Davide Bianchi <davideyeahsure RemoveThis @onlyforfun.net> wrote in
news:slrnd552k8.2eo.davideyeahsure@fogg.onlyforfun.net:
> On 2005-04-05, Sailor Dude <sail RemoveThis @away.net> wrote:
>> Does SSL come with Apache, or is it a stand-alone program?
>
> Apache 2.x does (usually) include mod_ssl, for 1.3 you have to install
> it, unless you get some distribution that includes it.
>
>> Is SSL available with the Windows release of Apache 2.0.53?
>
> I think so. See the docs.
I looked at the documentation. It all says SSL for Apache 1.33.
<a style='text-decoration: underline;' href="http://www.apache-ssl.org/" target="_blank">http://www.apache-ssl.org/</a>
<a style='text-decoration: underline;' href="http://www.modssl.org/" target="_blank">http://www.modssl.org/</a>
------------------------------------------------------
<a style='text-decoration: underline;' href="http://httpd.apache.org/docs/misc/FAQ.html#SSL-i" target="_blank">http://httpd.apache.org/docs/misc/FAQ.html#SSL-i</a>
Why doesn't Apache include SSL?
SSL (Secure Socket Layer) data transport requires encryption, and many
governments have restrictions upon the import, export, and use of
encryption technology. If Apache included SSL in the base package, its
distribution would involve all sorts of legal and bureaucratic issues,
and it would no longer be freely available. Also, some of the technology
required to talk to current clients using SSL is patented by RSA Data
Security, who restricts its use without a license.
Some SSL implementations of Apache are available, however; see the
"related projects" page at the main Apache web site.
You can find out more about this topic in the Apache Week article about
Apache and Secure Transactions.
------------------------------------------------------
And the information that Apache refers you to is 8 years old!
-----------------------------------------------------
<a style='text-decoration: underline;' href="http://www.modssl.org/docs/2.8/ssl_faq.html#ToC5" target="_blank">http://www.modssl.org/docs/2.8/ssl_faq.html#ToC5</a>
How do I know which mod_ssl version is for which Apache version? [L]
That's trivial: mod_ssl uses version strings of the syntax <mod_ssl-
version>-<apache-version>, for instance 2.4.0-1.3.9. This directly
indicates that it's mod_ssl version 2.4.0 for Apache version 1.3.9. And
this also means you only can apply this mod_ssl version to exactly this
Apache version
-----------------------------------------------------
Apache 2 is 3 years old and nobody has come up with SSL for it yet???
Right now I am under the assumption that you need to run an old version
of Apache if you want SSL. I can't imagine how many years old that
version 1.3 is. Not to mention that Apache recommends the 2.0.53
version.
Why they wouldn't build it in is beyond me. Encryption export
restrictions my ass. If a hostile foreign nation wants to get encryption
capabilities, silly little restrictions aren't going to stop them.
This open source stuff is not newbie friendly, that's for sure. The
frustration of spending hours and hours looking for answers to simple
questions is enough to say the hell with it all. I've got an hour-and-a-
half into this question, and I still haven't found an answer.
Are there other newsgroups with people experienced in this area?
Thanks for your help.<!-- ~MESSAGE_AFTER~ -->
>> Stay informed about: Newbie Questions: Apache For Windows, Scripting, Compiled ..