">
        SSLOptions +StdEnvVars
</Files>

<Directory "${SRVROOT}/cgi-bin">
        SSLOptions +StdEnvVars
</Directory>

<VirtualHost _default_:443>
    SSLEngine on
</VirtualHost>
