Very Computer

Hello there!

I'm trying to host ssl site on my apache httpd, now the big question
is .. should I use apache-ssl or mod-ssl?

what is better for security? and why apache has got two derivatives
.... ? is that apache-ssl for a complete replacemant of apache httpd?
or the mod-ssl can be used with any apache 1.3 httpd? Who provides the
128 bit encription?

I went to both ... apache-ssl.org and modssl.org .... it's really
confusing :(

Any ideas?

TIA

Raqueeb Hassan
Bangladesh

Quote:> I'm trying to host ssl site on my apache httpd, now the big question
> is .. should I use apache-ssl or mod-ssl?

Perhaps before getting into either of those, consider Apache 2.x (will you
be using it?) Apparently it has quite a few improvements over the 1.3
series. I can't figure out whether SSL comes with Apache 2.x (this page
mentions mod_ssl, but I don't know whether that's the same as modssl.org)
http://httpd.apache.org/docs-2.0/new_features_2_0.html

--
Jem E. Berkes
Student IEEE (Winnipeg)

http://www.pc-tools.net/
Windows, Linux & UNIX software

Quote:>I'm trying to host ssl site on my apache httpd, now the big question
>is .. should I use apache-ssl or mod-ssl?

>what is better for security? and why apache has got two derivatives
>.... ? is that apache-ssl for a complete replacemant of apache httpd?
>or the mod-ssl can be used with any apache 1.3 httpd? Who provides the
>128 bit encription?

First there was only Apache-SSL to provide SSL functionality for Apache.
It comprised of a largish patch doing changes "all over" Apache base
code.

Apparently this approach was considered a design fault, as a competing
approach, mod_ssl, appeared. Mod_ssl, as the name implies, is built as
an add-on module for Apache, and thus integrates in a more elegant way
into the Apache core.

I don't know how the two compare; I wouldn't believe in major
differences in product security or performance, but then, if you're
interested, please do proper testing and report your findings to the
rest of us.
--
Wolf  a.k.a.  Juha Laiho     Espoo, Finland

         PS(+) PE Y+ PGP(+) t- 5 !X R !tv b+ !DI D G e+ h---- r+++ y++++
"...cancel my subscription to the resurrection!" (Jim Morrison)

Quote:>Hello there!

>I'm trying to host ssl site on my apache httpd, now the big question
>is .. should I use apache-ssl or mod-ssl?

>what is better for security? and why apache has got two derivatives
>.... ? is that apache-ssl for a complete replacemant of apache httpd?
>or the mod-ssl can be used with any apache 1.3 httpd? Who provides the
>128 bit encription?

>I went to both ... apache-ssl.org and modssl.org .... it's really
>confusing :(

>Any ideas?

>TIA

>Raqueeb Hassan
>Bangladesh

I was asking the same question a couple of weeks ago. Chapter six of
the manual addresses this question and related details in the first
couple of paragraphs. I went with modssl.

http://www.modssl.org/docs/2.8/ssl_faq.html

Ron