Simon Loewenthal | 17 Oct 2011 16:09
Picon

[Q] Comparative Apache directives in Lighttpd

Hi there,

	I am migrating a server from Apache to Lighttpd.  I have an SSL question.

What it the comparative Lighttpd line for each of  these in Apache?

   SSLEngine on
   SSLProtocol all -SSLv2
   SSLCipherSuite HIGH:MEDIUM
   SSLCertificateFile /etc/ssl/private/example.ssl.crt
   SSLCertificateKeyFile /etc/ssl/private/example.ssl.key
   SSLCertificateChainFile /etc/ssl/certs/startcomIntermediateCA.pem
   SSLCACertificateFile /etc/ssl/certs/startcomCA.pem

Best regards, Simon.

--

-- 
	Email  simon AT klunky DOT co DOT uk
	PGP is optional: 4BA78604
	I won't accept your confidentiality
	agreement, and your Emails are kept.
      		       ~Ö¿Ö~

Simon Loewenthal | 17 Oct 2011 16:28
Picon

Re: [Q] Comparative Apache directives in Lighttpd [SOLVED]

On 17/10/11 16:09, Simon Loewenthal wrote:
> Hi there,
>
> 	I am migrating a server from Apache to Lighttpd.  I have an SSL question.
>
> What it the comparative Lighttpd line for each of  these in Apache?
>
>    SSLEngine on
>    SSLProtocol all -SSLv2
>    SSLCipherSuite HIGH:MEDIUM
>    SSLCertificateFile /etc/ssl/private/example.ssl.crt
>    SSLCertificateKeyFile /etc/ssl/private/example.ssl.key
>    SSLCertificateChainFile /etc/ssl/certs/startcomIntermediateCA.pem
>    SSLCACertificateFile /etc/ssl/certs/startcomCA.pem
>
>
> Best regards, Simon.
>
I found the answer [RTM]
http://redmine.lighttpd.net/wiki/lighttpd/Docs:SSL
Just concatenate the files together as described in the above URL.

However, I would like to know where the configuration references the
file server.pem?

Starting web server: lighttpd2011-10-17 16:23:15: (network.c.602) SSL:
Private key does not match the certificate public key, reason:
error:02001002:system library:fopen:No such file or directory
/etc/lighttpd/server.pem

(Continue reading)

Simon Loewenthal | 17 Oct 2011 16:43
Picon

Re: [Q] Comparative Apache directives in Lighttpd [SOLVED]

On 17/10/11 16:28, Simon Loewenthal wrote:
> On 17/10/11 16:09, Simon Loewenthal wrote:
>> Hi there,
>>
>> 	I am migrating a server from Apache to Lighttpd.  I have an SSL question.
>>
>> What it the comparative Lighttpd line for each of  these in Apache?
>>
>>    SSLEngine on
>>    SSLProtocol all -SSLv2
>>    SSLCipherSuite HIGH:MEDIUM
>>    SSLCertificateFile /etc/ssl/private/example.ssl.crt
>>    SSLCertificateKeyFile /etc/ssl/private/example.ssl.key
>>    SSLCertificateChainFile /etc/ssl/certs/startcomIntermediateCA.pem
>>    SSLCACertificateFile /etc/ssl/certs/startcomCA.pem
>>
>>
>> Best regards, Simon.
>>
> I found the answer [RTM]
> http://redmine.lighttpd.net/wiki/lighttpd/Docs:SSL
> Just concatenate the files together as described in the above URL.
>
> However, I would like to know where the configuration references the
> file server.pem?
>
> Starting web server: lighttpd2011-10-17 16:23:15: (network.c.602) SSL:
> Private key does not match the certificate public key, reason:
> error:02001002:system library:fopen:No such file or directory
> /etc/lighttpd/server.pem
(Continue reading)

Kaiwang Chen | 18 Oct 2011 15:02
Picon

How to log specifed cookie value in access log?

Hello list members,

I read accesslog.txt and verified that lightty yet supports %C for
logging specified cookie. I chance read the lua module mod_magnet,
http://redmine.lighttpd.net/wiki/lighttpd/Docs:ModMagnet, and tried to
extract specified cookie and append to uri:

-- magnet.attract-raw-url-to = ( conf_dir + "/test.lua" )
c = (string.match(lighty.request["Cookie"], "c=([^;,%s]+)") or "-")
uri = lighty.env["request.uri"]
if (string.match(uri, '?', 1, true)) then uri = string(uri, s, e) end
if (string.match(uri, '/$')) then uri = uri .. c else uri = uri .. "/" .. c end
lighty.env["request.uri"] = uri

However, the access log still represents orginal uri. I tried
returning lighty.RESTART_REQUEST, unfortunately the server was caught
in a dead loop.. looks like no custom variable suvives a
RESTART_REQUEST. I guess logging is handled before lua gets in
control. Any advice?

Thanks,
Kaiwang


Gmane