Apache-SSL or Mod_SSL

[Hokey]

I have always used Mod_SSL in the past, but I am setting up a new server and was wondering about Apache-SSL ...

Does someone have an insight on the difference between these two ... is one better than the other?

 

[jimberger]

mod-ssl is a newer and updated version of apache_ssl

 

[Hokey]

MOD_SSL is not an updated version of Apache-SSL.
Please read:

http://www.apache-ssl.org/#mod_ssl

I have done some testing since this post back in April and the biggest difference between mod-ssl and apache-ssl that I have found it that mod-ssl supports DSO and EAPI. I use DSO to load other modules (PHP, Auth_mysql, etc). SO my obvious choice was mod-ssl, but Apache-ssl did work fine if you wanted an plain SSL server.

 

[ifincham]

Hi,





As you can see on -->

http://www.modssl.org/

, mod_ssl was originally written using the apache-ssl code as a model but has since evolved such that this is no longer the case. They are functionally similar and both use the openssl libraries. It seems to me that mod_ssl is somewhat more popular and better documented but thats not to say that there's anything 'wrong' with apache-ssl.
Like a lot of things in the linux/bsd arena there are alternative ways of doing the same things and the choice is up to you.




Regards

 

[jimberger]

okay - i was wrong - sorry hokey. I have just started to implement mod_ssl and from my reading it was mod_ssl that was the latest and the greatest version to use. While were are on the subject - do anyone of you two know how to implement certificate based authentication without using a https server. I can get certificate based authentication working in a https server but i want my server to remain http. Is this even possible?

thanks

jim