Regarding "Using certutil" section in  the "Managing SSL and SASL" chapter of the Administrator's Guide 7.1:

The instructions seem to indicate that one should use the same password to protect
 *  the key and certificate databases
 *  the encryption key
 *  the certificates

Is this correct? Is the pwdfile.txt still needed after the certificates are generated?

The "Enabling SSL ..." section of the same chapter talks about creating the password file needed to restart the server automatically. This is presumably the same password used to generate certificates (or is it not?). Is there a way to achieve the unattended restart while avoiding placing the password in a cleartext file?

Thanks,
Gabi