Apache & mod_ssl

[Thomas P]

Hi,

hopefully this isn't a bit to OT... here it goes: :)
Is it important to use a specific version of mod_ssl with a specific version of Apache.
I mean, does it need to be mod_ssl 2.8.8 with Apache 1.3.24 (http://www.modssl.org/) or could it be Apache 1.3.20 with the latest mod_ssl?
Thanks in advance,
-Tom

[Dave#]

Originally posted by Thomas P
Hi,

hopefully this isn't a bit to OT... here it goes: :)
Is it important to use a specific version of mod_ssl with a specific version of Apache.
I mean, does it need to be mod_ssl 2.8.8 with Apache 1.3.24 (http://www.modssl.org/) or could it be Apache 1.3.20 with the latest mod_ssl?
Thanks in advance,
-Tom

It will work however I would strongly advise against not using the latest version of MODSSL as there are a few security gotchas.

There is also a few holes in apache 20 . . .

I would use the latest versions of both (not apache 2 though)

[Thomas P]

Okay, I see.
Thanks for your expertise,
-Tom

[Dave#]

Talking of modssl - anyone know what happened to their site?