-
Notifications
You must be signed in to change notification settings - Fork 0
Embedded Linux
phuonglab edited this page Aug 2, 2021
·
5 revisions
Table of Contents
-
Enable ssl
⇒ Change common name during generatecd /etc/lighttpd/certs openssl req -new -x509 -keyout lighttpd.pem -out lighttpd.pem -days 365 -nodes chmod 400 lighttpd.pemlighttpd.pemkey to matching domain name192.168.123.196 -
Then edit /etc/lighttpd/lighttpd.conf and add:
$SERVER["socket"] == ":443" { ssl.engine = "enable" ssl.pemfile = "/etc/lighttpd/certs/lighttpd.pem" }
-
Curl test:
echo "" | openssl s_client -servername 192.168.123.196 -connect 192.168.123.196:443 2>/dev/null </dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > client.key curl -v --cacert client.key https://192.168.123.196:443/deviceInfo