Hi all,

a new package is available for testing : mini-httpd
It was built with SSL support enabled and patched to work with MatrixSSL.
The package contains a fake SSL certificate and a startup script. It should work out of the box. Using haserl, I even managed to upload some files to my router with a form. I'll try to post some test pages sooon...

As usual, feedback welcome 

--
Nico

This is very nice, Nico.

Can this mini_httpd/matrixssl/hasrl thingie be used for e.g. interface-wrt and assorted other web interface projects? I imagine it being very useful to be able to upload files securely to the device. I for one would already have a use for it for uploading x.509 certificates, for instance.

Hi PolarWolf,

I hope so...

The haserl source currently limits uploads to 2MB, so no firmware uploads for now.

Sure. By the way, the package currently contains a demo certificate for testing, but sould definitively provide a unique and safe one at install. I was looking at OpenSCEP, do you (and others) have experiences with that sort of thing ?

--
Nico

Just what I have been looking for, Thanks Nico.

bob

Hi all !

Can't you change the limit size of the maximum upload ?
A minimal firmware is around 1.4mb currently.

It will be very great to provide a linksys-like web interface using all these tools, by the way I wonder if there will be enough space left on the box for additional softwares.

Hi Florian,

haserl was updated to accept uploads up to 8MB.

Here's what is needed :

-rw-r--r--    1 root     root          110 Jan 14  2005 /etc/mini_httpd.conf
-rw-------    1 root     root         1721 Jan 14  2005 /etc/mini_httpd.pem
-rwxr-xr-x    1 root     root        23080 Jan 14  2005 /usr/bin/haserl
lrwxrwxrwx    1 root     root           21 Jan  1 03:14 /usr/lib/libmatrixssl.so.1 -> libmatrixssl.so.1.2.2
-rw-r--r--    1 root     root        99676 Jan  1 03:14 /usr/lib/libmatrixssl.so.1.2.2
-rwxr-xr-x    1 root     root        74540 Jan 14  2005 /usr/sbin/mini_httpd

This is around 200 KB.

--
Nico

It's really small actually.

I'll test if the interface-wrt scripts are usable out of the box from the package.

The package was updated to fix a bug leaving background processes when running CGI scripts over SSL.

A lengthy test loop was run on the router (around 250k https connection) at a 3 conn/sec rate and the router was still performing OK, without memory leaks. Thanks Jon for reporting the bug and running the tests 

Now, I'd like to hear about haserl. Anyone started some experiments with it ?

--
Nico

Does this problem occur only for CGI processes executed with SSL or with all CGI processes.

Bob

The bug fixed is related to SSL connections only : processes were left in an endless loop reading from the network, without noticing the connection was closed.

--
Nico

It's ok the default config works fine for me. Let's move the interface-wrt to haserl

Hey Nico (or anyone else who might know... :-)   It seems that mini-httpd chokes and refuses to serve embedded content (e.g. gif) if those files are larger than about 18KB.  Am I doing something wrong or is mini-httpd really this tight on content?  Any other significant limits you know of?

(Last edited by t35tB0t on 1 May 2005, 06:07)

It looks like interface-wrt is dead in the water.. Any updates, similar projects, etc.?

Depending on the final capabilities of haserl or any other php-style cgi-scripts, I may be interested in working on the port.

Can you tell me how?
I really want to compile mini_httpd with SSL, but when I work with openssl it's too big.
Waiting for your reply!