Mailing List Archive

Issue 179 in cherokee: Cherokee should allow a user to type the PEM passphrase in the admin
Issue 179: Cherokee should allow a user to type the PEM passphrase in the
admin
http://code.google.com/p/cherokee/issues/detail?id=179

New issue report by ste...@konink.de:
What steps will reproduce the problem?
1. configure a passphrased PEM certificate
2. admin times out
3. when cherokee is started from the console you can type the passphrase

What is the expected output? What do you see instead?
Some nifty window popping up showing cherokee really needs something...

What version of the product are you using? On what operating system?
SVN



Issue attributes:
Status: New
Owner: ----

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev
Issue 179 in cherokee: Cherokee should allow a user to type the PEM passphrase in the admin [ In reply to ]
Issue 179: Cherokee should allow a user to type the PEM passphrase in the
admin
http://code.google.com/p/cherokee/issues/detail?id=179

Comment #1 by ste...@konink.de:
Allow a commandline option that does not start the SSL part of the site if
an admin
is not available. Or better; just start Cherokee and allow the user to
enter the
passphrase later.



--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev
Issue 179 in cherokee: Cherokee should allow a user to type the PEM passphrase in the admin [ In reply to ]
Issue 179: Cherokee should allow a user to type the PEM passphrase in the
admin
http://code.google.com/p/cherokee/issues/detail?id=179

Comment #2 by alobbs:
Yeah, I vote for requiring the passphrase as stdin input on initialization.



--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev
Issue 179 in cherokee: Cherokee should allow a user to type the PEM passphrase in the admin [ In reply to ]
Issue 179: Cherokee should allow a user to type the PEM passphrase in the
admin
http://code.google.com/p/cherokee/issues/detail?id=179

Comment #3 by ste...@konink.de:
You understand in that respect cherokee-admin cannot start/restart the
server again?



--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev
Issue 179 in cherokee: Cherokee should allow a user to type the PEM passphrase in the admin [ In reply to ]
Issue 179: Cherokee should allow a user to type the PEM passphrase in the
admin
http://code.google.com/p/cherokee/issues/detail?id=179

Comment #4 by alobbs:
Oops! I didn't think of that.
Yeah, reading stdin would be definitely be a problem in that case.



--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev
Issue 179 in cherokee: Cherokee should allow a user to type the PEM passphrase in the admin [ In reply to ]
Issue 179: Cherokee should allow a user to type the PEM passphrase in the
admin
http://code.google.com/p/cherokee/issues/detail?id=179

Comment #5 by ste...@konink.de:
I don't think it is typically safe to use the admin itself as tool to enter
the
password. Seeding with MD5 could work, but I don't know if this is
supported by
OpenSSL. Anyway on short term; SSL should definitely not block the
operation (imho).


(next to this I wonder what happens if you have configured a server with
multiple
certificates)



--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev
Re: Issue 179 in cherokee: Cherokee should allow a user to type the PEM passphrase in the admin [ In reply to ]
Comment #7 on issue 179 by ste...@konink.de: Cherokee should allow a user
to type the PEM passphrase in the admin
http://code.google.com/p/cherokee/issues/detail?id=179

Issue 1357 has been merged into this issue.

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev
Re: Issue 179 in cherokee: Cherokee should allow a user to type the PEM passphrase in the admin [ In reply to ]
Comment #8 on issue 179 by ste...@konink.de: Cherokee should allow a user
to type the PEM passphrase in the admin
http://code.google.com/p/cherokee/issues/detail?id=179

I think the best way would be that the user is informed there is a
passphrase on a certificate, and the server can't be started because of
that (from the admin).

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev