|
|
154a6e |
From bc24e3c0a438a2b6f177227b3340b516c15292a8 Mon Sep 17 00:00:00 2001
|
|
|
154a6e |
From: Rob Crittenden <rcritten@redhat.com>
|
|
|
154a6e |
Date: Thu, 20 Feb 2014 17:21:41 -0500
|
|
|
154a6e |
Subject: [PATCH] Configure nss.conf.in to match Fedora filesystem layout
|
|
|
154a6e |
|
|
|
154a6e |
---
|
|
|
154a6e |
nss.conf.in | 18 ++++++++++--------
|
|
|
154a6e |
1 file changed, 10 insertions(+), 8 deletions(-)
|
|
|
154a6e |
|
|
|
154a6e |
diff --git a/nss.conf.in b/nss.conf.in
|
|
|
154a6e |
index c941ecf..349a810 100644
|
|
|
154a6e |
--- a/nss.conf.in
|
|
|
154a6e |
+++ b/nss.conf.in
|
|
|
154a6e |
@@ -8,14 +8,16 @@
|
|
|
154a6e |
# consult the online docs. You have been warned.
|
|
|
154a6e |
#
|
|
|
154a6e |
|
|
|
154a6e |
+LoadModule nss_module modules/libmodnss.so
|
|
|
154a6e |
+
|
|
|
154a6e |
#
|
|
|
154a6e |
# When we also provide SSL we have to listen to the
|
|
|
154a6e |
# standard HTTP port (see above) and to the HTTPS port
|
|
|
154a6e |
#
|
|
|
154a6e |
# Note: Configurations that use IPv6 but not IPv4-mapped addresses need two
|
|
|
154a6e |
-# Listen directives: "Listen [::]:443" and "Listen 0.0.0.0:443"
|
|
|
154a6e |
+# Listen directives: "Listen [::]:8443" and "Listen 0.0.0.0:443"
|
|
|
154a6e |
#
|
|
|
154a6e |
-Listen 443
|
|
|
154a6e |
+Listen 8443
|
|
|
154a6e |
|
|
|
154a6e |
##
|
|
|
154a6e |
## SSL Global Context
|
|
|
154a6e |
@@ -79,17 +81,17 @@ NSSRequireSafeNegotiation off
|
|
|
154a6e |
## SSL Virtual Host Context
|
|
|
154a6e |
##
|
|
|
154a6e |
|
|
|
154a6e |
-<VirtualHost _default_:443>
|
|
|
154a6e |
+<VirtualHost _default_:8443>
|
|
|
154a6e |
|
|
|
154a6e |
# General setup for the virtual host
|
|
|
154a6e |
#DocumentRoot "@apache_prefix@/htdocs"
|
|
|
154a6e |
-#ServerName www.example.com:443
|
|
|
154a6e |
+#ServerName www.example.com:8443
|
|
|
154a6e |
#ServerAdmin you@example.com
|
|
|
154a6e |
|
|
|
154a6e |
# mod_nss can log to separate log files, you can choose to do that if you'd like
|
|
|
154a6e |
# LogLevel is not inherited from httpd.conf.
|
|
|
154a6e |
-#ErrorLog @apache_prefix@/logs/error_log
|
|
|
154a6e |
-#TransferLog @apache_prefix@/logs/access_log
|
|
|
154a6e |
+ErrorLog @apache_prefix@/logs/error_log
|
|
|
154a6e |
+TransferLog @apache_prefix@/logs/access_log
|
|
|
154a6e |
LogLevel warn
|
|
|
154a6e |
|
|
|
154a6e |
# SSL Engine Switch:
|
|
|
154a6e |
@@ -133,7 +135,7 @@ NSSNickname Server-Cert
|
|
|
154a6e |
# The NSS security database directory that holds the certificates and
|
|
|
154a6e |
# keys. The database consists of 3 files: cert8.db, key3.db and secmod.db.
|
|
|
154a6e |
# Provide the directory that these files exist.
|
|
|
154a6e |
-NSSCertificateDatabase @apache_conf@
|
|
|
154a6e |
+NSSCertificateDatabase /etc/httpd/alias
|
|
|
154a6e |
|
|
|
154a6e |
# Database Prefix:
|
|
|
154a6e |
# In order to be able to store multiple NSS databases in one directory
|
|
|
154a6e |
@@ -209,7 +211,7 @@ NSSCertificateDatabase @apache_conf@
|
|
|
154a6e |
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
|
|
|
154a6e |
NSSOptions +StdEnvVars
|
|
|
154a6e |
</Files>
|
|
|
154a6e |
-<Directory "@apache_prefix@/cgi-bin">
|
|
|
154a6e |
+<Directory "/var/www/cgi-bin">
|
|
|
154a6e |
NSSOptions +StdEnvVars
|
|
|
154a6e |
</Directory>
|
|
|
154a6e |
|
|
|
154a6e |
--
|
|
|
154a6e |
1.7.11.7
|
|
|
154a6e |
|