Mod_ssl and accelerator cards

Question

As anyone configured mod_ssl to work with accelerator cards?
We are using 9iAS on Sun Solaris and wish to use an accelrator
card for SSL key manipulation.
A question for Oracle, if we replace the provided mod_ssl binary
with one we have compiled from the source available on the web
whatis the effect on Oracle support?
Regards
Mike Bray

Answer 1

Hi ibosie,
   I'm not sure exactly what you're asking but I don't think there's a required reference to anything you've mentioned. I keep my certs in my /System/Library/OpenSSL/certs directory but that's a matter of choice. As far as I know, all that matters is what file you provide as values of the SSLCertificateFile and SSLCertificateKeyFile properties in the VirtualHost block used to define your secure website in the httpd.conf file. (or file included from the httpd.conf file) Traditionally the SSLCertificateFile value points to a server.crt file and the SSLCertificateKeyFile value points to a server.key file.
   I don't what they're talking about in the security advise. The only file you have to protect is your private key; the rest you share freely. The private key should be in a directory owned by and readable only by root. However, that still has to be on the server.
   At least that's the way apache works traditionally. Maybe there's some way to keep the private key in a keychain. That would naturally be preferable; I just don't how to do it. Apple's web page, Creating Secure Transactions on Mac OS X server Using SSL, puts the key in a keychain but still uses a file for the web server.
Gary
~~~~
   Q:   What's the difference betweeen USL and the Graf Zeppelin?
   A:   The Graf Zeppelin represented cutting edge technology for its time.