Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am moving from self-signed certificates to a signed certificate. I am using namecheap and positive SSL.

There are options for Apache + OpenSSL and Apache + mod SSL.

It was my impression that mod SSL just used the OpenSSL functionality.

I plan to generate the keys/certs using something similar to:

touch smtpd.key
chmod 600 smtpd.key
openssl genrsa 2048 > smtpd.key
openssl req -new -key smtpd.key -x509 -days 365 -out smtpd.crt # has prompts
openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 365

and placing them in the appropriate places.

Which option should I choose to complete the process? I am using openssl to create the certificate, but mod ssl is enabled in the apache server. Or am I correct in assuming these two options do the exact same thing.

share|improve this question
up vote 1 down vote accepted

mod_ssl is an apache module that makes the openssl functions available to apache. So these options are really the same.

Briefly looking at namecheap's website, I don't see either of the options you mentioned, but go for 'apache with mod_ssl'.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.