Re: SSL certificate pass phase in apache

Hi all
I know that I can remove password of my private key using this command:
openssl rsa -in foo_key.pem -out foo_keyclear.pem

But,I don't like this,because I should save private key without any protection on server,and if sombody access this file,he can easily generate a dummy "valid certificate" from same Issuer.
Is this the way that normally used on servers for thier SSL?
They won't use:
SSLPassPhaseDialog exec:cert/passgenerator
for sending pass to apache and then protect that pass generator?

Regards

---------------------------------------------------------------------------
This list is sponsored by: BigFix

If your IT fails, you're out of business - or worse. Arm your
enterprise with BigFix, the single converged IT security and operations
engine. BigFix enables continuous discovery, assessment, remediation,
and enforcement for complex and distributed IT environments in real-time
from a single console.
Think what's next. Think BigFix.

http://ad.doubleclick.net/clk;82309979;15562032;o?http://www.bigfix.com/ITNext/
---------------------------------------------------------------------------

Relevant Pages

  • Re: SSL certificate pass phase in apache
    ... but if you have a password protected private key ... But,I don't like this,because I should save private key without any protection on server,and if sombody access this file,he can easily generate a dummy "valid certificate" from same Issuer. ... BigFix ...
    (Security-Basics)
  • Re: Manual import of pkcs12 file
    ... which protection is done first? ... > it's only the private key being protected, as well as some key meta-data. ... CryptProtectData is only called once. ... DPAPI will just encrypt ...
    (microsoft.public.platformsdk.security)
  • Re: Preventing Software Piracy ???
    ... Cracking PGP is infeasible. ... then copy protection would become uncrackable. ... wants to run the program to provide the private key needed to unlock it. ... I have seen some license systems utilize GPG to sign their license files. ...
    (comp.security.misc)
  • Re: Preventing Software Piracy ???
    ... then copy protection would become uncrackable. ... The main protection offered by PGP is that the private key ... It is stored on the dongle in encrypted form. ... license files. ...
    (comp.security.misc)
  • Re: Sensitive data in code ...
    ... you need to balance the cost of exposure against the cost ... You need to consider for each protection scenario how much it costs ... We do this by embedding a private key in the executable itself. ... not find our "master password", but we still are not totally ...
    (microsoft.public.security)