ServerRoot      /sbcimp/dyn/data/XTools/svnadmin/apache/2.2.0
DocumentRoot    /sbcimp/dyn/data/XTools/svnadmin/website/htdocs
DefaultType     text/plain
ServerAdmin     DL-XTools
ServerName      subversion.swissbank.com
ErrorDocument   404 https://subversion.swissbank.com/cgi-bin/repos/
ErrorLog        /sbcimp/dyn/data/XTools/svnadmin/website/logs/axe/error.log
PidFile         /sbcimp/dyn/data/XTools/svnadmin/website/logs/axe/httpd.pid
LogLevel        info
Listen          8000
ExtendedStatus  On
PerlModule      ModPerl::Registry

LogFormat       "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat       "%h %l %u %t \"%r\" %>s %b"                                    common
CustomLog       /sbcimp/dyn/data/XTools/svnadmin/website/logs/axe/access.log   common

RewriteEngine   On
RewriteLog      /sbcimp/dyn/data/XTools/svnadmin/website/logs/axe/rewrite.log
RewriteLogLevel 0

TypesConfig     conf/mime.types
AddType         application/x-compress .Z
AddType         application/x-gzip .gz .tgz
AddHandler      cgi-script .cgi

LoadModule dav_module         modules/mod_dav.so
LoadModule dav_fs_module      modules/mod_dav_fs.so
LoadModule dav_svn_module     modules/mod_dav_svn.so
LoadModule authz_svn_module   modules/mod_authz_svn.so
LoadModule authz_host_module  modules/mod_authz_host.so
LoadModule perl_module        modules/mod_perl.so
LoadModule alias_module       modules/mod_alias.so
LoadModule setenvif_module    modules/mod_setenvif.so
LoadModule dir_module         modules/mod_dir.so
LoadModule ssl_module         modules/mod_ssl.so
LoadModule rewrite_module     modules/mod_rewrite.so
LoadModule mime_module        modules/mod_mime.so
LoadModule log_config_module  modules/mod_log_config.so
LoadModule status_module      modules/mod_status.so
LoadModule cgi_module         modules/mod_cgi.so

RewriteCond %{HTTPS}                               !=on
RewriteRule ^/(.*)                                 https://subversion.swissbank.com/$1             [R,N]

RewriteRule ^/*$                                   https://subversion.swissbank.com/cgi-bin/repos/ [L,R]
RewriteRule ^https://subversion\.swissbank\.com/*$ https://subversion.swissbank.com/cgi-bin/repos/ [L,R]

<Directory /sbcimp/dyn/data/XTools/svnadmin/website/htdocs>
  Options       Indexes FollowSymLinks
  AllowOverride None
  Order         allow,deny
  Allow         from all
</Directory>

PerlSwitches                                             \
   -I/sbcimp/dyn/data/XTools/svnadmin/mod_perl/2.0.2/lib \
   -I/sbcimp/dyn/data/XTools/svnadmin/UBS_apache_modules \
   -I/sbcimp/run/pd/cpan/5.8.8-2006.03/lib

# production DSWSS Auth service endpoint
PerlSetEnv JEEP_PERSON_INFO_SERVICE https://dswssauth.swissbank.com/DSWSSAuthWeb/servlet/rpcrouter

# required caching parameters used by the UBS::Apache2::Auth::Basic::DSWSS::Cache module
PerlSetVar DSWSS_CacheClear                0
PerlSetVar DSWSS_CacheFile                 /var/tmp/svnadmin/UBS/DSWSS/AuthCache
PerlSetVar DSWSS_CacheFileSizekB           1024
PerlSetVar DSWSS_CacheDefaultExpirySeconds 28800
PerlSetVar DSWSS_MaxFailedLogins           3
# below is the production OID application ID
PerlSetVar DSWSS_ApplicationName           5U6v3rS1oN
PerlSetVar DSWSS_MD5_Key                   'this is gonna be so much fun!'

