@%@UCRWARNING=# @%@

<IfModule mod_ssl.c>
Listen 80
Listen 443
SSLPassPhraseDialog builtin
SSLSessionCache dbm:/var/run/ssl_scache
SSLSessionCacheTimeout 300
SSLMutex file:/var/run/ssl_mutex
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
</IfModule>

@!@
from univention.config_registry.interfaces import Interfaces
interfaces = Interfaces(configRegistry)
active_interfaces = [iface.ipv4_address().ip for _name, iface in interfaces.ipv4_interfaces if iface.type != 'dhcp'] or ['*']
for addr in active_interfaces:
    print 'NameVirtualHost %s:443' % (addr,)

print '<VirtualHost %s:443>' % (' '.join(active_interfaces))
@!@
RewriteEngine On
RewriteOptions inherit

<IfModule mod_ssl.c>
SSLEngine on
SSLCertificateFile /etc/univention/ssl/@%@hostname@%@.@%@domainname@%@/cert.pem
SSLCertificateKeyFile /etc/univention/ssl/@%@hostname@%@.@%@domainname@%@/private.key
#SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown

# Workaround for IE
# see http://www.modssl.org/docs/2.8/ssl_faq.html#io-ie
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
#SSLProtocol all -SSLv3
#SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP

</IfModule>
DocumentRoot /usr/share/univention-admin/www
</VirtualHost>
