Package: lighttpd
Version: 1.4.49-1.1
Severity: minor
If 10-ssl.conf is enabled, starting lighttpd creates a warning:
(configfile.c.60) Warning: please add "mod_openssl" to server.modules
list in lighttpd.conf. A future release of lighttpd 1.4.x *will not*
automatically load mod_openssl and lighttpd *will not* use SSL/TLS
where your lighttpd.conf contains ssl.* directives
This can be fixed by adding the following line to the 10-ssl.conf:
server.modules += ( "mod_openssl" )
-- System Information:
Debian Release: buster/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.15.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8),
LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages lighttpd depends on:
ii libattr1 1:2.4.47-2+b2
ii libbz2-1.0 1.0.6-8.1
ii libc6 2.27-2
ii libfam0 2.7.0-17.2+b1
ii libldap-2.4-2 2.4.45+dfsg-1
ii libmariadbclient18 1:10.1.35-1
ii libpcre3 2:8.39-9
ii libssl1.1 1.1.0g-2
ii lsb-base 9.20170808
ii mime-support 3.60
ii zlib1g 1:1.2.8.dfsg-5
Versions of packages lighttpd recommends:
ii spawn-fcgi 1.6.4-2
Versions of packages lighttpd suggests:
ii apache2-utils 2.4.29-2
pn lighttpd-doc <none>
ii openssl 1.1.0g-2
pn php-cgi <none>
pn rrdtool <none>
-- Configuration Files:
/etc/lighttpd/conf-available/10-ssl.conf changed:
server.modules += ( "mod_openssl" )
$SERVER["socket"] == "0.0.0.0:443" {
ssl.engine = "enable"
ssl.pemfile = "/etc/lighttpd/server.pem"
ssl.cipher-list =
"ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM"
ssl.honor-cipher-order = "enable"
}
/etc/lighttpd/lighttpd.conf changed:
server.modules = (
"mod_access",
"mod_alias",
"mod_compress",
"mod_rewrite",
"mod_cgi",
"mod_fastcgi",
"mod_proxy"
)
server.document-root = "/var/www"
server.upload-dirs = ( "/var/cache/lighttpd/uploads" )
server.errorlog = "/var/log/lighttpd/error.log"
server.pid-file = "/var/run/lighttpd.pid"
server.username = "www-data"
server.groupname = "www-data"
server.port = 80
index-file.names = ( "index.php", "index.html",
"index.lighttpd.html" )
url.access-deny = ( "~", ".inc" )
static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" )
dir-listing.encoding = "utf-8"
server.dir-listing = "enable"
compress.cache-dir = "/var/cache/lighttpd/compress/"
compress.filetype = ( "application/javascript", "text/css",
"text/html", "text/plain" )
include_shell "/usr/share/lighttpd/use-ipv6.pl " + server.port
include_shell "/usr/share/lighttpd/create-mime.assign.pl"
include_shell "/usr/share/lighttpd/include-conf-enabled.pl"
include_shell "/etc/lighttpd/include-conf-sites.pl"
-- no debconf information
