Listen 443 https SSLPassPhraseDialog exec:/usr/libexec/httpd-ssl-pass-dialog SSLSessionCache shmcb:/run/httpd/sslcache(512000) SSLSessionCacheTimeout 300 SSLRandomSeed startup file:/dev/urandom 256 SSLRandomSeed connect builtin SSLCryptoDevice builtin # offに設定(SNIに未対応のブラウザ用) SSLStrictSNIVHostCheck off ServerName centos71 DocumentRoot "/var/www/html" Options FollowSymLinks AllowOverride None Require all granted SSLEngine on SSLProtocol -All +TLSv1 +TLSv1.1 +TLSv1.2 SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5 SSLCertificateFile /etc/pki/tls/certs/server.crt SSLCertificateKeyFile /etc/pki/tls/private/server.key SetEnvIf Request_URI "\.(gif|jpg|png|css|js)$" nolog ErrorLog logs/centos71_error_log CustomLog logs/centos71_access_log combined env=!nolog