# Make mysqll frontend available in all domains
alias.url += ("/mysql" => "/usr/share/phpmyadmin")
+$SERVER["socket"] == ":443" {
+ ssl.engine = "enable"
+ # The CA certificates (in particular, this contains the intermediate
+ # certificate used by startcom). It seems that even without this
+ # option, it already works, probably because openssl ships some
+ # certificates. But, let's put it here to be safe anyway.
+ ssl.cafile = "/etc/lighttpd/ssl/ca/startssl-all-ca.pem"
+ # Use the mail.stdout.nl certificate as the default certificate (for
+ # non-SNI browsers and domains without their own certificate), since
+ # it is currently the only one we have anyway.
+ ssl.pemfile = "/etc/lighttpd/ssl/mail.stdout.nl.pem"
+}
+
#### external configuration files
## mimetype mapping
include_shell var.conf-dir + "/scripts/create-mime.assign.pl"