Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is it possible to only enable SSL on lighttpd by checking if the remoteip requesting a page is x or x or x ip?

I know this can be done in nginx, but I am trying lightTPD at the moment.

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

No - because SSL encapsulates the HTTP stream - the 2 nodes must already be speaking over SSL before the webserver finds out what page the client wants. And the SSL enabled socket must be listening before a client can connect to it - at which point you don't know what clients will connect.

know this can be done in nginx

wrong.

Neither enabling SSL for a specific URL or a specific client can be done because that's not how it works. You may as well ask why your car doesn't do 200mph and 400mpg.

You can firewall the port so that only specific IP addresses can connect - but that's a different semantic from what you asked.

You can choose to only make certain content available via the SSL virtual host.

If you drop it from high enough, you wil get that kind of performance from your car.

share|improve this answer
    
On nginx I had "allow 10.10.10.5; deny all;" under the ssl server config which seemed to do it. Or is this just imitating what a firewall would do? ... I thought that both the client and server can decrypt the data, it's just the guys in-between that can't as they don't have the correct cert... so why can't lighttpd use the ssl cert to decrypt the url? –  Mint Feb 9 '11 at 19:10
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.