mod_ssl versus Apache-SSL?

We need to server some secure pages from our apache server. I'm aware
that there is mod_ssl and Apache-SSL, but I'm not sure about the
differences. Is one more easy to set up in particular, or are they much
the same? Any fundamental differences?

alex

Alex Hunsley <lard@tardis.ed.ac.molar.uk> wrote:
> that there is mod_ssl and Apache-SSL, but I'm not sure about the
> differences.

mod_ssl is an additional module that can be added to a regular
Apache at any time (if Apache is built with DSO) adding SSL
features to Apache, while Apache-SSL has ssl capabilities built-in.

Basically, if you get Apache and mod_ssl and compile it built-in,
you get the same of Apache-SSL.

They are both built around OpenSSL.

Davide

--
| The Strong Lusethropic Principle states: "The more idiot proof the
| software, the more it encourages the user to be careless and not
| think. Therefore, idiot-proof software actually encourages,
| contributes, and actually CAUSES lusers to be stupid." --Ben Cantrick
|
|

Davide Bianchi wrote:

> Alex Hunsley <lard@tardis.ed.ac.molar.uk> wrote:
>
>>that there is mod_ssl and Apache-SSL, but I'm not sure about the
>>differences.
>
>
> mod_ssl is an additional module that can be added to a regular
> Apache at any time (if Apache is built with DSO) adding SSL
> features to Apache, while Apache-SSL has ssl capabilities built-in.
>
> Basically, if you get Apache and mod_ssl and compile it built-in,
> you get the same of Apache-SSL.
>
> They are both built around OpenSSL.
>
> Davide
>

thanks for that info!
alex

Alex Hunsley wrote:
> Davide Bianchi wrote:
>
>> Alex Hunsley <lard@tardis.ed.ac.molar.uk> wrote:
>>
>>> that there is mod_ssl and Apache-SSL, but I'm not sure about the
>>> differences.
>>
>>
>>
>> mod_ssl is an additional module that can be added to a regular
>> Apache at any time (if Apache is built with DSO) adding SSL
>> features to Apache, while Apache-SSL has ssl capabilities built-in.
>>
>> Basically, if you get Apache and mod_ssl and compile it built-in,
>> you get the same of Apache-SSL.
>>
>> They are both built around OpenSSL.
>>
>> Davide
>>
>
> thanks for that info!

If you need to run both regular and ssl pages, go with mod_ssl.
Otherwise you end up doubling up on your maintanence work, i.e. two
copies of httpd.conf, two sets of daemons, etc. Although I'm sure there
are excellent arguments for doing it that way.

--
Rossz