8. 보안 사이트 설정

SSLVerifyClient      none
SSLCACertificateFile /../kreonet-ca-chain.pem

<Location />
    Require all granted
</Location>

<Location /secure>
    <If     "-R 'AAA.BBB.CCC.DDD/32'">
    </If>
    <ElseIf "-R 'BBB.CCC.DDD.EEE/32'" >
    </ElseIf>
    <Else>
        SSLVerifyClient require
        SSLVerifyDepth 1
    </Else>
</Location>

<Macro RotateLogs $domain>
    LogLevel    warn
    ErrorLog    "|/usr/sbin/rotatelogs /var/log/httpd/$domain/error_log.%Y%m%d   86400 +540"
    TransferLog "|/usr/sbin/rotatelogs /var/log/httpd/$domain/access_log.%Y%m%d  86400 +540"
    CustomLog   "|/usr/sbin/rotatelogs /var/log/httpd/$domain/request_log.%Y%m%d 86400 +540" \
                    "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x [%{SSL_CLIENT_I_DN_CN}x][%{SSL_CLIENT_S_DN_CN}x] \"%r\" %b"
</Macro>

<VirtualHost *:443>
    Use RotateLogs example.kreonet.net
    ...
</VirtualHost>

# tail -f /var/log/httpd/example.kreonet.net/request_log.20201118
[18/Nov/2020:15:38:25 +0900] 223.1.190.003 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 [KREONET INTERMEDIATE CA 1][EXAMPLE_USER] "GET /index/html HTTP/1.1" 37582