Project

General

Profile

Actions

Bug #2756

closed

ssl setup error

Added by iamon over 7 years ago. Updated over 7 years ago.

Status:
Invalid
Priority:
Normal
Category:
mod_simple_vhost
Target version:
-
ASK QUESTIONS IN Forums:

Description

hi
In July, i installed lighttpd 1.4.39 in Centos 7 (by yum) and installed php-fpm 5 , and successfully able to setup ssl by the same below steps , but now with updated lighttpd version it is not working..

here what steps i did..
just installed lighttpd and php56 by yum in fresh centos 7.
all settings are default...

changes made are..

1) uncommented [include_shell "cat /etc/lighttpd/vhosts.d/*.conf"] in lighttpd.conf
2) added

[
$HTTP["host"] == "mywebsite.org" {
server.document-root = "/www/my"
server.name = "mywebsite.org"
#server.port = 80
}

$SERVER["socket"] == "mywebsite.org:443" {
ssl.engine = "enable"
ssl.pemfile = "/www/pem.pem"
ssl.ca-file = "/www/ca.crt"
server.name = "mywebsite.org"
server.document-root = "/www/my"
}
] in /etc/lighttpd/vhosts.d/my.conf

3) chown ca.crt & pem.pem to root:root
4) chmod ca.crt & pem.pem to 400

After that [ lighttpd -t -f /etc/lighttpd/lighttpd.conf ] shows ok
then restarted lighttpd & php-fpm

But then http & https both stops loading..
error are :- ERR_CONNECTION_REFUSED & site not reachable...

my pem & crt are fine its working with apache and others,
my firewalls are disabled..

Please help.

Actions #1

Updated by iamon over 7 years ago

i am using mod_fastcgi (php-fpm)

i also enabled fastcgi , mod_proxy & the below mods.
server.modules = (
"mod_access",
"mod_alias",
"mod_auth",
"mod_evasive",
"mod_redirect",
"mod_rewrite",
"mod_setenv",
"mod_usertrack",
)

Actions #2

Updated by gstrauss over 7 years ago

  • Status changed from New to Invalid

but now with updated lighttpd version it is not working..

Check the lighttpd error log. Or tests lighttpd config with -tt (two t's) lighttpd -tt -f /etc/lighttpd/lighttpd.conf

This is not a bug report. This is a request for help.
Please ask questions in the support forum. https://redmine.lighttpd.net/projects/lighttpd/boards/2

Actions #3

Updated by iamon over 7 years ago

Sorry!! i will ask questions there from next time.

by -tt it shows
2016-10-07 15:03:31: (network.c.604) SSL: couldn't read X509 certificate from '/www/pem.pem'

but earlier in july it was working fine..

contents of this pem are [--Begin Private key -- ... etc]

what to do now..?

Actions #4

Updated by iamon over 7 years ago

Problem solved by disabling server.use-ipv6 in lighttpd.conf..

Thanks..

Actions #5

Updated by gstrauss over 7 years ago

  • Target version deleted (1.4.x)
Actions

Also available in: Atom