Lighttpd and SSL set up Instructions

SSL setup:

openssl genrsa -out /etc/lighttpd/ssl/router.key 2048 openssl req -new -key /etc/lighttpd/ssl/router.key -out /etc/lighttpd/ssl/router.csr -subj /CN=gw.home.lan openssl x509 -req -days 1826 -in /etc/lighttpd/ssl/router.csr -signkey /etc/lighttpd/ssl/router.key -out /etc/lighttpd/ssl/router.crt cat /etc/lighttpd/ssl/router.key /etc/lighttpd/ssl/router.crt > /etc/lighttpd/ssl/router.pem

Sources: http://moblog.wiredwings.com/archives/20110323/securing-lighttpd.html http://redmine.lighttpd.net/projects/1/wiki/Docs_SSL

To remove uhttpd and Luci:

1. opkg remove uhttpd –force-removal-of-dependent-packages
2. rm -r /wwww/cgi-bin/luci
3. rm -r /wwww/luci-static
4. rm /www/index.html

To host from lighttpd and add CSP Headers:

1. opkg update
2. opkg install lighttpd lighttpd-mod-cgi lighttpd-mod-setenv
3. from /etc/lighttpd/lighttpd.conf file A. uncomment `#server.modules=(` B. uncomment `# “mod_setenv”,` C. uncomment `# “mod_cgi”,` C. uncomment `#)` at the bottom of the block D. add lines:
   1. `$HTTP[“url”] =~ “^/cgi-bin” { cgi.assign = ( “” => “” ) }`
   2. `$SERVER[“socket”] == “:443” { ssl.engine = “enable” ssl.pemfile = “/etc/lighttpd/ssl/router.pem” }`
   3. `setenv.add-response-header = ( “X-Content-Security-Policy” => “allow ‘self’”, “X-Frame-Options” => “SAMEORIGIN”, “X-Content-Type-Options” => “nosniff” )`