Installing SSL Certificates to Lighttpd
Installing an SSL Certificate I purchased from Comodo/InstantSSL into
lighttpd is easy but I had a funny problem recently when firefox kept
telling me:
sec_error_unknown_issuer
and something to do with a missing
issuer chain. I cannot get my server to recreate the problem but to
remedy the problem I found a post
on stack overflow with
a
comment
telling me about the ssl.ca-file
option which seems to
allow for inclusion of a ca file that might help determine the
certificate chain.
I concatenated my Private Key with my certificate, the file
AddTrustExternalCARoot.crt
and
COMODOHigh-AssuranceSecureServerCA.crt
in that
order into secureserver.pem
then edited
10-ssl.conf
to look like this:
$SERVER["socket"] == "0.0.0.0:443" { ssl.engine = "enable" ssl.pemfile = "/etc/lighttpd/secureserver.pem" ssl.ca-file = "/etc/lighttpd/COMODOHigh-AssuranceSecureServerCA.crt" server.document-root = "/var/www/secure.pktsolutions.com" }
Well, as I said I cannot recreate the problem but will try to recreate it when I setup my next SSL server and update this post.