Question on using SSL

[chuddles@coin.org]

I've tried to read the pertinent info on Apache and SSL, and also got the IMP 
FAQ section on secure/encrypted IMAP-SSL connections (which seems to say that c 
library/imap can't do SSL natively), but I just want to ask a general 
question... If Apache/PHP/IMP/MySQL/IMAP server are all on the same box, 
wouldn't this support an SSL connection?  Since talking to the IMAP server 
wouldn't itself have to be encrypted, just the data going over the wire between 
the client and web server.  Just wondered if someone could give a brief overview 
of why or why not SSL would work.  

Related note, would applying mod_ssl and recompiling Apache have any effect on 
IMP's operation, even if not using https?

Thanks!
Chris


>From chuck@horde.org Date: Tue,  5 Dec 2000 22:29:40 -0500
Return-Path: <chuck@horde.org>
Mailing-List: contact imp-help@lists.horde.org; run by ezmlm
Delivered-To: mailing list imp@lists.horde.org
Received: (qmail 65242 invoked from network); 6 Dec 2000 03:30:41 -0000
Received: from r94aag005136.sbo-smr.ma.cable.rcn.com (HELO marina.horde.org) (146.115.120.202)
  by horde.org with SMTP; 6 Dec 2000 03:30:41 -0000
Received: by marina.horde.org (Postfix, from userid 33)
	id DC58E3CB3; Tue,  5 Dec 2000 22:29:40 -0500 (EST)
Received: from 192.168.0.1 ( [192.168.0.1])
	as user chuck@marina by nirgal.your.mom with HTTP;
	Tue,  5 Dec 2000 22:29:40 -0500
Message-ID: <976073380.3a2db2a4b48fa@nirgal.your.mom>
Date: Tue,  5 Dec 2000 22:29:40 -0500
From: Chuck Hagenbuch <chuck@horde.org>
To: imp@lists.horde.org
References: <976072959.3a2db0ff9c42a@c104343-a.clmba1.mo.home.com>
In-Reply-To: <976072959.3a2db0ff9c42a@c104343-a.clmba1.mo.home.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
User-Agent: Internet Messaging Program (IMP) 2.3.6-cvs
Subject: Re: [imp] Question on using SSL

Quoting chuddles@coin.org:

> I've tried to read the pertinent info on Apache and SSL, and also got the IMP
> FAQ section on secure/encrypted IMAP-SSL connections (which seems to say that
> c library/imap can't do SSL natively), but I just want to ask a general 
> question... If Apache/PHP/IMP/MySQL/IMAP server are all on the same box, 
> wouldn't this support an SSL connection?  Since talking to the IMAP server 
> wouldn't itself have to be encrypted, just the data going over the wire
> between the client and web server.  Just wondered if someone could give a
> brief overview of why or why not SSL would work.  

If that's all you're talking about, then IMP doesn't even have to know (well,
sort of, but don't worry about that) - yes, SSL will work in that situation with
no difference from how it would work for static html on the same server.

> Related note, would applying mod_ssl and recompiling Apache have any effect
> on IMP's operation, even if not using https?

Not directly, no.

-chuck

--
Charles Hagenbuch, <chuck@horde.org>
"If you can't stand the heat, get out of the chicken!" - Baby Blues