bengreen.eu Circle Device

 

Quick Reference

Installing SSL Certificates to Lighttpd

Installing an SSL Certificate I purchased from Comodo/InstantSSL into lighttpd is easy but I had a funny problem recently when firefox kept telling me: sec_error_unknown_issuer and something to do with a missing issuer chain. I cannot get my server to recreate the problem but to remedy the problem I found a post on stack overflow with a comment telling me about the ssl.ca-file option which seems to allow for inclusion of a ca file that might help determine the certificate chain.

I concatenated my Private Key with my certificate, the file AddTrustExternalCARoot.crt and COMODOHigh-AssuranceSecureServerCA.crt in that order into secureserver.pem then edited 10-ssl.conf to look like this:

$SERVER["socket"] == "0.0.0.0:443" {
        ssl.engine  = "enable"
        ssl.pemfile = "/etc/lighttpd/secureserver.pem"
        ssl.ca-file = "/etc/lighttpd/COMODOHigh-AssuranceSecureServerCA.crt"
        server.document-root = "/var/www/secure.pktsolutions.com"
}

Well, as I said I cannot recreate the problem but will try to recreate it when I setup my next SSL server and update this post.

Quick Links: Techie Stuff | General | Personal | Quick Reference