Èíîñòðàííûå èñòî÷íèêè:
http://wl500g.info/showpost.php?p=47181&postcount=8
http://wl500g.info/showpost.php?p=47928&postcount=10
Èñõîäíûå äàííûå - íàñòðîåííàÿ è ðàáîòàþùàÿ âýá ìîðäà òðàíñìèøí äëÿ äîñòóïà "ñíàðóæè", âñå ýòî î÷åíü õîðîøî îïèñàíî â ïåðâîì ñîîáùåíèè.
Èòàê ïðèñòóïèì, äëÿ íà÷àëà óñòàíîâèì âñå íåîáõîäèìûå ïàêåòû:
Code:
ipkg install lighttpd
ipkg install openssl
ipkg install openldap-libs
ipkg install apr-util
Ðàçàðõèâèðóåì ïðîãðàììêó êîòîðàÿ â àòòà÷å, è êîïèðóåì êóäà íàäà (Reyter`y ñïàñèáà çà ñîâåò) ëèáî óñòàíàâëèâàåì ïàêåò apache.
Code:
tar -xzvf ./htdigest.tar.gz
cp ./htdigest /opt/sbin/htdigest
Ñîçäàåì ñåðòèôèêàò:
Code:
cd /opt/var/run
openssl req -new -x509 -keyout lighttpd.pem \
-out lighttpd.pem -days 3650 -nodes
Çàäàäóò íåñêîëüêî âîïðîñîâ, ïèøèòå, ÷òî æåëàåòå íóæíûì
Code:
Country Name (2 letter code) [AU]:RU
State or Province Name (full name) [Some-State]:Bobruisk state
Locality Name (eg, city) []:Bobruisk
Organization Name (eg, company) [Internet Widgits Pty Ltd]:Roga and kopita Inc.
Organizational Unit Name (eg, section) []:Predsedatel
Common Name (eg, YOUR name) []:Zitc
Email Address []:zitc@rogaadnkopita.com
óáúåì ñòàðûé âýá ñåðâåð:
Code:
killall busybox_httpd
çàêîììåíòèðóåì (èëè óäàëèì) çàïóñê busybox_httpd è âñòàâèì çàïóñê lighttpd â ôàéëå /tmp/local/sbin/post-mount
Code:
#/opt/etc/init.d/S80busybox_httpd start
/opt/etc/init.d/S80lighttpd start
Âñå íåîáõîäèìîå ïîñòàâèëè, ïîðà è íàñòðîèòü )
Ñîçäàåì ôàéë íàñòðîéêè:
Code:
cp /opt/etc/lighttpd.conf /opt/etc/lighttpd-ssl.conf
Äëÿ òîãî, ÷òîáû lighttpd çàïóñêàëñÿ ñ íóæíûì íàì êîíôèãîì, èçìåíèì ñòðî÷êó â ôàéëå /opt/etc/init.d/S80lightppd
Code:
DAEMON_OPTS="-f ${prefix}/etc/lighttpd/lighttpd-ssl.conf"
Ðåäàêòèðóåì ôàéë /opt/etc/lighttpd-ssl.conf
Ðàçêîììåíòèðóåì â íåì ñòðî÷êè "mod_access", "mod_auth","mod_cgi", "mod_accesslog" )
Óêàçûâàåì ãäå ëåæàò ôàéëû âåá ìîðäû: server.document-root = "/opt/share/www/"
Óêàçûâàåì òîò æå ïîðò, ÷òî è áûë:
server.port = 8008
Ðàçêîììåíòèðóåì ñåêöèþ cgi.assign, èçìåíÿåì äëÿ ".cgi" ñ "/usr/bin/perl" íà "/bin/sh"
Cìîòðèì ÷òîáû áûëè ñòðîêè: ssl.engine = "enable"
è ssl.pemfile = "/opt/var/run/lighttpd.pem"
òî åñòü ìåñòî ñåðòèôèêàòà.
Èçìåíÿåì:
auth.backend = "htdigest"
auth.backend.htdigest.userfile = "/opt/etc/lighttpd/.passwd"
äàëåå ìåíÿåì ñåêöèþ auth.require, îíà äîëæíà âûãëÿäèòü òàê:
Code:
auth.require = ( "/" =>
(
"method" => "digest",
"realm" => "VU",
"require" => "valid-user"
)
)
Òåïåðü íóæíî ñîçäàòü ôàéë ñ ïàðîëÿìè:
Code:
htdigest -c /opt/etc/lighttpd/.passwd VU medved
ñïðîñÿò ïàðîëü äëÿ ïîëüçîâàòåëÿ medved.
Äîáàâèòü þçåðà:
Code:
htdigest /opt/etc/lighttpd/.passwd VU pupkin
èçìåíèòü ïàðîëü:
Code:
htdigest /opt/etc/lighttpd/.passwd VU medved
Çàïóñêàåì lighttpd:
Code:
/opt/etc/init.d/S80lighttpd start
Ñîõðàíÿåìñÿ:
Code:
flashfs save && flashfs commit && flashfs enable
â áðàóçåðå íàáèðàåì:
https://âàø.ip.àäðåñ:8008
Äîëæåí ñïðîñèòü óñòàíîâèòü ëè ñåðòèôèêàò, à ïîòîì è ïàðîëü
PS Äàííàÿ êîíôèãóðàöèÿ èñïîëüçóåò ìåòîä àâòîðèçàöèè DIGEST, êîòîðûé áîëåå áåçîïàñåí íåæåëè BASIC, îäíàêî îí ìîæåò íå ðàáîòàòü íà "òóïûõ" áðàóçåðàõ è ñèñòåìàõ.
Sorry for my bad Russian
Ïðèâîæó ñâîé êîíôèã lighttpd-ssl.conf åñëè ÷òî íå ïîíÿòíî
Ìäà
Originally Posted by DrLabRus
Reply With Quote
îòêóäà è ñëåäóåò òî ÷òî ÿ ïðèäðàëñÿ! È åñëè òû âíèìàòåëüíî ïðî÷òåøü ìîè ïîñòû òî ÍÈÃÄÅ íå óâèäèøü ÷òî ïîðò 65634 ñóùåñòâóåò
lighttpd+ssl+auth(login/password)
lighttpd+ssl+auth(login/password)
