On Mon, Mar 05, 2001, ModSSL user wrote:
> What about mod_ssl port to Apache 2.0.
> You proposed some time ago to put all mod_ssl 2.8.x in Apache 2.0 tree
> but there is still nothing.
Although I offered the whole mod_ssl 2.8 code basis under the ASF
license to the ASF, there was no group consensus on using mod_ssl for
Apache 2.0. Look at the way and by whom SSL/TLS was pushed into Apache
2.0 and you should be able to imagine yourself why our mod_ssl code was
not accepted as the code base.
Actually the whole "SSL/TLS for Apache 2.0" situation over the last
months was finally "solved" by a rather clever trick by someone of the
group - and this was not obvious even to me until recently. But because
of this, as a result, we failed to bring mod_ssl directly into Apache
2.0. Sorry, perhaps my fault in being to optimistic and thinking that
political things inside the group were already gone. Seems like someone
else was a lot more clever than me...
> Will you instead works with Ben Laurie on mod_tls ?
I still don't know. As I said, the whole SSL/TLS issue again is a
_highly_ political thing in Apache 2.0 and I certainly will try hard to
stay out of those things as far as I can. Whether it finally means that
mod_ssl has to be externally maintained again, I still don't know.
The only thing I currently know is that with Apache 2.0 it seems that we
again will have the same SSL/TLS problem as we had three years ago with
Apache 1.3 (means: an unpolished 70% percent solution). And I also know
that someone (not necessarily me) will again find this not satisfactory.
What approach then is used to change this we all still don't know...
Ralf S. Engelschall
[EMAIL PROTECTED]
www.engelschall.com
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]