[cobalt-users] Solution: Passphrase on private key w/ shttpd

[WebTwo Support <web2support@xxxxxxxxxxxxx>]

Thanks to Susan Carson for the tip on removing the passphrase from a 
private key.

However, by researching the Apache documentation, I found a way to have the 
httpd automatically get the passphrase and I thought I would share it with 
the group, in case anyone else runs into this problem.

If you edit the httpd.conf for the secure server (/etc/shttpd/conf), you 
will find a line that reads:
SSLPassPhraseDialog  builtin

Simply change that line to execute a script that will output the 
PassPhrase, like the following:

SSLPassPhraseDialog   exec:/etc/shttpd/conf/home/printpassphrase

The script itself can be as easy as:
#!/bin/sh
echo "my passphrase here"

But I used a compiled C program with some checking and encryption on the 
key so that an intruder could not run "strings" or just execute the program 
to get the passphrase.  Once I did this and kickstarted the secure web 
server, everything works fine.

Hope this helps, and thanks again to Susan for the tip on removing the 
passphrase.  I filed that away as a good tip for future use!



Regards,
Chris
WebTwo Support Team
===============================
Visit http://www.firstdomain.net
Real-Time Domain Registration Service
As low as $10/year including ALL fees
ISPs: Join our International Affiliate Program!
===============================