-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sun, 14 Aug 2005, James, Denise wrote: > Please point me to where I can find documentation on starting apache > with ssl and NOT having to enter the password. I am new to managing > this web server and was recently asked to setup a new certificate which > expired. > > I did that, but now whenever apache is restarted, or the server itself > is taken offline, at boot time the password is required. I didn't have > this problem until I added the new certificate. The usual way is to remove the password from the private key. For example (from OpenSSL's 'man rsa'): openssl rsa -in key.pem -out keyout.pem Do something similar for a DSA key, using the 'openssl dsa' command instead. You'll be asked for the input key's passphrase if it has one. If you don't specify a cipher then the output key won't have a passphrase. Instruct Apache to use the output key instead of the input key and the SSL library should no longer prompt for a passphrase, since it won't need one to decrypt the private key. - -- Mark H. Wood, Lead System Programmer mwood@xxxxxxxxx Open-source executable: $0.00. Source: $0.00 Control: priceless! -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: pgpenvelope 2.10.2 - http://pgpenvelope.sourceforge.net/ iD8DBQFDAJ4fs/NR4JuTKG8RAhygAJ9m2QopD1+iozwDfNvtpmTUlSdoegCfcbs9 Mv0QE9J3g/dPSvtg3KlPohA= =wEf3 -----END PGP SIGNATURE----- --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|