Starting SSL-Enabled Servers

To start an SSL-enabled server, a password is required. Although you can start an SSL-enabled server automatically if you keep the password in plain text in a file, doing so is a large security risk. Anyone who can access the file has access to the SSL-enabled server’s password. Consider the security risks before keeping the SSL-enabled server’s password in plain text

The server’s start script, key pair file, and the key password should be owned by root or, if a non-root user installed the server, that user account, with only the owner having read and write access to them.