
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.
Web Applications
|
353
If you leave out satisfy any, the meaning changes from or to and, a much more
restrictive setting.
SSL
SSL encrypts data between a web browser and web server. It’s used throughtout the
Web to protect login names, passwords, personal information, and, of course, credit
card numbers. The initial SSL handshake is slow in software, and much faster with a
hardware SSL accelerator.
Until recently, people tended to buy a commercial server to offer SSL. RSA Data
Security owned a patent on a public-key encryption method used by SSL, and they
licensed it to companies. After the patent expired in September 2000, free implemen-
tations of Apache+SSL emerged. Two modules—Apache-SSL and mod_ssl—have
competed for the lead position. mod_ssl is more popular and easier to install, and it
can be integrated as an Apache DSO. It’s included with Apache 2 as a standard mod-
ule. For Apache 1.x, you need to get mod_ssl from http://www.modssl.org and
OpenSSL from http://www.openssl.org.
Early in the SSL process, Apache requires a server certificate to authenticate its site’s
identity to the browser. Browsers have built-in lists of CAs and their credentials. If
your server certificate was provided by one of these authorities, the browser will
silently accept it and establish an SSL connection. ...