|
 |
b06dbc4 |
From 1b6f32185488ee84b0276aea71f5caf0f0553b49 Mon Sep 17 00:00:00 2001
|
|
|
a6685ad |
From: Rob Crittenden <rcritten@redhat.com>
|
|
|
ed23d79 |
Date: Fri, 4 Mar 2016 10:41:09 -0500
|
|
|
a6685ad |
Subject: [PATCH] Configure nss.conf.in to match Fedora filesystem layout
|
|
|
a6685ad |
|
|
|
a6685ad |
---
|
|
|
a6685ad |
nss.conf.in | 18 ++++++++++--------
|
|
|
a6685ad |
1 file changed, 10 insertions(+), 8 deletions(-)
|
|
|
a6685ad |
|
|
|
a6685ad |
diff --git a/nss.conf.in b/nss.conf.in
|
|
|
b06dbc4 |
index e0e2f71..b2ea6df 100644
|
|
|
a6685ad |
--- a/nss.conf.in
|
|
|
a6685ad |
+++ b/nss.conf.in
|
|
|
1d51159 |
@@ -8,14 +8,16 @@
|
|
|
1d51159 |
# consult the online docs. You have been warned.
|
|
|
1d51159 |
#
|
|
|
1d51159 |
|
|
|
1d51159 |
+LoadModule nss_module modules/libmodnss.so
|
|
|
1d51159 |
+
|
|
|
1d51159 |
#
|
|
|
1d51159 |
# When we also provide SSL we have to listen to the
|
|
|
1d51159 |
# standard HTTP port (see above) and to the HTTPS port
|
|
|
1d51159 |
#
|
|
|
1d51159 |
# Note: Configurations that use IPv6 but not IPv4-mapped addresses need two
|
|
|
1d51159 |
-# Listen directives: "Listen [::]:443" and "Listen 0.0.0.0:443"
|
|
|
1d51159 |
+# Listen directives: "Listen [::]:8443" and "Listen 0.0.0.0:443"
|
|
|
1d51159 |
#
|
|
|
1d51159 |
-Listen 443
|
|
|
1d51159 |
+Listen 8443
|
|
|
1d51159 |
|
|
|
1d51159 |
##
|
|
|
1d51159 |
## SSL Global Context
|
|
|
b06dbc4 |
@@ -77,17 +79,17 @@ NSSRequireSafeNegotiation off
|
|
|
1d51159 |
## SSL Virtual Host Context
|
|
|
1d51159 |
##
|
|
|
1d51159 |
|
|
|
1d51159 |
-<VirtualHost _default_:443>
|
|
|
1d51159 |
+<VirtualHost _default_:8443>
|
|
|
1d51159 |
|
|
|
1d51159 |
# General setup for the virtual host
|
|
|
1d51159 |
#DocumentRoot "@apache_prefix@/htdocs"
|
|
|
1d51159 |
-#ServerName www.example.com:443
|
|
|
1d51159 |
+#ServerName www.example.com:8443
|
|
|
1d51159 |
#ServerAdmin you@example.com
|
|
|
1d51159 |
|
|
|
c13df6e |
# mod_nss can log to separate log files, you can choose to do that if you'd like
|
|
|
c13df6e |
# LogLevel is not inherited from httpd.conf.
|
|
|
450756e |
-#ErrorLog @apache_prefix@/logs/error_log
|
|
|
450756e |
-#TransferLog @apache_prefix@/logs/access_log
|
|
|
c13df6e |
+ErrorLog @apache_prefix@/logs/error_log
|
|
|
c13df6e |
+TransferLog @apache_prefix@/logs/access_log
|
|
|
c13df6e |
LogLevel warn
|
|
|
450756e |
|
|
|
450756e |
# SSL Engine Switch:
|
|
|
b06dbc4 |
@@ -124,7 +126,7 @@ NSSNickname Server-Cert
|
|
|
1d51159 |
# The NSS security database directory that holds the certificates and
|
|
|
b06dbc4 |
# keys. The database consists of 3 files: cert9.db, key4.db and pkcs11.txt
|
|
|
1d51159 |
# Provide the directory that these files exist.
|
|
|
1d51159 |
-NSSCertificateDatabase @apache_conf@
|
|
|
1d51159 |
+NSSCertificateDatabase /etc/httpd/alias
|
|
|
1d51159 |
|
|
|
1d51159 |
# Database Prefix:
|
|
|
1d51159 |
# In order to be able to store multiple NSS databases in one directory
|
|
|
b06dbc4 |
@@ -200,7 +202,7 @@ NSSCertificateDatabase @apache_conf@
|
|
|
1d51159 |
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
|
|
|
1d51159 |
NSSOptions +StdEnvVars
|
|
|
1d51159 |
</Files>
|
|
|
1d51159 |
-<Directory "@apache_prefix@/cgi-bin">
|
|
|
1d51159 |
+<Directory "/var/www/cgi-bin">
|
|
|
1d51159 |
NSSOptions +StdEnvVars
|
|
|
1d51159 |
</Directory>
|
|
|
1d51159 |
|
|
|
a6685ad |
--
|
|
|
b06dbc4 |
2.13.6
|
|
|
a6685ad |
|