amazon-web-servicesmod-ssl

mod_ssl vs mod24_ssl AWS


Going through the motions to get TLS up and running for my website. I read under the AWS documentation to

sudo yum install -y mod24_ssl

but was getting a conflict on some dependencies.

I ended up reading a blog where someone mentioned sudo yum install mod_ssl and I ended up running that without any issues. Can someone let me know if this safe? What's the difference between mod_ssl and mod24_ssl?

Thanks


Solution

  • As @stdunbar said mod_ssl works with Apache 2.2 and mod24_ssl works with Apache 2.4.

    We can see that the package descriptions are similar except for the Version:

    [ec2-user]$ yum info mod_ssl
    Available Packages
    Name        : mod_ssl
    Arch        : x86_64
    Epoch       : 1
    Version     : 2.2.32
    Release     : 1.9.amzn1
    Size        : 107 k
    Repo        : amzn-updates/latest
    Summary     : SSL/TLS module for the Apache HTTP Server
    URL         : http://httpd.apache.org/
    License     : ASL 2.0
    Description : The mod_ssl module provides strong cryptography for the Apache Web
                : server via the Secure Sockets Layer (SSL) and Transport Layer
                : Security (TLS) protocols.
    
    [ec2-user]$ yum info mod24_ssl
    Installed Packages
    Name        : mod24_ssl
    Arch        : x86_64
    Epoch       : 1
    Version     : 2.4.27
    Release     : 3.71.amzn1
    Size        : 224 k
    Repo        : installed
    From repo   : amzn-updates
    Summary     : SSL/TLS module for the Apache HTTP Server
    URL         : http://httpd.apache.org/
    License     : ASL 2.0
    Description : The mod_ssl module provides strong cryptography for the Apache Web
                : server via the Secure Sockets Layer (SSL) and Transport Layer
                : Security (TLS) protocols.
    

    We can see what each package depends on using yum deplist:

    [ec2-user]$ yum deplist mod_ssl
    Loaded plugins: priorities, update-motd, upgrade-helper
    26 packages excluded due to repository priority protections
    package: mod_ssl.x86_64 1:2.2.32-1.9.amzn1
      ... snip ...
      dependency: httpd = 2.2.32-1.9.amzn1
       provider: httpd.x86_64 2.2.32-1.9.amzn1
      ... snip ...
    
    [ec2-user]$ yum deplist mod24_ssl
    Loaded plugins: priorities, update-motd, upgrade-helper
    26 packages excluded due to repository priority protections
    package: mod24_ssl.x86_64 1:2.4.27-3.71.amzn1
      ... snip ...
      dependency: httpd24 = 2.4.27-3.71.amzn1
       provider: httpd24.x86_64 2.4.27-3.71.amzn1
      ... snip ...
    

    httpd and httpd24 conflict--you can't have both installed at the same time.