Bug 157062

Summary:	Apache:mod_ssl:Error: Private key not found
Product:	Red Hat Enterprise Linux 4	Reporter:	Bill Blackford <bill>
Component:	mod_ssl	Assignee:	Joe Orton <jorton>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	4.0	CC:	dwalsh
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	i386
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2005-05-07 18:35:21 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Bill Blackford 2005-05-06 15:49:31 UTC

From Bugzilla Helper:
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)

Description of problem:
Same error as Bug 144274.
After generating a new private key and new testcert, restarting httpd returns and error stating that the private key cannot be found.

Version-Release number of selected component (if applicable):
mod_ssl-2.0.52-9.ent.i386.rpm

How reproducible:
Always

Steps to Reproduce:
1. rm /etc/httpd/conf/ssl.key/server.key
2. rm /etc/httpd/conf/ssl.crt/server.crt
3. cd /usr/share/ssl/certs
4. make genkey
5. make testcert
6. /sbin/service httpd restart
7. Observe error.

  

Actual Results:  Starting httpd: Apache/2.0.52 mod_ssl/2.0.52 (Pass
Phrase Dialog)
Some of your private key files are encrypted for security reasons.
In order to read them you have to provide the pass phrases.

Server rhel4.int.blackfordcomputing.com:443 (RSA)
Enter pass phrase:Apache:mod_ssl:Error: Private key not found.
**Stopped
[FAILED]


Expected Results:  Normal behavior. Apache should start properly and serve https following the pass phase input. This has been verified with rhel3, update 4 and FC1.

Additional info:

This error renders the use of https insecure if the only way it works is via the temporary key and cert.

Comment 1 Joe Orton 2005-05-06 15:56:35 UTC

This is a problem with the password input; httpd is not given access to the
terminal to be able to prompt for the password. Use:

# setsebool httpd_tty_comm=1

to enable, or

# setsebool -P httpd_tty_comm=1

to enable permanently.

Comment 4 Joe Orton 2005-05-09 14:59:33 UTC

*** Bug 157068 has been marked as a duplicate of this bug. ***