I have several web application servers that i'd like to convert to using https instead of http. My organization has a purchased wildcard certificate that I have asked to use. I'd like to disallow my developers from accessing the certificate, but I'd also like them to have sudo access on our web server.
From what I understand, the above should be fairly easy, however I dislike the idea of doubling the number of servers I have to maintain and I also dislike copying the certificate N times.
Central ssl server?
The best situation I could hope for is for my servers to have a central server encrypt my traffic for me while still letting clients connect directly to my web servers. This has the added benefit of letting the other department handle the server with the certificate on it so I'm not liable for its security.
Is there a way to do this? I'm using apache2. I don't even know what to search for.