It *is* pretty good, but it’s not an “SSL” config generator; it’s an “OpenSSL” c...

nailer · on July 30, 2015

Specifically it's for Apache/Nginx/HAProxy/AWS ELB which link against openssl (there's also a node port). Are there alternate bindings for any of these for GnuTLS, NSS, etc?

deptadapt · on July 30, 2015

For Apache there are https://mod.gnutls.org/ and https://fedorahosted.org/mod_nss/

I was using mod_gnutls for some sites, but it did not make it into Debian Jessie. mod_nss is still in Debian Stable though.

teddyh · on July 31, 2015

Note: mod_gnutls is present in Debian unstable, and it is possible to backport it to Debian stable:

  dget --build http://ftp.debian.org/debian/pool/main/m/mod-gnutls/mod-gnutls_0.6-1.4.dsc

You will likely get some error about “Unmet build dependencies”. If you do; run this:

  mk-build-deps --install --remove mod-gnutls_0.6-1.4.dsc

and try the dget command again. Then install the package:

  sudo dpkg --install libapache2-mod-gnutls_0.6-1.4_$(dpkg-architecture -qDEB_HOST_ARCH).deb