X-Git-Url: https://dehnerts.com/gitweb/?a=blobdiff_plain;f=sites-available%2Fmit-proxy.conf;fp=sites-available%2Fmit-proxy.conf;h=b3d06f6e24c184f617e01894426f40001cddd1cb;hb=9aa0f02267fd65d712ba8b7bbfafd600a1ba68af;hp=b6cd08173cc61dd9262be7e0747cc236ca201848;hpb=4991f62736b41100f51ec24844e539aeb52eb1b7;p=sysconfig%2Fapache2.git

diff --git a/sites-available/mit-proxy.conf b/sites-available/mit-proxy.conf
index b6cd081..b3d06f6 100644
--- a/sites-available/mit-proxy.conf
+++ b/sites-available/mit-proxy.conf
@@ -14,6 +14,9 @@
 <VirtualHost *:443>
     ServerName squaresdb.dehnerts.com
     SSLProxyEngine on
+    SSLProxyVerify require
+    SSLProxyVerifyDepth 2
+    SSLProxyCACertificatePath /etc/ssl/certs
     # Really I want to validate that the name matches squaresdb.dehnerts.com,
     # but apparently that's not a thing, AFAICT.
     SSLProxyCheckPeerName off