[Cherokee-dev] Issue 1357 in cherokee: Documentation ommission: important fact on SSL config not mentioned.

[cher...@googlecode.com]

Status: New
Owner: ----

New issue 1357 by freil...@gmail.com: Documentation ommission: important
fact on SSL config not mentioned.
http://code.google.com/p/cherokee/issues/detail?id=1357

Version: 1.0.4

It would save users much frustration if the cookbook on configuring SSL
mentioned that cherokee-admin is not able to start up a TLS enabled site
that requires a password for the private key. Instead you have to use
cherokee-worker.

_______________________________________________
Cherokee-dev mailing list
Cherok...@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

[cher...@googlecode.com]

Comment #1 on issue 1357 by freil...@gmail.com: Documentation ommission:

important fact on SSL config not mentioned.
http://code.google.com/p/cherokee/issues/detail?id=1357

It would be better still if cherokee-admin was able to prompt the user for
a private key pass phrase in the web interface. In fact this should really
be considered a bug in cherokee-admin because if you try to start a server
that requires a pass phrase, it just hangs there and times out the
connection. There is no helpful error message, just a "cannot load page".

cherokee-worker does not have this problem.

regards
Finnian Reilly

[cher...@googlecode.com]

Comment #2 on issue 1357 by pig...@gmail.com: Documentation ommission:

important fact on SSL config not mentioned.
http://code.google.com/p/cherokee/issues/detail?id=1357

You should consider to remove your passphase from your keys.

I would definitely do avoid storing passwords as plaintext.

To remove passphase just:
openssl rsa -in your_key_file -out your_new_key_file.

Also do not compare cherokee-worker with cherokee-admin. Completely
different things.

[cher...@googlecode.com]

Updates:
Status: Duplicate
Mergedinto: 179

Comment #3 on issue 1357 by ste...@konink.de: Documentation ommission:

important fact on SSL config not mentioned.
http://code.google.com/p/cherokee/issues/detail?id=1357

Prompting for the password from the admin would be an extremely bad thing.
Because the admin is mostly an insecure connection. Local users could
exploit that. We do agree that the 'hanging' of Cherokee is not desired.
Never the less this specific feature request was already made a long time
ago.

I do agree with Pigmej, remove them.