Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 4 Oct 2004 09:14:33 +0200 (CEST)
From:      "Remko Lodder" <remko@elvandar.org>
To:        "Gary Dunn" <knowtree@aloha.com>
Cc:        FreeBSD Questions <freebsd-questions@freebsd.org>
Subject:   Re: Starting apache at boot with SSL.
Message-ID:  <57637.145.221.24.40.1096874073.squirrel@145.221.24.40>
In-Reply-To: <1096872134.2641.17.camel@vaiosr7k.ozland>
References:  <35BF716A-14B7-11D9-9E70-000D9333E43C@secure-computing.net> <415F1AA5.3080001@elvandar.org> <554B282C-14BE-11D9-9E70-000D9333E43C@secure-computing.net>  <415F26E7.1020200@elvandar.org> <1096872134.2641.17.camel@vaiosr7k.ozland>

next in thread | previous in thread | raw e-mail | index | archive | help

> I chose to protect my SSL cert with a passphrase. This makes automatic
> startup at boot impossible. I use FBSD 4.10, and apache would normally
> start via a script in /usr/local/etc/rc.conf. I just made sure there
> was

ehm this is not totally true, you can startup automatically by
havnig a little script that does the following

#!/bin/sh

echo '<passphrase>'

Then there is thingy with the phrase 'builtin' into it. You can change
that so that the previous bin sh script gets invoked and the server
will startup at that point.

For the correct syntax i would need to look into my own configuration
which i cannot access at this moment.

> no .sh script for apache, and start it myself using apachectl startssl.
> The problem with this setup is that if the server reboots in the middle
> of the night the web server does not come on, but this almost never
> happens anyway. You have to balance security with convenience to fit
> your situation, and I chose security.
>
>
>

Cheers!


-- 
Kind regards,

Remko Lodder                   |remko@elvandar.org
Reporter DSINet                |remko@dsinet.org
Projectleader Mostly-Harmless  |remko@mostly-harmless.nl
Founder Tienervaders           |remko@tienervaders.org



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?57637.145.221.24.40.1096874073.squirrel>