Re: stunnel-ed httpd

[email protected] Mon, 4 Mar 2002 16:34:46 -0600
Newsgroups gmane.comp.djb.publicfile
Message-ID <[email protected]>
On Mon, Mar 04, 2002 at 10:29:46PM +0100, clemensF wrote:
> > Paul Jarc:
> 
> > Eh, ucspi-ssl won't change the URL, of course, though you might like
> > it anyway.  I guess you need to patch httpd regardless.
> 
> true.  publicfile's httpd doesn't accept https:// unpatched.  and i think
> ucspi-ssl is the way to go, though i'd be interested if stunnel also cuts
> it.

Well, I patched publicfile with 

http://www.superscript.com/patches/publicfile.sslserver

and I start httpd now with

#!/bin/sh
exec 2>&1
exec envuidgid root softlimit -o20 -d50000 tcpserver -vDRHl0 -b50 -c100 0 443 stunnel -f -l /usr/local/publicfile/bin/httpd /publics/file

but no dice: I get `file does not exist' when I try to access
https://www.csi.hu/index.html. Yes, I did restart the httpds server. 

I have

# ls -l /publics/file/
total 4
drwxr-sr-x    2 root     root         4096 Mar  4 13:30 0/
lrwxrwxrwx    1 root     root            1 Mar  4 13:04 141.225.37.221 -> 0/
lrwxrwxrwx    1 root     root            1 Mar  4 13:36 thales.memphis.edu -> 0/
lrwxrwxrwx    1 root     root            1 Mar  4 13:04 www.csi.hu -> 0/

and 

# cat /publics/file/www.csi.hu/index.html 
oki

so I guess I have to go with ucspi-ssl.  Still, curious about why the
above setup with stunnel would not work...

Mate