[Xitami] Considering switch to Xitami Pro for SSL

xitami@lists.xitami.org xitami@lists.xitami.org
Mon, 3 Jun 2002 09:40:31 -0700


Hi,

I've been running Xitami Pro, 2.4d10 for 4 months. It works well 
except a few minor issues. So I would say it is stable.
The problems are
	- initially there is no logs directory, you'll have to create it 
yourself; Xitami tells you this in the console log or if you run it as 
console mode which I recommend during the site certificate setup
	- setting up the certificates it's a bit tricky, I think there is a 
problem with a path in the configuration file; in the SSL section of 
sslhttp.cfs which contains these entries
    
    [Ssl]
        cert-key=key.pem   
        cert-file=cert.pem 
        ca-cert-path=certs 
        ca-cert-file=thawteca.pem

I've had to specify the path like this, it seemed that ca-cert-path 
entry is not working

 [Ssl]
        cert-key=key.pem   
        cert-file=certs\cert.pem 
        ca-cert-path=certs 
        ca-cert-file=thawteca.pem

	- generating certificates with extended validity, ex. 1 year 
requires that you get the documentation for ssleay, actually there 
is a parameter called -days that needs to be changed
	- it the begining I've had a problem with the log files not being 
renamed (permission denied); I've had to play with the logs 
configurations, basically I've just change them and now it is working
	- the documentation (i.e. the html help files) is outdated (from 
2.4d7)
	- once you get/generate your certificates (1024 bit keys) and 
make the ssl work, the encription is seamless for you, as far as 
CGI or lrwp programming, are concerned; however, the whole 
transfers are slowed down the speed probably depends on your 
machine as well as users' machines
	- all in all, it seems that although Xitami Pro I have is the 
version 2.4d10, its configuration and other files have somewhat not 
been fully updated

Please note that the website that I am running is only for research and is not receiving a lot of hits.



On 2 Jun 02, at 22:52, Jeff Hamblin wrote:

> Hello All,
> 
> I've been running Xitami for years on various
> Windows versions. Currently running 2.4d9 on
> Win2kPro with no problems.
> 
> I need to implement SSL on one of the sites I
> administer so am considering purchasing a license
> to Xitami Pro. I am wondering if Pro is available
> in version 2.4d9, if it is as stable as the non-pro
> version, and if there are any issues anyone would
> care to comment on regarding encryption speed/
> performance, etc.
> 
> Thanks in advance for any comments and info.
> 
> -Jeff Hamblin
> 
> 
> 
> 
> --
> Xitami Users Mailing List -- For Xitami support
> To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami
>