Again ask the Master Linux under the Apache configuration SSL why HTTPS and HTTP can be accessed and other related issues 100 points

Again ask the Master Linux under the Apache configuration SSL why HTTPS and HTTP can be accessed and other issues 100 points
I read a lot of information on the Internet because of the limited level
So I didn't see it, okay?

is not part of the web with HTTPS, some Web pages with HTTP must have two ways to access a Web page
1.
Where OpenSSL generates a certificate with a command
It's useful to have another one with ssl.ca-0.1.tar.gz. What's the difference between the two that generates a certificate?

2.
What is the purpose of the installation of OpenSSL?
What is the role of the--WITH-SSL=/USR/LOCAL/SSL designation?
However, when I install SSL (both HTTPS and HTTP can be accessed) The directory is also valid for removing SSL
3.
There is one way to load SSL
Remove # # # # CONF/EXTRA/HTTPD-SSL.CONF Enable SSL
And there is./bin/apachectl Startssl
This seems to be a version of the problem is not very clear

4.
Some configurations say what SSL is needed so module what is this?
Under the Win32 is needed, I have also done (but all the pages have to be HTTPS access I only want to partially use HTTPS)

On the Internet, I'm about to crumble. Expert advice


------Solution--------------------
1. The certificate should be generated two, one is issued to the user, one is the server side. It's not exactly clear.

2. OpenSSL is a security mechanism, which is to generate certificates through OpenSSL. It could be through RSA, or other cryptographic algorithms, and then generate the public key and the key

3. SSL is a protocol that establishes a secure channel between the client and the server side

4. It's not clear.
------Solution--------------------
HTTPS access is SSL-encrypted, and HTTP is an unencrypted normal access. You can see the encryption symbols shown in the lower right corner of IE.
------Solution--------------------
Http://topic.csdn.net/u/20090203/09/0b08ddec-fcd7-4558-ace9-c9c844cd74c2.html

Let's see, as a reference.
------Solution--------------------
1. No difference. Just like Tcl TV and Konka TV, they are all TV.

2. The goal is to have Apache support SSL. The purpose of--WITH-SSL is to let the C compiler know that when compiling Apache, you need to use the SSL library, where you can find the SSL library

3. Do not understand the need to ask questions! The old version is usually started with Apachectl Startssl, and the new version is the config file with that SSL.

4.so just lets SSL run as an Apache module (supported). Need some web support SSL unclear do you need to be part of a domain or part of a directory? Part of the domain name is the configuration of the virtual host when the support SSL directory, did not try, but should be similar to the host!
------Solution--------------------
Is your HTTPS started directly from the root directory or is it written by alias or VirtualHost?

If it is placed directly below the/VAR/WWW, then you want to modify the HTTP conf prohibit HTTP access/var/www/
If you write alias or virtualhost then you just need to remove the HTTP conf inside of this alias or VirtualHost is OK
------Solution--------------------
Help the top!
4. Similar is the configuration LoadModule ssl_module modules/mod_ssl.so, as the name implies to load the SSL module
3.Include conf/extra/httpd-ssl.conf (with XAMPP?) ) is the configuration for SSL
It's like cooking, 4 is a cooking tool, and 3 is a dish.
Listen instructions should be able to specify IP and port

------Solution--------------------

SSL is a protocol that establishes a secure channel between the client and the server side

OpenSSL is a tool that sub-client and server-side

Server-side can be run in modular mode
------Solution--------------------
Mod_ssl.so not loaded, configuration conf/extra/httpd-ssl.conf should not be, Apache will start error


------Solution--------------------
studied.

