Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (asf.osuosl.org: local policy)
Message-ID: <44694896.5000209@rowe-clan.net>
Date: Mon, 15 May 2006 22:35:50 -0500
From: "William A. Rowe, Jr." <wrowe@rowe-clan.net>
User-Agent: Mozilla Thunderbird 1.0.8-1.1.fc4 (X11/20060501)
MIME-Version: 1.0
To: users@httpd.apache.org
References: <a0623091dc08e5879be38@67.101.151.89>
 <29a3dcb10605151002x47756c2ej570a8d4f02240425@mail.gmail.com>
 <a06230934c08e8ff6bfa6@[67.101.151.89]>
In-Reply-To: <a06230934c08e8ff6bfa6@[67.101.151.89]>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [users@httpd] SSL Problem Still not Solved in Apache2-RHEL4

Rex Brooks wrote:
> 
> I have Apache2 in RHEL4, so I am assuming that the SSL Sections you 
> refer to are in ssl.conf which is loaded as a DSO.
> 
> I understand that httpd must be able to read the crt/pem file.
> 
> I did specify a pass phrase when I created the key/crt. However, I do 
> not get a request asking me to supply the pass phrase when I enter: 
> service httpd start. I just get the same FAILED notice with the same 
> error in the error_log.

If it is in fact 'tripping' over the passphrase, and stdin/stdout aren't
providing access to the console from 'service httpd start' in redhat, you
might want to look at the SSLPassphraseDialog applet.  One option is to pass
a pipe:/path/to/binary that can invoke a pipe program which queries all of
the passphrases.

I wrote support/win32/wintty.c to create a console window on the fly for
such a dialog, letting the service speak with the user at the console.
Obviously, it's win32 specific.  But I can't imagine it would be impossible
to create a similar tty piped window applet on Unix, if someone is up to
the challenge.

There are simpler SSLPassphraseDialog alternatives, see...
http://httpd.apache.org/docs/2.0/mod/mod_ssl.html#sslpassphrasedialog
(I just noticed the pipe:/path/to/pipe is undocumented; whoops!)

Bill
Bill

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org