Change docs.mit.edu to a flask app

[sysconfig/apache2.git] / sites-available / default-ssl

diff --git a/sites-available/default-ssl b/sites-available/default-ssl
index 88f79a1b22d6ed0124ad4a9cb09d4f60055f676b..37ddad3d11f142a3b23f7765485d7d3f5f843f05 100644 (file)
--- a/sites-available/default-ssl
+++ b/sites-available/default-ssl
@@ -11,7 +11,9 @@
        #   /usr/share/doc/apache2.2-common/README.Debian.gz for more info.
        #   If both key and certificate are stored in the same file, only the
        #   SSLCertificateFile directive is needed.
-       SSLCertificateFile    /etc/ssl/certs/general-web.crt
+       SSLCertificateFile /etc/ssl/certs/dehnerts-web.startssl.chain.crt
+       SSLCertificateChainFile /etc/ssl/certs/dehnerts-web.startssl.chain.crt
+       #SSLCertificateFile    /etc/ssl/certs/general-web.crt
        SSLCertificateKeyFile /etc/ssl/private/general-web.key
 
        #   Server Certificate Chain:
@@ -125,8 +127,11 @@
        #   Similarly, one has to force some clients to use HTTP/1.0 to workaround
        #   their broken HTTP/1.1 implementation. Use variables "downgrade-1.0" and
        #   "force-response-1.0" for this.
-       BrowserMatch ".*MSIE.*" \
+       BrowserMatch "MSIE [2-6]" \
                nokeepalive ssl-unclean-shutdown \
                downgrade-1.0 force-response-1.0
+       # MSIE 7 and newer should be able to use keepalive
+       BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
+
 </VirtualHost>
 </IfModule>