Printable View
Ok so I've reinstalled lighttpd (was not worki with/without ssl) now http connections work like they should. Setting lan_httport to 8080 did the trick but i had to manually forward all incoming http request to 192.168.1.1:80 to make it work after changing server.port to 80. Still no connection thru ssl.
On internal ip (192.168.1.1) https works like a charm.
Right... so how do you have the regular iptables for forwarding the webserver?Quote:
Originally Posted by cichy
?Quote:
iptables -t nat -A VSERVER -p tcp -m tcp --dport 8081 -j DNAT --to-destination 192.168.1.1:8081
Are you sure your modem is set up for forwarding https?
I've attached my post-firewall file, also in error log i foundi think this is the problem.Code:2010-09-09 21:39:26: (connections.c.299) SSL: 1 error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request
2010-09-09 21:40:12: (connections.c.299) SSL: 1 error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request
2010-09-09 21:42:24: (connections.c.299) SSL: 1 error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request
2010-09-09 21:42:27: (connections.c.299) SSL: 1 error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request
that indeed is a problem...Quote:
Originally Posted by cichy
I'm not sure if I'm getting this, but lighttpd says it fails to do https because the browser makes a http request?:confused:
The weird thing is, everything is set up according to the lighty wiki: http://redmine.lighttpd.net/projects.../wiki/Docs:SSL
is your lighttpd package up to date?
my lighttpd -V output:
default ipkg updating and upgrading if you're not aware of it:Code:lighttpd -V
lighttpd/1.4.28 (ssl) - a light and fast webserver
Build-Date: Aug 22 2010 18:32:55
Event Handlers:
+ select (generic)
+ poll (Unix)
- rt-signals (Linux 2.4+)
+ epoll (Linux 2.6)
- /dev/poll (Solaris)
- kqueue (FreeBSD)
- libev (generic)
Network handler:
+ writev
+ mmap support
Features:
+ IPv6 support
+ zlib support
+ bzip2 support
+ crypt support
+ SSL Support
+ PCRE support
+ mySQL support
+ LDAP support
+ memcached support
- FAM support
+ LUA support
+ xml support
+ SQLite support
- GDBM support
Quote:
ipkg update
ipkg upgrade
Hello Badyto, I updated the how-toQuote:
Originally Posted by badyto
I tested it on my own spare router, and it should work without any problems:)
And this is mine lighttpd -V result:
As You can see they are identical. Everything is up2date so no mistakes because of wrong software. I've also studied the site You gave here and without a doubt it should work but it ain't.Code:lighttpd/1.4.28 (ssl) - a light and fast webserver
Build-Date: Aug 22 2010 18:32:55
Event Handlers:
+ select (generic)
+ poll (Unix)
- rt-signals (Linux 2.4+)
+ epoll (Linux 2.6)
- /dev/poll (Solaris)
- kqueue (FreeBSD)
- libev (generic)
Network handler:
+ writev
+ mmap support
Features:
+ IPv6 support
+ zlib support
+ bzip2 support
+ crypt support
+ SSL Support
+ PCRE support
+ mySQL support
+ LDAP support
+ memcached support
- FAM support
+ LUA support
+ xml support
+ SQLite support
- GDBM support
Need some help.
I've updated PHP to latest version and recompiled eAccelerator from scratch but this didn't helped at all, fcgi process dies in a second after lighttpd restart.
