Using ssl/mod_ssl on non-apache HTTP server

Hi -

I'm new to ssl/mod_ssl so please forgive me if this post
is out in left field. I have a new contract to develop
secure TCP/IP communication between many customer sites.
I have prototyped a non-secure HTTP server/client system
written in Perl. My client likes it - but he demands high-
level security.

In my years of web programming, there has always been the
'security' guy around to take care of these 'details' for
me, but now I am him... :)

I have been plowing through the Openssl, Perl modules
(Net::SSLeay, etc.) documentation, but it's slow going
and it hasn't 'clicked' yet for me.

Do any of you have suggestions of other resources that
might help me? HOWTOs, FAQs, Articles, Books, anything?

Aloha => Beau.

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: Using ssl/mod_ssl on non-apache HTTP server

Wait!

Please ignore (for now) my recent post (below). A friend just
suggested CPAN's IO::Socket::SSL - which, on first look,
my solve my problems.

Sorry to have wasted bandwidth and your time.

Aloha => Beau;

> -----Original Message-----
> From: owner-modssl-users@modssl.org
> [mailto:owner-modssl-users@modssl.org]On Behalf Of Beau E. Cox
> Sent: Tuesday, February 25, 2003 11:34 PM
> To: modssl-users@modssl.org
> Subject: Using ssl/mod_ssl on non-apache HTTP server
>
>
> Hi -
>
> I'm new to ssl/mod_ssl so please forgive me if this post
> is out in left field. I have a new contract to develop
> secure TCP/IP communication between many customer sites.
> I have prototyped a non-secure HTTP server/client system
> written in Perl. My client likes it - but he demands high-
> level security.
>
> In my years of web programming, there has always been the
> 'security' guy around to take care of these 'details' for
> me, but now I am him... :)
>
> I have been plowing through the Openssl, Perl modules
> (Net::SSLeay, etc.) documentation, but it's slow going
> and it hasn't 'clicked' yet for me.
>
> Do any of you have suggestions of other resources that
> might help me? HOWTOs, FAQs, Articles, Books, anything?
>
> Aloha => Beau.
>
> ____________________________________________________________ __________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List modssl-users@modssl.org
> Automated List Manager majordomo@modssl.org
>

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Using ssl/mod_ssl on non-apache HTTP server

Take a look at the code of Webmin, it uses a Perl based webserver that can
use SSL if available. http://www.webmin.com
I have a chapter online introducing the main SSL concepts, it is focused on apache
but it should be useful for the basics:
http://www.apacheworld.org/ty24/
then, for the programming side of things, this is a good book:
http://www.amazon.com/exec/obidos/tg/detail/-/059600270X
As a reference book, I found this one invaluable:
http://www.amazon.com/exec/obidos/tg/detail/-/0201615983

Cheers

Daniel

> Hi -
>
> I'm new to ssl/mod_ssl so please forgive me if this post
> is out in left field. I have a new contract to develop
> secure TCP/IP communication between many customer sites.
> I have prototyped a non-secure HTTP server/client system
> written in Perl. My client likes it - but he demands high-
> level security.
>
> In my years of web programming, there has always been the
> 'security' guy around to take care of these 'details' for
> me, but now I am him... :)
>
> I have been plowing through the Openssl, Perl modules
> (Net::SSLeay, etc.) documentation, but it's slow going
> and it hasn't 'clicked' yet for me.
>
> Do any of you have suggestions of other resources that
> might help me? HOWTOs, FAQs, Articles, Books, anything?
>
> Aloha => Beau.
>
> ____________________________________________________________ __________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List modssl-users@modssl.org
> Automated List Manager majordomo@modssl.org
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org