I've been searching for some source of information about this...
I would like to be able to use OpenSSL + mod_ssl + Apache in order to
produce a secure web server; for a variety of reasons it would be very
nice if I could have one httpd serving both http and https clients.
While I am willing to pay Covalent or C2Net a fee in order to obtain a
legitimate license-to-use the RSA algorithms, I am highly averse to
blindly linking object code into my production Apache server!
Is it possible to compile Apache + mod_ssl + OpenSSL entirely from
source *AND* still include the RC4, RC5, etc... ciphers?
This might be obvious already from my questions, but I haven't tried to
compile OpenSSL or mod_ssl yet. I'm trying to figure out if there's any
point in doing so.
I am a citizen of Canada, the company is a Canadian corporation and the
server will physically reside in Canada. From what I can tell, the
RSAREF issue is US-specific, but.... ?
Any pointers or explanations appreciated.
-Adam Thompson
<[EMAIL PROTECTED]>
--
Adam Thompson, MCNE, MCSE, CWT, A+
Vice-President / Chief Technology Officer, Commerce Design Inc.
<[EMAIL PROTECTED]>
tel: (204) 942-1648, fax: (204) 989-8080, cell: (204) 782-6198
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]