-<IfModule mod_ssl.c>
- SSLEngine on
-
- SSLCertificateFile /etc/gforge/ssl-cert.pem
- SSLCertificateKeyFile /etc/gforge/ssl-cert.key
- # Add extra SSL configuration (e.g. SSLCACertificatePath) here
-
- <Files ~ "\.(cgi|shtml)$">
- SSLOptions +StdEnvVars
- </Files>
-
- <Directory "/usr/lib/cgi-bin">
- SSLOptions +StdEnvVars
- </Directory>
-
- SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
-</IfModule>
+# SSL is off by default to not provide a false sense of security
+# If/when you have a real SSL certificate, uncomment the "really-on" line and
+# comment out the "off" line.
+
+Include /etc/gforge/httpd.conf.d/ssl-off.inc
+# Include /etc/gforge/httpd.conf.d/ssl-really-on.inc
-<IfModule apache_ssl.c>
- SSLEnable
-
- SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
-</IfModule>