I am bit confused between openssl & mod_ssl, so after hours of googling & readding documentation i have to post my query here ..
I am on apache 2 which has ssl inbuilt, so where can i check which openssl version is being used ..
is it the machine's openssl which apache is using or something which comes bundles with mod_ssl
$ openssl version
OpenSSL 1.0.0-fips 29 Mar 2010
$ uname -a
Linux
& when i hit the URL it shows following in response :
Server:Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/1.0.0.e
also when grep in mod_ssl.so:
$ strings mod_ssl.so | grep -i openssl
OpenSSL 1.0.0e 6 Sep 2011
so why the difference in versions and from where it is picking that version.
Best Answer
MOD_SSL is the interface apache uses to communicate with OpenSSL which is a cryptographic engine. OpenSSL does the work, whilst MOD_SSL provides the functions which allow Apache to use OpenSSLs features...
from : https://www.experts-exchange.com/questions/27628939/What-is-the-difference-between-Apache-Mod-SSL-and-OpenSSL.html