.. /*
    * This file is part of the SavaPage project <https://www.savapage.org>.
    * Copyright (c) 2026 Datraverse B.V.
    * Author: Rijk Ravestein.
    *
    * SPDX-FileCopyrightText: (c) 2020 Datraverse B.V. <info@datraverse.com>
    * SPDX-License-Identifier: CC-BY-SA-4.0
    *
    * For more information, please contact Datraverse B.V. at this
    * address: info@datraverse.com
    */


.. _ch-security-ssl-passwords:

SSL Certificate and Password
----------------------------

Each time |PRODUCT_NAME| server starts it checks if the default
:ref:`self-signed key and certificate <app-tools-ssl-key>` and password
file are present. If not, they are generated (a missing password file
will generate both) with defaults described in 
:ref:`Re-Create the Self-Signed Certificate <app-tools-ssl-key-recreate>`.

The key is used by default when the system is accessed via HTTPS on port
|PROD_IP_PORT_SSL|. The password of the ``default-ssl-keystore`` is
generated in ``/opt/savapage/server/data/default-ssl-keystore.pw``.
Access to this file is restricted to the ``savapage`` user.

The passwords for the :ref:`installed keystore <app-tools-ssl-key-install-keystore>`
created from an imported :ref:`Existing SSL Certificate <app-tools-ssl-key-import>` 
are set in the :ref:`server.properties <ch-install-on-linux-config-server-properties>`
file. Access to this file is restricted to the ``savapage`` user.