I got stuck with a scenario where I need to provide runtime value while restarting/starting httpd service using Chef.

I installed SSL certs where it asks password for every reload or start. I tried giving:

service 'httpd' do
  supports restart: true, reload: false, status: true
  options "password"

But I don't have any luck.

Any help about how to pass this value while httpd restarts using Chef?

1 Answer 1


You shouldn't. Instead you should use proper secrets management system that would provide you unlocked SSL certificate.

By secret management I mean tooling like k8s secret management or Vault.

You can read Medium post about secrets.

  • Maybe you could elucidate what proper secrets management means to you.
    – chicks
    Aug 20, 2017 at 12:46
  • @Lukasz we need to have SSL certificates to maintain our security.
    – pandey
    Aug 20, 2017 at 14:03
  • @pandey I am not saying that you should resign from SSL but from the fact that your certificate need password. This is the problem.
    – Hauleth
    Aug 20, 2017 at 14:21
  • Yes right, so can we provide this password while reloading. A httpd
    – pandey
    Aug 20, 2017 at 14:22
  • The point of my post is that there should be no password at all. Instead your httpd server should have access to the certificate as is, without any additional information. Here you can find how
    – Hauleth
    Aug 20, 2017 at 14:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.