<div dir="ltr">Thanks Rob.<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Aug 25, 2015 at 2:21 PM, Rob Crittenden <span dir="ltr"><<a href="mailto:rcritten@redhat.com" target="_blank">rcritten@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">Cohen, Laurence wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I would like to construct a very simple nss.conf file that will redirect<br>
all traffic to a nss.maintenance file while we are doing maintenance. I<br>
don't need help with the scripting to move the correct nss.conf into<br>
place. I just need help with the contents of the nss.conf file itself.<br>
It only needs one rule. Redirect all traffic to the maintenance file<br>
which will contain text that we are in maintenance mode.<br>
</blockquote>
<br></span>
For the redirect you'll need to use mod_rewrite but that's out of scope of mod_nss. This is a pretty minimal nss.conf. This page looks related: <a href="https://css-tricks.com/snippets/htaccess/temporary-maintenance-using-mod_rewrite/" rel="noreferrer" target="_blank">https://css-tricks.com/snippets/htaccess/temporary-maintenance-using-mod_rewrite/</a><br>
<br>
Here is a pretty basic nss.conf:<br>
<br>
Listen 443<br>
<br>
AddType application/x-x509-ca-cert .crt<br>
AddType application/x-pkcs7-crl .crl<br>
<br>
NSSPassPhraseDialog "file:/etc/httpd/conf/password.conf"<br>
NSSPassPhraseHelper /usr/libexec/nss_pcache<br>
NSSRequireSafeNegotiation on<br>
<br>
<VirtualHost _default_:443><br>
ErrorLog /etc/httpd/logs/error_log<br>
TransferLog /etc/httpd/logs/access_log<br>
LogLevel warn<br>
<br>
NSSEngine on<br>
NSSCipherSuite +rsa_rc4_128_md5,+rsa_rc4_128_sha,+rsa_3des_sha,-rsa_des_sha,-rsa_rc4_40_md5,-rsa_rc2_40_md5,-rsa_null_md5,-rsa_null_sha,+fips_3des_sha,-fips_des_sha,-fortezza,-fortezza_rc4_128_sha,-fortezza_null,-rsa_des_56_sha,-rsa_rc4_56_sha,+rsa_aes_128_sha,+rsa_aes_256_sha<br>
NSSProtocol TLSv1.0,TLSv1.1<br>
NSSNickname Server-Cert<br>
NSSCertificateDatabase /etc/httpd/alias<br>
</VirtualHost><span class="HOEnZb"><font color="#888888"><br>
<br>
rob<br>
</font></span></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature"><div dir="ltr"><p dir="ltr" style="color:rgb(51,51,51);font-family:'Lucida Grande','Lucida Sans',Verdana,Arial,sans-serif;font-size:13.3333339691162px;line-height:1.5;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);font-family:Helvetica,sans-serif;font-size:15px;vertical-align:baseline;white-space:pre-wrap;background-color:transparent"><img alt="www.novetta.com" src="https://p2.zdassets.com/hc/theme_assets/236109/200035260/novetta-email.png" style="border:currentcolor" height="56" width="211"></span></p><p dir="ltr" style="color:rgb(51,51,51);font-family:'Lucida Grande','Lucida Sans',Verdana,Arial,sans-serif;font-size:13.3333339691162px;line-height:1.5;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,100,182);font-family:Helvetica,sans-serif;font-weight:bold;vertical-align:baseline;white-space:pre-wrap">Larry Cohen</span></p><p dir="ltr" style="color:rgb(51,51,51);font-family:'Lucida Grande','Lucida Sans',Verdana,Arial,sans-serif;font-size:13.3333339691162px;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(147,149,152);font-family:Helvetica,sans-serif;font-style:italic;vertical-align:baseline;white-space:pre-wrap">System Administrator</span></p><p dir="ltr" style="color:rgb(51,51,51);font-family:'Lucida Grande','Lucida Sans',Verdana,Arial,sans-serif;font-size:13.3333339691162px;line-height:1.5;margin-top:0pt;margin-bottom:0pt"><br style="font-size:13.3333339691162px;line-height:22.2222232818604px"></p><p style="color:rgb(51,51,51);font-family:'Lucida Grande','Lucida Sans',Verdana,Arial,sans-serif;font-size:13.3333339691162px;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(147,149,152);font-family:Helvetica,sans-serif;vertical-align:baseline;white-space:pre-wrap">12021 Sunset Hills Road, Suite 400</span></p><p dir="ltr" style="color:rgb(51,51,51);font-family:'Lucida Grande','Lucida Sans',Verdana,Arial,sans-serif;font-size:13.3333339691162px;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(147,149,152);font-family:Helvetica,sans-serif;vertical-align:baseline;white-space:pre-wrap">Reston, VA 20190</span></p><p dir="ltr" style="color:rgb(51,51,51);font-family:'Lucida Grande','Lucida Sans',Verdana,Arial,sans-serif;font-size:13.3333339691162px;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,100,182);font-family:Helvetica,sans-serif;vertical-align:baseline;white-space:pre-wrap">Email</span><span style="color:rgb(147,149,152);font-family:Helvetica,sans-serif;vertical-align:baseline;white-space:pre-wrap"> lcohen@</span><span style="color:rgb(17,85,204);font-family:Helvetica,sans-serif;text-decoration:underline;vertical-align:baseline;white-space:pre-wrap"><a href="http://novetta.com" target="_blank">novetta.com</a></span><span style="color:rgb(147,149,152);font-family:Helvetica,sans-serif;vertical-align:baseline;white-space:pre-wrap"> </span></p><p dir="ltr" style="color:rgb(51,51,51);font-family:'Lucida Grande','Lucida Sans',Verdana,Arial,sans-serif;font-size:13.3333339691162px;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,100,182);font-family:Helvetica,sans-serif;vertical-align:baseline;white-space:pre-wrap">Office</span><span style="color:rgb(147,149,152);font-family:Helvetica,sans-serif;vertical-align:baseline;white-space:pre-wrap"> 703-885-1064</span></p><p dir="ltr" style="font-family:'Lucida Grande','Lucida Sans',Verdana,Arial,sans-serif;font-size:13.3333339691162px;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(147,149,152);font-family:Helvetica,sans-serif;vertical-align:baseline;white-space:pre-wrap"></span></p><table style="color:rgb(147,149,152);font-family:sans-serif;font-size:medium"><tbody><tr></tr><tr></tr><tr></tr></tbody></table> </div></div>
</div>