Lighttpd

I am running lighttpd 1.4.29. This is an out of date version, but I am working in QNX 6.5 SP1 and this is the latest binary version I was able to track down.

I am very new to lighttpd and I am far from an expert on web servers or TLS generally.

Currently I am able to get lighttpd to work to a point. I can see my page servered up on cgi. However, as soon as I limit Win 10 to TLS 1.1 or greater, lighttpd will not respond.

I have read https://redmine.lighttpd.net/projects/lighttpd/wiki/Docs_SSL and seen the ssl.openssl.ssl-conf-cmd option note for "MinProtocol" => "TLSv1.2", but that same note states that this is only supported since 1.4.48

Here is my lighttpd.conf (with commented out sections replace with ... to keep is more readable):

// lighttpd.conf

...

var.server_root = "/usr/www" 
var.state_dir   = "/var/run" 
var.home_dir    = "/var/lib/lighttpd" 
#var.conf_dir    = "/etc/lighttpd" 
hosts_dir  = server_root + "/vhosts" 

## Load the modules.
include "modules.conf" 

##  Basic Configuration
## ---------------------
##
server.port = 443

##
## Document root
##
server.document-root = server_root + "/pages" 

##
## store a pid file
##
server.pid-file = state_dir + "/lighttpd.pid" 

include "conf.d/access_log.conf" 

##
## The debug options are moved into their own file.
## see conf.d/debug.conf for various options for request debugging.
##
include "conf.d/debug.conf" 

## By default lighttpd would not change the operation system default.
## But setting it to 2048 is a better default for busy servers.
##
server.max-fds = 2048

##
## Stat() call caching.
##
## lighttpd can utilize FAM/Gamin to cache stat call.
##
## possible values are:
## disable, simple or fam.
##
server.stat-cache-engine = "simple" 

##
## Fine tuning for the request handling
##
## max-connections == max-fds/2 (maybe /3)
## means the other file handles are used for fastcgi/files
##
server.max-connections = 1024

...

## files to check for if .../ is requested
## index-file.names            = ( "index.php", "index.rb", "index.html",
##                                 "index.htm", "default.htm" )
##
index-file.names += (
  "index.xhtml", "index.html", "index.htm", "default.htm", "index.php" 
)

##
## deny access the file-extensions
##
## ~    is for backupfiles from vi, emacs, joe, ...
## .inc is often used for code includes which should in general not be part
##      of the document-root
url.access-deny             = ( "~", ".inc" )

##
## disable range requests for pdf files
## workaround for a bug in the Acrobat Reader plugin.
##
$HTTP["url"] =~ "\.pdf$" {
  server.range-requests = "disable" 
}

...

##
## which extensions should not be handle via static-file transfer
##
## .php, .pl, .fcgi are most often handled by mod_fastcgi or mod_cgi
##
static-file.exclude-extensions = ( ".php", ".pl", ".fcgi", ".scgi" )

...

##
## directory listing configuration
##
include "conf.d/dirlisting.conf" 

##
## Should lighttpd follow symlinks?
## 
## 
server.follow-symlink = "enable" 

##
## force all filenames to be lowercase?
##
#server.force-lowercase-filenames = "disable" 

##
## defaults to /var/tmp as we assume it is a local harddisk
##
server.upload-dirs = ( "/var/tmp" )

#######################################################################
##
##  SSL Support
## ------------- 
##
## To enable SSL for the whole server you have to provide a valid
## certificate and have to enable the SSL engine.::
##
## BLAINE
   ssl.engine = "enable" 
   ssl.pemfile = "/root/ca/private/lighttpd.pem" 
##   ssl.pemfile = "/path/to/server.pem" 
##
## The HTTPS protocol does not allow you to use name-based virtual
## hosting with SSL. If you want to run multiple SSL servers with
## one lighttpd instance you must use IP-based virtual hosting: ::
##
##   $SERVER["socket"] == "10.0.0.1:443" {
##     ssl.engine                  = "enable" 
##     ssl.pemfile                 = "/etc/ssl/private/www.example.com.pem" 
##     server.name                 = "www.example.com" 
##
##     server.document-root        = "/srv/www/vhosts/example.com/www/" 
##   }
##

## If you have a .crt and a .key file, cat them together into a
## single PEM file:
## $ cat /etc/ssl/private/lighttpd.key /etc/ssl/certs/lighttpd.crt \
##   > /etc/ssl/private/lighttpd.pem
##
#ssl.pemfile = "/etc/ssl/private/lighttpd.pem" 

##
## optionally pass the CA certificate here.
##
##
#ssl.ca-file = "" 

I would be grateful for any guidance in this. And if anyone knows of a more recent binary for QNX 6.5 SP 1, that would be very appreciated as well.

Thanks,
  Blaine