509318396
­­­­­­­­­­­­­­­­­­
<!DOCTYPE html>
<html>
# Certificate served when WebShield cannot match a request to a cached
# certificate: a connection that sends no SNI, or a name no cached certificate
# covers.
#
# The package generates a self-signed one here when the host has none, valid for
# 365 days, and reissues it whenever the package is updated, so it does not
# outlive its validity on a host that stays current.
#
# Replacing it with your own certificate is supported: the package never
# reissues or removes a certificate it did not generate, expired or not. Put the
# private key, the certificate and any chain in this one PEM file, owned root:imunify360-webshield and mode 0600, then run
# "imunify360-wsctl reload": nginx reads this path at configuration load only,
# so a replacement takes effect at the next reload rather than at the next
# handshake.
ssl_certificate             ssl_certs/dummy.pem;
ssl_certificate_key         ssl_certs/dummy.pem;