Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [lighttpd]

Lighttpd ("lighty") is a fast open source web server, optimised for speed critical environments

Lighttpd (pronounced "lighty") is an open source web server optimised for speed critical environments, which is standards compliant. It attempts to be lower memory footprint, and more CPU efficient than other web servers, and is often simpler to configure. Initially it was targetted at static content, but now it is widely used for both static content and hosting CGI, PHP, Ruby, Python etc code.

More information is available on Wikipedia

596 questions
1
vote
1 answer

Lighttpd Rewrite Help (Trailing slash issues)

I have a webapp under an alias on my server. I want this webapp to be redirected to HTTPS://. So here is my code: alias.url += ( "/email" => "/srv/Applications/email/" ) $HTTP["url"] =~ "/email" { $SERVER["socket"] == ":80" { $HTTP["host"] =~…
Kyle
  • 562
  • 2
  • 5
  • 16
1
vote
2 answers

lighttpd silently stops logging

I'm on a Slicehost 256MB VPS with Ubuntu 9.04 (Jaunty). lighttpd is the only web server process running; it listens on port 80. My lighttpd.conf can be found here. I'm using Ubuntu's default logrotate setup for lighty. At seemingly random times,…
Max Cantor
  • 121
  • 3
1
vote
2 answers

How to use modsecurity with lighttpd

I'm not an expert and I'm looking to use modsecurity with lighttpd Can someone explain me how to compile or install modsecurity for lighttpd because I can't find any documentation online
freeze
  • 11
  • 1
1
vote
1 answer

Suexec: invalid command error

I'm trying to set lighttpd with suexec, but something goes wrong on testing: when I try to launch something via suexec, it gives me in log: [2017-10-08 00:23:24]: invalid command (/srv/http/main/htdocs/cgi-bin/test.py) Output of suexec -V: -D…
Fireburn
  • 13
  • 4
1
vote
2 answers

Extracting TLS session keys from lighttpd

Is it possible to extract the TLS session keys from Lighttpd so we are able to decrypt traffic captured by tcpdump? Alternatively, we could disable PFS but we prefer not to do that.
Georg Schölly
  • 292
  • 3
  • 14
1
vote
2 answers

Migrate Apache Authorization Header rule to Lighttpd

My web server is running PHP applications with lighttpd and PHP-FPM for years. Now, after a 3rd-Party software upgrade, I must include some rules in order to activate a REST API. SetEnvIf Authorization .+…
LeonanCarvalho
  • 640
  • 2
  • 6
  • 22
1
vote
1 answer

SNI for Multiple Hosts on Lighttpd

Inherited lighttpd server, I'm somewhat clueless on it. Trying to use SNI to install a 3rd SSL cert without another IP. Currently the SSL config in lighttpd.conf looks like so: $SERVER["socket"] == ":443" { ssl.engine = "enable" ssl.pemfile =…
the.s.brom
  • 41
  • 5
1
vote
1 answer

Error "SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate" on lighttpd

I'm using a valid certificate but I'm not able to get client certificate. The lighttpd service fails with error: (connections-glue.c.200) SSL: 1 error:140890C7:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate My config…
LeonanCarvalho
  • 640
  • 2
  • 6
  • 22
1
vote
1 answer

Serve application with non standard index file from different document-root

I am trying to configure lighttpd to serve an application (let's call it "foo") that is using a non-standard index page (e.g. "bar.html") as it's start page from a different document-root than the rest of the pages. Here is what I…
scherand
  • 183
  • 9
1
vote
1 answer

How to disable lighttpd access log?

I'm using lighttpd and access.log is increasing too fast. Is there a good way to disable access log? At the lighttpd.conf seems that is possible to disable "mod_accesslog" in the "server.modules", but the comment advices to don't do. lighttpd 1.4.35
user376025
  • 11
  • 1
  • 2
1
vote
1 answer

HTTP Strict Transport Security global cert refresh

So, I probably screwed up when I set up HSTS and didn't refresh my certificate in time. Browsers now have a cache of my old certificate and don't seem to be contacting my server to request a fresh cert. Is there some server trick to force clients…
PaulProgrammer
  • 131
  • 6
1
vote
1 answer

Lighttpd Skip auth for ip

I have setup a login for a domain with lighttpd 1.4.31, no problem. Now, I would like to skip this login for a single IP address. I have tried a few different configs I found in the documentation and online but somehow it is not…
PiTheNumber
  • 345
  • 2
  • 5
  • 18
1
vote
1 answer

Lighttpd: specify two http hosts with same document root?

What is the best or proper way to specify two http hosts with the same document root on Lighttpd? For example, to serve a domain at example.org and www.example.org. Given the following in the lighttpd.conf for one host: $HTTP["host"] ==…
user981178
  • 445
  • 1
  • 3
  • 13
1
vote
1 answer

https not recognized by PHP when lighttpd url.rewrite used

I'm deploying a PHP website using lighttpd. To get nice URLs working, I've put this into the configuration file: url.rewrite = ( "^/(?!(wp-admin|wp-includes|wp-content))/(.*)" => "/index.php?$1", ) This works well except of the following side…
Philipp Zedler
  • 121
  • 6
1
vote
1 answer

lighttpd authentication before redirection from https to http

I would like to redirect from https to http after authentication so credentials go through a secure channel but everything else is transmitted in plain. Here it is the relevant part of the conf file: ## Auth #…
Albert
  • 11
  • 1
1 2 3
…
39 40