From: Christophe Jaillet
The table below gives a comparison of feature between
mod_tls supports TLS protocol version 1.2 and 1.3. Should there ever be
a version 1.4 and rustls
supports it, it will be available as well.
@@ -124,7 +124,7 @@ TLSProtocol TLSv1.3+
The list of TLS ciphers supported in the rustls
library,
can be found here. All TLS v1.3
@@ -184,7 +184,7 @@ TLSCipherSuppress ECDHE-ECDSA-AES256-SHA384
mod_tls uses the SNI (Server Name Indicator) to select one of the configured virtual hosts that match the port being served. Should @@ -223,7 +223,7 @@ TLSEngine 443
ACME certificates via
mod_tls has no own implementation to retrieve OCSP information for a certificate. However, it will use such for Stapling if it is provided @@ -249,7 +249,7 @@ MDomain example.net
Via the directive TLSOptions
, several variables
are placed into the environment of requests and can be inspected, for
@@ -279,7 +279,7 @@ MDomain example.net
While rustls
supports client certificates in principle, parts
of the infrastructure to make use of these in a server are not