<VirtualHost *:443>
ServerName squaresdb.dehnerts.com
SSLProxyEngine on
+ SSLProxyVerify require
+ SSLProxyVerifyDepth 2
+ SSLProxyCACertificatePath /etc/ssl/certs
# Really I want to validate that the name matches squaresdb.dehnerts.com,
# but apparently that's not a thing, AFAICT.
SSLProxyCheckPeerName off