Lorem ipsum dolor sit amet, consectetur adipiscing elit lobortis arcu enim urna adipiscing praesent velit viverra sit semper lorem eu cursus vel hendrerit elementum morbi curabitur etiam nibh justo, lorem aliquet donec sed sit mi dignissim at ante massa mattis.
Vitae congue eu consequat ac felis placerat vestibulum lectus mauris ultrices cursus sit amet dictum sit amet justo donec enim diam porttitor lacus luctus accumsan tortor posuere praesent tristique magna sit amet purus gravida quis blandit turpis.
At risus viverra adipiscing at in tellus integer feugiat nisl pretium fusce id velit ut tortor sagittis orci a scelerisque purus semper eget at lectus urna duis convallis. porta nibh venenatis cras sed felis eget neque laoreet suspendisse interdum consectetur libero id faucibus nisl donec pretium vulputate sapien nec sagittis aliquam nunc lobortis mattis aliquam faucibus purus in.
Nisi quis eleifend quam adipiscing vitae aliquet bibendum enim facilisis gravida neque. Velit euismod in pellentesque massa placerat volutpat lacus laoreet non curabitur gravida odio aenean sed adipiscing diam donec adipiscing tristique risus. amet est placerat in egestas erat imperdiet sed euismod nisi.
“Nisi quis eleifend quam adipiscing vitae aliquet bibendum enim facilisis gravida neque velit euismod in pellentesque massa placerat”
Eget lorem dolor sed viverra ipsum nunc aliquet bibendum felis donec et odio pellentesque diam volutpat commodo sed egestas aliquam sem fringilla ut morbi tincidunt augue interdum velit euismod eu tincidunt tortor aliquam nulla facilisi aenean sed adipiscing diam donec adipiscing ut lectus arcu bibendum at varius vel pharetra nibh venenatis cras sed felis eget dolor cosnectur drolo.
The typical process for creating an SSL certificate is as follows: # openssl genrsa -des3 -out www.key 2048Note: When creating the key, you can avoid entering the initial passphrase altogether using:# openssl genrsa -out www.key 2048At this point it is asking for a PASS PHRASE (which I will describe how to remove): Enter pass phrase for www.key: # openssl req -new -key www.key -out www.csrNext, you will typically send the www.csr file to your registrar. In turn, your registrar will provide you with the .crt (certificate) file.From a security standpoint utilizing a passphrase, is a good thing, but from a practical standpoint not very useful.For instance, what happens when your server reboots/crashes at 3am? Or better, what happens in 6 months when you reboot your machine, and you don't remember the password? Well, one thing is for sure, your web server will not be online.I suggest removal of the passphrase, you can follow the process below:Always backup the original key first (just in case)! # cp www.key www.key.origThen unencrypt the key with openssl. You’ll need the passphrase for the decryption process: # openssl rsa -in www.key -out new.keyNow copy the new.key to the www.key file and you’re done. Next time you restart the web server, it should not prompt you for the passphrase.
Click here for additional detail or request a proposal so you can start focusing on growing your business, rather than supporting your servers.