Removing Encryption from SSL Key
While having an encrypted key is a good thing for an SSL web server, it just doens't work out so well. When your web server restarts, it hangs during startup asking for a passphrase for all the SSL certs.
To remove the requirement to enter a password you can follow these steps.
First backup you key
Then create a plain text version
Then replace your current key with the new plain text one
Now restart your web server and you shouldn't be prompted for a passphrase.
# cp www.domain.key www.domain.key.encrypted
# openssl rsa -in www.domain.key -out www.domain.key.plain
# cp www.domain.key.plaintext www.domain.key
VERY IMPORTANT!!!!!
You were about to walk away were'nt you?! Well make sure that yourwww.domain.key and www.domain.key.plain files are are owned by root and are read/write only by root chmod 600 www.domain.key
Comments
Post new comment