SSL and restarting Apache 1

[Hondy]

Hi

I converted a MS IIS .PFX cert to one I can use with Apache, I installed it all fine.

BUT when I "httpd restart" it always asks me for the password associated with the certificate.

Is this normal SSL/Apache behaviour or is it because the cert was exported from SSL and it had a password on?

Cheers

 

[lgarner]

http://www.lists.aldigital.co.uk/apache-ssl/msg03998.html

I've never tried removing encryption from a private key after the CSR was done, but this post indicates that it should work (as I would imagine). Just back up your private key file and try it.

 

[elgrandeperro]

I have done that before. You lose some security but if you have scripts that auto-restart, you need to do this.

 

[Hondy]

so its fairly usual behaviour then? I shouldn't need to remove the key but useful to know I can if needs be.

Cheers

 

[elgrandeperro]

Yes, I believe most CSR generators will not allow you to generate one with a blank password. As far as I can remember.

 

[Hondy]

but if i restart an IIS server I don't have to put a password in? - oh well, I won't need to restart it that often I guess.