Apache Tips

From LinodeWiki

Jump to: navigation, search

[edit] Re-generate Apache SSL Key

Like so many others, when I set up my SSL CSR I added a password as the instructions indicated. Problem is, everytime the linode restarts or I need to restart apache it pauses waiting for the passkey to be entered.

If you want Apache to restart without the passphrase required you can adjust the original key file so that it doesn't have a passphrase. Use at your own risk, but the following worked on my CentOs setup.

If you do NOT want to be asked for a passphrase when restarting apache, re-generate your RSA key file.

 
[root@yourserver /etc/httpd/conf/ssl.crt]# cd ../ssl.key
[root@yourserver /etc/httpd/conf/ssl.key]# mv MYdomain.com.key MYdomain.com.key.has-passphrase
[root@yourserver /etc/httpd/conf/ssl.key]# openssl rsa -in MYdomain.com.key.has-passphrase -out MYdomain.com.key

Restart apache (i.e. /etct/init.d/httpd restart)

Personal tools