The patched lighttpd is merely a study for a light CMP responder to eventually also provide server-side CMP capabilities in OpenSSL.
I'd be happy if you decide to continue on it but Insta/EJBCA will usually be easier.
--> adding information like this to the README
Moved lighttpd-cmpserver to "experimental" directory.