OpenBSD httpd TLS Certificate

Mon, 06 Apr 2026 23:24:03 +0100

Migrating OpenBSD httpd from HTTP to HTTPS

LetsEncrypt offer free TLS certs and have a nice ACME clients to handle auto-renewal. Here’s how to implement on OpenBSD, assuming you have your httpd server up and running on port 80 already.

For example you might have some basic /etc/httpd:

types { include "/usr/share/misc/mime.types" }

server "ndonaghy.com" { 
	listen on * port 80 
	root "/htdocs" 
	location "/stuff/*" { 
		directory { 
			auto index
		} 
	} 
}

Step 1: Add acme-challenge location

Add this location directive to /etc/httpd.conf:

Tls on Niall Donaghy

OpenBSD httpd TLS Certificate

Step 1: Add acme-challenge location