RE: [EMAIL PROTECTED] SSL pass phrase

2007-10-17 Thread Lindsay Hausner
>Many Unixes (such as FreeBSD) allow you to chmod 000 a file and root can >still access and modify it. It works on my box anyway. > >-- >Aaron Dalton >http://perlkonig.com You can also use the '-nodes' switch when generating the private key. This however, leaves it unencrypted so you must be

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Aaron Dalton
On Tue, 16 Oct 2007, William A. Rowe, Jr. wrote: Aaron Dalton wrote: AFAIK there is no way around this. If you do not want Apache to wait for a pass phrase, you have to strip the private key of encryption. This of course has multiple security problems, but I'm afraid those are your only o

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Dimitri Yioulos
On Tuesday 16 October 2007 2:58 pm, Aaron Dalton wrote: > On Tue, 16 Oct 2007, Tony Heal wrote: > > I am using apache v 1.3.34-4.1 and openssl on Debian and I have set up > > SSL, Although I can restart apache using the init script without issue I > > get prompted for a pass phrase if I stop and st

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread William A. Rowe, Jr.
Aaron Dalton wrote: AFAIK there is no way around this. If you do not want Apache to wait for a pass phrase, you have to strip the private key of encryption. This of course has multiple security problems, but I'm afraid those are your only options that I am aware of. $ openssl rsa -in encr

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Michael McGlothlin
Possibly you could rewrite the start scripts so that they wait to be prompted for the password and then auto-fill the password. -- Michael McGlothlin Southwest Plumbing Supply - The official User-To-User support forum of the A

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Aaron Dalton
On Tue, 16 Oct 2007, Tony Heal wrote: I am using apache v 1.3.34-4.1 and openssl on Debian and I have set up SSL, Although I can restart apache using the init script without issue I get prompted for a pass phrase if I stop and start apache. This is a problem if I have a power loss as apache wi

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Scott Courtney
On Tuesday 16 October 2007 14:40, Scott Courtney wrote: > $ openssl -in foo.temp -out foo.key Sorry -- that should be: $ openssl rsa -in foo.temp -out foo.key Scott -- - Scott D. COURTNEY, Principal Engineer

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Scott Courtney
On Tuesday 16 October 2007 13:11, Tony Heal wrote: > This is a problem if I have a power loss as apache will wait in the > background until it receives a pass phrase. Is there a way around this > without regenerating the server.key? Yes, there is. The "openssl" command line utility won't let you

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Zakai Kinan
use this. openssl rsa -in private.key.org -out private.key. Replace private.key with your key. ZK --- Ajai Khattri <[EMAIL PROTECTED]> wrote: > On Tue, 16 Oct 2007, Tony Heal wrote: > > > I am using apache v 1.3.34-4.1 and openssl on > Debian and I have set up SSL, Although I can restart > a

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Ajai Khattri
On Tue, 16 Oct 2007, Tony Heal wrote: > I am using apache v 1.3.34-4.1 and openssl on Debian and I have set up SSL, > Although I can restart apache using the init > script without issue I get prompted for a pass phrase if I stop and start > apache. This is a problem if I have a power > loss as a