[webmin-l] Webmin certificate(s) location and TinyCA2

[Robert M. <rg...@ht...>]

Well,

I have finally gotten TinyCA2 up and working!  Many things got in the 
way; but it is now up and running on my notebook (running Centos 4.3).

So I cut and pasted the root cert I built and exported in PEM format.

I also exported a server cert for my notebook (I run Webmin on it when I 
  need its tools).

I exported both certs to my home directory, now I want to know if I have 
to keep them there, or if I move them to a better locale, do I have to 
inform Webmin of the change?

My hunch is for the CA cert, since I cut and pasted it into CA cert 
authority module, I do not have to keep Webmin appraised of its location.

But the server cert, I suspect I DO have to keep it informed, so WHEN I 
move it to a better directory than my home directory, I will have to 
update the file location in the SSL module.


Now about that file being password protected....

When I supplied Webmin with the cert location (I put the cert and 
private key in a single file), the update failed with a message that 
webmin did not restart.

So from a terminal window I issued:  /etc/webmin/start

And was asked:

Enter PEM pass phrase:

So either I have to live with being asked for the PEM pass phrase 
everytime I start Webmin (reasonable for running it occationally on my 
notebook), or creat the server cert without a passphrase?

I can see that needing a passphrase on a server would require that said 
passphrase be somewhere on the filesystem (or in a token) anyway, so 
just put it in a root controled directory and don't passphrase protect 
it?  What does Webmin do what it creates its own cert?