NameVirtualHost *:443

SSLStrictSNIVHostCheck off

AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl

SSLRandomSeed startup file:/dev/urandom 512

SSLProtocol All -SSLv2 -SSLv3

SSLCipherSuite DEFAULT:!EXP:!SSLv2:!DES:!IDEA:!SEED:+3DES:!RC4:!DH

SSLPassPhraseDialog  builtin
SSLSessionCache        "shmcb:logs/ssl_scache(512000)"
SSLSessionCacheTimeout  300

<VirtualHost *:80>
    ServerName shop.domain.com
    ServerSignature Off
    RewriteEngine On
    RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [L,QSA,R=permanent]
    ErrorLog /var/log/httpd/redirect.error.log
    LogLevel warn
</VirtualHost>

<Virtualhost *:443>
  DocumentRoot /var/www/html/client
  ServerName shop.domain.com:443

  CustomLog /var/log/httpd/shop_access.log combined
    <IfModule logio_module>
      LogFormat "%h %l %u %t \"%414r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combined
    </IfModule>
  ErrorLog /var/log/httpd/shop_error.log

  LogLevel warn
  SSLEngine On

  SSLCertificateFile /etc/pki/tls/certs/domain.com.crt
  SSLCACertificateFile /etc/pki/tls/certs/kingcacert.cer
  SSLCertificateKeyFile /etc/pki/tls/private/domain.com.2020.key

</VirtualHost>

/var/www/html/client/shop

<Directory /var/www/html/client>
Options -Indexes
Options +FollowSymLinks +SymLinksIfOwnerMatch
AllowOverride All
Require all granted
</Directory>

<Directory /var/www/html/client/shop>
Options -Indexes
Options +FollowSymLinks +SymLinksIfOwnerMatch
AllowOverride All
Require all granted
</Directory>