diff options
author | John Klug <john.klug@multitech.com> | 2019-12-03 17:47:24 -0600 |
---|---|---|
committer | John Klug <john.klug@multitech.com> | 2019-12-03 17:47:24 -0600 |
commit | 507a781f13032524594023284779cd93cab259e5 (patch) | |
tree | 8985982878f9515cc845c0f2b1a79cd8880ef207 | |
parent | ab1e64c346f7960ebf7c8ea04eec09de10bef8c7 (diff) | |
download | commissioning-507a781f13032524594023284779cd93cab259e5.tar.gz commissioning-507a781f13032524594023284779cd93cab259e5.tar.bz2 commissioning-507a781f13032524594023284779cd93cab259e5.zip |
http->https redirect, certificate
-rw-r--r-- | etc/lighttpd-commission.conf | 16 |
1 files changed, 13 insertions, 3 deletions
diff --git a/etc/lighttpd-commission.conf b/etc/lighttpd-commission.conf index 67a8189..5317eb5 100644 --- a/etc/lighttpd-commission.conf +++ b/etc/lighttpd-commission.conf @@ -136,7 +136,7 @@ static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" ) ######### Options that are good to be but not neccesary to be changed ####### ## bind to port (default: 80) -#server.port = 81 +server.port = 80 ## bind to localhost (default: all interfaces) #server.bind = "grisu.home.kneschke.de" @@ -231,8 +231,18 @@ fastcgi.server = ( ".php" => # #### SSL engine -#ssl.engine = "enable" -#ssl.pemfile = "server.pem" +ssl.engine = "enable" +ssl.pemfile = "/var/config/server.pem" + +$SERVER["socket"] == ":443" { +ssl.engine = "enable" +ssl.pemfile = "/var/config/server.pem" +ssl.use-sslv3 = "enable" +ssl.openssl.ssl-conf-cmd = ("Protocol" => "-ALL, -TLSv1, -SSLv3") +server.document-root = "/www/commission" +} else $HTTP["host"] =~ "^(.+)(:[0-9]+)?$" { + url.redirect = ( "^/(.*)$" => "https://%1:443/$1" ) +} #### status module #status.status-url = "/server-status" |