How do I activate SSL on the Urchin Webserver?

The Urchin webserver that ships with Urchin 4.100 and later is capable of encrypting communication via SSL. To enable SSL, you will need to have either a valid certificate signed by a certificate authority or a self-signed certificate.

The process for enabling SSL in the Urchin webserver are as follows:

1. Copy your SSL certificate file into the Urchin var directory and name it server.crt
2. Copy your SSL key file into the Urchin var directory and name it server.key
3. Edit the urchinwebd.conf.template file located in the Urchin var directory. Change the ServerName directive from localhost to the name of your webserver. For instance:

   ServerName: www.urchin.com

   NOTE: The ServerName in the urchinwebd.conf.template file needs to match the name of the server that is in the certificate file.
4. Start or restart the webserver using urchinctl with the -e option. Urchinctl is located in the Urchin bin directory. The -e option instructs urchinctl to enable SSL in the webserver. For example, to restart the webserver with SSL enabled, use:

   urchinctl -e restart

   To start the server without SSL enabled, just remove the -e option from the urchinctl command.

You should now be able to access your SSL enabled server using https://servername.domain.com:port/

NOTE: Customizing the SSL settings in the urchinwebd.conf.template may result in problems that could prohibit the webserver from starting.