test/sni.tmpl


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

<VirtualHost *:8000>

    ServerName $SNINAME
    DocumentRoot $SERVER_ROOT/sni$SNINUM

    NSSEngine on
    NSSFIPS off
    NSSOCSP off
    NSSRenegotiation on

    NSSCipherSuite +aes_128_sha_256,+aes_256_sha_256,+rsa_aes_128_gcm_sha_256

    NSSProtocol TLSv1.2

    NSSNickname Server-Cert-$SNINAME

    NSSVerifyClient none

    # A bit redundant since the initial handshake should fail if no TLSv1.2
    <Location "/protocoltls12">
        NSSRequire %{SSL_PROTOCOL} eq "TLSv1.2"
    </Location>

    <Directory "$SERVER_ROOT/cgi-bin">
        NSSOptions +ExportCertData +CompatEnvVars +StdEnvVars
    </Directory>

</VirtualHost>