Re: Apache2 mod_ssl with HSM support

2007-06-01 Thread Rob Crittenden
Marc Stern wrote: What was the goal to derivate from mod_ssl ? The goal was to make an Apache SSL module using NSS as the crypto engine. I saw no point in re-inventing the wheel so used mod_ssl as a starting point. Is NSS better than OpenSSL ? Both serve their purposes, choice is good.

Re: Apache2 mod_ssl with HSM support

2007-05-31 Thread Rob Crittenden
Marc Stern wrote: What are the advantages/disadvantages between mod_ssl mod_nss ? Marc mod_ssl has the advantage that it is in wide use and has had many eyeballs on it. It is feature-rich and performs well. mod_nss is a derivative of the mod_ssl from Apache 2.0.52 (plus a few updates

Re: Apache2 mod_ssl with HSM support

2007-05-30 Thread Rob Crittenden
Marc Stern wrote: That would definitely be a good thing. More and more servers are using a HSM, and we only can suggest to our customers who want to do so to use a commercial server like IIS. Marc mod_nss uses NSS as the crypto library instead of OpenSSL and supports PKCS#11 drivers

mod_nss 1.0

2005-09-20 Thread Rob Crittenden
This is to announce a new module for Apache 2.0.x named mod_nss. mod_nss provides SSL support using the mozilla.org NSS crypto libraries (http://www.mozilla.org/projects/security/pki/nss/). It is a derivation of mod_ssl from Apache 2.0.54. Basically we ripped out any OpenSSL calls and

Re: How to Log Startup errors? Logfile gets created after startup only.

2005-07-27 Thread Rob Crittenden
I think he wants the -e flag to httpd. This will log startup errors to stdout. See LogLevel for the various available levels. So you can start the server with something like: % apachectl -e debug -k start rob Nick Kew wrote: Vishal Gupta wrote: Hi, I have written a module, and want to