代码之家  ›  专栏  ›  技术社区  ›  Daniel Goncalves

如何使用ssl和代理设置Lighttpd

  •  0
  • Daniel Goncalves  · 技术社区  · 7 年前

    我正在尝试使用ssl和代理安装Lighttpd,但我无法使其工作。 我已经安装了证书和私钥,它们可以工作,但是当我尝试启用ssl时,端口(443)没有响应。

    我的配置文件是(conf-enabled/10-proxy.conf):

    $HTTP["host"] == "host.com.br" {
            proxy.server = ( "" => ((
                    "host" => "200.1.1.1",
                    "port" => 9004
            )))
            ssl.engine = "enable"
            ssl.pemfile = "/etc/lighttpd/ssl/private_key.pem"
            ssl.ca-file = "/etc/lighttpd/ssl/certificate_file.crt"
    
    }
    

    我的lighttpd。形态为:

    server.modules = (
            "mod_access",
            "mod_alias",
            "mod_compress",
            "mod_redirect",
    #       "mod_rewrite",
    )
    
    server.document-root        = "/var/www"
    server.upload-dirs          = ( "/var/cache/lighttpd/uploads" )
    server.errorlog             = "/var/log/lighttpd/error.log"
    server.pid-file             = "/var/run/lighttpd.pid"
    server.username             = "www-data"
    server.groupname            = "www-data"
    
    index-file.names            = ( "index.php", "index.html",
                                    "index.htm", "default.htm",
                                   " index.lighttpd.html" )
    
    url.access-deny             = ( "~", ".inc" )
    
    static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" )
    
    include_shell "/usr/share/lighttpd/use-ipv6.pl"
    
    dir-listing.encoding        = "utf-8"
    server.dir-listing          = "enable"
    
    compress.cache-dir          = "/var/cache/lighttpd/compress/"
    compress.filetype           = ( "application/x-javascript", "text/css", "text/html", "text/plain" )
    
    include_shell "/usr/share/lighttpd/create-mime.assign.pl"
    include_shell "/usr/share/lighttpd/include-conf-enabled.pl"
    
    2 回复  |  直到 2 年前
        1
  •  2
  •   Oscar Rivas    6 年前

    根据 docs

        2
  •  0
  •   gstrauss    7 年前

    您需要告诉lighttpd在端口443上侦听:

    $SERVER["socket"] == ":443" {
        ssl.engine = "enable"
        ssl.pemfile = "/etc/lighttpd/ssl/private_key.pem"
        ssl.ca-file = "/etc/lighttpd/ssl/certificate_file.crt"
    }