Listen 8443
<VirtualHost _default_:8443>

  ServerName idp.touchstonenetwork.net:8443

  ErrorLog logs/idp-attr-query_error_log
  TransferLog logs/idp-attr-query_access_log
  LogLevel warn

  SSLEngine on

  #   SSL Protocol support:
  # List the enable protocol levels with which clients will be able to
  # connect.  Disable SSLv2 access by default:
  SSLProtocol all -SSLv2

  #   SSL Cipher Suite:
  # List the ciphers that the client is permitted to negotiate.
  # See the mod_ssl documentation for a complete list.
  #SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
  SSLCipherSuite HIGH:MEDIUM:EXP:!aNULL:!SSLv2:+SHA1:+MD5:+HIGH:+MEDIUM:+EXP

  SSLCertificateFile /etc/pki/tls/certs/idp.touchstonenetwork.net-cert.pem
  SSLCertificateKeyFile /etc/pki/tls/private/idp.touchstonenetwork.net-key.pem
  SSLCertificateChainFile /etc/pki/tls/certs/EquifaxCA.pem

  # Consume but do not verify the client's certificate.
  SSLVerifyClient optional_no_ca
  SSLVerifyDepth 1

  CustomLog logs/idp-attr-query_request_log \
          "%t %h %{HTTPS}x %{SSL_PROTOCOL}x %{SSL_CIPHER}x %{SSL_CIPHER_USEKEYSIZE}x %{SSL_CLIENT_VERIFY}x \"%r\" %b"

  RewriteEngine On
  RewriteOptions inherit

</VirtualHost>