Sun Java System Web Proxy Server 4.0.2 2005Q4 Administration Guide

Starting SSL-enabled Servers

To start an SSL-enabled server, a password is required. Although you can start an SSL-enabled server automatically if you keep the password in plain text in a file, this is not recommended.


Caution – Caution –

Leaving the SSL-enabled servers password in plain text in the servers start script is a large security risk. Anyone who can access the file has access to the SSL-enabled server’s password. Consider the security risks before keeping the SSL-enabled server’s password in plain text.


The server’s start script, key pair file, and the key password should be owned by root (or, if a non-root user installed the server, that user account), with only the owner having read and write access to them.

ProcedureTo start your SSL-enabled server automatically on UNIX or Linux

Steps
  1. Using a text editor, open the start file.

  2. Locate the -start line in the script and insert the following:

    echo "password"|

    where password is the SSL password you have chosen.

    For example, if the SSL password is examples, the edited line might look like this:

    -start)

    echo "examples"|./$PRODUCT_BIN -d $PRODUCT_SUBDIR/config $@