Setup Apache/CGIDEV2 vs private RPG based server

I need to make an informed choice between two alternatives. Here is the
basic scenario:

- Client website (hosted offsite) needs to request a XML return data set
- Corporate 520 is not currently running Apache
- Initially only plans for two different simple DTDs/Schemas

I figure my basic two choices are:

1) Code my own small server (e.g., based on Scott K's examples)
2) Setup Apache and either CGIDEV2 or eRPG SDK or whatever

Both of the initially planned DTDs to be requested are relatively simple,
and parsing out the one or two query string variables needed should not be
hard even with the benefit of CVIDEV2 and various other APIs.

Setting up Apache seems like overkill, when all it does it listen for the
couple of different planned requests and call a CGI program to return the
data. But is is a better precedent to set for unknown future plans? If I
go the Apache route, can I utilize a SSL connection by just using https: and
the requisite certificates?

If I don't use Apache, is there an easy way to use SSL (or SSL-like)
encryption from my own server listening on a given port?