diff options
| author | Simon Rettberg | 2014-11-18 19:37:23 +0100 |
|---|---|---|
| committer | Simon Rettberg | 2014-11-18 19:37:23 +0100 |
| commit | 98202109262dae1c46a49a73ba865a041ef7ae16 (patch) | |
| tree | e57124782ceddac66a4c91c2ab8636c20e4b1d8f /satellit_installer/static_files/lighttpd-auto-ssl.sh | |
| parent | [SSPS] netsetup: Hostname and, if there, Domain to /etc/hosts in static case (diff) | |
| download | setup-scripts-98202109262dae1c46a49a73ba865a041ef7ae16.tar.gz setup-scripts-98202109262dae1c46a49a73ba865a041ef7ae16.tar.xz setup-scripts-98202109262dae1c46a49a73ba865a041ef7ae16.zip | |
[SSPS] Add support for enabling HTTPS in lighttpd
Diffstat (limited to 'satellit_installer/static_files/lighttpd-auto-ssl.sh')
| -rwxr-xr-x | satellit_installer/static_files/lighttpd-auto-ssl.sh | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/satellit_installer/static_files/lighttpd-auto-ssl.sh b/satellit_installer/static_files/lighttpd-auto-ssl.sh new file mode 100755 index 0000000..3206b94 --- /dev/null +++ b/satellit_installer/static_files/lighttpd-auto-ssl.sh @@ -0,0 +1,22 @@ +#!/bin/sh + +CERT="/etc/lighttpd/server.pem" +CHAIN="/etc/lighttpd/chain.pem" + +[ -s "$CERT" ] || exit 0 + +cat <<HEREDOC +\$SERVER["socket"] == "0.0.0.0:443" { + ssl.engine = "enable" + ssl.pemfile = "$CERT" + ssl.use-sslv2 = "disable" + ssl.use-sslv3 = "disable" + + ssl.cipher-list = "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS" + ssl.honor-cipher-order = "enable" +HEREDOC +[ -s "$CHAIN" ] && echo " ssl.ca-file = \"$CHAIN\"" +echo "}" + +exit 0 + |