[svlug] Test for SSL on Apache?

[Rick Moen]

Quoting Skip Evans (skip at bigskypenguin.com):

> So, since I have mod_so.c, but not mod_ssl, do I 
> understand Michael correctly that I can compile 
> mod_ssl as a module and include it from httpd.conf?

Just a thought:  If you're finding yourself compiling mod_ssl from
source (and if this isn't a distribution where you normally build
_everything_ from source), then maybe you're solving the wrong problem?

That is, part of the goal of distribution package maintainers is to make
packaged software work relatively painlessly -- not to mention, over
time, doing package maintenance and security patching that you'd
otherwise have to do locally, on your own.  Maybe you should start over,
blow away the mess you have, put in the _distro packages_ for Apache
{1.3.x|2.x}, OpenSSL, and mod_ssl, generate a cert[1], and just enable
the latter in whatever's the appropriate Apache conffile for your
distro's context.

(And:  If the machine you're attempting this on is a production server, 
for heaven's sake get the technique straight on a scratch host, first.)

[1] See:  "SSL Cert Self-signing" on http://linuxmafia.com/kb/Security/

-- 
Cheers,      English is essentially Pictish that was attacked out of nowhere by
Rick Moen    Angles cohabiting with Teutons who were done in by a drunk bunch of
rick at linux   Vikings masquerading as Frenchmen who insisted they spoke Latin and
mafia.com    Greek but lacked the Arabic in which to convey that. -- Bill Hammel