apache2.2.X配置CA证书后，怎么样随系统启动而启动？

chenlie39

如题目。

配置SSL后 #./apachectl start
需要输入密码，怎么样把密码写入/etc/rc2.d/S50apache中呢？  如果大家有更好的方法请“签名”

本人现S50apache内容：
#!/sbin/sh

case    "$1"    in
'start')
                /usr/local/apache2/bin/apachectl start &
                ;;
'stop')
                /usr/local/apache2/bin/apachectl stop &
                ;;
*)
                echo    "your message"
                ;;
esac
exit 0

HonestQiao

openssl genrsa -des3 -out "%CA_NAME%.key" 1024

openssl rsa -noout -text -in "%CA_NAME%.key"

openssl rsa -in "%CA_NAME%.key" -out "%CA_NAME%.key.unsecure"

openssl req -new -x509 -days 365 -key "%CA_NAME%.key" -out "%CA_NAME%.crt"

openssl x509 -noout -text -in "%CA_NAME%.crt"

copy "%CA_NAME%.key" "%CA_NAME%.key.org"

openssl rsa -in "%CA_NAME%.key.org" -out "%CA_NAME%.key"

chenlie39

原帖由 HonestQiao 于 2006-10-16 14:38 发表
openssl genrsa -des3 -out "%CA_NAME%.key" 1024

openssl rsa -noout -text -in "%CA_NAME%.key"

openssl rsa -in "%CA_NAME%.key" -out "%CA_NAME%.key.unsecure&quo ...

以上语句都写入 /etc/rc2.d/S50apache 里面吗？

chenlie39

同上

chenlie39

这个问题因该很多人都会遇见的拉？ 教教我！

chenlie39

这个东西老重要的。而且老常用的，没人想知道吗？帮忙顶一下啦

chenlie39

天天问，不信没高人！

HonestQiao

http://w.yi.org/ftp/FAPM/apache/Apache2/zh/ssl/ssl_faq.html

搜索Start

susbin

Here is what I did in apache-2.0.59 on Solaris.
Please let me know if it also works on Apache 2.2.x. Thank you.

1. Create a small script that contains the ssl.crt password:

# pwd
/usr/local/apache-2.0.59/bin
# cat ./sslpasswd
#!/bin/sh
echo testpass

#
# chmod 700 ./sslpasswd
# chown root:root ./sslpasswd
#

2. Change a line of ssl.conf file of Apache:

# cp -p ssl.conf ssl.conf.orig
# vi ssl.conf
"ssl.conf" 291 lines, 11590 characters
    68  SSLPassPhraseDialog  exec:/usr/local/apache-2.0.59/bin/sslpasswd
    69  #SSLPassPhraseDialog  builtin

3. Make changes in script /etc/init.d/apache:

# vi apache
...
start|restart)
...
#  $HTTPD -k $ARGV
    $HTTPD -k start -DSSL
...
#

4. Test it from command line.

# /etc/init.d/apache stop
#
# /etc/init.d/apache start
#

[ 本帖最后由 susbin 于 2006-10-27 00:35 编辑 ]

supersuper

我是这样做的

vi /usr/local/apache2/conf/extra/httpd-ssl.conf
注释SSLPassPhraseDialog  builtin
在后添加
SSLPassPhraseDialog exec:/usr/local/apache2/conf/apache_pass.sh

vi /usr/local/apache2/conf/apache_pass.sh
#!/bin/sh
echo "密码"

chmod +x /usr/local/apache2/conf/apache_pass.sh