You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by "James, Denise" <de...@fldoe.org> on 2005/08/15 02:15:03 UTC

[users@httpd] apachectl startssl --need to start without entering password

 

 

Hello,

 

Please point me to where I can find documentation on starting apache
with ssl and NOT having to enter the password.  I am new to managing
this web server and was recently asked to setup a new certificate which
expired.

 

I did that, but now whenever apache is restarted, or the server itself
is taken offline, at boot time the password is required.  I didn't have
this problem until I added the new certificate.

 

Any suggestions would be appreciated.  Thanks!

 

Denise O. James

Systems Project Analyst

Florida Department of Education

Education Data Center Rm. B2-24

325 W. Gaines Street

Tallahassee, FL 32399-0400

Phone and Fax:  (850) 245-9805

denise.james@fldoe.org

 

 

 


[users@httpd] Re: apachectl startssl --need to start without entering password

Posted by Brian Candler <B....@pobox.com>.
On Sun, Aug 14, 2005 at 08:15:03PM -0400, James, Denise wrote:
> Please point me to where I can find documentation on starting apache
> with ssl and NOT having to enter the password.  I am new to managing
> this web server and was recently asked to setup a new certificate which
> expired.
> 
>  
> 
> I did that, but now whenever apache is restarted, or the server itself
> is taken offline, at boot time the password is required.  I didn't have
> this problem until I added the new certificate.

You need the mod_ssl FAQ.

http://www.modssl.org/docs/2.8/ssl_faq.html
See question "how to remove a passphrase"

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] apachectl startssl --need to start without entering password

Posted by "Mark H. Wood" <mw...@IUPUI.Edu>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, 14 Aug 2005, James, Denise wrote:
> Please point me to where I can find documentation on starting apache
> with ssl and NOT having to enter the password.  I am new to managing
> this web server and was recently asked to setup a new certificate which
> expired.
>
> I did that, but now whenever apache is restarted, or the server itself
> is taken offline, at boot time the password is required.  I didn't have
> this problem until I added the new certificate.

The usual way is to remove the password from the private key.  For
example (from OpenSSL's 'man rsa'):

  openssl rsa -in key.pem -out keyout.pem

Do something similar for a DSA key, using the 'openssl dsa' command
instead.  You'll be asked for the input key's passphrase if it has one.
If you don't specify a cipher then the output key won't have a passphrase.
Instruct Apache to use the output key instead of the input key and the SSL
library should no longer prompt for a passphrase, since it won't need one
to decrypt the private key.

- -- 
Mark H. Wood, Lead System Programmer   mwood@IUPUI.Edu
Open-source executable:  $0.00.  Source:  $0.00  Control:  priceless!

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: pgpenvelope 2.10.2 - http://pgpenvelope.sourceforge.net/

iD8DBQFDAJ4fs/NR4JuTKG8RAhygAJ9m2QopD1+iozwDfNvtpmTUlSdoegCfcbs9
Mv0QE9J3g/dPSvtg3KlPohA=
=wEf3
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


[users@httpd] Re: apachectl startssl --need to start without entering password

Posted by Joost de Heer <sa...@xs4all.nl>.
> Hello,
>
> Please point me to where I can find documentation on starting apache
> with ssl and NOT having to enter the password.  I am new to managing
> this web server and was recently asked to setup a new certificate which
> expired.
>
> I did that, but now whenever apache is restarted, or the server itself
> is taken offline, at boot time the password is required.  I didn't have
> this problem until I added the new certificate.

http://httpd.apache.org/docs/2.0/ssl/ssl_faq.html, section 'How can I get
rid of the pass-phrase dialog at Apache startup time?'.

Joost


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org