On 4/13/07, Mike VanHorn <michael.vanhorn@xxxxxxxxxx> wrote:
I have Apache 2.2.2, and the version given for mod_ssl is 2.2.2. We were recently audited and the audit report notes that our version of mod_ssl is old. I can't find anything that tells me where I can go to get a newer version of mod_ssl for Apache 2.2.x; I did find some higher version numbers for Apache 1.x, but now that mod_ssl is part of the Apache 2 package, there doesn't seem to be an external package for mod_ssl. Is this correct?
Yes. So either: 1. The audit report was garbage; or 2. It was referring to your version of openssl, a library used by mod_ssl. Joshua. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx