fork download
copy 
  1. <IfModule mod_ssl.c>
  2. 	<VirtualHost _default_:443>
  3. 		ServerAdmin webmaster@localhost
  4.  
  5. 		DocumentRoot /var/www/
  6.  
  7.                 ScriptAlias /cgi-bin/ /var/www/cgi-bin/
  8.                 <Directory /var/www/cgi-bin/>
  9.                 Options ExecCGI
  10.                 AddHandler cgi-script cgi pl
  11.                 </Directory>
  12.  
  13. 		# Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
  14. 		# error, crit, alert, emerg.
  15. 		# It is also possible to configure the loglevel for particular
  16. 		# modules, e.g.
  17. 		#LogLevel info ssl:warn
  18.  
  19. 		ErrorLog ${APACHE_LOG_DIR}/error.log
  20. 		CustomLog ${APACHE_LOG_DIR}/access.log combined
  21.  
  22. 		# For most configuration files from conf-available/, which are
  23. 		# enabled or disabled at a global level, it is possible to
  24. 		# include a line for only one particular virtual host. For example the
  25. 		# following line enables the CGI configuration for this host only
  26. 		# after it has been globally disabled with "a2disconf".
  27. 		#Include conf-available/serve-cgi-bin.conf
  28.  
  29. 		#   SSL Engine Switch:
  30. 		#   Enable/Disable SSL for this virtual host.
  31. 		SSLEngine on
  32.  
  33. 		#   A self-signed (snakeoil) certificate can be created by installing
  34. 		#   the ssl-cert package. See
  35. 		#   /usr/share/doc/apache2/README.Debian.gz for more info.
  36. 		#   If both key and certificate are stored in the same file, only the
  37. 		#   SSLCertificateFile directive is needed.
  38. 		SSLCertificateFile	/etc/ssl/certs/ssl-cert-snakeoil.pem
  39. 		SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
  40.  
  41. 		#   Server Certificate Chain:
  42. 		#   Point SSLCertificateChainFile at a file containing the
  43. 		#   concatenation of PEM encoded CA certificates which form the
  44. 		#   certificate chain for the server certificate. Alternatively
  45. 		#   the referenced file can be the same as SSLCertificateFile
  46. 		#   when the CA certificates are directly appended to the server
  47. 		#   certificate for convinience.
  48. 		#SSLCertificateChainFile /etc/apache2/ssl.crt/server-ca.crt
  49.  
  50. 		#   Certificate Authority (CA):
  51. 		#   Set the CA certificate verification path where to find CA
  52. 		#   certificates for client authentication or alternatively one
  53. 		#   huge file containing all of them (file must be PEM encoded)
  54. 		#   Note: Inside SSLCACertificatePath you need hash symlinks
  55. 		#		 to point to the certificate files. Use the provided
  56. 		#		 Makefile to update the hash symlinks after changes.
  57. 		#SSLCACertificatePath /etc/ssl/certs/
  58. 		#SSLCACertificateFile /etc/apache2/ssl.crt/ca-bundle.crt
  59.  
  60. 		#   Certificate Revocation Lists (CRL):
  61. 		#   Set the CA revocation path where to find CA CRLs for client
  62. 		#   authentication or alternatively one huge file containing all
  63. 		#   of them (file must be PEM encoded)
  64. 		#   Note: Inside SSLCARevocationPath you need hash symlinks
  65. 		#		 to point to the certificate files. Use the provided
  66. 		#		 Makefile to update the hash symlinks after changes.
  67. 		#SSLCARevocationPath /etc/apache2/ssl.crl/
  68. 		#SSLCARevocationFile /etc/apache2/ssl.crl/ca-bundle.crl
  69.  
  70. 		#   Client Authentication (Type):
  71. 		#   Client certificate verification type and depth.  Types are
  72. 		#   none, optional, require and optional_no_ca.  Depth is a
  73. 		#   number which specifies how deeply to verify the certificate
  74. 		#   issuer chain before deciding the certificate is not valid.
  75. 		#SSLVerifyClient require
  76. 		#SSLVerifyDepth  10
  77.  
  78. 		#   SSL Engine Options:
  79. 		#   Set various options for the SSL engine.
  80. 		#   o FakeBasicAuth:
  81. 		#	 Translate the client X.509 into a Basic Authorisation.  This means that
  82. 		#	 the standard Auth/DBMAuth methods can be used for access control.  The
  83. 		#	 user name is the `one line' version of the client's X.509 certificate.
  84. 		#	 Note that no password is obtained from the user. Every entry in the user
  85. 		#	 file needs this password: `xxj31ZMTZzkVA'.
  86. 		#   o ExportCertData:
  87. 		#	 This exports two additional environment variables: SSL_CLIENT_CERT and
  88. 		#	 SSL_SERVER_CERT. These contain the PEM-encoded certificates of the
  89. 		#	 server (always existing) and the client (only existing when client
  90. 		#	 authentication is used). This can be used to import the certificates
  91. 		#	 into CGI scripts.
  92. 		#   o StdEnvVars:
  93. 		#	 This exports the standard SSL/TLS related `SSL_*' environment variables.
  94. 		#	 Per default this exportation is switched off for performance reasons,
  95. 		#	 because the extraction step is an expensive operation and is usually
  96. 		#	 useless for serving static content. So one usually enables the
  97. 		#	 exportation for CGI and SSI requests only.
  98. 		#   o OptRenegotiate:
  99. 		#	 This enables optimized SSL connection renegotiation handling when SSL
  100. 		#	 directives are used in per-directory context.
  101. 		#SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire
  102. 		<FilesMatch "\.(cgi|shtml|phtml|php)$">
  103. 				SSLOptions +StdEnvVars
  104. 		</FilesMatch>
  105. 		<Directory /usr/lib/cgi-bin>
  106. 				SSLOptions +StdEnvVars
  107. 		</Directory>
  108.  
  109. 		#   SSL Protocol Adjustments:
  110. 		#   The safe and default but still SSL/TLS standard compliant shutdown
  111. 		#   approach is that mod_ssl sends the close notify alert but doesn't wait for
  112. 		#   the close notify alert from client. When you need a different shutdown
  113. 		#   approach you can use one of the following variables:
  114. 		#   o ssl-unclean-shutdown:
  115. 		#	 This forces an unclean shutdown when the connection is closed, i.e. no
  116. 		#	 SSL close notify alert is send or allowed to received.  This violates
  117. 		#	 the SSL/TLS standard but is needed for some brain-dead browsers. Use
  118. 		#	 this when you receive I/O errors because of the standard approach where
  119. 		#	 mod_ssl sends the close notify alert.
  120. 		#   o ssl-accurate-shutdown:
  121. 		#	 This forces an accurate shutdown when the connection is closed, i.e. a
  122. 		#	 SSL close notify alert is send and mod_ssl waits for the close notify
  123. 		#	 alert of the client. This is 100% SSL/TLS standard compliant, but in
  124. 		#	 practice often causes hanging connections with brain-dead browsers. Use
  125. 		#	 this only for browsers where you know that their SSL implementation
  126. 		#	 works correctly.
  127. 		#   Notice: Most problems of broken clients are also related to the HTTP
  128. 		#   keep-alive facility, so you usually additionally want to disable
  129. 		#   keep-alive for those clients, too. Use variable "nokeepalive" for this.
  130. 		#   Similarly, one has to force some clients to use HTTP/1.0 to workaround
  131. 		#   their broken HTTP/1.1 implementation. Use variables "downgrade-1.0" and
  132. 		#   "force-response-1.0" for this.
  133. 		BrowserMatch "MSIE [2-6]" \
  134. 				nokeepalive ssl-unclean-shutdown \
  135. 				downgrade-1.0 force-response-1.0
  136. 		# MSIE 7 and newer should be able to use keepalive
  137. 		BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
  138.  
  139. 	</VirtualHost>
  140. </IfModule>
  141.  
  142. # vim: syntax=apache ts=4 sw=4 sts=4 sr noet
  143.  
Runtime error #stdin #stdout #stderr 1.54s 188032KB
comments (?)
stdin
copy 
Standard input is empty
stdout
copy 
Standard output is empty
stderr
copy 
===SORRY!=== Error while compiling prog.pl
Two terms in a row
at prog.pl:2
------> 	<VirtualHost _default_⏏:443>
    expecting any of:
        argument list
        postfix
        infix stopper
        infix or meta-infix
        statement end
        statement modifier
        statement modifier loop
https://ideone.com/O7zK0r
language:
Perl (perl 2018.12)
created:
7 years ago
visibility:
public

Share or Embed source code

Discover > Sphere Engine API

The brand new service which powers Ideone!

Discover > IDE Widget

Widget for compiling and running the source code in a web browser!