Decode an encrypted SSL certificate

If you create an SSL certificate with a passphrase, it will prevent a frontend or app server from successfully booting up because Apache will expect a passphrase from STDIN (e.g. keyboard).  To prevent this problem from occurring, you must decode the encrypted certificate by either removing the passphrase or using the WEB apache FrontEnd https vhost RightScript.

1. Use the "WEB apache FrontEnd https vhost" RightScript
   You must clone the frontend/app server template and add "WEB apache FrontEnd https vhost" as a boot script.  Place this script after the "LB apache reverse proxy configure" boot script.  This RightScript will automatically set up a vhost at port 443 and decode the certificate if OPT_SSL_PASSPHRASE is specified.


2. Remove the Passphrase from the SSL certificate
   Use the commands below to manually remove the passphrase on the SSL certificate.  Be sure to make a copy of your original key before running the following commands because once you enter the passphrase, it will replace your original key with the decrypted key.
   openssl rsa -in YOURSERVER.key -out YOURSERVER.key
         chmod 400 YOURSERVER.key
   

For detailed information, you can find it in Apache SSL FAQ.