Re: [gentoo-server] apache+ mod_ssl restart need enter the Pass Phrase

[Joey]

Stefan wrote:

>On Fri, 22 Oct 2004 09:19:25 +0800, Wang Penghui <wangpenghui@××××××.com> wrote:
>
>
>>Hi all:
>>
>>If i add ssl cert to my apache server,then when i restart the server i
>>have to enter the Pass Phrase. I wonder that if i restart my server box.
>>And the apache was exist in the runlevel default, what would happen when
>>i don't input the Phrase? Does it wait until i enter the password, or
>>ignore this to start other servers?
>>Because my server box is not nearby me. So i have to login it remotely.
>>If the apache server wait until i enter the Phrase i think i need to
>>clear out it from default runlevel.
>>
>>Thanks very much.
>>
>>
>>
>
>As far as I now the server will stop untill you enter a valid
>password. Now you can do (atleast) 2 things.
>
>1. Remove the apache service from the default runlevel.
>2. Add an entry to your httpd.conf like this:
>
>SSLPassPhraseDialog exec:/usr/local/apache/bin/appasswd
>
>Create a file, in the example above that would be the file:
>/usr/local/apache/bin/appasswd. Put something like this in the file
>
>#!/bin/sh
>
>echo "PASSWD"
>
>Make sure this file is not readable for the world, etc. Ofcourse this
>is not a really secure solution. :)
>
>Regards,
>
>Stefan
>
>
>
The other solution is to remove the password from your Apache server 
certificate.
modssl.org has a FAQ on how to do it, it mentions Stefan's alternative 
solution too..
*
How can I get rid of the pass-phrase dialog at Apache startup time?
http://www.modssl.org/docs/2.8/ssl_faq.html#remove-passphrase

Also take note of the mentioned security precautions.


*