Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (nike.apache.org: domain of ph1@openstrike.co.uk designates
 89.16.177.71 as permitted sender)
Date: Fri, 9 Nov 2012 17:25:27 +0000
From: Pete Houston <ph1@openstrike.co.uk>
To: users@httpd.apache.org
Message-ID: <20121109172527.GV1732@palma.openstrike.co.uk>
References: 
 <C7D127368599A44DA71D87AEB72A877C056B30C75B@GCPWINGGN3EVS11.IND.CORP.AD>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="thwsKKN5whlRGe6j"
Content-Disposition: inline
In-Reply-To: 
 <C7D127368599A44DA71D87AEB72A877C056B30C75B@GCPWINGGN3EVS11.IND.CORP.AD>
Organization: Openstrike
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: Re: [users@httpd] Is there any way to encrypt/obfuscate apache conf
 files

--thwsKKN5whlRGe6j
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello Sudip,

On Fri, Nov 09, 2012 at 01:51:53PM +0530, Bhattacharya, Sudip wrote:
> Is there any way to obfuscate/encrypt conf files in Apache?

I'm not aware of a direct method. Perhaps mod_macro could be used for
obfuscation.

> I have put my configuration entries in a separate config file, and am inc=
luding it in the main httpd.conf file.
>=20
> My requirement is to encrypt/obfuscate only my custom conf file.

I'm sure you have your reasons for this, but it sounds like asking for
trouble. If you just want to stop users reading the file because it
contains sensitive info (like database passwords, maybe?) then perhaps
just a simple

	chown root custom.conf
	chmod 0600 custom.conf

would suffice? You would need to be starting apache as root in order to
bind to the low port numbers anyway and this means that only your custom
file is unreadable by others - httpd.conf could still be read by anyone.

HTH,

Pete
--=20
Openstrike - improving business through open source
http://www.openstrike.co.uk/ or call 01722 770036 / 07092 020107

--thwsKKN5whlRGe6j
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAlCdPIcACgkQdzfnYmsKt530EwCZASVM8RcJgc75hgL3azeOUJNI
nTgAoLCAFrcYZaA7BjjorCJVS5LAxH5q
=7Hzr
-----END PGP SIGNATURE-----

--thwsKKN5whlRGe6j--