From owner-freebsd-isp Wed Dec 17 19:06:32 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id TAA10830 for isp-outgoing; Wed, 17 Dec 1997 19:06:32 -0800 (PST) (envelope-from owner-freebsd-isp) Received: from scanner.worldgate.com (scanner.worldgate.com [198.161.84.3]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id TAA10825 for ; Wed, 17 Dec 1997 19:06:21 -0800 (PST) (envelope-from marcs@znep.com) Received: from znep.com (uucp@localhost) by scanner.worldgate.com (8.8.7/8.8.7) with UUCP id UAA23580; Wed, 17 Dec 1997 20:05:46 -0700 (MST) Received: from localhost (marcs@localhost) by alive.znep.com (8.7.5/8.7.3) with SMTP id UAA28959; Wed, 17 Dec 1997 20:06:34 -0700 (MST) Date: Wed, 17 Dec 1997 20:06:34 -0700 (MST) From: Marc Slemko Reply-To: Marc Slemko To: Dan Jacobowitz , "Daniel O'Callaghan" cc: isp@freebsd.org Subject: Re: Support for secure http protocols In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@freebsd.org X-Loop: FreeBSD.org Precedence: bulk On Wed, 17 Dec 1997, Dan Jacobowitz wrote: > But, in the US at least (Canada?) one must pay a license fee to RSA. Not > too steep, I think. The license fee isn't too steep except for the small detail that they are only available in quantity, with minimum pricing starting at $25k or something. There used to be a third party reselling them in small quantities, but AFAIK no one does that any more. > > Plus the cost of a certificate...how much does that run? Any ideas? You can sign your own if you have some control over the clients. Verisign does not offer certificates for the free version of Apache-SSL. Thawte (http://www.thawte.com/) does. > > > > On Thu, 18 Dec 1997, Daniel O'Callaghan wrote: > > > > > On Wed, 17 Dec 1997, Jim wrote: > > > > > Yeah, Stronghold is a modified version of Apache1.2.4 > > > It costs a pretty penny for commercial use. > > > edu is free... I think they have a 30day evaluation. > > > It takes alot of the frills out of Apache as well as providing SSL support. > > > > But apache-ssl in the ports collection is completely free. And Eric > > Young's ssl-eay provides a library for ssl work, and includes > > telnet/telnetd and ftp/ftpd samples. The code is free, the right to use it in fascist countries like the US isn't. For non-commercial use, you can use RSA's RSAREF library free of charge.