1. 创建SSL证书

openssl req -new -x509 \
-keyout ideawu.net.pem -out ideawu.net.pem \
-days 99365 -nodes

把 ideawu.net.pem 拷贝到 /home/work/lighttpd-1.5/conf/

  2. lighttpd配置

$SERVER["socket"] == ":443" {
    $HTTP["host"] == "ideawu.net" {
        ssl.engine = "enable"
        ssl.pemfile = "/home/work/lighttpd-1.5/conf/ideawu.net.pem"
    }
}

  3. 访问:

https://localhost:443

  4. API和工具使用:

wget –no-check-certificate https://localhost:443

curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);

补充: Apache HTTPS
openssl genrsa 1024 > server.key
openssl req -new -key server.key > server.csr
openssl req -x509 -days 99365 -key server.key -in server.csr > server.crt