That is often a requirement. Consider a system that must start up
without manual intervention (web site) after a power failure or
equivalent. Doesn't help much if a password is requirested to be
entered. Providing that careful attention is paid to securing
the box and the files on it (i.e. keyfile, server cert, and the
inability for unauthorized users to get at these files), this
is often the only way to realistically configure a system.

Cheers, Thomas

ÀîÎä wrote:
> 
> but that means no password protection.
> 
> >Usually, it is not good to remove the pass phase from the keyfile, but
> >technically speaking, you can do this by "openssl rsa -in oldkey.pem
> >-out keyfile_without_pass.pem".
> >
> >Hazel
> >
> >On Mon, 10 Apr 2000 12:16:23 -0700
> >Tugrul Bingol <[EMAIL PROTECTED]> wrote:
> >
> >> Hello,
> >>
> >> I used openssl in a secure rexecd executed through inetd. Normally each
> >> time I run the server (secure rexecd) it asks me "PEM pass phrase".
> >> However I want to avoid from it since it is run through inetd. In other
> >> words, I don't want "PEM pass phrase" be asked me for the server side. I
> >> tried -passin and -passout options while creating the certs but it seems
> >> that they work just during the creation.
> >>
> >> Can somebody help me about it?
> >>
> >> Thanks...Tugrul
> >>
> >>
> >> ______________________________________________________________________
> >> OpenSSL Project                                 http://www.openssl.org
> >> User Support Mailing List                    [EMAIL PROTECTED]
> >> Automated List Manager                           [EMAIL PROTECTED]
> >>
> >
> >______________________________________________________________________
> >OpenSSL Project                                 http://www.openssl.org
> >User Support Mailing List                    [EMAIL PROTECTED]
> >Automated List Manager                           [EMAIL PROTECTED]
> 
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]

-- 
------------------------------------------------------------
Thomas Reinke                            Tel: (905) 331-2260
Director of Technology                   Fax: (905) 331-2504
E-Soft Inc.                         http://www.e-softinc.com
Publishers of SecuritySpace     http://www.securityspace.com
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to