Re: [CentOS] Apache SSL key pass phrase question

2009-04-04 Thread Michael A. Peters
Markus Falb wrote: > On Fri, 03 Apr 2009 17:06:38 -0500, Lanny Marcus wrote: > >> Backup servers need *maximum* protection too.. > > agreed, but... > maximum protection would mean turning network off. > but that could turn out as a little inconvinience. > > webservers that cant boot without

Re: [CentOS] Apache SSL key pass phrase question

2009-04-04 Thread Markus Falb
On Fri, 03 Apr 2009 17:06:38 -0500, Lanny Marcus wrote: > Backup servers need *maximum* protection too.. agreed, but... maximum protection would mean turning network off. but that could turn out as a little inconvinience. webservers that cant boot without human intervention are not acceptabl

Re: [CentOS] Apache SSL key pass phrase question

2009-04-03 Thread Lanny Marcus
On Fri, Apr 3, 2009 at 3:25 PM, Paul Heinlein wrote: > On Fri, 3 Apr 2009, Paul Heinlein wrote: >> On a server with untrusted users, however, I'd keep it decrypted. > Er, I'd keep it encrypted. > There's also the issue of how it gets stored in your backup system. During the very recent (March 21s

Re: [CentOS] Apache SSL key pass phrase question

2009-04-03 Thread Paul Heinlein
On Fri, 3 Apr 2009, Paul Heinlein wrote: > On a server with untrusted users, however, I'd keep it decrypted. Er, I'd keep it encrypted. There's also the issue of how it gets stored in your backup system. -- Paul Heinlein <> heinl...@madboa.com <> http://www.madboa.com/

Re: [CentOS] Apache SSL key pass phrase question

2009-04-03 Thread Paul Heinlein
On Fri, 3 Apr 2009, Michael A. Peters wrote: > After running that and entering my pass phrase, no pass phrase is > required to start the server and it seems like the browsers don't > complain, so I think I'm set, but I thought I'd verify that all > really is well and that doing that isn't going

Re: [CentOS] Apache SSL key pass phrase question

2009-04-03 Thread nate
Michael A. Peters wrote: > openssl rsa -in secure.shastaherps.key.old -out secure.shastaherps.key > > After running that and entering my pass phrase, no pass phrase is > required to start the server and it seems like the browsers don't > complain, so I think I'm set, but I thought I'd verify that