143
APPENDIX B
SSL Configuration Directives forApache Web Servers
This appendix lists directives for using Sun Crypto Accelerator 4000 software to
configure SSL support for Apache WebServers. Configure directives in your
http.conf file. Refer to the Apache WebServer documentation for more
information.
1. SSLPassPhraseDialog exec:program
Context: Global
This directive informs the Apache WebServer that the specified program should
be executed to collect the passwordfor key file. program should print the collected
password to standard output.
If multiple key files are present, and have common passwords,then program will
only be executed once (each collected password is tried before running program
again.)
program is executed with two arguments, the firstis the name of the server, in the
form servername:port, for example, www.fictional-company.com:443. (Port
443 is the typical port for SSL based web servers.) The second argument is the
type of key in the key file (keytype). keytype can be either RSA or DSA.
Note – Because this program can be executed during system startup, be sure to
design it to cope with the situation where the console is not a tty device (that is, a
tty(3c) returns false).
The supplied program /opt/SUNWconn/cryptov2/bin/apgetpass can be
used for the program executable. This program automatically prompts for the
password, suppressing the display of the password as it is entered.
The supplied sslpassword program also automatically searches for passwords
in files, which can be used to avoid user interaction when the web server starts
up. Passwords for key files are searchedfor in files named