The modssl manual describes how to do this using openssl.
>From: Anuradha Ratnaweera <[EMAIL PROTECTED]>
>Reply-To: [EMAIL PROTECTED]
>To: [EMAIL PROTECTED]
>Subject: starting apache without passphrase
>Date: Sat, 23 Dec 2000 10:45:50 +0600 (LKT)
>
>
>Hi all,
>
>I have obtained a server certificate and the server is working fine. But
>whenever the machine reboots (not very common though), I can't make the
>web server start with ssl support because if I do that, I have to
>physically be there to enter the passphrase. So I do a
>
>/etc/init.d/apache stop
>/etc/init.d/apache startssl
>...
>[enter the passphrase]
>...
>
>every time the machine is rebooted. Is there a way to decrypt the
>server.key and keep a passphraseless version, so that I can start the
>server without typing in the passphrase.
>
>The machine doesn't have anything else on it or any other users, so
>keeping a file open is not would not be very unsafe as far as local
>exploits are concerned.
>
>
>Anuradha
>
>______________________________________________________________________
>Apache Interface to OpenSSL (mod_ssl) www.modssl.org
>User Support Mailing List [EMAIL PROTECTED]
>Automated List Manager [EMAIL PROTECTED]
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
