Use sslServerChain
Eelco Dolstra committed
Aug 27, 2015 at 19:44 UTC
ddb8c059437a3a611bb2914c8ad6fd0d0a79e61e
1 file changed
+2
-1
nixos-org/webserver.nix
+2
-1
@@ -128,12 +128,13 @@ in
128
enableSSL = true;
129
sslServerCert = "/root/ssl-secrets/ssl-nixos-org.crt";
130
sslServerKey = "/root/ssl-secrets/ssl-nixos-org.key";
131
+ sslServerChain = ./sub.class1.server.ca.pem;
132
extraConfig = nixosVHostConfig.extraConfig +
133
''
133
- SSLCertificateChainFile ${./sub.class1.server.ca.pem}
134
SSLProtocol All -SSLv2 -SSLv3
135
SSLCipherSuite HIGH:!aNULL:!MD5:!EXP
136
SSLHonorCipherOrder on
137
+ #SSLOpenSSLConfCmd DHParameters "${./dhparams.pem}"
138
'';
139
extraSubservices =
140
[ { function = import <services/subversion>;