I just purchased an SSL certificate and am considering options for its implementation on my Amazon Elastic Load Balancer, which will leverage Apache2. From what I understand I have two options for implementing an SSL certificate in Apache 2 --- either apache-ssl or mod_ssl. The purpose of this question is to collect benefits/drawbacks associated with going with one or the other.
mod_ssl is an optional module for the Apache HTTP Server. It provides strong cryptography for the Apache v1. 3 and v2 webserver via the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) cryptographic protocols by the help of the Open Source SSL/TLS toolkit OpenSSL.
mod_ssl is an Apache module that adds “secure sockets layer” (ssl) and “transport layer security” (tls) between a web server and it's clients (web browsers).
The default port for SSL/TLS requests on the Apache HTTP server side is 443. The regular Apache server listens on the port 80 so there is no conflict between a regular Apache listening on port 80 and an SSL/TLS enabled Apache listening on port 443.
You will not want apache-ssl. It is based on an ancient (prehistoric) version of Apache, uses somewhat slower libraries for the SSL stuff, and has roughly zero sized userbase. It is in overall harder to maintain if your requirements increase.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With