hi all!

i have investigated a couple of options of httpd with ssl support: lighttpd and thttpd. well, i tried out both lighttpd and thttpd, but i wasn't able to make neither of them working with ssl. with lighttpd, i already had problems running fast-cgi module, and with thttpd + php, it seems i needs stunnel and libssl to make thttpd work with ssl, which i am not clear of how to configure. what i need is httpd with ssl support and uploading mechanism. if anybody has already set up a http server with these features, could you give me a word which one to use (and hints on how to set it up)?

thanks in bundle!

hannahklee

There is mini-httpd with built-in ssl support (using libmatrixssl):

http://tracker.openwrt.org/packages/show.php?id=2257

thanks a lot for the links! in fact, i did check out mini httpd as well ( http://www.acme.com/software/mini_httpd/ ), but, it has no explanation of how to configure the whole thing with cgi and ssl...

The default config file enables ssl. You can also run any cgi located in /www/cgi-bin/ as well

that's a great news! i will try this out then. thanks!

hello!

i have installed all the dependent libraries (libmatrixssl and libpthread) and mini-httpd, but i get the error when i start mini_httpd, and of course, i can't see any of the webpages thru. web browsers.

root@jeju:/etc/init.d# ./mini_httpd start
socket: Address family not supported by protocol
root@jeju:/etc/init.d# mini_httpd: started as root without requesting chroot(), warning only

anybody had a similar errors?

another question: i read the message related to mini_httpd. does it also use libopenssl? i have openSSH already installed, so i already have libssl installed. i want httpd server with minimum space requirement with ssl and some sort of cgi supports. will mini_httpd still the choice in this case?

thanks always,
hannahklee

This is not really an error. The first messages indicates that mini_httpd is not IPv6 aware. And the second message is just a warning.

mini_httpd was buit against matrixssl, a smaller implementation of the SSL protocol, it does not require libopenssl at all, but openssh does, so be aware of what your remove.

If you really need to save space, please use dropbear instead of the openssh suite which is quite heavy for such a sytem.

thanks for the explanation; then, i won't worry about the "warning" msgs.

the reason i installed openssh was because some of window putty client keys were not compatible with dropbear (i've always wondered if this discovery of mine is known to be true or not).

will look into other areas why mini-httpd is not working properly.

merci anyway!
hannahklee

I never had problems using putty with dropbear, but, yeah some dropbear functionnalities are missing and for instance, I can establish connection to some openssh enabled server using the dropbearclient tool.

What kind of issue do you face using mini-httpd ?

Il n'y a pas de quoi

the problem was that i didn't query for "https" -- dummer :-)

thanks for the recommandation of mini-httpd and haserl. i'm utterly satisfied with haserl's upload functionality, mini-httpd's ssl, and the size of both of them!!!

cheers,
hannahklee

Hello,

I'm trying to do the same thing. Having https to work and beeing able to execute CGI scripts.

I didnt find mini-httpd in http://downloads.openwrt.org/whiterussian/packages/ so i looked in http://downloads.openwrt.org/people and found that mbm had a package named : mini-httpd-matrixssl_1.19-1_mips.ipk!

So i got it on my wrt54g and tryed "ipkg install mini-httpd-matrixssl_1.19-1_mips.ipk" but i got an error:
Clearing state_want and state_flag for pkg=mini-httpd-matrixssl (arch_priority=0 flag=16 want=2)
Nothing to be done
An error ocurred, return value: 4.
Collected errors:
Cannot find package mini-httpd-matrixssl.
Check the spelling or perhaps run 'ipkg update'

Which means he tries to search in the default http://downloads.openwrt.org/whiterussian/packages/ directory. Right?

How could i do to install mini-httpd with ssl support?

cheers,
micobros

Why dont you do : ipkg install http://downloads.openwrt.org/people/mbm … 1_mips.ipk ?

thx for your reply

But its the same thing...

The only difference is that openwrt downloads the ipk first:

# ipkg install http://downloads.openwrt.org/people/mbm … 1_mips.ipk
Downloading http://downloads.openwrt.org/people/mbm … 1_mips.ipk
Clearing state_want and state_flag for pkg=mini-httpd-matrixssl (arch_priority=0 flag=16 want=2)
Nothing to be done
An error ocurred, return value: 4.
Collected errors:
Cannot find package mini-httpd-matrixssl.
Check the spelling or perhaps run 'ipkg update'

If i do "wget http://downloads.openwrt.org/people/mbm/mips/packages/mini-httpd-matrixssl_1.19-1_mips.ipk" it works fine... so its a problem with the package? Is there anyway i could fix this?

How about using the backports repository for White Russian RC5?

- OpenWrtDocs/Packages

hooo!

thx olli, it works, wéééééé

My $0.02:

I think it would be a better use of space to include a thin ssl wrapper that could be applied to any application (not just http).

(Anyone have any thoughts? stunnel with matrix-ssl?)