Paul's blog

Reading over the internet you can find a lot of information over all kind of related issues. However, nearly no one is, as far I can see, trying to get and a dualstack connection and a SSL connection working. Due to this, you can try to combine all kind of possible configuration issues, but you will find it is hard to get the correct one.

Getting lighttpd to listen on IPv6 and IPv4 (So dualstack) is not hard at all. Once you have SSL working with that together, it is not that difficult, however trying to find the right option is.

After a long try I came up with the next config file, what has a seperate SERVER["socket"] section for both IPv4 and IPv6. Not ideal, but is works, this site is visible via both IPv4 as IPv6, and thats the thing we wanted. For now iam going to use this, and hope there once will be a better solution. (As note, I also have a required redirect here, as I require the full site to be over SSL).

var.confdir  = "/etc/ssl/cert"
$SERVER["socket"] == "91.196.170.37:443" {
    ssl.engine    = "enable"
    ssl.pemfile   = var.confdir + "/www_domain_nl.pem"
    ssl.ca-file   = var.confdir + "/AddTrustExternalCARoot.crt"
    server.name   = "domain.nl"
    server.document-root = "/var/www2/"
}
#// 2a02:27f8:1001::2:1
$SERVER["socket"] == "[2a02:27f8:1001::2:1]:443" {
    server.use-ipv6 = "enable"
    ssl.engine    = "enable"
    ssl.pemfile   = var.confdir + "/www_domain_nl.pem"
    ssl.ca-file   = var.confdir + "/AddTrustExternalCARoot.crt"
    server.name   = "domain.nl"
    server.document-root = "/var/www2/"
}
$HTTP["host"] == "www.domain.nl" {
    $HTTP["scheme"] == "http" {
            url.redirect = ("^/(.*)" => "https://www.domain.nl/$1")
    }
}