RE: [EMAIL PROTECTED] SSL pass phrase

2007-10-17 Thread Lindsay Hausner
Many Unixes (such as FreeBSD) allow you to chmod 000 a file and root can still access and modify it. It works on my box anyway. -- Aaron Dalton http://perlkonig.com You can also use the '-nodes' switch when generating the private key. This however, leaves it unencrypted so you must be

[EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Tony Heal
I am using apache v 1.3.34-4.1 and openssl on Debian and I have set up SSL, Although I can restart apache using the init script without issue I get prompted for a pass phrase if I stop and start apache. This is a problem if I have a power loss as apache will wait in the background until it

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Ajai Khattri
On Tue, 16 Oct 2007, Tony Heal wrote: I am using apache v 1.3.34-4.1 and openssl on Debian and I have set up SSL, Although I can restart apache using the init script without issue I get prompted for a pass phrase if I stop and start apache. This is a problem if I have a power loss as

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Zakai Kinan
use this. openssl rsa -in private.key.org -out private.key. Replace private.key with your key. ZK --- Ajai Khattri [EMAIL PROTECTED] wrote: On Tue, 16 Oct 2007, Tony Heal wrote: I am using apache v 1.3.34-4.1 and openssl on Debian and I have set up SSL, Although I can restart apache

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Scott Courtney
On Tuesday 16 October 2007 13:11, Tony Heal wrote: This is a problem if I have a power loss as apache will wait in the background until it receives a pass phrase. Is there a way around this without regenerating the server.key? Yes, there is. The openssl command line utility won't let you

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Scott Courtney
On Tuesday 16 October 2007 14:40, Scott Courtney wrote: $ openssl -in foo.temp -out foo.key Sorry -- that should be: $ openssl rsa -in foo.temp -out foo.key Scott -- - Scott D. COURTNEY, Principal Engineer

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Aaron Dalton
On Tue, 16 Oct 2007, Tony Heal wrote: I am using apache v 1.3.34-4.1 and openssl on Debian and I have set up SSL, Although I can restart apache using the init script without issue I get prompted for a pass phrase if I stop and start apache. This is a problem if I have a power loss as apache

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Michael McGlothlin
Possibly you could rewrite the start scripts so that they wait to be prompted for the password and then auto-fill the password. -- Michael McGlothlin Southwest Plumbing Supply - The official User-To-User support forum of the

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread William A. Rowe, Jr.
Aaron Dalton wrote: AFAIK there is no way around this. If you do not want Apache to wait for a pass phrase, you have to strip the private key of encryption. This of course has multiple security problems, but I'm afraid those are your only options that I am aware of. $ openssl rsa -in

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Dimitri Yioulos
On Tuesday 16 October 2007 2:58 pm, Aaron Dalton wrote: On Tue, 16 Oct 2007, Tony Heal wrote: I am using apache v 1.3.34-4.1 and openssl on Debian and I have set up SSL, Although I can restart apache using the init script without issue I get prompted for a pass phrase if I stop and start

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Aaron Dalton
On Tue, 16 Oct 2007, William A. Rowe, Jr. wrote: Aaron Dalton wrote: AFAIK there is no way around this. If you do not want Apache to wait for a pass phrase, you have to strip the private key of encryption. This of course has multiple security problems, but I'm afraid those are your only