HowToSimpleSSL » History » Revision 15
Revision 14 (syso, 2009-03-11 05:35) → Revision 15/40 (syso, 2009-03-11 05:37)
h2. Setting up a simple SSL configuration Setting up a simple SSL configuration with Lighttpd is quite easy. Though this method should be used with care because this setup will only provide proper encryption, not authentication! The user will be presented with a query whether to accept the certificate or not! First, go into your the SSL Certificates Certs directory and do: <pre> cd /etc/lighttpd/certs /etc/ssl/certs openssl req -new -x509 -keyout lighttpd.pem -out lighttpd.pem -days 365 -nodes chmod 400 lighttpd.pem </pre> The previous instuctions were saying the file should be owned by www-data (depending on the OS) but this is a really bad idea (in case the server gets compromised etc.). As lighttpd starts with root-privileges and drops his rights, you can safely set the owner of the certificate to root and chmod 400 it. Then edit /etc/lighttpd/lighttpd.conf and add: <pre> $SERVER["socket"] == ":443" { ssl.engine = "enable" ssl.pemfile = "/etc/lighttpd/certs/lighttpd.pem" "/etc/ssl/certs/lighttpd.pem" } </pre> After restarting the webserver, you should be able to access your webserver through https. Because without ssl.ca-file configured, firefox will not accept this certificate, even if it's valid certificate. See Also ======== * [[lighttpd:Docs:SSL|Secure HTTP]]