Maybe some clues what to do?Code:2010-12-29 21:33:01: (log.c.166) server started
2010-12-29 21:33:09: (mod_fastcgi.c.2568) unexpected end-of-file (perhaps the fastcgi process died): pid: 3751 socket: unix:/tmp/php-fcgi.sock-3
2010-12-29 21:33:09: (mod_fastcgi.c.3309) child exited, pid: 3751 status: 254
2010-12-29 21:33:09: (mod_fastcgi.c.3356) response not received, request sent: 818 on socket: unix:/tmp/php-fcgi.sock-3 for /index.php?, closing connection
2010-12-29 21:33:11: (mod_fastcgi.c.2568) unexpected end-of-file (perhaps the fastcgi process died): pid: 3752 socket: unix:/tmp/php-fcgi.sock-3
2010-12-29 21:33:11: (mod_fastcgi.c.3356) response not received, request sent: 818 on socket: unix:/tmp/php-fcgi.sock-3 for /index.php?, closing connection
2010-12-29 22:45:25: (mod_fastcgi.c.1734) connect failed: Connection refused on unix:/tmp/php-fcgi.sock-3
2010-12-29 22:45:25: (mod_fastcgi.c.3027) backend died; we'll disable it for 1 seconds and send the request to another backend instead: reconnects: 0 load: 1
2010-12-29 22:45:28: (mod_fastcgi.c.2568) unexpected end-of-file (perhaps the fastcgi process died): pid: 3756 socket: unix:/tmp/php-fcgi.sock-3
2010-12-29 22:45:28: (mod_fastcgi.c.3356) response not received, request sent: 818 on socket: unix:/tmp/php-fcgi.sock-3 for /index.php?, closing connection
2010-12-29 23:02:51: (server.c.1512) server stopped by UID = 0 PID = 3767
2010-12-29 23:02:53: (log.c.166) server started
2010-12-29 23:21:41: (server.c.1512) server stopped by UID = 0 PID = 3798
2010-12-29 23:22:44: (log.c.166) server started
2010-12-29 23:23:08: (mod_fastcgi.c.1734) connect failed: Connection refused on unix:/tmp/php-fcgi.sock3808-7
2010-12-29 23:23:08: (mod_fastcgi.c.3027) backend died; we'll disable it for 1 seconds and send the request to another backend instead: reconnects: 0 load: 1
2010-12-29 23:23:13: (mod_fastcgi.c.2568) unexpected end-of-file (perhaps the fastcgi process died): pid: 3820 socket: unix:/tmp/php-fcgi.sock3808-7
2010-12-29 23:23:13: (mod_fastcgi.c.3309) child exited, pid: 3820 status: 254
2010-12-29 23:23:13: (mod_fastcgi.c.3356) response not received, request sent: 818 on socket: unix:/tmp/php-fcgi.sock3808-7 for /index.php?, closing connection
download some fresh sources if you haven't already.Quote:
Originally Posted by cichy
Also, try to delete the old eaccelerator first before you make install:
not sure, but over time ipkg packages changed quite a bitQuote:
rm /opt/lib/php/extensions/eaccelerator.so
In fact, they solved a lot of workarounds I wrote here in the how-to
so, I had to remove the workarounds again:p
if all else fails, you might want to try the ipkg version of eaccelerator
I've tried the ipkg source version first but no effect still errors and php dies after a sec. Now I'm recompiling eaccelerator from scratch from latest svn build, maybe this will help. Also, strange thing, when i've disabled eaccelerator in eaccelerator.ini and disabled mod_fcgi in lighttpd.conf I can't launch any file from server i.e *.html file, I'm getting 403 - access denied.
huh thats weird:confused:Quote:
Originally Posted by cichy
have you checked the extra config files in /opt/etc/lighttpd/conf.d ?
Yep there're 2 files 1st default (empty) and 2nd fcgi with part from lighttpd.conf of mod_fcgi. Something like that:
After deleting eaccelerator.so i could query php -i, and now it worked bot warned me about missing module of eaccelerator, maybe this recompiling helps :)Code:fastcgi.server = ( ".php" =>
( "localhost" =>
(
"socket" => "/tmp/php-fcgi.sock",
"bin-path" => "/opt/bin/php-fcgi",
"max-procs" => 1,
"bin-environment" => (
"PHP_FCGI_CHILDREN" => "3",
"PHP_FCGI_MAX_REQUESTS" => "4000"
)
)
)
)
sounds promising:)Quote:
Originally Posted by cichy
that fcgi file already configures your php, so you shouldn't reactivate it in the main config file (like in the old how to)
Did something like this
So it uses part from .conf file without external modules/files. Now waiting to configure it once again because of missing module :( Hope this will help :)Code:# Configuration from other optware packages
#include_shell "cat /opt/etc/lighttpd/conf.d/*.conf"
And recompiling didn't helped at all, still no fcgi engine running and got this error:
Maybe some clues how to solve this issue.Code:(plugin.c.131) Cannot load plugin mod_fastcgi more than once, please fix your config (we may not accept such configs in future releases)
sounds like you have the conf.d fcgi script included, and uncommented it in the main config file.Quote:
Originally Posted by cichy
so you need to uncomment the "mod_fastcgi" in the server.modules list.
because in the php-fcgi.conf file it says:
:)Quote:
server.modules += ( "mod_fastcgi" )