Re: [WEB400] SSLCipherSpec vs SSLCipherSuite

[web400@xxxxxxxxxxxxxxxx]

Hi Mike,

> Are these directives dependent on what SSL mod was compiled into Apache
> ? Do I ignore what the non-iseries Apache manuals say about SSL and only
> look at what IBM says ?

I think you're on the right track.  See, Apache isn't really one program 
-- it's a collection of modules.  Each module can have it's own 
configuration directives.

You could even write your own module, maybe call it "mod_mike", and have 
configuration directives such as "IWannaBeLikeMike on" :)

Anyway...  In the case of SSLCipherSpec it's a keyword that's used by a 
module called "mod_ibm_ssl" this is the IBM SSL module.

Whereas, "SSLCipherSuite" is part of a module called "mod_ssl" which is an 
SSL module based on the OpenSSL open-source encryption library.  AFIAK, 
OpenSSL doesn't currently run on the iSeries, but maybe someone will port 
it some day.  If they ever do, then you'd have a choice as to whether you 
prefer to use "mod_ibm_ssl" vs. "mod_ssl".  And, at that point, the 
difference between SSLCipherSpec and SSLCipherSuite would become important 
:)