<IfDefine SSL>
<IfModule ssl_module>
Listen 443
<VirtualHost _default_:443>
ServerName client.com
DocumentRoot "/var/www/client-www/htdocs"
SuexecUserGroup client-www client-www
<Directory "/var/www/client-www/htdocs">
Options -Indexes FollowSymLinks +ExecCGI
AllowOverride AuthConfig Indexes
AddHandler fcgid-script .php
FcgidWrapper /var/www/client-www/cgi-bin/php-wrapper .php
Order allow,deny
Allow from all
</Directory>
<Directory "/var/www/client-www/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
ErrorLog /var/log/apache2/ssl_error_log
<IfModule log_config_module>
TransferLog /var/log/apache2/ssl_access_log
</IfModule>
SSLEngine on
SSLProtocol -all +SSLv3 +TLSv1
SSLHonorCipherOrder on
SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM
SSLCertificateFile /etc/ssl/apache2/server.crt
SSLCertificateKeyFile /etc/ssl/apache2/server.key
<FilesMatch "\.(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<IfModule setenvif_module>
BrowserMatch ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
</IfModule>
<IfModule log_config_module>
CustomLog /var/log/apache2/ssl_request_log "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</IfModule>
</VirtualHost>
</IfModule>
</IfDefine>
