> Here's my situation; I have a web server located at my ISP which I host
> several sites on including one site that allows users to place orders
> for a particular product.
> I would like to use SSH to connect and administor this server. Can I
> use the free version or does my order site require me to now purchase a
> license for SSH?
> Does SSL work the same way? If I purchase a certificate from Verisign,
> do I still need to purchase something like Raven to handle SSL on
> Apache or is ther something freely available I can use even though I
> have an order site?
The source for OpenSSH and OpenSSL (which is what FreeBSD 4.x uses) both use
non-commercially restricted licenses.
However, assuming that you're a US resident, you are not legally allowed to use
RSA in any form for commercial use without paying royalties to RSA Security.
This affects both ssh and ssl. Fortunately, the RSA patent expires shortly (Sep
20 this year), and after that date, you can do anything you want with RSA.
Similarly with Apache, if you want to use RSA, you will need to buy Raven or
Stronghold in order to stay legal until Sep 20. After that date, you can just
use Apache-SSL for the same ends.
IDEA is still patented in the US and will be for some time to come.