<Location />
  PerlAuthenHandler UBS::Apache2::Auth::Basic::DSWSS::AuthenHandler
  PerlAuthzHandler  UBS::Apache2::Auth::Basic::DSWSS::AuthzHandler
  PerlSendHeader    Off
  AuthName          "EQ IT Subversion Pilot"
  AuthType          Basic
  Require           valid-user
</Location>

Listen 4443
AddType                application/x-x509-ca-cert .crt
AddType                application/x-pkcs7-crl    .crl
SSLPassPhraseDialog    builtin
SSLSessionCache        shmcb:/var/tmp/svnadmin/ssl.cache(512000)
SSLSessionCacheTimeout 28800
SSLMutex               file:/var/tmp/svnadmin/ssl.mutex

<VirtualHost _default_:4443>

  ServerName            subversion.swissbank.com
  ServerAlias           subversion.swissbank.com subversion
  TransferLog           /sbcimp/dyn/data/XTools/svnadmin/website/logs/axe/ssl_access.log
  ErrorLog              /sbcimp/dyn/data/XTools/svnadmin/website/logs/axe/ssl_error.log
  LogLevel              error
  SSLEngine             on
  SSLCipherSuite        ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
  SSLCertificateFile    /sbcimp/dyn/data/XTools/svnadmin/website/certs/subversion/subversion.crt
  SSLCertificateKeyFile /sbcimp/dyn/data/XTools/svnadmin/website/certs/subversion/subversion.key

  RewriteLog            /sbcimp/dyn/data/XTools/svnadmin/website/logs/axe/vhost_rewrite.log
  RewriteLogLevel       0

  RewriteRule           ^/*$                                   https://subversion.swissbank.com/cgi-bin/repos/ [L,R]
  RewriteRule           ^https://subversion\.swissbank\.com/*$ https://subversion.swissbank.com/cgi-bin/repos/ [L,R]

  ScriptAlias           /cgi-bin/ /sbcimp/dyn/data/XTools/svnadmin/website/cgi-bin/
  ScriptAlias           /viewvc   /sbcimp/dyn/data/XTools/svnadmin/viewvc/bin/cgi/viewvc.cgi

  <FilesMatch "\.(cgi|shtml|phtml|php)$">
    SSLOptions +StdEnvVars
  </FilesMatch>

  <Location /cgi-bin>
    SSLRequireSSL
    PerlAuthenHandler UBS::Apache2::Auth::Basic::DSWSS::AuthenHandler
    PerlAuthzHandler  UBS::Apache2::Auth::Basic::DSWSS::AuthzHandler
    PerlSendHeader    Off
    AuthName          "EQ IT Subversion Pilot"
    AuthType          Basic
    Require           valid-user
  </Location>

  <Location /svn>

    AuthName              "EQ IT Subversion Pilot"
    AuthType              Basic

    AuthzSVNAccessFile    /sbcimp/dyn/data/XTools/svnadmin/repos_access_control
    AuthzSVNAnonymous     Off
    AuthzSVNAuthoritative On

    DAV                   svn

    ErrorDocument         404 default

    PerlAuthenHandler     UBS::Apache2::Auth::Basic::DSWSS::AuthenHandler

    Require               valid-user

    SSLRequireSSL

    SVNIndexXSLT          /xsl/svnindex.xsl
    SVNParentPath         /sbcimp/dyn/data/Subversion
    SVNPathAuthz          On

  </Location>

  BrowserMatch ".*MSIE.*" \
    nokeepalive ssl-unclean-shutdown \
    downgrade-1.0 force-response-1.0

  CustomLog /sbcimp/dyn/data/XTools/svnadmin/website/logs/axe/ssl_request.log \
    "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

  <Directory /sbcimp/dyn/data/XTools/svnadmin/website/cgi-bin>
    SSLRequireSSL
    SSLOptions          +StdEnvVars
    SetHandler          perl-script
    PerlResponseHandler ModPerl::Registry
    PerlSendHeader      Off
    Options             +ExecCGI
  </Directory>

  <Directory /sbcimp/dyn/data/XTools/svnadmin/website/htdocs>
    SSLRequireSSL
    Options       Indexes FollowSymLinks
    AllowOverride None
    Order         allow,deny
    Allow         from all
  </Directory>

  <Location /server-status>
    SSLRequireSSL
    SetHandler server-status
  </Location>

  <Location /perl-status>
    SSLRequireSSL
    SetHandler  perl-script
    PerlHandler Apache2::Status
    PerlSetVar  StatusOptionsAll On
  </Location>

</VirtualHost>