I just realized that the latest Lighttpd you may find in FreeBSD ports (and in all Linux distros actually) is a bit buggy. Apparently there is an error in network.c which will crash your HTTPS.

Once you upgrade and restart Lighty you’ll get something like this:

2010-03-05 10:23:01: (network.c.529) SSL: error:00000000:lib(0):func(0):reason(0)

And that’s it. Lighty will die. Well, here is a quick fix till new port is released:

cd /usr/ports/www/lighttpd
make install clean then Ctrl + C when it starts configuring
cd work/lighttpd-1..26/src/
rm network.c
fetch http://redmine.lighttpd.net/projects/lighttpd/repository/revisions/2716/
raw/branches/lighttpd-1.4.x/src/network.c
cd ../../ && make install clean

And that’s it. It will fix the issue.

Tags: error, HTTPS, lighttpd, ssl

Posted in BSD Security Sysadmin
1 Comment Posted by riddler