NameVirtualHost *
<VirtualHost *>
        ServerAdmin webmaster@localhost

	ProxyRequests Off
        RewriteEngine On
        RewriteOptions Inherit

	<Proxy *>
                Order deny,allow
                Allow from all
        </Proxy>

	ProxyPass / http://127.0.0.1:8080/
        ProxyPassReverse / http://127.0.0.1:8080/

	SSLProxyEngine on
        SSLEngine On
        SSLCipherSuite HIGH:MEDIUM
        SSLCertificateFile    /etc/apache2/ssl/server.crt
        SSLCertificateKeyFile /etc/apache2/ssl/server.key
        SSLCACertificatePath  /etc/apache2/ssl/clients

	# If you do not want to use client certificates commen out the
	# following line and set header for dbname and app name
	# Do not forget to comment out the requirements under <location>
        SSLVerifyClient        require

        SSLVerifyDepth         1
        SSLSessionCacheTimeout 1800
        SSLOptions             StdEnvVars

	# Set correct headers for dbname and appname.
	# Format of SSL_CLIENT_S_DN_CN: "XXX XXX XXX dbname" 
	RequestHeader set MPULS_DBNAME %{SSL_CLIENT_S_DN_CN}s
        RequestHeader set MPULS_APPNAME %{SSL_CLIENT_S_DN}s 

        <Location />
		# Please set correct SSL_CLIENT_S_DN_OU
                SSLRequire (%{SSL_CLIENT_S_DN_OU} eq "WASKO_Demo" \
                or %{SSL_CLIENT_S_DN_OU} eq "mpuls") \
                and %{SSL_CLIENT_VERIFY} eq "SUCCESS"

                # Insert filter
                SetOutputFilter DEFLATE

                # Netscape 4.x has some problems...
                BrowserMatch ^Mozilla/4 gzip-only-text/html

                # Netscape 4.06-4.08 have some more problems
                BrowserMatch ^Mozilla/4\.0[678] no-gzip

                # MSIE masquerades as Netscape, but it is fine
                BrowserMatch \bMSIE !no-gzip !gzip-only-text/html
                # Don't compress images
                SetEnvIfNoCase Request_URI \
                \.(?:gif|jpe?g|png)$ no-gzip dont-vary

                # Make sure proxies don't deliver the wrong content
                Header append Vary User-Agent env=!dont-vary
        </Location>
        ErrorLog /var/log/apache2/error.log

        # Possible values include: debug, info, notice, warn, error, crit,
        # alert, emerg.
        LogLevel warn

        CustomLog /var/log/apache2/access.log combined
        ServerSignature On
</VirtualHost>