#
# 50ssl_default_virtualhost
#
{
    my $tlsPolicy = $tls{'policy'} || '';
    my $virtual_host_ssl = <<'EOF';
<VirtualHost *:443>
ErrorLog logs/ssl_error_log
TransferLog logs/ssl_access_log
LogLevel warn
SSLEngine on

<Files ~ "\.(cgi|shtml|phtml|php3?)$">
    SSLOptions +StdEnvVars
</Files>

<Directory "/var/www/cgi-bin">
    SSLOptions +StdEnvVars
</Directory>

BrowserMatch "MSIE [2-5]" \
        nokeepalive ssl-unclean-shutdown \
        downgrade-1.0 force-response-1.0

CustomLog logs/ssl_request_log \
        "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
EOF

    if($tlsPolicy) {
        $OUT = $virtual_host_ssl;
    } else {
        $OUT = "# use default upstream ssl.conf definition";
    }
}

