4

I got stuck with a scenario where I need to provide runtime value while restarting/starting httpd service using Chef.

I installed SSL certs where it asks password for every reload or start. I tried giving:

service 'httpd' do
  supports restart: true, reload: false, status: true
  options "password"
end 

But I don't have any luck.

Any help about how to pass this value while httpd restarts using Chef?

2

You shouldn't. Instead you should use proper secrets management system that would provide you unlocked SSL certificate.


By secret management I mean tooling like k8s secret management or Vault.

You can read Medium post about secrets.

  • Maybe you could elucidate what proper secrets management means to you. – chicks Aug 20 '17 at 12:46
  • @Lukasz we need to have SSL certificates to maintain our security. – pandey Aug 20 '17 at 14:03
  • @pandey I am not saying that you should resign from SSL but from the fact that your certificate need password. This is the problem. – Hauleth Aug 20 '17 at 14:21
  • Yes right, so can we provide this password while reloading. A httpd – pandey Aug 20 '17 at 14:22
  • The point of my post is that there should be no password at all. Instead your httpd server should have access to the certificate as is, without any additional information. Here you can find how – Hauleth Aug 20 '17 at 14:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.