summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJohn Klug <john.klug@multitech.com>2019-12-03 17:47:24 -0600
committerJohn Klug <john.klug@multitech.com>2019-12-03 17:47:24 -0600
commit507a781f13032524594023284779cd93cab259e5 (patch)
tree8985982878f9515cc845c0f2b1a79cd8880ef207
parentab1e64c346f7960ebf7c8ea04eec09de10bef8c7 (diff)
downloadcommissioning-507a781f13032524594023284779cd93cab259e5.tar.gz
commissioning-507a781f13032524594023284779cd93cab259e5.tar.bz2
commissioning-507a781f13032524594023284779cd93cab259e5.zip
http->https redirect, certificate
-rw-r--r--etc/lighttpd-commission.conf16
1 files changed, 13 insertions, 3 deletions
diff --git a/etc/lighttpd-commission.conf b/etc/lighttpd-commission.conf
index 67a8189..5317eb5 100644
--- a/etc/lighttpd-commission.conf
+++ b/etc/lighttpd-commission.conf
@@ -136,7 +136,7 @@ static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" )
######### Options that are good to be but not neccesary to be changed #######
## bind to port (default: 80)
-#server.port = 81
+server.port = 80
## bind to localhost (default: all interfaces)
#server.bind = "grisu.home.kneschke.de"
@@ -231,8 +231,18 @@ fastcgi.server = ( ".php" =>
#
#### SSL engine
-#ssl.engine = "enable"
-#ssl.pemfile = "server.pem"
+ssl.engine = "enable"
+ssl.pemfile = "/var/config/server.pem"
+
+$SERVER["socket"] == ":443" {
+ssl.engine = "enable"
+ssl.pemfile = "/var/config/server.pem"
+ssl.use-sslv3 = "enable"
+ssl.openssl.ssl-conf-cmd = ("Protocol" => "-ALL, -TLSv1, -SSLv3")
+server.document-root = "/www/commission"
+} else $HTTP["host"] =~ "^(.+)(:[0-9]+)?$" {
+ url.redirect = ( "^/(.*)$" => "https://%1:443/$1" )
+}
#### status module
#status.status-url = "/server-status"