How to set up letsencrypt with multiple domains on a lighttpd server with ubuntu 16.04

lighttpdubuntu-16.04

I'm trying to set up letsencrypt on lighttpd from scratch. I currently run lighttpd on 16.10 xenial and want to move over existing sites to https from http. I know there's an automatic setup process for Apache and ngnix, but I'm disinclined to move things over. I have half a dozen hostnames, over a pair of domains hosted using virtualhosts, and with individual blocks per host.

How would I do this?

Best Answer

Most tools support a "dumb webserver" mode, in which they provide files that need to be served by your webserver in the /.well-known/acme-challenge/ directory.

It is also possible to generate that content with some dynamic language (lua, php, ...: concat the request filename, '.' and the public key hash)

Related Solutions

Web-server – How to redirect multiple domains to a single domain in lighttpd

Something like:

$HTTP["host"] =~ "firsthost.example.com|secondhost.example.com|otherhost.example.net" {
  url.redirect = ( "^/(.*)" => "http://realdomain.example.org/$1" )
}

should work - as covered in the man page ;)

Ssl – set multiple SSL certificates for virtual hosts with Lighttpd

Please look at Lighttpd SNI, Server Name Indication is supported by Lighttpd since 1.4.24, which will allow more than one vhost per ip for SSL as pointed out by jae. Browser support is limited though including IE on XP.

Old answer: You can only setup one SSL certificate per ip/port pair that you use. If you have one IP address and multiple virtual hosts on the same ip address it will not work except if you get a SAN certificate with all the virtual host/domain contained in the SAN certificate. This will get expensive.

The reason for this limitation is that the web server needs to decrypt the SSL request to see which host the client is trying to access. This will be done using the SSL cert bound to that port. The client will then get a different certificate which will not match the host/domain the client is expecting.

This will cause all sorts of security warnings on the client side.

Best Answer

Related Solutions

Web-server – How to redirect multiple domains to a single domain in lighttpd

Ssl – set multiple SSL certificates for virtual hosts with Lighttpd

Related Topic