I got little response on the user list, so:

I am using httpd 2.4.7 built from source (On Debian Linux 7, 32-bit).
OpenSSL is a Debian package with version 1.0.1e.

The pertinent part of my httpd.conf is:

  SSLCertificateKeyFile      /path/to/key.file
  SSLPassPhraseDialog     |/path/to/passphrase.sh

$ cat passphrase.sh
#!/bin/bash
echo averylongandrandompassord

But that doesn't work.

But when I use a decrypted key like so:

  SSLCertificateKeyFile      /path/to/key.file.unsecure
  #SSLPassPhraseDialog     |/path/to/passphrase.sh

all works well.

So the question is:  (1) is my passphrase.sh script in the proper
format or (2) is something else wrong (e.g., a bug)?

I have my log level up to debug and can't see any clue that helps me.

Later...

I changed to the exec: method and it works fine, but it still begs the
question of the apparently-not-working pipe method.

Later...

I just looked at the docs again and wonder if the fact I have two SSL
vhosts may be the problem (but I have all the SSL cert directives at
the main server level).  Still, repetitive queries from Apache ought
to give the same (and correct) response, no?

Thanks and best regards,

-Tom

Reply via email to