README for Apache-SSL/1.2.5 Ben-SSL/1.14
----------------------------------------

(C) 1995, 1996, 1997, 1998 Ben Laurie <ben@algroup.co.uk> (http://www.algroup.co.uk/)

These patches interface Apache to SSLeay.

For further information on Apache see:

	http://www.apache.org
	"Apache: The Definitive Guide" published by O'Reilly
		(http://www.ora.com).

For further information on SSLeay see:

	http://www.psy.uq.oz.au/~ftp/Crypto/
	ftp://ftp.psy.uq.oz.au/pub/Crypto/SSL/
	ftp://ftp.psy.uq.oz.au/pub/Crypto/SSLapps/

REMEMBER export and/or import of crypto software or crypto hooks is illegal
in many parts of the world.

Prerequisites
-------------

Apache 1.2.6
SSLeay 0.6.1 (or later) or 0.8.0 (or later)
patch 2.1


Files
-----

ben.pgp.key.asc			My PGP public key
EXTRAS.SSL			Documentation on extra features
LICENCE.SSL			A copy of the Apache-SSL licence
README.SSL			This file
SECURITY			Some thoughts about SSL and security
SSLpatch			A patch file to be applied to the Apache source
src/apache_ssl.c		Extra module for Apache
SSLconf/conf/access.conf	Empty (required by Apache)
SSLconf/conf/httpd.conf		Example configuration
SSLconf/conf/srm.conf		Empty (required by Apache)
SSLconf/conf/mime.types		A copy of the the sample mime.types (required)
md5sums				MD5 checksums of all files (using md5sum)
md5sums.asc			My detached signature of md5sums


Installation
------------

1. Get hold of SSLeay (from the sites mentioned above), and compile it.

2. Get hold of Apache 1.2.6 (from ftp://www.apache.org/apache/dist).

3. Unpack it.

4. do "cd apache_1.2.6"

5. Unpack this distribution.

6. do "patch -p1 < SSLpatch".

7. Proceed with standard Apache configuration. Note that you'll need to set
SSL_* to appropriate values. If you point to the SSLeay source tree, then
you'll only need to set SSL_BASE.

8. Look at the (very brief) example configuration in SSLconf (yes, access.conf
and srm.conf are supposed to be empty).

9. Make yourself a test certificate by doing "make certificate".

10. Before using this server for anything serious, read the file SECURITY.

11. Have fun!

12. Email any patches/suggestions to the address above PAYING CLOSE ATTENTION
TO ANY APPLICABLE EXPORT/IMPORT LAWS.

13. If this software doesn't do what you want, and you can't or won't fix it
yourself, I am available for hire. Send me email outlining what you want and
I will quote.


Derived Works
-------------

I have been asked what to do about the version string for derived works. The
comment above the version string in httpd.h spells it out pretty clearly, but,
to reiterate, any derived work's version string should include "Apache/x.y.z"
and "Ben-SSL/x.y" in it.


Compatibility
-------------

This version tested only with Netscape 4.04 on Windows NT.


Credits
-------

Thanks to The Apache Group and the NCSA, for Apache, to Eric Young and Tim
Hudson, for SSLeay, and to Baroness Camilla von Massenbach, for putting up
with me.

Thanks to Brad Eacker (beacker@beakman.cks.com) for providing a port from
Apache-SSL 1.1.3+1.3 to Apache 1.2b8.

Ben Laurie is Technical Director of A.L. Digital Ltd., London, England, who
generously support the development of Apache-SSL.

See http://www.algroup.co.uk/

Sponsorship
-----------

1.2.5+1.13 was sponsored by Virgin Music Group.
