Solved

Apache doesn't ask me for server.key password when starting up.

Posted on 2008-10-30
2
329 Views
Last Modified: 2013-11-24
Mac OS 10.4, with the installed version of Apache

I have (finally) figured out how to get SSL running.  For the moment I have an unencrypted key in the directory where Apache Looks.   The permissions are only the Root and Wheel can read.

I had to do this because when Apache starts, there is no message for me to enter my passphrase manually.

If I could get this alert to appear, then I would participate in this higher security practice.

I don't know where to look to do this.

Thanks.
0
Comment
Question by:computerlarry
2 Comments
 
LVL 4

Assisted Solution

by:DJDecay
DJDecay earned 100 total points
ID: 22846025
Many folks operate their SSL webservers in this way, where they have a key file w/o a passphrase on it. This is normal. If the machine reboots, it will prompt you for a key, if you cannot supply it, the server is hung. If you put it into a text file to auto echo it, what is the purpose of having a passphrase on the key in the first place.
 
0
 
LVL 2

Accepted Solution

by:
artms earned 400 total points
ID: 22925116
SSL private key is only read when apache is started and after that it doesn't need them. So you can make those private keys only readable to root (chmod 0600 your_private_key), it will be quite secure, not secure againts root exploit, because attacker will be able to read your private keys when he is root!, but in this case attacker can put so rootkit which will log password you enter when apache is started...
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If your site has a few sections that need to be secure when data is transmitted between the server and local computer, such as a /order/ section for ordering or /customer/ which contains customer data, etc it would of course be recommended to secure…
Do you come here a lot? Are you lazy like me and don't want to go through the "trouble" of having to click your Dock's Safari icon and then having to click your Experts Exchange Favorites bookmark to get here? Well then this article is for you.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Edureka is one of the fastest growing and most effective online learning sites.  We are here to help you succeed.

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now