Ssl – Will a graceful reload of Apache configuration require the SSL Cert password

apache-2.2configurationssl

I have an apache server running that required a minor configuration update. I want to force Apache to reload the config (e.g. via /etc/init.d/httpd reload or apachectl graceful), but I do not posses our SSL cert passwords. The admin who has the passwords is not available right now.

If I gracefully reload the apache config, will the SSL certificates need the password again? Or does that only happen during a full restart of the server?

Best Answer

No. SSL certificates are only reloaded on a full restart, not a graceful one.

This means you won't need to re-enter the password on a reload/graceful, and also means that changes to the certificates/new certificates/etc require a full restart to take effect.

Related Solutions

Centos – Problems restarting apache via PHP (even with sudo)

In the sudoers file (use visudo), below the extant defaults line, add:

defaults:www !requiretty

Actually, are you sure it's running as the "www" user? The default for CentOS is "apache". A little script to try:

<?php print system("whoami");?>

If it's not "www", just replace the "www" bit in sudoers, above.

Find Apache’s configtest declaration

This looks like you're using a Debian/Ubuntu or similar system. You can run a configtest with

apache2ctl configtest

You can't change it's declaration to accept Prod (it already does) and you shouldn't need to.

The Error message is quite clear ServerTokens takes one argument ... I can only get this error message if I supply the ServerTokens directive with more than one parameter so

 ServerTokens Prod 1

fails in the same way that you observe. You need to figure out why your ServerTokens and ServerSignature directives have more than one parameter. This first thing I would try is to load the files into vim and use :set invlist which will show any hidden characters in your file.

Best Answer

Related Solutions

Centos – Problems restarting apache via PHP (even with sudo)

Find Apache’s configtest declaration

Related Topic