[pkg-lighttpd] Bug#822920: lighttpd: compress should not be in main lightttpd.conf but in conf-available with a LOWER priority than SSI

[J G Miller]

Package: lighttpd
Version: 1.4.35-4
Severity: normal


The Debian package provided  /etc/lighttpd/lighttpd.conf  file contains
a server.modules directive including the compress module.

If a web administrator wishes to also use SSI (via conf-available/10-ssi.conf)
this will not work and the web administrator will be left perplexed as to
why the included content of the web page is not displayed in the browser.

The reason for this only appears to be mentioned as a minor side note comment
on the web page for the official Lighttpd web site SSI module
documentation page at

      <https://redmine.lighttpd.NET/projects/1/wiki/docs_modssi>

and it is NOT included in the documentation provided by the Debian
lighttpd-doc package  1.4.35-4  but obviously should be included due
to its importance.

And the reason is

QUOTE

#Note that if you use mod_compress mod_ssi must come first to function.

UNQUOTE

Therefore in the Debian package, the compress module directive and related
compress parameters must be moved to a separate conf-available/NN-compress.conf
file where NN is a number greater (to force lower priority) than 10
(given to the 10-ssi.conf file) in order for SSI to function if it is enabled.


-- System Information:
Debian Release: 8.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: armel (armv5tel)

Kernel: Linux 3.16.0-4-kirkwood
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages lighttpd depends on:
ii  init-system-helpers         1.22
ii  libattr1                    1:2.4.47-2
ii  libbz2-1.0                  1.0.6-7+b3
ii  libc6                       2.19-18+deb8u4
ii  libfam0                     2.7.0-17.1
ii  libldap-2.4-2               2.4.40+dfsg-1+deb8u2
ii  libpcre3                    2:8.35-3.3+deb8u4
ii  libssl1.0.0                 1.0.1k-3+deb8u4
ii  libterm-readline-perl-perl  1.0303-1
ii  lsb-base                    4.1+Debian13+nmu1
ii  mime-support                3.58
ii  perl                        5.20.2-3+deb8u4
ii  systemd                     215-17+deb8u4
ii  zlib1g                      1:1.2.8.dfsg-2+b1

Versions of packages lighttpd recommends:
ii  spawn-fcgi  1.6.4-1

Versions of packages lighttpd suggests:
ii  apache2-utils  2.4.10-10+deb8u4
ii  openssl        1.0.1k-3+deb8u4
ii  rrdtool        1.4.8-1.2

-- Configuration Files:
/etc/init.d/lighttpd changed [not included]
/etc/lighttpd/conf-available/05-auth.conf [Errno 13] Permission denied: '/etc/lighttpd/conf-available/05-auth.conf'
/etc/lighttpd/conf-available/10-accesslog.conf [Errno 13] Permission denied: '/etc/lighttpd/conf-available/10-accesslog.conf'
/etc/lighttpd/conf-available/10-ssi.conf [Errno 13] Permission denied: '/etc/lighttpd/conf-available/10-ssi.conf'
/etc/lighttpd/lighttpd.conf [Errno 13] Permission denied: '/etc/lighttpd/lighttpd.conf'
/etc/logrotate.d/lighttpd [Errno 13] Permission denied: '/etc/logrotate.d/lighttpd'

-- no debconf information