Installing SSL Certificates to Lighttpd
Installing an SSL Certificate I purchased from Comodo/InstantSSL into
lighttpd is easy but I had a funny problem recently when firefox kept
telling me:
sec_error_unknown_issuer and something to do with a missing
issuer chain. I cannot get my server to recreate the problem but to
remedy the problem I found a post
on stack overflow with
a
comment
telling me about the ssl.ca-file option which seems to
allow for inclusion of a ca file that might help determine the
certificate chain.
I concatenated my Private Key with my certificate, the file
AddTrustExternalCARoot.crt and
COMODOHigh-AssuranceSecureServerCA.crt in that
order into secureserver.pem then edited
10-ssl.conf to look like this:
$SERVER["socket"] == "0.0.0.0:443" {
ssl.engine = "enable"
ssl.pemfile = "/etc/lighttpd/secureserver.pem"
ssl.ca-file = "/etc/lighttpd/COMODOHigh-AssuranceSecureServerCA.crt"
server.document-root = "/var/www/secure.pktsolutions.com"
}
Well, as I said I cannot recreate the problem but will try to recreate it when I setup my next SSL server and update this post.
