lighttpd-ssl.conf

   1 # lighttpd support for SSLv2 and SSLv3
   2 #
   3 # Documentation: http://redmine.lighttpd.net/projects/lighttpd/wiki/Docs:SSL
   4
   5 # mitigate against BEAST attacks
   6 # http://blog.ivanristic.com/2011/10/mitigating-the-beast-attack-on-tls.html
   7 #ssl.cipher-list = "ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4-SHA:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM"
   8
   9 $SERVER["socket"] == ":443" {
  10         ssl.engine = "enable"
  11         ssl.pemfile = "/etc/lighttpd/server.pem"
  12 #       ssl.ca-file = "/etc/certs/ca-certificates.crt"
  13
  14         $HTTP["useragent"] =~ "MSIE" {
  15                 server.max-keep-alive-requests = 0
  16         }
  17 }