Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to only enable SSL on lighttpd by checking if the remoteip requesting a page is x or x or x ip?

I know this can be done in nginx, but I am trying lightTPD at the moment.

share|improve this question
up vote 1 down vote accepted

No - because SSL encapsulates the HTTP stream - the 2 nodes must already be speaking over SSL before the webserver finds out what page the client wants. And the SSL enabled socket must be listening before a client can connect to it - at which point you don't know what clients will connect.

know this can be done in nginx


Neither enabling SSL for a specific URL or a specific client can be done because that's not how it works. You may as well ask why your car doesn't do 200mph and 400mpg.

You can firewall the port so that only specific IP addresses can connect - but that's a different semantic from what you asked.

You can choose to only make certain content available via the SSL virtual host.

If you drop it from high enough, you wil get that kind of performance from your car.

share|improve this answer
On nginx I had "allow; deny all;" under the ssl server config which seemed to do it. Or is this just imitating what a firewall would do? ... I thought that both the client and server can decrypt the data, it's just the guys in-between that can't as they don't have the correct cert... so why can't lighttpd use the ssl cert to decrypt the url? – Mint Feb 9 '11 at 19:10

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.