Re: [apache-ssl] GB?
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [apache-ssl] GB?



Adam Laurie wrote:
> 
> John Sutton wrote:
> > 2) What is this strange business of generating a odd named soft link to a
> > key file:
> >
> > dd948bac.0 -> ../SSLconf/conf/httpsd.pem
> >
> > Is this necessary? desirable? why?
> 
> Necessary? No.
> 
> Desirable? Depends.
> 
> The soft link allows the server to find the relevant CA cert, quickly.
> This is only an issue if you have a lot of certs. The bottom line is
> your server will function OK without it.

Not quite. If it needs to look up a CA, the link is required. However,
for a server cert, it doesn't need the CA.

Cheers,

Ben.

-- 
Ben Laurie            |Phone: +44 (181) 735 0686| Apache Group member
Freelance Consultant  |Fax:   +44 (181) 735 0689|http://www.apache.org/
and Technical Director|Email: ben@algroup.co.uk |
A.L. Digital Ltd,     |Apache-SSL author     http://www.apache-ssl.org/
London, England.      |"Apache: TDG" http://www.ora.com/catalog/apache/

WE'RE RECRUITING! http://www.aldigital.co.uk/recruit/