Return to ssl.txt CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / lighttpd / doc / outdated

Annotation of embedaddon/lighttpd/doc/outdated/ssl.txt, revision 1.1

1.1     ! misho       1: ===========
        !             2: Secure HTTP
        !             3: ===========
        !             4: 
        !             5: ------------
        !             6: Module: core
        !             7: ------------
        !             8: 
        !             9: :Author: Jan Kneschke
        !            10: :Date: $Date: 2004/08/29 09:44:53 $
        !            11: :Revision: $Revision: 1.2 $
        !            12: 
        !            13: :abstract:
        !            14:   How to set up SSL in lighttpd
        !            15: 
        !            16: .. meta::
        !            17:   :keywords: lighttpd, ssl
        !            18: 
        !            19: .. contents:: Table of Contents
        !            20: 
        !            21: Description
        !            22: ===========
        !            23: 
        !            24: lighttpd supports SSLv2 and SSLv3 if it is compiled against openssl.
        !            25: 
        !            26: Configuration
        !            27: -------------
        !            28: 
        !            29: To enable SSL for the whole server you have to provide a valid
        !            30: certificate and have to enable the SSL engine.::
        !            31: 
        !            32:   ssl.engine = "enable"
        !            33:   ssl.pemfile = "/path/to/server.pem"
        !            34: 
        !            35: The HTTPS protocol does not allow you to use name-based virtual
        !            36: hosting with SSL. If you want to run multiple SSL servers with
        !            37: one lighttpd instance you must use IP-based virtual hosting: ::
        !            38: 
        !            39:   $SERVER["socket"] == "10.0.0.1:443" {
        !            40:     ssl.engine                  = "enable"
        !            41:     ssl.pemfile                 = "www.example.org.pem"
        !            42:     server.name                 = "www.example.org"
        !            43: 
        !            44:     server.document-root        = "/www/servers/www.example.org/pages/"
        !            45:   }
        !            46: 
        !            47: If you have a .crt and a .key file, cat them together into a
        !            48: single PEM file:
        !            49: ::
        !            50: 
        !            51:   $ cat host.key host.crt > host.pem
        !            52: 
        !            53: 
        !            54: Self-Signed Certificates
        !            55: ------------------------
        !            56: 
        !            57: A self-signed SSL certificate can be generated like this: ::
        !            58: 
        !            59:   $ openssl req -new -x509 \
        !            60:     -keyout server.pem -out server.pem \
        !            61:     -days 365 -nodes
        !            62: