Forum OpenACS Q&A: Re: AOLserver 4 not yet ready for prime time if you need SSL

Hi,

Does anyone know if these problems have been fixed yet?

Also, what is Pound? not come across it before, can someone forward me a url?

Would a similar thing be possible using apache as the proxy server do you think?

Simon

Here is a link to Pound

You can also find some comments about Pound and AOLserver at Bart's site.

Pound might be a nice solution for a lot of things in the OACS.

talli

Hi,

seeing no more (at least unix-related) bugs regarding nsopenssl on bug-tracker for AOLServer, I asked on SourceForge forum, if productional use of AOLServer & SSL is recommended or not.
I will inform you about any responses.

/Martin
Martin,

The sourceforge forum doesn't get a lot of traffic.  A better place to post and ask is the AOLserver mailing list.

http://aolserver.com/lists.php

I see on SourceForge that Dossy is on top of things and responded to you there.

We are using the latest in production and don't think we have any more issues.  We still get a few coredumps here and there, but I haven't had time to look into it in depth to see if it is related to SSL anymore.

Hi,

Dossy replied:
       As you pointed out, there are no open bugs in the tracker for nsopenssl on Unix/Linux platforms. The latest beta, nsopenssl v3.0 beta 23, is believed to be stable at this point and is the recommended version for production use.

If you do find any issues with it, please file a bug. Thanks.

-- Dossy

Hope she's right 😊. Right now, we've upgraded a test-server to dotLRN 2.1 using AOLServer40r2 and nsopenssl v3_0beta23, but in order to get latest fixes, we will upgrade to AOLServer40r8.

/Martin