<IfModule mod_ssl.c>

  SSLRandomSeed startup builtin

  SSLRandomSeed startup file:/dev/urandom <%= @ssl_random_seed_bytes %>

  SSLRandomSeed connect builtin

  SSLRandomSeed connect file:/dev/urandom <%= @ssl_random_seed_bytes %>

  AddType application/x-x509-ca-cert .crt

  AddType application/x-pkcs7-crl    .crl

  SSLPassPhraseDialog <%= @ssl_pass_phrase_dialog %>

  SSLSessionCache "shmcb:<%= @session_cache %>"

  SSLSessionCacheTimeout <%= @ssl_sessioncachetimeout %>

<% if @ssl_compression -%>

  SSLCompression On

<% end -%>

  <%- if scope.function_versioncmp([@apache_version, '2.4']) >= 0 -%>

  Mutex <%= @ssl_mutex %>

  <%- else -%>

  SSLMutex <%= @ssl_mutex %>

  <%- end -%>

  SSLCryptoDevice <%= @ssl_cryptodevice %>

  SSLHonorCipherOrder <%= @ssl_honorcipherorder %>

  SSLCipherSuite <%= @ssl_cipher %>

  SSLProtocol <%= @ssl_protocol.compact.join(' ') %>

<% if @ssl_options -%>

  SSLOptions <%= @ssl_options.compact.join(' ') %>

<% end -%>

<%- if @ssl_openssl_conf_cmd -%>

  SSLOpenSSLConfCmd <%= @ssl_openssl_conf_cmd %>

<%- end -%>

</IfModule>