RE: Apache startup with SSL keys

2004-10-18 Thread Uzi Refaeli
create a the file SSLPASS.sh under conf (or where ever you want...) as: #!/bin/bash echo mypasswordhere now add this line to the httpd.conf file: SSLPassPhraseDialog exec:conf/SSLPASS.sh It should do the trick. -Original Message- From: Omer Segev [mailto:[EMAIL PROTECTED] Sent: Monday

Re: Apache startup with SSL keys

2004-10-18 Thread Shachar Shemesh
[EMAIL PROTECTED] wrote: VK wrote: Of course, storing key in plain text is less secure. Of course. So what do people of the real world do? I don't suppose they expect to have to attend every server restart do they? Is there some hardware setup which can help them with that maybe? No. They just pu

Re: Apache startup with SSL keys

2004-10-18 Thread amos
Yedidyah Bar-David wrote: You have to realize this is an inherent problem, not something technical you can work around. If you want encryption, you have to supply a key. If you do not want to do that yourself at boot, you have to put it in the server somehow. Some ways to put it in the server are m

Re: Apache startup with SSL keys

2004-10-18 Thread Yedidyah Bar-David
On Mon, Oct 18, 2004 at 10:41:33AM +0200, [EMAIL PROTECTED] wrote: > VK wrote: > > >Of course, storing key in plain text is less secure. > > > Of course. > > So what do people of the real world do? I don't suppose they expect to have I do not know, never been there :-) > > to attend every serv

Re: Apache startup with SSL keys

2004-10-18 Thread amos
VK wrote: You can create server key without passphraze or convert encrypted key to plain using openssl rsa -in server.key.old -out server.key Of course, storing key in plain text is less secure. Of course. So what do people of the real world do? I don't suppose they expect to have to attend every s

Re: Apache startup with SSL keys

2004-10-18 Thread Tzafrir Cohen
On Mon, Oct 18, 2004 at 09:14:33AM +0200, Omer Segev wrote: > Hi all. > > I have installed a new apache server on FC2. > I created an SSL keys and certificates. > Whenever i restart the httpd service he asks me to enter the cert password, > in order to complete the task. > Is there any way it can

Re: Apache startup with SSL keys

2004-10-18 Thread VK
You can create server key without passphraze or convert encrypted key to plain using openssl rsa -in server.key.old -out server.key Of course, storing key in plain text is less secure. Rgds, Vitaly Karasik = To unsubscribe, send ma