Birmingham mumbai

[
 360 
]
In addition to the sample website we discussed earlier, Ubuntu's default Apache 
implementation also includes another site configuration file, 
/etc/apache2/sites-
available/default-ssl.conf
. Unlike the sample site, this one is not enabled by 
default. This 
configuration file is similar to the sample site configuration but it's 
listening for connections on port 
443
 and contains additional configuration items 
related to TLS. Here's the content of that file, with the comments stripped out in 
order to save space on this page:
 
         
                ServerAdmin webmaster@localhost 
 
                DocumentRoot /var/www/html 
 
                ErrorLog ${APACHE_LOG_DIR}/error.log 
                CustomLog ${APACHE_LOG_DIR}/access.log combined 
 
                SSLEngine on 
 
                SSLCertificateFile      /etc/ssl/certs/ssl-cert- 
                snakeoil.pem 
                SSLCertificateKeyFile /etc/ssl/private/ssl-cert- 
                snakeoil.key 
 
                 
                                SSLOptions +StdEnvVars 
                 
                 
                                SSLOptions +StdEnvVars 
                 
 
         
 
We already went over the 
ServerAdmin
, 
DocumentRoot
, 
ErrorLog
, and 
CustomLog
 
options earlier in this chapter, but there are additional options in this file that we 
haven't seen yet. On the first line, we can see that this virtual host is listening on 
port 
443
. We also see 
_default_
 listed here instead of an IP address. The 
_default_
 
option only applies to unspecified traffic, which in this case means any traffic coming 
into port 
443
 that hasn't been identified in any other virtual host. In addition, the 
SSLEngine on
 option enables TLS traffic. Right after that, we have options for our 
TLS certificate file and key file, which we'll get to a bit later.

---

Chapter 14