SSL ?'s

[finger51]

I've been checking out mod_ssl to run on my apache 1.3 server. So in my reading I'm having two questions.

Question the first

All the installation notes show the install as a 'from the ground up' install. Meaning, you are installing Apache, mod_ssl, PHP etc.

Is it possible to install just the SSL portion of the show? I'd hate to be forced to install apache and PHP again just to get the ssl

? #2

THe reason I'm doing this project is so I can access my mail via https. I'm running a sendmail server with squirrelmail for http access. I'd like to login to my http://mydomain.com and click the mail link and have it display the squirrelmail login page with the URL 'https://mydomain.com/webmail'

so the question I have is, do I need to run a virtual domain for the https://mydomain/webmail link? Or can I just have this 'area' of the site SSL?

TIA
finger51

[bwkaz]

Most of the time, mod_ssl is already installed with Apache. I know that's the case in all Apache 2 versions, and I thought it was the case with the most recent Apache 1.3 versions also, though I don't know for sure. Check around in Apache's tree for a mod_ssl.so file (or just search your entire /usr tree) to see if you already have it.

If you do, then the procedure for getting it to load up on Apache 2.0 is to run apachectl start-SSL instead of apachectl start. Basically what this does is defines the "SSL" directive that the httpd.conf file sees and includes the mod_ssl stuff (and also binds to port 443 for HTTPS). Maybe 1.3 is similar?

[finger51]

thanks for response~

I don't see the mod_ssl.so in the tree- Is it possible to just install in on top of Apache? Or does the program need to be re-compiled?

Any ideas about the virtual host question? Or can it be simply link specific?

Thanks Again

[bwkaz]

You don't need a virtual host just to use SSL, no. In Apache 2, you can use the SSLRequireSSL directive in a <Directory> section to require that all connections requesting stuff in that directory be SSL'ed. Apache 1 might have something similar, check http://httpd.apache.org/ and look in the documentation for Apache 1.3.

As for whether it's possible to install mod_ssl overtop of an existing Apache, I have no idea. I've never used Apache 1.3 (let alone with mod_ssl), so my experience is nonexistant...

[finger51]

again, I appreciate the input. At first I was not so inclined to upgrade to 2.0 - the whole "if it ain't broke..." thing. But this seems like a fairly good reason to do an upgrade.

a little more reading in my future